$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer (raw, json) Hash identifier: rLQIWFR/l8cPbtl7w4nT6vU2nWW8yjFvgMCyHfPIQ6g= Subject key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1E3704F564340E4A71B67EDFAAA24518859588BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft caRepository: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 18:06:14 +0000 Certificate not after: Thu 28 Jan 2027 18:11:14 +0000 Subordinate resources: IP: 160.25.249.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:37:04:f5:64:34:0e:4a:71:b6:7e:df:aa:a2:45:18:85:95:88:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 29 18:06:14 2026 GMT Not After : Jan 28 18:11:14 2027 GMT Subject: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:83:00:76:1d:64:93:72:29:ec:7e:38:b6: 19:27:36:ba:e1:96:4e:d3:9c:ea:4e:53:32:a3:59: 95:f2:d1:52:4a:6d:0b:81:8f:a5:18:c7:12:cb:da: 4c:6d:cb:9e:97:f4:db:a2:cd:fb:39:86:70:78:c0: f4:e7:75:d5:9c:76:ca:57:cf:c3:8f:10:d6:be:6a: 32:47:20:44:af:a5:62:a4:5c:6b:6d:c2:ae:3c:c7: 74:26:cd:a9:2f:a0:c1:43:d5:84:85:1f:f2:35:de: 98:0a:90:5b:42:be:4b:c3:93:7e:44:ec:13:9f:ed: bc:05:73:98:98:10:88:86:4c:2d:44:1b:85:1b:68: e0:9d:52:9c:a7:b6:a8:d8:86:34:8b:7a:a1:c5:4a: 34:2d:10:cf:8b:5f:bf:2b:29:9a:06:70:c9:c5:bf: 21:cb:b0:5e:bf:66:ef:ec:81:63:59:28:a5:60:c2: b9:b1:df:c4:62:a7:bf:ca:b6:c4:3d:82:b0:ba:7b: 06:52:97:ee:27:23:2a:b6:0f:41:b7:70:5d:7c:07: d9:09:99:9a:51:15:46:4b:e0:74:4e:2c:61:ad:1b: 14:c9:e3:83:fd:56:09:90:b0:ab:15:52:97:ee:74: 4d:b8:c1:86:46:a9:6e:4a:e3:44:4a:e4:e6:44:62: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.249.0/24 Signature Algorithm: sha256WithRSAEncryption 01:dc:56:dd:0b:05:f4:e0:3a:dc:65:63:c9:f4:43:ae:a6:e7: 61:0e:54:a8:48:9d:d1:53:ca:97:2f:70:e0:f3:58:a7:6e:ad: db:14:41:89:9f:0d:71:79:8d:17:1c:a4:8e:aa:4b:01:50:ad: 62:f8:72:2c:f1:07:9e:38:74:e8:ef:87:52:0b:78:b4:ee:de: 2f:eb:cf:e2:93:76:52:da:68:a5:2b:81:4b:ca:a3:fd:c6:d6: 9d:24:8d:09:1a:be:cc:f9:80:08:21:04:2e:8c:d2:79:ba:c1: a0:6a:85:37:06:f2:ec:58:f1:ce:63:37:16:07:10:5f:94:41: 9e:ef:07:f0:0e:28:21:4d:b9:0b:48:ae:8b:92:ca:d3:48:5d: 77:68:8b:0d:ac:33:be:f7:28:07:55:81:03:01:97:1f:a7:87: ad:eb:0f:e3:ee:76:33:cd:a8:f3:09:13:c1:2d:d3:32:69:71: 9b:d8:90:4e:3e:c5:f1:d6:f7:df:02:e0:b3:ab:5b:cf:57:de: ef:61:f0:0e:39:f2:59:6a:00:57:75:43:ac:4f:c6:ba:cc:8c: 42:db:d6:c6:eb:6e:77:3b:77:7a:40:f2:a3:f2:9c:30:50:98: 5d:ac:47:a8:d8:6e:bf:c6:c8:82:34:74:2a:73:ee:d4:db:18: c5:fd:b7:f0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHjcE9WQ0Dkpxtn7fqqJFGIWViL0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEyOTE4MDYxNFoX DTI3MDEyODE4MTExNFowMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYw Mzg1QjY2NTM4NDI1NzBFRDNBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHMgwB2HWSTcinsfji2GSc2uuGWTtOc6k5TMqNZlfLRUkptC4GPpRjHEsva TG3Lnpf026LN+zmGcHjA9Od11Zx2ylfPw48Q1r5qMkcgRK+lYqRca23CrjzHdCbN qS+gwUPVhIUf8jXemAqQW0K+S8OTfkTsE5/tvAVzmJgQiIZMLUQbhRto4J1SnKe2 qNiGNIt6ocVKNC0Qz4tfvyspmgZwycW/IcuwXr9m7+yBY1kopWDCubHfxGKnv8q2 xD2CsLp7BlKX7icjKrYPQbdwXXwH2QmZmlEVRkvgdE4sYa0bFMnjg/1WCZCwqxVS l+50TbjBhkapbkrjRErk5kRiRzMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKIbpw347kcP56YDhbZlOEJXDtOkMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxNDA1NTQ1 LWMzNWQtNGRlMS05NjE4LTQ0YjVmNDE3YTMwMy8xL0EyMUJBNzBERjhFRTQ3MEZF N0E2MDM4NUI2NjUzODQyNTcwRUQzQTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGfkwDQYJKoZIhvcNAQELBQADggEBAAHcVt0LBfTgOtxlY8n0Q66m52EOVKhI ndFTypcvcODzWKdurdsUQYmfDXF5jRccpI6qSwFQrWL4cizxB544dOjvh1ILeLTu 3i/rz+KTdlLaaKUrgUvKo/3G1p0kjQkavsz5gAghBC6M0nm6waBqhTcG8uxY8c5j NxYHEF+UQZ7vB/AOKCFNuQtIrouSytNIXXdoiw2sM773KAdVgQMBlx+nh63rD+Pu djPNqPMJE8Et0zJpcZvYkE4+xfHW998C4LOrW89X3u9h8A458llqAFd1Q6xPxrrM jELb1sbrbnc7d3pA8qPynDBQmF2sR6jYbr/GyII0dCpz7tTbGMX9t/A= -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:43 2026 by rpki-client