$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer (raw, json) Hash identifier: uvcyFjHL8EQ0YPnqJ1oSccZvSbO8evbCf8qQIqlrWQM= Subject key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 277C32CC8EB1AB9BF6A583094AAB3084ECFC749D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft caRepository: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 17:32:35 +0000 Certificate not after: Wed 07 Apr 2027 17:37:35 +0000 Subordinate resources: IP: 160.20.124.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7c:32:cc:8e:b1:ab:9b:f6:a5:83:09:4a:ab:30:84:ec:fc:74:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 8 17:32:35 2026 GMT Not After : Apr 7 17:37:35 2027 GMT Subject: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:c3:d7:a4:eb:0d:86:30:6e:53:90:74:46: e5:38:5c:58:14:b5:c2:27:8b:c8:56:50:bf:ff:73: 6e:d3:00:14:12:de:61:57:64:19:4d:67:2d:56:88: 81:fb:5e:fb:df:96:fb:d3:1a:65:f6:5b:01:36:81: d7:5e:97:c0:25:ce:93:d0:36:20:dc:e0:a6:7a:a6: f8:9f:03:67:1a:8e:5a:dc:df:9e:28:97:ca:38:2f: 5a:12:f9:a8:e7:0a:8f:68:9b:5a:00:cc:54:a5:45: f8:bf:bb:55:55:d9:93:7e:17:9e:69:b3:e8:13:d2: 8f:6b:79:a4:12:c3:2f:18:47:f9:fe:8c:53:97:78: f1:83:81:af:93:6d:22:6c:c1:d9:3b:21:d7:e3:92: 8e:5f:c4:18:82:31:ba:a2:f6:1f:88:93:b6:8f:c6: 18:33:76:6d:a7:59:2d:04:dd:36:d9:e2:e9:78:4a: 9b:99:9b:fd:46:0e:95:03:43:ac:c0:e1:40:0d:c1: 1b:7b:80:e6:16:dd:5b:1b:b2:39:82:95:71:eb:db: ef:58:ae:0c:06:55:19:7d:a4:f3:0f:e4:8e:f5:a7: 01:d2:cf:b3:45:d7:24:4f:b9:b4:55:ad:4d:73:b0: 7e:79:19:70:cf:4d:1c:5f:40:e2:d8:9b:f7:27:72: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.124.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:2c:14:27:8b:f3:67:a5:56:17:82:c1:0f:73:2f:83:df:d5: 89:62:22:d0:b5:9b:1b:d7:30:28:f1:d8:dd:58:0b:c7:a7:c6: cc:a2:a9:2c:79:fd:c5:ac:51:52:67:6f:4f:46:9c:4e:d7:2b: 26:95:d9:80:41:3e:c4:97:b4:fe:0c:07:2d:1b:f9:c8:4c:42: ab:c3:ae:df:0a:02:39:94:55:df:43:bb:0f:92:cf:a5:30:22: a9:c2:96:13:0d:36:40:92:29:56:40:88:56:dd:35:c0:26:06: 59:2f:aa:d6:d0:e2:73:2a:47:bc:19:6d:48:f0:ed:0e:90:c0: a4:60:6b:80:e9:ca:ad:57:ae:3b:99:f0:c9:16:82:d1:2c:b1: 65:37:12:d7:c9:e2:f7:6b:c0:34:e3:60:43:a6:61:31:1a:36: e0:99:b3:b9:d6:77:3f:7a:b1:2e:36:7f:c3:9f:e0:bd:9a:e7: e1:26:38:6d:3a:ca:91:31:cf:11:1c:85:d4:d7:c7:fb:de:86: 6f:fc:f3:9f:e0:eb:e5:ea:d3:99:6d:10:f6:c4:63:44:65:88: a8:83:91:c8:07:1b:ae:8b:90:f9:1c:fb:62:80:99:c7:2a:ac: a2:b4:e2:69:c9:47:26:4f:9b:99:1e:1c:80:79:e1:fe:14:32: d5:c6:66:d9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJ3wyzI6xq5v2pYMJSqswhOz8dJ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwODE3MzIzNVoX DTI3MDQwNzE3MzczNVowMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NE MERFMEI2Mjg3RjRCMDgyRDgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/jw9ek6w2GMG5TkHRG5ThcWBS1wieLyFZQv/9zbtMAFBLeYVdkGU1nLVaI gfte+9+W+9MaZfZbATaB116XwCXOk9A2INzgpnqm+J8DZxqOWtzfniiXyjgvWhL5 qOcKj2ibWgDMVKVF+L+7VVXZk34Xnmmz6BPSj2t5pBLDLxhH+f6MU5d48YOBr5Nt ImzB2Tsh1+OSjl/EGIIxuqL2H4iTto/GGDN2badZLQTdNtni6XhKm5mb/UYOlQND rMDhQA3BG3uA5hbdWxuyOYKVcevb71iuDAZVGX2k8w/kjvWnAdLPs0XXJE+5tFWt TXOwfnkZcM9NHF9A4tib9ydyoTkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKPXR2XB8Xj3LDzQ3gtih/SwgtgZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFk LWVlMTgtNDM1Yy04YjZlLWViYTIyNDFiODNhYi8wL0EzRDc0NzY1QzFGMTc4Rjcy QzNDRDBERTBCNjI4N0Y0QjA4MkQ4MTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFHwwDQYJKoZIhvcNAQELBQADggEBAH8sFCeL82elVheCwQ9zL4Pf1YliItC1 mxvXMCjx2N1YC8enxsyiqSx5/cWsUVJnb09GnE7XKyaV2YBBPsSXtP4MBy0b+chM QqvDrt8KAjmUVd9Duw+Sz6UwIqnClhMNNkCSKVZAiFbdNcAmBlkvqtbQ4nMqR7wZ bUjw7Q6QwKRga4Dpyq1XrjuZ8MkWgtEssWU3EtfJ4vdrwDTjYEOmYTEaNuCZs7nW dz96sS42f8Of4L2a5+EmOG06ypExzxEchdTXx/vehm/885/g6+Xq05ltEPbEY0Rl iKiDkcgHG66LkPkc+2KAmccqrKK04mnJRyZPm5keHIB54f4UMtXGZtk= -----END CERTIFICATE-----Generated at Fri Apr 17 09:51:50 2026 by rpki-client