$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer File: A603F8DE41A0C254133C531FFB98C664160BB962.cer (raw, json) Hash identifier: FfmMPIagmpOOzUGwND7J0r6LmZoKI+3CNPc007hSjrM= Subject key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 18E8986C3451C804B38C0FA078B55A46D5445162 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft caRepository: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Feb 2026 04:33:30 +0000 Certificate not after: Thu 18 Feb 2027 04:38:30 +0000 Subordinate resources: IP: 138.252.176.0/24 IP: 160.20.244.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e8:98:6c:34:51:c8:04:b3:8c:0f:a0:78:b5:5a:46:d5:44:51:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 19 04:33:30 2026 GMT Not After : Feb 18 04:38:30 2027 GMT Subject: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:a3:a7:f8:96:52:65:0f:eb:21:ff:22:15: c7:72:30:f8:c0:7e:7c:f0:39:7d:f9:bf:91:16:94: c7:2a:7d:56:0d:a8:97:63:80:de:94:66:55:bf:d0: 42:5c:ed:2a:03:bb:33:41:ca:5a:55:08:b0:47:63: b7:39:1e:86:3d:31:fe:0c:f4:2a:2c:29:97:1b:b3: 10:fe:88:64:f5:27:1f:4e:11:d2:88:a2:df:df:77: 10:ca:8b:bb:31:d0:75:40:de:35:88:fb:b9:49:54: c1:18:62:1a:fe:69:aa:fd:2e:a1:28:ee:4f:cb:5c: f3:a2:a5:fb:4c:30:40:72:d0:bb:c2:7a:8b:c6:d0: 61:81:d9:7f:e0:5e:0c:fb:55:fe:fb:85:fd:ef:21: 2c:52:7f:22:81:2b:b8:c5:bc:cf:a4:a4:36:c2:45: a6:f2:33:7a:ae:da:e9:55:b2:6d:2a:56:16:a0:b6: b0:85:63:18:08:93:cd:f0:1f:b1:9b:ea:a6:6d:a7: e7:87:32:b9:7b:24:42:6e:e2:f8:e9:cc:67:bd:4d: 44:3f:1a:46:55:6e:29:49:be:9f:cc:52:d2:fb:e0: 7d:a2:55:a3:4b:0a:ef:5a:5d:0d:af:69:34:86:01: 59:64:26:de:60:9c:f5:bd:cd:36:81:dc:f1:5e:ae: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.176.0/24 160.20.244.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:7a:e0:31:1b:9a:b4:5e:8b:ba:88:e6:03:dd:13:41:27:31: 33:69:49:e4:d7:77:16:76:33:97:fc:ce:75:e4:73:8b:a1:3f: 6c:fd:d2:13:fd:73:45:68:23:d0:05:1f:5b:04:39:dd:78:7c: 3c:14:4a:81:8c:76:bf:9a:62:9b:be:bb:25:10:b4:0c:c3:88: 3d:34:08:7d:ec:0e:0a:a3:9f:3a:7e:8b:fc:d1:79:2f:1b:fd: d2:49:06:99:06:be:1d:f8:aa:d9:2d:9e:8e:33:30:7c:94:df: 4f:00:79:14:2b:70:17:70:13:e9:9f:0e:8b:f9:43:11:16:06: 33:82:d4:0c:da:31:ec:01:84:f7:94:0b:38:bc:2d:95:99:3d: e9:ee:fd:f3:8d:f9:c7:2d:9b:38:14:b9:a1:51:45:db:35:29: 2c:22:4a:f9:95:a6:8f:46:ab:6c:e7:99:0f:a0:cb:3c:d9:4c: ad:7b:aa:7e:41:2a:50:5b:15:3b:8f:74:ea:07:84:83:23:0d: 3b:61:22:b0:ba:e6:42:52:d0:4a:53:56:3b:7f:82:48:bb:a8: 13:83:fd:37:cf:a3:36:c3:b9:f3:d7:21:f3:85:61:51:7f:74: 73:be:14:69:b3:b3:01:ab:ec:70:0d:5b:e9:76:ca:36:b8:bb: 52:02:67:e2 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUGOiYbDRRyASzjA+geLVaRtVEUWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIxOTA0MzMzMFoX DTI3MDIxODA0MzgzMFowMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1 MzFGRkI5OEM2NjQxNjBCQjk2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDYo6f4llJlD+sh/yIVx3Iw+MB+fPA5ffm/kRaUxyp9Vg2ol2OA3pRmVb/Q QlztKgO7M0HKWlUIsEdjtzkehj0x/gz0KiwplxuzEP6IZPUnH04R0oii3993EMqL uzHQdUDeNYj7uUlUwRhiGv5pqv0uoSjuT8tc86Kl+0wwQHLQu8J6i8bQYYHZf+Be DPtV/vuF/e8hLFJ/IoEruMW8z6SkNsJFpvIzeq7a6VWybSpWFqC2sIVjGAiTzfAf sZvqpm2n54cyuXskQm7i+OnMZ71NRD8aRlVuKUm+n8xS0vvgfaJVo0sK71pdDa9p NIYBWWQm3mCc9b3NNoHc8V6uCK0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKYD+N5BoMJUEzxTH/uYxmQWC7liMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5YjgxNTJl LWFhODYtNGQ4YS04MWRhLWU3MTA4NmIyOTU2Yy8wL0E2MDNGOERFNDFBMEMyNTQx MzNDNTMxRkZCOThDNjY0MTYwQkI5NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BACK/LADBACgFPQwDQYJKoZIhvcNAQELBQADggEBAC964DEbmrRei7qI5gPdE0En MTNpSeTXdxZ2M5f8znXkc4uhP2z90hP9c0VoI9AFH1sEOd14fDwUSoGMdr+aYpu+ uyUQtAzDiD00CH3sDgqjnzp+i/zReS8b/dJJBpkGvh34qtktno4zMHyU308AeRQr cBdwE+mfDov5QxEWBjOC1AzaMewBhPeUCzi8LZWZPenu/fON+cctmzgUuaFRRds1 KSwiSvmVpo9Gq2znmQ+gyzzZTK17qn5BKlBbFTuPdOoHhIMjDTthIrC65kJS0EpT Vjt/gki7qBOD/TfPozbDufPXIfOFYVF/dHO+FGmzswGr7HANW+l2yja4u1ICZ+I= -----END CERTIFICATE-----Generated at Mon Mar 2 15:35:13 2026 by rpki-client