$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer (raw, json) Hash identifier: su9kFvrBH4D1/0Litf3tmvErCKi9AywJIpqNJJ6BbU4= Subject key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 635F1C3D7F669446C1CA69410D74939DB6B7C5B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft caRepository: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 15:34:22 +0000 Certificate not after: Wed 14 Apr 2027 15:39:22 +0000 Subordinate resources: IP: 160.22.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5f:1c:3d:7f:66:94:46:c1:ca:69:41:0d:74:93:9d:b6:b7:c5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 15 15:34:22 2026 GMT Not After : Apr 14 15:39:22 2027 GMT Subject: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:08:da:c1:4a:48:bc:89:71:5e:90:86:39: fc:21:e8:f6:de:0b:c9:2a:97:24:aa:9a:d2:4b:05: 20:81:7f:b0:08:6d:c4:a7:2a:32:d1:55:8b:4d:52: 9b:60:69:4e:f1:70:81:7e:cd:fc:9c:b2:bf:83:2a: 15:64:2a:fe:b0:ee:41:77:b5:f0:93:83:f1:34:ed: e8:de:c1:6c:55:3b:39:f8:c5:c9:de:cf:c9:f3:2f: ee:8e:55:3f:d9:6c:a7:11:df:b6:01:20:88:97:07: 8f:4d:3c:00:7f:6d:6a:a9:2a:e8:23:ab:84:f1:32: 8e:1f:a7:08:f4:35:62:90:04:b4:a3:c7:5e:33:a0: 80:91:ef:1f:39:bd:d8:55:a1:e6:8f:f3:31:00:9a: e6:23:13:2b:da:11:52:05:3b:8e:ef:40:e3:0d:8f: 8a:76:41:ab:7d:e2:18:7b:24:a0:04:ac:22:1c:f9: 25:98:ec:5c:1b:25:a9:d2:8b:dc:63:78:c6:3a:f3: 7f:ed:28:d2:7a:c1:de:53:68:f4:93:de:9e:be:34: 2a:37:d2:ef:43:16:58:e7:e3:4f:b9:92:55:8c:d1: d6:0f:c2:ff:d6:b9:1a:cb:6f:d2:f0:25:a0:f4:5d: cd:e6:97:96:fb:bd:bf:0e:fa:d3:6e:07:98:42:dc: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.22.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:21:8d:c7:08:ed:5a:6b:e9:00:be:05:51:c1:98:61:ba:8a: 34:6a:c9:6d:a7:70:24:d6:f5:6d:f3:75:cc:4c:08:20:1f:90: 51:4a:eb:63:04:53:1f:58:7f:33:15:7c:7a:a4:28:c8:c9:d5: a7:43:7a:c3:43:70:89:dc:51:0a:84:1a:37:10:23:9a:c2:10: 11:53:2f:94:ed:6b:63:39:55:70:66:ca:ef:c7:03:6e:35:11: 86:a9:23:5a:7e:a3:a7:19:ae:b8:ed:bf:33:0a:52:16:70:d1: 20:26:31:57:7a:8e:3f:dc:39:72:bd:e4:15:d0:57:15:30:eb: 1b:c2:15:19:60:90:60:55:28:61:52:ba:bf:13:3e:c2:75:1e: d6:67:f7:a2:08:53:d0:b1:2c:85:ab:d1:b8:bb:00:c5:c4:22: 1d:29:03:f5:18:c3:fe:bc:93:5f:41:3c:27:c9:3a:37:00:ab: a1:2f:b0:93:9c:8f:4d:74:5d:09:46:48:63:77:99:36:df:db: f0:56:b2:35:ad:e3:d5:f7:24:ee:19:e8:49:fd:e1:8c:31:88: c4:24:10:45:74:b4:89:fd:a4:35:14:cb:c2:45:e3:dc:d3:a4: 2f:33:e1:a8:10:90:d8:37:8a:59:ee:2c:24:12:2e:80:f1:c5: e7:65:4a:3f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY18cPX9mlEbBymlBDXSTnba3xbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQxNTE1MzQyMloX DTI3MDQxNDE1MzkyMlowMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVG MDU2RTNFNDlGQjZENThBNTU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxzCNrBSki8iXFekIY5/CHo9t4LySqXJKqa0ksFIIF/sAhtxKcqMtFVi01S m2BpTvFwgX7N/Jyyv4MqFWQq/rDuQXe18JOD8TTt6N7BbFU7OfjFyd7PyfMv7o5V P9lspxHftgEgiJcHj008AH9taqkq6COrhPEyjh+nCPQ1YpAEtKPHXjOggJHvHzm9 2FWh5o/zMQCa5iMTK9oRUgU7ju9A4w2PinZBq33iGHskoASsIhz5JZjsXBslqdKL 3GN4xjrzf+0o0nrB3lNo9JPenr40KjfS70MWWOfjT7mSVYzR1g/C/9a5Gstv0vAl oPRdzeaXlvu9vw76024HmELck58CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLDWc7eNviGfHu7wVuPkn7bVilVQMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmN2QyODk0 LWMwNzctNDIxYy1iYzFkLTM3ZDZmOWQ5ODk3ZC8wL0IwRDY3M0I3OERCRTIxOUYx RUVFRjA1NkUzRTQ5RkI2RDU4QTU1NTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFhYwDQYJKoZIhvcNAQELBQADggEBAGohjccI7Vpr6QC+BVHBmGG6ijRqyW2n cCTW9W3zdcxMCCAfkFFK62MEUx9YfzMVfHqkKMjJ1adDesNDcIncUQqEGjcQI5rC EBFTL5Tta2M5VXBmyu/HA241EYapI1p+o6cZrrjtvzMKUhZw0SAmMVd6jj/cOXK9 5BXQVxUw6xvCFRlgkGBVKGFSur8TPsJ1HtZn96IIU9CxLIWr0bi7AMXEIh0pA/UY w/68k19BPCfJOjcAq6EvsJOcj010XQlGSGN3mTbf2/BWsjWt49X3JO4Z6En94Ywx iMQkEEV0tIn9pDUUy8JF49zTpC8z4agQkNg3ilnuLCQSLoDxxedlSj8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:39:03 2026 by rpki-client