$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer (raw, json) Hash identifier: T8hLqwseDEeVs4eX5+/AR7T8qAiyLaVjrKrevawupSE= Subject key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0A26B32C285C4C28738BD9E480A62C6669035C8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft caRepository: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 03 Apr 2026 14:19:20 +0000 Certificate not after: Fri 02 Apr 2027 14:24:20 +0000 Subordinate resources: IP: 157.20.178.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:26:b3:2c:28:5c:4c:28:73:8b:d9:e4:80:a6:2c:66:69:03:5c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 3 14:19:20 2026 GMT Not After : Apr 2 14:24:20 2027 GMT Subject: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:ba:8e:2f:59:fb:72:1c:53:d0:ce:52:5e: 5f:73:ff:16:4a:89:75:b0:c7:94:f8:64:e6:6f:9a: 21:13:ca:9c:7a:1b:58:b8:79:01:aa:37:ec:93:f6: 5d:2d:70:37:8b:a6:7c:73:01:de:34:3e:30:d0:29: bd:1d:da:bd:7a:26:aa:bf:1e:50:f0:87:13:1a:76: a6:c5:ac:e0:3e:be:1f:da:c7:a7:f8:11:70:c6:68: 18:af:b4:2c:82:09:55:8d:0f:69:50:ef:84:72:27: 44:b6:0b:75:15:5e:2d:de:70:ed:02:5a:9e:ad:a4: 00:11:2d:07:db:76:3c:75:10:41:27:a3:79:6d:9a: c5:f2:18:44:18:a8:1d:27:86:87:ab:0b:95:e5:bd: 64:a5:97:b8:a1:e0:b9:21:51:0d:2f:33:09:95:78: ee:0b:79:dd:c8:36:29:0b:c5:7d:78:93:07:be:48: db:57:a6:aa:5b:3c:53:27:24:5e:61:d5:ee:bf:77: f9:18:12:22:a0:6b:64:e9:7c:b8:70:47:75:0f:70: af:f4:c3:e8:f1:89:a7:56:72:41:5d:ca:3a:8e:9f: 59:2c:b1:69:ed:2e:22:d3:6a:0d:1a:18:9f:20:08: 83:4d:d8:66:90:75:06:93:a3:8e:0c:c5:41:3b:bf: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.178.0/23 Signature Algorithm: sha256WithRSAEncryption 64:30:00:05:19:dd:e6:fc:e5:13:e5:b3:55:8c:42:64:81:79: 55:5c:d3:87:73:1d:3f:80:7c:f5:95:a0:fd:77:a3:76:a5:23: 74:63:9c:dd:27:7e:51:1c:c2:f0:da:b0:26:8e:8b:88:60:e4: a4:16:05:56:7a:15:de:23:a5:fb:33:0d:b0:2c:fd:fe:99:b6: a7:05:71:46:7e:4c:20:61:2b:bc:cb:15:a2:bc:91:e6:e6:fe: cf:f9:45:08:63:80:1b:72:65:4d:9f:7c:6e:7c:6b:32:43:c3: 84:2f:85:1a:2d:82:0c:aa:4a:40:f5:46:62:fe:6d:dc:8b:a5: 1d:1a:f1:36:5f:5c:e6:a0:ab:35:9d:b5:97:3d:59:c4:9d:1e: 4f:b3:f6:8b:4a:c0:54:8d:93:c4:ae:4f:30:26:95:1e:42:d5: c8:c6:61:87:2a:9c:0d:02:4b:57:ab:86:27:63:ed:37:29:bb: 0f:37:0c:1e:1d:a0:df:34:c7:19:03:66:ad:86:29:7e:53:13: af:05:57:95:d8:21:88:bb:af:df:c4:f4:3f:5f:ce:49:c5:2d: 7f:e3:93:98:dc:e0:da:4c:a6:59:88:fe:5e:d1:da:55:2d:0d: b0:d1:29:23:0d:d0:ed:40:f2:49:76:2c:3d:39:e8:42:45:7c: 50:9a:8f:b0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCiazLChcTChzi9nkgKYsZmkDXIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwMzE0MTkyMFoX DTI3MDQwMjE0MjQyMFowMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1 QkQ1MUQ0QjdEOTYzNjE4MjMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK20uo4vWftyHFPQzlJeX3P/FkqJdbDHlPhk5m+aIRPKnHobWLh5Aao37JP2 XS1wN4umfHMB3jQ+MNApvR3avXomqr8eUPCHExp2psWs4D6+H9rHp/gRcMZoGK+0 LIIJVY0PaVDvhHInRLYLdRVeLd5w7QJanq2kABEtB9t2PHUQQSejeW2axfIYRBio HSeGh6sLleW9ZKWXuKHguSFRDS8zCZV47gt53cg2KQvFfXiTB75I21emqls8Uyck XmHV7r93+RgSIqBrZOl8uHBHdQ9wr/TD6PGJp1ZyQV3KOo6fWSyxae0uItNqDRoY nyAIg03YZpB1BpOjjgzFQTu/feECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL2beonIXg32eG9b1R1LfZY2GCMaMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzNjA2NmU4 LThlMTktNGRlNy05NDdiLTk0ZWUzY2QwOWY4NS8wL0JEOUI3QTg5Qzg1RTBERjY3 ODZGNUJENTFENEI3RDk2MzYxODIzMUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFLIwDQYJKoZIhvcNAQELBQADggEBAGQwAAUZ3eb85RPls1WMQmSBeVVc04dz HT+AfPWVoP13o3alI3RjnN0nflEcwvDasCaOi4hg5KQWBVZ6Fd4jpfszDbAs/f6Z tqcFcUZ+TCBhK7zLFaK8kebm/s/5RQhjgBtyZU2ffG58azJDw4QvhRotggyqSkD1 RmL+bdyLpR0a8TZfXOagqzWdtZc9WcSdHk+z9otKwFSNk8SuTzAmlR5C1cjGYYcq nA0CS1erhidj7Tcpuw83DB4doN80xxkDZq2GKX5TE68FV5XYIYi7r9/E9D9fzknF LX/jk5jc4NpMplmI/l7R2lUtDbDRKSMN0O1A8kl2LD056EJFfFCaj7A= -----END CERTIFICATE-----Generated at Fri Apr 17 14:45:44 2026 by rpki-client