$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer File: D5265466AE0186702AF52D11170A29AC32F54EF5.cer (raw, json) Hash identifier: 1arvAnOthWNUaU1RH/T4bXseWwCi5PRUYuSlXjzLcQ4= Subject key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 39A859CA5D4B9CF372E8851A44D18F721B047751 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft caRepository: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 19:22:29 +0000 Certificate not after: Thu 08 Apr 2027 19:27:29 +0000 Subordinate resources: IP: 157.15.0.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a8:59:ca:5d:4b:9c:f3:72:e8:85:1a:44:d1:8f:72:1b:04:77:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 9 19:22:29 2026 GMT Not After : Apr 8 19:27:29 2027 GMT Subject: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:50:1f:56:72:32:ce:33:b2:bb:a0:8b:2f: 53:4d:35:62:6b:f4:64:58:e1:5f:a1:72:71:37:85: 2d:4c:b2:1a:b9:9e:41:da:06:5d:85:36:03:2e:20: 75:ed:f4:a9:5d:82:d8:cf:a3:7a:48:ec:f2:d3:9f: 1c:02:d0:3a:d6:41:59:79:19:ae:60:70:9e:1a:de: 93:86:10:a7:15:dd:14:19:6a:26:aa:d2:41:4b:0b: 3d:b0:dc:20:9f:cb:9d:d6:6d:1a:c9:9a:e8:1f:2d: 91:94:ef:b5:75:f4:8d:22:8e:61:6f:8e:c7:bf:5a: 46:6d:b7:6d:9c:96:db:b3:3e:63:3c:d0:5b:26:5a: 02:8d:fb:24:d1:65:c1:e1:52:e9:63:ff:45:c7:88: f1:c4:66:f2:0b:68:e3:e9:88:fb:09:60:34:6c:a2: 9c:e0:b7:b0:4b:a6:81:96:7e:85:9d:23:91:8e:c6: d9:86:bb:1c:9f:af:e6:f0:11:24:29:5c:90:70:0c: 2d:f5:ca:27:73:2d:10:23:bd:bc:a2:b9:23:fa:5a: b9:52:43:28:14:1c:b8:72:61:4b:5a:a8:d7:b2:e3: 3e:4c:1b:9b:22:c8:53:53:89:7a:d4:a0:ff:50:68: c9:65:94:92:99:4e:9b:dc:c8:09:70:b5:67:bc:4e: 51:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.0.0/23 Signature Algorithm: sha256WithRSAEncryption 44:d3:67:8d:c9:28:eb:90:72:aa:e0:81:83:24:57:1b:8d:e8: eb:e2:a8:80:0f:fe:16:da:65:c0:46:c2:33:b3:ae:43:0c:77: 62:7e:0f:8f:42:29:30:59:3b:7a:a6:c5:5d:d2:ae:44:f2:39: b7:32:3f:e3:e4:cd:8c:5e:65:78:72:60:26:08:85:fe:ec:c4: e4:88:32:7d:20:ad:89:ba:85:6c:25:c8:97:01:f9:76:18:93: 23:72:ca:a0:d9:a5:27:88:52:de:41:22:aa:ed:56:ec:24:1d: f8:41:63:7e:54:10:24:7f:97:55:a1:3e:65:50:41:3a:72:b0: 7b:e0:ae:c1:03:2f:c0:53:d8:ed:56:ad:f0:22:d6:37:c8:47: e1:52:84:f3:d3:0f:86:14:4a:39:46:cd:f7:43:4c:7b:4f:e3: c6:06:39:71:38:17:4e:54:21:36:4c:99:89:23:49:45:40:8f: df:1e:2f:b1:d5:90:42:01:c3:66:16:e9:94:f6:47:42:75:61: 50:51:bc:89:14:41:d1:07:12:13:aa:28:15:0d:25:2a:5a:53: b2:ac:8d:55:d7:5f:37:74:b1:c1:b9:31:6f:9d:1d:c9:e1:e3: 2d:3f:f2:af:33:f2:12:41:34:64:de:c2:a2:c7:45:d3:f1:43: 94:7a:a5:63 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOahZyl1LnPNy6IUaRNGPchsEd1EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwOTE5MjIyOVoX DTI3MDQwODE5MjcyOVowMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUy RDExMTcwQTI5QUMzMkY1NEVGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCpUB9WcjLOM7K7oIsvU001Ymv0ZFjhX6FycTeFLUyyGrmeQdoGXYU2Ay4g de30qV2C2M+jekjs8tOfHALQOtZBWXkZrmBwnhrek4YQpxXdFBlqJqrSQUsLPbDc IJ/LndZtGsma6B8tkZTvtXX0jSKOYW+Ox79aRm23bZyW27M+YzzQWyZaAo37JNFl weFS6WP/RceI8cRm8gto4+mI+wlgNGyinOC3sEumgZZ+hZ0jkY7G2Ya7HJ+v5vAR JClckHAMLfXKJ3MtECO9vKK5I/pauVJDKBQcuHJhS1qo17LjPkwbmyLIU1OJetSg /1BoyWWUkplOm9zICXC1Z7xOUX8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNUmVGauAYZwKvUtERcKKawy9U71MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NjEzN2Fl LTJlZmItNDNjMC1iZGI3LTQzZjVkOTM5Y2YwYy8wL0Q1MjY1NDY2QUUwMTg2NzAy QUY1MkQxMTE3MEEyOUFDMzJGNTRFRjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdDwAwDQYJKoZIhvcNAQELBQADggEBAETTZ43JKOuQcqrggYMkVxuN6OviqIAP /hbaZcBGwjOzrkMMd2J+D49CKTBZO3qmxV3SrkTyObcyP+PkzYxeZXhyYCYIhf7s xOSIMn0grYm6hWwlyJcB+XYYkyNyyqDZpSeIUt5BIqrtVuwkHfhBY35UECR/l1Wh PmVQQTpysHvgrsEDL8BT2O1WrfAi1jfIR+FShPPTD4YUSjlGzfdDTHtP48YGOXE4 F05UITZMmYkjSUVAj98eL7HVkEIBw2YW6ZT2R0J1YVBRvIkUQdEHEhOqKBUNJSpa U7KsjVXXXzd0scG5MW+dHcnh4y0/8q8z8hJBNGTewqLHRdPxQ5R6pWM= -----END CERTIFICATE-----Generated at Fri Apr 17 09:54:32 2026 by rpki-client