$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer (raw, json) Hash identifier: 08O0tbAFylCL/rqvtLnbp6Y7T/DyagxdkP9dnFlSPy0= Subject key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1A6EF65B28174EE28EB3954AC4FAB8141EDA1F83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft caRepository: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 01 Feb 2026 06:54:11 +0000 Certificate not after: Sun 31 Jan 2027 06:59:11 +0000 Subordinate resources: IP: 157.66.7.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6e:f6:5b:28:17:4e:e2:8e:b3:95:4a:c4:fa:b8:14:1e:da:1f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 1 06:54:11 2026 GMT Not After : Jan 31 06:59:11 2027 GMT Subject: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:ae:7d:51:ed:95:66:ec:61:11:40:00:25: 21:91:5d:22:98:c7:79:2d:8b:79:06:04:fd:58:aa: 90:79:ff:3c:24:3e:c9:f9:3a:24:38:a0:09:37:28: 35:25:a0:52:48:27:bb:27:af:1f:1e:45:df:aa:7a: dc:c2:92:1f:6f:5f:a3:95:ea:c0:bc:ca:46:df:a5: b1:e1:0c:c6:27:f9:ec:47:15:72:6e:88:76:60:a0: 5c:b0:6c:bd:c9:c2:ad:80:8c:b5:32:1b:e2:26:a3: 77:27:ee:25:96:ef:97:76:fb:36:cc:9d:66:8c:21: 82:25:92:13:48:bc:5f:30:bc:d6:9e:13:a8:75:0a: 87:5f:d9:e3:ff:0d:39:b6:e3:2d:38:53:d1:2d:74: 9e:f0:d5:9e:6d:83:e3:37:18:ee:fc:3c:2a:29:dc: e8:94:22:e7:95:cb:10:c8:26:d8:d6:56:b3:c8:a3: 48:34:2f:f7:8e:50:c6:66:d0:4b:d1:8c:df:d5:d9: 00:dd:46:63:0c:a3:fa:0f:6a:12:e9:b8:d5:94:36: dc:30:bb:5a:0b:49:8b:3a:28:cc:b4:85:fa:bc:b8: 81:cb:89:39:6e:1a:5c:dd:a4:58:2b:9e:ba:0e:24: b9:65:55:56:69:f3:02:fe:2d:5f:b1:63:a9:7e:37: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.7.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:1e:2f:0b:a3:24:5a:2c:64:4c:b7:80:f1:ec:09:85:99:d9: 4c:24:10:40:7b:cd:61:6f:bd:94:bd:f7:01:2d:a5:5d:2f:9a: 73:b8:66:4f:18:57:b8:83:cc:7a:69:c3:0c:02:cf:22:f5:63: 1b:cb:4a:04:0d:37:15:06:b8:89:12:92:86:98:6d:6d:2e:b7: 49:88:53:d0:4b:72:31:ac:c8:3d:54:a9:47:bc:ff:b0:5d:17: 33:0a:42:e3:9e:4e:35:48:4e:4c:3f:9e:61:94:72:f0:83:8b: e4:e4:6e:52:02:65:36:4a:b3:d1:18:bc:c7:de:c4:d4:52:8e: 61:f8:e0:6c:04:c5:5f:81:96:4d:8d:33:87:b9:4b:e8:45:eb: 24:ab:b4:b0:25:b3:36:c8:1f:5a:a4:6c:d0:d4:35:31:ce:59: 59:1f:f6:0e:79:a3:ee:99:17:6a:ee:52:86:aa:47:15:93:b9: d8:24:cb:ae:24:aa:92:13:bc:72:bf:61:83:40:67:92:c8:c3: 23:b8:99:f6:b5:ea:e2:df:0d:b2:eb:f9:90:e8:f1:7a:49:94: c2:82:da:5c:b4:0e:08:59:02:23:18:10:19:8b:03:48:39:08: 5d:1a:a2:83:86:20:09:df:58:84:9d:97:9a:d9:71:b8:58:93: e0:f4:ea:a2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGm72WygXTuKOs5VKxPq4FB7aH4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwMTA2NTQxMVoX DTI3MDEzMTA2NTkxMVowMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3 N0NBNUNGOEY0Q0EyMTBEODg2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqxrn1R7ZVm7GERQAAlIZFdIpjHeS2LeQYE/ViqkHn/PCQ+yfk6JDigCTco NSWgUkgnuyevHx5F36p63MKSH29fo5XqwLzKRt+lseEMxif57EcVcm6IdmCgXLBs vcnCrYCMtTIb4iajdyfuJZbvl3b7NsydZowhgiWSE0i8XzC81p4TqHUKh1/Z4/8N ObbjLThT0S10nvDVnm2D4zcY7vw8Kinc6JQi55XLEMgm2NZWs8ijSDQv945QxmbQ S9GM39XZAN1GYwyj+g9qEum41ZQ23DC7WgtJizoozLSF+ry4gcuJOW4aXN2kWCue ug4kuWVVVmnzAv4tX7FjqX43sVkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNkMcEK13Bg0Hcx3ylz49MohDYhrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTZmZWFh LTZiNGYtNDdjZi05ZTNjLTAwYWVhYzY3YTMyYS8wL0Q5MEM3MDQyQjVEQzE4MzQx RENDNzdDQTVDRjhGNENBMjEwRDg4NkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQgcwDQYJKoZIhvcNAQELBQADggEBAA0eLwujJFosZEy3gPHsCYWZ2UwkEEB7 zWFvvZS99wEtpV0vmnO4Zk8YV7iDzHppwwwCzyL1YxvLSgQNNxUGuIkSkoaYbW0u t0mIU9BLcjGsyD1UqUe8/7BdFzMKQuOeTjVITkw/nmGUcvCDi+TkblICZTZKs9EY vMfexNRSjmH44GwExV+Blk2NM4e5S+hF6ySrtLAlszbIH1qkbNDUNTHOWVkf9g55 o+6ZF2ruUoaqRxWTudgky64kqpITvHK/YYNAZ5LIwyO4mfa16uLfDbLr+ZDo8XpJ lMKC2ly0DghZAiMYEBmLA0g5CF0aooOGIAnfWISdl5rZcbhYk+D06qI= -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:19 2026 by rpki-client