$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer File: EC1B9BE63137230F6756E222019318C640EBE42E.cer (raw, json) Hash identifier: Or5Eqj9O+3cIPqLU4/ravxisAfJOJvt1YgO15dBkqyk= Subject key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 63C50F0353CEE04DF28DEBF1AEBF8C4040CF2954 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft caRepository: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Dec 2025 14:44:31 +0000 Certificate not after: Tue 22 Dec 2026 14:49:31 +0000 Subordinate resources: IP: 157.15.166.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c5:0f:03:53:ce:e0:4d:f2:8d:eb:f1:ae:bf:8c:40:40:cf:29:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 23 14:44:31 2025 GMT Not After : Dec 22 14:49:31 2026 GMT Subject: CN=EC1B9BE63137230F6756E222019318C640EBE42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:6a:6c:a4:78:7b:08:1b:8f:43:10:26:46: 8e:1b:20:d3:fe:cf:b7:1e:14:c0:db:3b:a5:3f:5c: db:1b:fb:f2:af:19:9c:19:d4:d9:56:9b:2b:72:6d: 83:78:cd:89:f6:95:e6:aa:ae:3d:9d:8a:6f:63:1a: 33:50:b1:8f:b0:e5:19:78:1c:64:e7:89:53:ec:a5: 7b:f9:83:34:3b:70:72:0a:fd:17:60:12:1e:33:1b: b5:51:f0:27:2b:86:cb:f3:e7:9b:a4:cf:79:b9:dc: 96:4a:c8:2e:26:0d:02:c1:4e:98:ef:da:e6:cb:f3: 5a:2d:75:9f:b9:bf:40:6c:c7:b8:0a:4b:a4:25:18: 85:1e:65:14:96:a2:4d:a6:13:3c:78:69:e3:26:7d: bc:66:a7:26:e9:97:79:fe:e4:d5:10:62:51:da:e6: 8d:16:4d:0b:f2:e9:7e:c0:fc:4a:62:9f:37:f5:30: 22:ed:f3:c8:58:94:07:c5:92:ce:43:2b:0d:78:59: af:db:13:84:2b:d5:5e:03:a4:1e:94:42:33:89:34: b6:86:a6:2f:09:f2:95:0c:88:a3:fe:50:0c:31:06: 1d:9f:d9:7e:46:37:c0:72:14:75:95:de:0b:eb:ad: 7e:50:41:e8:97:e2:c5:ee:e8:8e:97:aa:0d:52:32: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.166.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:f0:bc:5a:5e:01:9a:ae:ed:f0:ee:24:ce:dd:e5:11:91:2b: 93:9c:34:90:e0:8a:98:57:13:c3:87:3d:b6:79:6c:0a:ff:47: 0b:59:88:17:d2:6d:dc:29:b0:15:1e:57:ea:80:31:1d:2b:77: df:06:b1:e3:b7:15:0a:22:45:7a:8d:a1:68:dd:44:77:20:03: 0a:d1:7f:d2:e9:1b:a4:13:d3:d0:f4:0f:4b:68:09:6d:59:63: 5e:59:e1:07:cd:fa:b8:f6:62:41:95:b0:fc:e1:d2:77:d4:f9: df:ef:b4:2a:fc:83:12:ff:bb:9f:8a:19:47:5b:c6:41:07:6b: 13:19:df:bc:47:28:39:ed:f4:ad:24:a3:19:1e:67:50:c5:b5: db:16:29:13:46:0d:21:6c:95:05:f0:f7:70:1d:a9:ab:df:91: c5:85:a3:b4:ec:8c:50:5c:df:16:57:dd:02:b4:c5:6f:61:ea: 74:09:64:13:a3:42:4b:10:fa:90:8e:c5:05:69:57:cf:4c:18: d8:d6:f9:e9:34:e0:d2:72:47:89:80:dc:f9:d9:fb:d4:df:85: ce:b0:ce:4e:3f:1b:e8:11:f4:53:f0:05:65:3f:b6:15:30:63: 11:47:c4:83:da:79:87:78:db:f4:66:b6:97:0e:b5:d4:9b:30: e8:c4:6e:34 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY8UPA1PO4E3yjevxrr+MQEDPKVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIyMzE0NDQzMVoX DTI2MTIyMjE0NDkzMVowMzExMC8GA1UEAxMoRUMxQjlCRTYzMTM3MjMwRjY3NTZF MjIyMDE5MzE4QzY0MEVCRTQyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJNamykeHsIG49DECZGjhsg0/7Ptx4UwNs7pT9c2xv78q8ZnBnU2VabK3Jt g3jNifaV5qquPZ2Kb2MaM1Cxj7DlGXgcZOeJU+yle/mDNDtwcgr9F2ASHjMbtVHw JyuGy/Pnm6TPebnclkrILiYNAsFOmO/a5svzWi11n7m/QGzHuApLpCUYhR5lFJai TaYTPHhp4yZ9vGanJumXef7k1RBiUdrmjRZNC/LpfsD8SmKfN/UwIu3zyFiUB8WS zkMrDXhZr9sThCvVXgOkHpRCM4k0toamLwnylQyIo/5QDDEGHZ/ZfkY3wHIUdZXe C+utflBB6Jfixe7ojpeqDVIyMCUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOwbm+YxNyMPZ1biIgGTGMZA6+QuMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NTNhYzY2Ny00ZDllLTQ4ZDctYWZkNi04MmU5OGZhNzZjMWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ1M2FjNjY3 LTRkOWUtNDhkNy1hZmQ2LTgyZTk4ZmE3NmMxZS8wL0VDMUI5QkU2MzEzNzIzMEY2 NzU2RTIyMjAxOTMxOEM2NDBFQkU0MkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdD6YwDQYJKoZIhvcNAQELBQADggEBAE7wvFpeAZqu7fDuJM7d5RGRK5OcNJDg iphXE8OHPbZ5bAr/RwtZiBfSbdwpsBUeV+qAMR0rd98GseO3FQoiRXqNoWjdRHcg AwrRf9LpG6QT09D0D0toCW1ZY15Z4QfN+rj2YkGVsPzh0nfU+d/vtCr8gxL/u5+K GUdbxkEHaxMZ37xHKDnt9K0koxkeZ1DFtdsWKRNGDSFslQXw93AdqavfkcWFo7Ts jFBc3xZX3QK0xW9h6nQJZBOjQksQ+pCOxQVpV89MGNjW+ek04NJyR4mA3PnZ+9Tf hc6wzk4/G+gR9FPwBWU/thUwYxFHxIPaeYd42/RmtpcOtdSbMOjEbjQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:59 2026 by rpki-client