$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer (raw, json) Hash identifier: Jwi6yWFMCAOYeFUyd3Wjq9AvqM8s8OSibM6Ew9ynpFM= Subject key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 721D229D68F8E43DCD969AA6CA3A7115DC3ACFA4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft caRepository: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Feb 2026 23:47:54 +0000 Certificate not after: Tue 02 Feb 2027 23:52:54 +0000 Subordinate resources: IP: 157.20.130.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1d:22:9d:68:f8:e4:3d:cd:96:9a:a6:ca:3a:71:15:dc:3a:cf:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 3 23:47:54 2026 GMT Not After : Feb 2 23:52:54 2027 GMT Subject: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:fe:7f:92:e8:9e:ff:c8:cb:71:6a:55:03: 72:db:15:99:e0:72:a0:99:22:08:76:34:d9:25:62: f6:22:fb:4b:08:72:e0:53:99:75:e0:c4:a8:dd:e2: e3:75:1d:24:9b:12:d4:57:9e:00:e5:a2:45:63:44: 18:bd:ec:f7:33:d5:92:f3:8a:da:96:5c:47:49:20: d2:2d:97:f0:b7:ae:b8:45:3f:0e:6d:15:fc:23:3f: 7e:38:8f:24:19:8c:09:50:ee:50:4e:f7:e1:c0:db: 67:99:a5:25:dc:5f:32:2e:79:22:75:3e:b4:33:36: 13:65:9a:b7:ae:08:bd:5a:ed:0c:10:4d:45:15:c2: b2:35:9f:54:5b:67:2a:4a:d9:a7:53:92:38:b3:25: 7c:67:27:93:4f:26:36:05:36:7c:f2:13:e8:d4:04: af:cf:9b:4b:c1:4f:71:81:fc:7c:40:86:8f:c4:20: 79:f2:ff:94:d2:fb:9f:6b:b2:38:76:eb:b9:6f:78: b8:bf:f8:a9:55:ba:43:66:2b:77:1c:3e:26:ab:f9: b4:f3:5b:88:44:64:c5:60:b9:1e:aa:f4:22:16:b3: 25:cd:1b:71:ec:31:8f:67:a0:d8:14:ab:ad:f6:60: e9:2a:e5:4e:7b:4b:65:48:34:6f:50:cc:94:71:75: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.130.0/23 Signature Algorithm: sha256WithRSAEncryption 75:6e:02:d7:11:18:27:22:8b:4e:7e:27:20:62:a7:bd:05:0f: d3:2d:c8:83:8d:f1:46:11:e1:4a:7b:a0:0a:fd:07:1e:ea:cc: 2a:cb:91:0a:9f:71:e9:d0:22:0d:c7:9f:d6:0c:ef:ca:c8:04: a5:2f:31:a8:0f:a1:93:df:82:ae:9e:27:20:27:17:44:d2:15: 6d:21:8e:22:21:39:db:13:62:02:31:aa:b1:29:db:4c:5a:32: 6e:42:60:9e:29:a1:39:a7:92:fd:29:e6:e3:1f:c3:09:40:28: a9:0f:71:d6:41:9e:cd:5e:4e:b3:b0:07:91:c8:28:ed:43:a7: 1b:55:5a:2d:44:15:93:13:98:57:0b:1e:6f:63:f0:0c:29:4e: ee:83:a6:05:6b:09:e1:3b:83:c1:bf:9b:9e:cf:2a:43:16:0e: ee:6a:5a:eb:4d:9d:20:30:af:ab:51:76:79:e6:f4:fc:e4:ee: e9:32:c7:77:78:48:38:eb:21:cc:d4:35:a2:31:fc:61:14:75: df:68:06:ab:9d:97:d3:b4:6f:07:84:cf:04:06:0b:c8:ed:2d: 1f:e3:a0:cd:33:ae:ff:19:9d:3d:d9:90:37:2b:93:bf:5e:69: 11:fe:89:7f:2e:10:40:8a:df:94:c3:63:1b:42:c0:27:e7:8b: d4:3f:57:ad -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUch0inWj45D3NlpqmyjpxFdw6z6QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwMzIzNDc1NFoX DTI3MDIwMjIzNTI1NFowMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0 MzcwN0M3QzBEMTYwNTg5NkJBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALN8/n+S6J7/yMtxalUDctsVmeByoJkiCHY02SVi9iL7Swhy4FOZdeDEqN3i 43UdJJsS1FeeAOWiRWNEGL3s9zPVkvOK2pZcR0kg0i2X8LeuuEU/Dm0V/CM/fjiP JBmMCVDuUE734cDbZ5mlJdxfMi55InU+tDM2E2Wat64IvVrtDBBNRRXCsjWfVFtn KkrZp1OSOLMlfGcnk08mNgU2fPIT6NQEr8+bS8FPcYH8fECGj8QgefL/lNL7n2uy OHbruW94uL/4qVW6Q2Yrdxw+Jqv5tPNbiERkxWC5Hqr0IhazJc0bcewxj2eg2BSr rfZg6SrlTntLZUg0b1DMlHF1SVsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPj6rvl+09un0nJDcHx8DRYFiWuvMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4NmZmMjY0 LWZmMjUtNGZlNi04NmVmLWQ4NGI3ZDI4ODM1NC8wL0Y4RkFBRUY5N0VEM0RCQTdE MjcyNDM3MDdDN0MwRDE2MDU4OTZCQUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFIIwDQYJKoZIhvcNAQELBQADggEBAHVuAtcRGCcii05+JyBip70FD9MtyION 8UYR4Up7oAr9Bx7qzCrLkQqfcenQIg3Hn9YM78rIBKUvMagPoZPfgq6eJyAnF0TS FW0hjiIhOdsTYgIxqrEp20xaMm5CYJ4poTmnkv0p5uMfwwlAKKkPcdZBns1eTrOw B5HIKO1DpxtVWi1EFZMTmFcLHm9j8AwpTu6DpgVrCeE7g8G/m57PKkMWDu5qWutN nSAwr6tRdnnm9Pzk7ukyx3d4SDjrIczUNaIx/GEUdd9oBqudl9O0bweEzwQGC8jt LR/joM0zrv8ZnT3ZkDcrk79eaRH+iX8uEECK35TDYxtCwCfni9Q/V60= -----END CERTIFICATE-----Generated at Mon Mar 2 09:41:47 2026 by rpki-client