$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer (raw, json) Hash identifier: E0t2VxMD6o3dyybz0qyDr0gFF+b5ucPcDktF0c2oW1s= Subject key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 64953BC99D044B37A46161D14AF9B35A2B42D9CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft caRepository: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 03 Apr 2026 09:46:56 +0000 Certificate not after: Fri 02 Apr 2027 09:51:56 +0000 Subordinate resources: IP: 157.66.9.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:95:3b:c9:9d:04:4b:37:a4:61:61:d1:4a:f9:b3:5a:2b:42:d9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 3 09:46:56 2026 GMT Not After : Apr 2 09:51:56 2027 GMT Subject: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:db:12:f7:39:3b:f1:d8:36:1b:c5:ed:7a: 04:dd:9c:83:e2:37:01:82:26:a8:b8:22:4a:01:db: 39:d0:74:9f:f4:9e:5c:76:ac:2e:38:05:57:91:ef: b2:45:f4:19:92:fa:c0:cd:55:50:3c:17:fe:f1:ec: fc:51:9a:9f:18:4c:29:46:46:e1:7e:91:af:a1:31: 18:29:c4:8a:9f:65:95:d7:12:14:56:e6:e3:a1:dc: 01:a3:7e:9d:a0:9b:9c:ab:73:52:94:da:11:80:c1: f0:36:c6:c2:85:80:83:e8:e8:56:c2:15:25:dd:f1: 4e:70:63:80:33:96:00:14:3d:96:85:f0:8f:a4:14: b2:e9:a2:e1:00:95:db:89:6c:49:b6:ec:a7:e3:06: aa:53:16:82:24:2a:c3:68:98:ae:43:a3:e1:25:4c: 01:81:07:2b:e8:88:84:6d:6d:f7:cf:da:23:34:26: 99:44:cd:73:91:31:05:d0:82:48:47:e5:34:f0:81: eb:a9:25:ab:71:8d:e5:28:f6:06:d2:53:b3:50:c5: e6:a1:45:81:c9:3d:24:78:e9:16:f9:01:20:c0:0a: bc:aa:b9:a3:30:75:e9:ef:c3:23:38:1c:ae:24:5b: 44:37:3c:27:d0:28:1a:22:dc:39:90:cc:ad:01:94: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.9.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:aa:cf:70:cd:69:df:56:2b:43:9b:c7:63:4c:ec:5e:ae:ea: 57:47:da:34:4c:81:cc:6f:c7:04:a3:53:ee:df:da:4e:3a:91: 46:30:1b:2f:fa:0f:9b:33:2a:e3:c0:a4:89:35:2c:74:63:1d: 28:42:cf:59:0e:5e:11:30:37:7c:e6:18:a4:92:b9:ff:e6:31: 78:76:89:c6:88:d0:50:67:ab:fb:0c:99:9b:1c:ff:db:3b:bc: 36:4d:5e:ef:eb:16:e3:12:3c:b8:a4:41:f3:f4:4b:3c:ca:5f: b0:b5:06:88:64:ef:48:31:98:f4:b5:f7:c3:20:01:59:27:44: f1:b5:f6:25:b5:b9:67:ec:d0:79:b2:c6:d0:f4:6c:7d:36:ed: 80:a7:0e:8c:15:00:a3:fb:40:a2:29:14:97:45:af:31:a5:72: 52:68:9e:35:27:05:16:e9:6f:1b:a1:06:59:31:e3:cf:16:1a: 5c:92:b8:60:9b:03:5d:cf:14:26:15:f6:fa:8a:38:8b:98:33: a1:d4:25:85:ab:bd:b9:fa:94:bd:e4:22:b8:39:7a:ba:f7:f8: 8e:df:76:5b:a1:35:1d:48:12:ea:f3:5b:1f:bc:45:7c:cf:92: f8:7b:45:fc:44:dc:0d:80:4c:2d:99:35:91:af:db:f4:75:95: 13:91:17:08 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZJU7yZ0ESzekYWHRSvmzWitC2cwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwMzA5NDY1NloX DTI3MDQwMjA5NTE1NlowMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZG N0VCMEQzNDM3QTBCN0VDRTdCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/u2xL3OTvx2DYbxe16BN2cg+I3AYImqLgiSgHbOdB0n/SeXHasLjgFV5Hv skX0GZL6wM1VUDwX/vHs/FGanxhMKUZG4X6Rr6ExGCnEip9lldcSFFbm46HcAaN+ naCbnKtzUpTaEYDB8DbGwoWAg+joVsIVJd3xTnBjgDOWABQ9loXwj6QUsumi4QCV 24lsSbbsp+MGqlMWgiQqw2iYrkOj4SVMAYEHK+iIhG1t98/aIzQmmUTNc5ExBdCC SEflNPCB66klq3GN5Sj2BtJTs1DF5qFFgck9JHjpFvkBIMAKvKq5ozB16e/DIzgc riRbRDc8J9AoGiLcOZDMrQGUpPUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPmTDjCNMLPhXP/36w00N6C37Oe9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlYmY1NWNh LWQ3ODMtNGEzYi05NWNjLTczY2MzNDZkYjQ2ZS8wL0Y5OTMwRTMwOEQzMEIzRTE1 Q0ZGRjdFQjBEMzQzN0EwQjdFQ0U3QkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQgkwDQYJKoZIhvcNAQELBQADggEBAE+qz3DNad9WK0Obx2NM7F6u6ldH2jRM gcxvxwSjU+7f2k46kUYwGy/6D5szKuPApIk1LHRjHShCz1kOXhEwN3zmGKSSuf/m MXh2icaI0FBnq/sMmZsc/9s7vDZNXu/rFuMSPLikQfP0SzzKX7C1Bohk70gxmPS1 98MgAVknRPG19iW1uWfs0HmyxtD0bH027YCnDowVAKP7QKIpFJdFrzGlclJonjUn BRbpbxuhBlkx488WGlySuGCbA13PFCYV9vqKOIuYM6HUJYWrvbn6lL3kIrg5err3 +I7fdluhNR1IEurzWx+8RXzPkvh7RfxE3A2ATC2ZNZGv2/R1lRORFwg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:36:06 2026 by rpki-client