$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer (raw, json) Hash identifier: uvNAiR9a02DrRB12gebxRrgjX3pSzPjDUbADaI5RYOQ= Subject key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 29181D38A2F3432E3EDE4CFDA3A709D6149146ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft caRepository: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Feb 2026 02:24:21 +0000 Certificate not after: Wed 03 Feb 2027 02:29:21 +0000 Subordinate resources: IP: 157.20.222.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:18:1d:38:a2:f3:43:2e:3e:de:4c:fd:a3:a7:09:d6:14:91:46:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 4 02:24:21 2026 GMT Not After : Feb 3 02:29:21 2027 GMT Subject: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:66:95:e0:40:f4:b5:4b:43:b1:8d:3d:db: 4b:0d:7e:bd:a5:3c:6e:29:41:a0:27:60:99:49:c7: 49:f9:f9:a6:8a:3f:3f:61:11:38:1f:e8:b6:c9:67: f4:df:46:e4:c3:43:27:a0:67:ae:56:b0:28:c1:fd: 2c:b3:53:84:44:66:4c:4e:2f:cf:85:e4:45:96:75: 69:36:78:b6:f3:80:d6:99:9a:af:4c:d5:e4:ac:4c: c8:fd:3b:62:26:8a:1a:34:1b:ee:25:7f:58:e9:a5: fc:92:ce:26:00:03:9f:25:2c:6d:a8:e5:44:6d:92: b4:16:aa:19:a8:3a:2b:ac:45:2f:1f:f6:df:e4:14: 2a:61:1e:ca:3a:f4:f2:75:fe:e5:5a:c6:e7:14:87: 00:ed:bd:cb:f0:96:7a:0d:47:3a:da:50:2a:d2:10: e1:aa:0d:d6:de:77:de:04:c9:a1:31:5b:b3:d9:71: 55:5d:44:8b:e6:5d:47:76:6d:87:f0:ac:fd:d8:c0: 31:44:73:a4:73:30:f6:2e:60:18:c7:3f:f9:b3:fb: 99:3f:ea:b7:3d:ee:31:31:76:a5:7d:45:b5:a4:3a: 80:1d:d2:98:4d:ed:b0:31:ec:47:78:3f:0b:56:01: 9b:a0:6e:92:08:9b:80:fc:9d:3d:f0:91:2c:5a:5b: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.222.0/23 Signature Algorithm: sha256WithRSAEncryption 60:90:74:21:c1:b5:bc:9a:db:04:5e:20:f6:f5:60:c6:50:8c: e4:53:33:5e:9f:95:d6:19:0a:bb:a3:30:e6:92:23:4a:3e:5f: e4:bc:e3:2b:45:82:da:30:25:00:46:9e:4c:67:8c:30:bb:76: 76:a4:70:a1:cb:ca:20:37:ad:84:38:19:dc:58:50:01:13:13: 24:b3:ec:8d:2d:5b:1b:1a:5c:8f:fc:da:d6:05:d8:1b:0e:97: 00:97:a0:2e:7d:4e:8b:35:34:18:b4:6c:1c:ee:b3:86:39:c0: bb:5c:89:49:f0:46:1a:23:bf:d1:55:fc:d1:79:53:0f:7b:64: c4:b6:54:fd:73:7b:11:7f:2f:7b:ee:63:a6:e9:31:c2:d9:5a: 31:8a:07:68:d3:80:56:56:80:cd:bf:64:98:7e:fa:5d:7a:58: fc:e8:bd:9d:5f:fc:f3:b7:c2:37:31:fc:d4:4f:54:29:8c:dd: 70:02:c8:a4:1f:e8:58:e7:14:e2:f2:42:c7:e0:d3:64:89:f9: bd:c5:75:9f:89:c1:a2:f5:97:a5:3d:7e:39:73:96:2d:de:e1: 89:f9:5d:65:0b:c8:b1:08:65:5f:d3:80:5f:15:58:5c:ca:a6: d7:4e:9a:49:7b:e7:bc:c0:ff:f6:98:c6:f5:18:11:f2:cb:51: cd:5f:b2:28 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKRgdOKLzQy4+3kz9o6cJ1hSRRu0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwNDAyMjQyMVoX DTI3MDIwMzAyMjkyMVowMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIx REY3QUIwRTVDQTI4MDlEMDczOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx0ZpXgQPS1S0OxjT3bSw1+vaU8bilBoCdgmUnHSfn5poo/P2EROB/otsln 9N9G5MNDJ6BnrlawKMH9LLNThERmTE4vz4XkRZZ1aTZ4tvOA1pmar0zV5KxMyP07 YiaKGjQb7iV/WOml/JLOJgADnyUsbajlRG2StBaqGag6K6xFLx/23+QUKmEeyjr0 8nX+5VrG5xSHAO29y/CWeg1HOtpQKtIQ4aoN1t533gTJoTFbs9lxVV1Ei+ZdR3Zt h/Cs/djAMURzpHMw9i5gGMc/+bP7mT/qtz3uMTF2pX1FtaQ6gB3SmE3tsDHsR3g/ C1YBm6BukgibgPydPfCRLFpbj50CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP555Wy+mcdzzXId96sOXKKAnQc5MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExZjE1YTFk LTVkYWMtNGNjOS04MTFhLWU0OWNiNGU3YmNlMS8wL0ZFNzlFNTZDQkU5OUM3NzND RDcyMURGN0FCMEU1Q0EyODA5RDA3MzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFN4wDQYJKoZIhvcNAQELBQADggEBAGCQdCHBtbya2wReIPb1YMZQjORTM16f ldYZCrujMOaSI0o+X+S84ytFgtowJQBGnkxnjDC7dnakcKHLyiA3rYQ4GdxYUAET EySz7I0tWxsaXI/82tYF2BsOlwCXoC59Tos1NBi0bBzus4Y5wLtciUnwRhojv9FV /NF5Uw97ZMS2VP1zexF/L3vuY6bpMcLZWjGKB2jTgFZWgM2/ZJh++l16WPzovZ1f /PO3wjcx/NRPVCmM3XACyKQf6FjnFOLyQsfg02SJ+b3FdZ+JwaL1l6U9fjlzli3e 4Yn5XWULyLEIZV/TgF8VWFzKptdOmkl757zA//aYxvUYEfLLUc1fsig= -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:21 2026 by rpki-client