$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4DB742D9FEF95FE89AEE5B8874324892566482C3.cer File: 4DB742D9FEF95FE89AEE5B8874324892566482C3.cer (raw, json) Hash identifier: kDRsFxZVEnkDBOb5Dwglj80JQtN2Hd38XJFhwaXlcq4= Subject key identifier: 4D:B7:42:D9:FE:F9:5F:E8:9A:EE:5B:88:74:32:48:92:56:64:82:C3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D510759B85B275D064A112157B9038113B3CADE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.mft caRepository: rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 01:29:25 +0000 Certificate not after: Wed 07 Apr 2027 01:34:25 +0000 Subordinate resources: IP: 163.128.88.0/23 IP: 2001:df6:d740::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:51:07:59:b8:5b:27:5d:06:4a:11:21:57:b9:03:81:13:b3:ca:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 8 01:29:25 2026 GMT Not After : Apr 7 01:34:25 2027 GMT Subject: CN=4DB742D9FEF95FE89AEE5B8874324892566482C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:7c:ff:f5:d4:42:a9:91:ff:82:d6:77:10: 52:4e:eb:3a:b1:6d:3a:82:29:bf:3a:2a:30:da:e9: 68:ec:c6:ce:75:4b:bf:31:f2:3b:ab:ff:45:c4:04: e5:da:35:6f:8b:e7:65:2a:9a:85:4e:06:83:65:de: d8:95:36:fc:70:20:3d:9d:50:1f:f4:8a:62:8a:e3: 3c:cd:0d:3e:4d:0b:fd:0a:29:46:8c:69:d9:71:4f: 47:cb:54:3e:74:b6:2e:89:37:12:15:53:27:b2:56: c9:19:72:15:c3:94:0f:d4:03:fa:c4:e4:26:3f:77: 68:c7:75:19:00:2c:c3:84:65:0f:dd:72:89:a3:9e: fa:16:70:36:8a:b0:0c:96:e6:09:75:23:9a:53:e5: 2c:13:62:86:28:d3:1e:72:d3:43:55:fb:3b:e7:01: b9:43:95:81:ff:f1:b5:95:8a:ca:f0:f2:92:4f:58: 5f:16:30:5b:4d:22:c7:95:d1:10:4f:a0:ec:ad:b9: 1f:f5:bd:e1:84:68:8b:30:4d:3a:10:10:39:f8:e2: de:16:b9:60:3d:3e:6c:49:37:9c:f9:24:88:43:3d: 7f:bf:49:82:b5:36:1b:ff:6b:84:f0:15:30:95:58: f2:63:26:8b:d8:ba:0c:43:4e:54:e1:75:21:0d:0b: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:B7:42:D9:FE:F9:5F:E8:9A:EE:5B:88:74:32:48:92:56:64:82:C3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.88.0/23 IPv6: 2001:df6:d740::/48 Signature Algorithm: sha256WithRSAEncryption 3c:d9:1e:86:cf:94:be:d9:aa:a1:ce:75:98:af:6d:3c:b3:d4: a6:9f:a6:57:94:35:65:05:06:60:2b:a7:c0:dc:55:b6:32:01: e6:d4:15:88:66:16:75:f9:eb:23:72:3f:9e:07:4b:1b:73:1d: e4:e7:ef:87:f4:d9:e0:ae:94:a2:13:35:e8:a4:f7:fa:65:b0: 64:6f:01:21:e3:f5:4c:82:0e:69:a5:ad:d6:94:21:bd:45:a6: 8c:ca:9e:ea:ef:56:ea:36:18:a1:b4:b4:3f:22:44:85:d0:df: 83:4b:c2:cb:08:3c:52:6b:41:07:57:f2:47:1c:d8:63:a5:ea: 72:c6:be:be:2d:f2:c8:39:3e:e4:e9:36:09:d5:8f:a4:59:9e: b7:92:1a:6a:48:06:cd:f8:44:92:50:e5:6e:fc:b1:c3:0a:a8: 6c:0f:91:68:22:5a:e7:c8:5a:8b:5a:ba:5c:6b:ee:41:99:c7: 3d:1c:a9:ac:70:de:f4:25:d8:91:0a:d4:f1:8b:b0:1f:91:ae: a3:10:ff:ce:a6:03:df:a2:75:bc:70:21:e5:cd:26:3f:0f:e1: 1f:30:2b:fe:98:e3:62:f8:39:67:14:9e:79:13:73:78:ab:fc: 4a:81:35:0f:77:89:df:49:f0:de:73:74:01:23:66:b9:30:fa: 1d:7c:0e:f1 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUTVEHWbhbJ10GShEhV7kDgROzyt4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwODAxMjkyNVoX DTI3MDQwNzAxMzQyNVowMzExMC8GA1UEAxMoNERCNzQyRDlGRUY5NUZFODlBRUU1 Qjg4NzQzMjQ4OTI1NjY0ODJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgpfP/11EKpkf+C1ncQUk7rOrFtOoIpvzoqMNrpaOzGznVLvzHyO6v/RcQE 5do1b4vnZSqahU4Gg2Xe2JU2/HAgPZ1QH/SKYorjPM0NPk0L/QopRoxp2XFPR8tU PnS2Lok3EhVTJ7JWyRlyFcOUD9QD+sTkJj93aMd1GQAsw4RlD91yiaOe+hZwNoqw DJbmCXUjmlPlLBNihijTHnLTQ1X7O+cBuUOVgf/xtZWKyvDykk9YXxYwW00ix5XR EE+g7K25H/W94YRoizBNOhAQOfji3ha5YD0+bEk3nPkkiEM9f79JgrU2G/9rhPAV MJVY8mMmi9i6DENOVOF1IQ0L5mMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE23Qtn++V/omu5biHQySJJWZILDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZjU3ZjIxZi1hYzA1LTQ3NTAtYTE4Zi1iZGU1ZjY5YWE2NWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmNTdmMjFm LWFjMDUtNDc1MC1hMThmLWJkZTVmNjlhYTY1YS8wLzREQjc0MkQ5RkVGOTVGRTg5 QUVFNUI4ODc0MzI0ODkyNTY2NDgyQzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAGjgFgwDwQCAAIwCQMHACABDfbXQDANBgkqhkiG9w0BAQsFAAOCAQEAPNkehs+U vtmqoc51mK9tPLPUpp+mV5Q1ZQUGYCunwNxVtjIB5tQViGYWdfnrI3I/ngdLG3Md 5Ofvh/TZ4K6UohM16KT3+mWwZG8BIeP1TIIOaaWt1pQhvUWmjMqe6u9W6jYYobS0 PyJEhdDfg0vCywg8UmtBB1fyRxzYY6Xqcsa+vi3yyDk+5Ok2CdWPpFmet5IaakgG zfhEklDlbvyxwwqobA+RaCJa58hai1q6XGvuQZnHPRyprHDe9CXYkQrU8YuwH5Gu oxD/zqYD36J1vHAh5c0mPw/hHzAr/pjjYvg5ZxSeeRNzeKv8SoE1D3eJ30nw3nN0 ASNmuTD6HXwO8Q== -----END CERTIFICATE-----Generated at Fri Apr 17 09:28:42 2026 by rpki-client