$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.cer (raw, json) Hash identifier: 4+eVc3osvBzZpZYpI2QPbz7vWIxFy5tVNlYtgCyFXiQ= Subject key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 57F014E0A364E1CE449C2B2F8974747D2EB7071F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft caRepository: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Mar 2026 06:24:39 +0000 Certificate not after: Fri 05 Mar 2027 06:29:39 +0000 Subordinate resources: IP: 157.20.94.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f0:14:e0:a3:64:e1:ce:44:9c:2b:2f:89:74:74:7d:2e:b7:07:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 6 06:24:39 2026 GMT Not After : Mar 5 06:29:39 2027 GMT Subject: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:ec:9d:ab:6e:83:08:58:12:0d:46:ad:bc: 9c:0c:68:34:ee:33:9e:24:ac:14:4d:03:14:39:8d: cd:7b:0f:fd:65:c8:7b:db:99:b1:70:5d:30:40:f1: 43:fa:bb:98:48:5c:c0:a3:ba:f4:29:41:97:88:90: 10:33:a2:44:bc:a0:f2:f7:1e:e7:e3:a4:41:64:66: 96:f5:5d:2e:0e:48:3c:66:00:00:d9:8f:65:4d:b8: f8:bc:72:14:44:ad:d2:40:f7:e9:26:50:13:be:5d: 85:00:49:91:c3:b4:06:d4:42:d0:f5:51:2f:7d:9f: 56:69:23:d9:f9:33:21:0b:94:22:a5:b6:b4:d2:56: b8:cd:92:f9:59:a4:53:d9:14:1a:68:1f:4d:b4:bb: e6:0f:5f:a3:c7:bf:64:11:36:d2:5d:33:90:b6:37: f5:aa:af:57:4c:b4:0b:81:0e:7a:da:a1:30:0a:7a: 2c:73:cf:0a:8e:e0:63:92:74:f0:14:05:cd:8f:fd: 97:aa:3d:4d:2f:e8:6c:1e:01:0a:4d:52:d2:5d:03: 60:da:7b:aa:e7:c6:4f:a9:4c:4a:a0:dc:81:7b:33: 83:b8:49:a3:d0:1e:e9:62:3d:dd:9d:85:4b:76:1a: ed:c6:ad:19:23:2d:df:89:6e:bd:e4:cf:ab:0f:2b: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.94.0/24 Signature Algorithm: sha256WithRSAEncryption 51:43:a7:15:18:49:7a:d2:85:0e:18:0d:f3:5d:db:e1:51:63: 45:90:f8:ef:f8:b5:71:63:2d:b2:e7:93:36:f0:97:ff:66:49: 80:ab:c1:d8:31:1f:ea:06:12:e3:00:f9:24:0c:89:05:d8:e8: cb:ad:50:4b:97:37:8f:35:e3:c5:60:b5:6f:2a:93:ea:00:60: 79:63:d4:f8:fa:8c:3c:d4:ae:cf:68:13:59:8c:68:21:26:5d: 7d:3c:b4:df:a2:af:35:01:0b:63:dc:8f:82:14:b0:bb:e7:06: 01:c0:c7:29:75:bd:27:15:ad:df:72:cc:6c:c7:b2:40:80:ad: 1c:ad:e7:c5:c2:b1:8b:92:1a:69:41:11:3d:bf:cf:e5:c9:d1: c5:35:27:d1:29:f3:b8:16:3c:47:15:b6:7b:2d:d0:6f:c2:e8: f3:6c:0d:bd:21:5e:e9:9f:32:db:c1:0b:88:c9:d2:52:ee:2b: d9:09:a6:cc:24:7b:f3:92:ea:6d:f5:4d:76:7f:f2:94:24:b7: c9:7a:e1:7f:88:25:09:7c:81:4e:e9:ae:a7:f2:9f:81:ba:77: 6e:8f:d4:a9:89:0d:50:8c:77:06:04:2e:d3:09:da:39:bd:37: 7e:bf:0c:1f:03:f2:ca:b0:45:ee:14:7f:63:3b:93:48:23:67: ec:ee:3e:53 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUV/AU4KNk4c5EnCsviXR0fS63Bx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMwNjA2MjQzOVoX DTI3MDMwNTA2MjkzOVowMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3 Mjc2NjM3NEVBMDNFNkYxOEY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnT7J2rboMIWBINRq28nAxoNO4zniSsFE0DFDmNzXsP/WXIe9uZsXBdMEDx Q/q7mEhcwKO69ClBl4iQEDOiRLyg8vce5+OkQWRmlvVdLg5IPGYAANmPZU24+Lxy FESt0kD36SZQE75dhQBJkcO0BtRC0PVRL32fVmkj2fkzIQuUIqW2tNJWuM2S+Vmk U9kUGmgfTbS75g9fo8e/ZBE20l0zkLY39aqvV0y0C4EOetqhMAp6LHPPCo7gY5J0 8BQFzY/9l6o9TS/obB4BCk1S0l0DYNp7qufGT6lMSqDcgXszg7hJo9Ae6WI93Z2F S3Ya7catGSMt34luveTPqw8r5K0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH7Wmw2yMuQZ6Q1ydmN06gPm8Y9zMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MmQxNzUy LTQ4NTMtNGM3NC1iNTc0LTk5NGQzYjEyNDA5MC8wLzdFRDY5QjBEQjIzMkU0MTlF OTBENzI3NjYzNzRFQTAzRTZGMThGNzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFF4wDQYJKoZIhvcNAQELBQADggEBAFFDpxUYSXrShQ4YDfNd2+FRY0WQ+O/4 tXFjLbLnkzbwl/9mSYCrwdgxH+oGEuMA+SQMiQXY6MutUEuXN48148VgtW8qk+oA YHlj1Pj6jDzUrs9oE1mMaCEmXX08tN+irzUBC2Pcj4IUsLvnBgHAxyl1vScVrd9y zGzHskCArRyt58XCsYuSGmlBET2/z+XJ0cU1J9Ep87gWPEcVtnst0G/C6PNsDb0h XumfMtvBC4jJ0lLuK9kJpswke/OS6m31TXZ/8pQkt8l64X+IJQl8gU7prqfyn4G6 d26P1KmJDVCMdwYELtMJ2jm9N36/DB8D8sqwRe4Uf2M7k0gjZ+zuPlM= -----END CERTIFICATE-----Generated at Sat Mar 7 16:13:20 2026 by rpki-client