$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer File: 6176447D40001B20E000D73A3B5E66B74A431374.cer (raw, json) Hash identifier: Hv/P7W7N5FlOoGQfQwHm62UI9XHP4REWCXSpWO31f7M= Subject key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2F131DD9982A02A0A458CB45B510E6D0FAF909E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft caRepository: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 May 2025 07:32:04 +0000 Certificate not after: Fri 15 May 2026 07:37:04 +0000 Subordinate resources: IP: 160.19.144.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Nov 2025 15:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:13:1d:d9:98:2a:02:a0:a4:58:cb:45:b5:10:e6:d0:fa:f9:09:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 16 07:32:04 2025 GMT Not After : May 15 07:37:04 2026 GMT Subject: CN=6176447D40001B20E000D73A3B5E66B74A431374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:81:53:ab:1c:e3:9a:c6:6f:35:df:7c:3e: d6:64:b4:ff:18:86:9e:06:82:93:bf:89:ce:1b:63: 77:79:36:04:75:20:ae:4b:80:92:38:b5:b3:35:e1: cb:9d:fb:df:f0:78:8f:1c:68:0e:79:9d:f3:8d:da: dd:a2:91:dc:65:18:9a:65:8c:79:67:2d:82:80:d7: 9b:6d:7c:2d:68:8e:65:fb:48:8e:ea:08:d8:dc:a1: 69:f2:ce:9a:ee:e9:46:92:22:f8:50:aa:52:ec:75: 9b:5b:41:79:8c:b1:9e:9d:16:f3:17:ef:7c:cf:14: 7a:20:8a:b1:c5:7e:e1:9b:c8:c1:5b:a2:c2:7c:77: ff:1b:83:57:e3:61:1a:44:d7:6c:ef:9c:12:9b:28: 7f:d2:fb:12:a6:2a:b5:5f:0e:f1:11:88:b2:11:d4: fe:4a:e9:9d:e7:56:0a:47:e7:70:1f:c4:10:6c:5e: 96:6c:6b:70:b6:69:55:1e:2a:b0:be:6e:f9:45:19: 47:a5:c3:6b:7b:d9:dd:2f:e2:de:3a:7d:4a:b1:5e: 46:d7:cc:1b:cd:cd:82:a7:bc:f7:0b:9b:35:3c:e6: 69:f0:46:4d:70:e5:0b:9e:33:5d:ca:b3:b8:92:19: 4d:6e:61:f7:d6:85:6c:62:ec:0b:1c:30:3c:05:e0: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.144.0/23 Signature Algorithm: sha256WithRSAEncryption 03:73:aa:53:f7:83:62:ee:2a:af:9e:b9:60:b0:98:ca:14:4b: f2:07:13:11:27:e3:a9:d2:43:2c:83:c1:8d:10:11:75:f5:85: ac:10:9d:bc:0f:fb:67:2e:9b:95:e0:13:5a:7f:f8:56:0c:59: 17:df:1b:a1:34:32:d6:b2:cd:a4:6d:d8:44:88:0f:2d:06:58: 51:2e:c7:89:7d:a0:aa:74:06:42:84:0f:e3:2d:b5:19:f7:06: a0:cf:0b:85:ae:0d:bb:ae:d4:a7:2f:02:6d:48:f1:4a:48:77: 17:1a:af:2e:b7:87:7b:3b:a4:e9:1e:da:cf:d7:0a:ef:6e:13: 24:7a:ab:c7:cc:ad:e7:31:a8:53:ac:8c:9f:53:dd:51:37:e9: 38:cd:a7:9b:b8:ef:8b:20:9e:ab:45:08:15:55:32:0a:32:c0: e0:9d:0a:21:d7:c1:c7:d8:a9:9a:77:fb:cb:d2:c7:90:c0:a0: 8d:53:0d:c1:78:c3:f5:8d:33:6a:6b:26:5a:7b:f4:f7:ba:1c: 1a:db:96:37:03:43:ff:51:4e:e8:79:a2:ad:4f:73:9e:29:97: 48:da:f0:a1:60:37:23:4b:5d:26:e2:e4:35:2c:cd:68:e5:46: 3e:bb:0b:45:6d:8e:a9:c7:2e:36:cc:9a:d2:97:35:2b:95:cb: 65:72:62:60 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULxMd2ZgqAqCkWMtFtRDm0Pr5CeMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUxNjA3MzIwNFoX DTI2MDUxNTA3MzcwNFowMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBE NzNBM0I1RTY2Qjc0QTQzMTM3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZTgVOrHOOaxm8133w+1mS0/xiGngaCk7+Jzhtjd3k2BHUgrkuAkji1szXh y5373/B4jxxoDnmd843a3aKR3GUYmmWMeWctgoDXm218LWiOZftIjuoI2NyhafLO mu7pRpIi+FCqUux1m1tBeYyxnp0W8xfvfM8UeiCKscV+4ZvIwVuiwnx3/xuDV+Nh GkTXbO+cEpsof9L7EqYqtV8O8RGIshHU/krpnedWCkfncB/EEGxelmxrcLZpVR4q sL5u+UUZR6XDa3vZ3S/i3jp9SrFeRtfMG83Ngqe89wubNTzmafBGTXDlC54zXcqz uJIZTW5h99aFbGLsCxwwPAXgAqECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGF2RH1AABsg4ADXOjteZrdKQxN0MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kNDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0MGJkNmU0 LWI0ZmItNGY0OC1iODNhLWFjYjhmMmQ3NDU4My8wLzYxNzY0NDdENDAwMDFCMjBF MDAwRDczQTNCNUU2NkI3NEE0MzEzNzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE5AwDQYJKoZIhvcNAQELBQADggEBAANzqlP3g2LuKq+euWCwmMoUS/IHExEn 46nSQyyDwY0QEXX1hawQnbwP+2cum5XgE1p/+FYMWRffG6E0MtayzaRt2ESIDy0G WFEux4l9oKp0BkKED+MttRn3BqDPC4WuDbuu1KcvAm1I8UpIdxcary63h3s7pOke 2s/XCu9uEyR6q8fMrecxqFOsjJ9T3VE36TjNp5u474sgnqtFCBVVMgoywOCdCiHX wcfYqZp3+8vSx5DAoI1TDcF4w/WNM2prJlp79Pe6HBrbljcDQ/9RTuh5oq1Pc54p l0ja8KFgNyNLXSbi5DUszWjlRj67C0VtjqnHLjbMmtKXNSuVy2VyYmA= -----END CERTIFICATE-----Generated at Mon Nov 17 19:30:05 2025 by rpki-client