$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.cer (raw, json) Hash identifier: DQPt6FLYmWvTdLaK5hq+iLlgQmlwcUitaZHR32EPi7A= Subject key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 503B9886C76962A2ECE01A01A309E91B5FB24B4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft caRepository: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 18 May 2025 18:14:48 +0000 Certificate not after: Sun 17 May 2026 18:19:48 +0000 Subordinate resources: IP: 157.66.125.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3b:98:86:c7:69:62:a2:ec:e0:1a:01:a3:09:e9:1b:5f:b2:4b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 18 18:14:48 2025 GMT Not After : May 17 18:19:48 2026 GMT Subject: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:99:86:6d:3a:71:c2:e3:e7:bb:1e:ae:ef: 79:99:0c:c5:f3:35:a9:13:d3:7c:7f:5d:4a:e9:2e: 58:33:6f:db:63:9f:ac:c6:dc:fe:f0:53:66:37:f1: 7f:0c:f8:f0:5f:be:84:48:69:28:e7:d6:8a:0c:7a: 76:e6:f5:b0:45:13:b7:fd:7d:33:b8:33:02:a3:cb: d9:f8:e7:4d:19:df:f3:1c:b6:75:f3:70:86:81:fa: 3f:61:a2:d9:c1:ee:d7:0c:b0:06:54:4d:6e:3a:35: 8c:b0:83:b0:3a:be:08:60:79:4d:71:b0:28:53:7f: 77:52:95:23:a3:03:27:d2:9d:05:fe:7d:75:76:e1: c5:ff:16:ec:01:90:f6:53:f6:b4:4f:13:8f:50:87: 07:64:95:b2:34:b3:2a:e7:8e:e9:00:f7:8f:4c:1c: da:22:c7:03:81:79:75:ce:45:aa:99:77:f7:1f:67: 7c:13:8f:e4:83:ec:de:5e:c1:fd:3f:1a:40:ce:72: 74:a4:de:53:ad:88:5b:c5:2b:6d:33:51:18:22:7f: e5:56:7b:3b:2f:87:12:83:67:de:1e:7f:70:e1:2a: 3d:20:c6:10:d9:49:03:fd:67:0b:32:e8:c8:9e:7b: 56:72:5b:e6:f1:b0:2f:54:a4:f7:32:b1:5c:e5:00: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.125.0/24 Signature Algorithm: sha256WithRSAEncryption 26:6c:71:34:2b:99:b8:d1:e5:49:57:97:c3:fd:f6:44:31:f0: ba:c3:89:6b:4c:dc:d8:11:0c:5d:55:4e:03:8e:5a:72:c1:81: 72:8d:19:75:84:76:a4:83:06:35:92:90:cb:d1:ab:eb:34:18: d6:2e:f7:64:00:6c:0f:85:43:35:f6:70:43:9a:5b:9e:40:07: a1:de:7d:16:55:42:4f:d7:d5:fe:12:43:3f:c3:5f:b4:af:de: f4:e1:67:b1:c8:f8:52:71:f9:e5:ba:87:2a:3e:0b:14:96:87: 81:d0:02:ff:cf:34:09:7d:9c:3a:15:a3:86:5d:a0:c2:cd:97: 94:a8:1e:89:d8:ba:40:a3:0d:a1:56:b3:14:56:d6:f2:32:d8: fe:a8:d7:1e:33:dd:c3:1a:1e:a4:82:be:f7:e9:f0:39:96:3d: 12:93:1d:e2:fd:c3:6b:b9:20:2c:d1:5a:fa:87:63:cd:17:15: 69:e7:00:d1:1f:81:9b:37:27:42:67:42:c4:08:1b:2e:fb:a3: 71:0d:47:1b:e2:9d:f6:b7:35:29:bf:e5:54:78:55:31:32:f8: 21:cf:d0:61:d4:78:84:df:50:d9:04:88:90:fa:e4:72:95:c1: b3:a5:f7:7e:bb:6d:ae:c7:a5:0e:76:46:46:00:b5:1e:62:8f: 39:d8:d4:be -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUDuYhsdpYqLs4BoBownpG1+yS08wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUxODE4MTQ0OFoX DTI2MDUxNzE4MTk0OFowMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUy NzdDNjREMUZENDg5QTQ1RTUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4TmYZtOnHC4+e7Hq7veZkMxfM1qRPTfH9dSukuWDNv22OfrMbc/vBTZjfx fwz48F++hEhpKOfWigx6dub1sEUTt/19M7gzAqPL2fjnTRnf8xy2dfNwhoH6P2Gi 2cHu1wywBlRNbjo1jLCDsDq+CGB5TXGwKFN/d1KVI6MDJ9KdBf59dXbhxf8W7AGQ 9lP2tE8Tj1CHB2SVsjSzKueO6QD3j0wc2iLHA4F5dc5Fqpl39x9nfBOP5IPs3l7B /T8aQM5ydKTeU62IW8UrbTNRGCJ/5VZ7Oy+HEoNn3h5/cOEqPSDGENlJA/1nCzLo yJ57VnJb5vGwL1Sk9zKxXOUA1xMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBpDucZ2RtO4RE4nfGTR/UiaReU2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjZjAxZWM2 LThlODktNDAyYS05MGM3LTUwYzZmMTRjZDI0Mi8wLzFBNDNCOUM2NzY0NkQzQjg0 NDRFMjc3QzY0RDFGRDQ4OUE0NUU1MzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQn0wDQYJKoZIhvcNAQELBQADggEBACZscTQrmbjR5UlXl8P99kQx8LrDiWtM 3NgRDF1VTgOOWnLBgXKNGXWEdqSDBjWSkMvRq+s0GNYu92QAbA+FQzX2cEOaW55A B6HefRZVQk/X1f4SQz/DX7Sv3vThZ7HI+FJx+eW6hyo+CxSWh4HQAv/PNAl9nDoV o4ZdoMLNl5SoHonYukCjDaFWsxRW1vIy2P6o1x4z3cMaHqSCvvfp8DmWPRKTHeL9 w2u5ICzRWvqHY80XFWnnANEfgZs3J0JnQsQIGy77o3ENRxvinfa3NSm/5VR4VTEy +CHP0GHUeITfUNkEiJD65HKVwbOl9367ba7HpQ52RkYAtR5ijznY1L4= -----END CERTIFICATE-----Generated at Wed Jun 4 11:40:09 2025 by rpki-client