$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer File: 405E466852C38FD4CD20BA6115840947D5D24F5D.cer (raw, json) Hash identifier: bp82zno412SWDjzbFtbkcmquxMNrsI2An59OJEDtGOc= Subject key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0B1FB80A4F29F0F64C241015EF17CD59583C07E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 17 Jul 2025 14:52:00 +0000 Certificate not after: Thu 16 Jul 2026 14:57:00 +0000 Subordinate resources: IP: 160.25.203.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1f:b8:0a:4f:29:f0:f6:4c:24:10:15:ef:17:cd:59:58:3c:07:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 17 14:52:00 2025 GMT Not After : Jul 16 14:57:00 2026 GMT Subject: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:67:69:6f:b7:98:54:e5:04:8a:1f:22:65: 90:7b:3c:09:77:3b:04:a8:e7:12:c9:a3:d6:46:9e: 3a:cd:6e:a1:d7:14:94:92:3d:59:94:f9:58:70:21: c6:ba:bd:d6:61:12:c7:44:0d:8c:4c:cf:42:96:ca: c3:77:b9:41:4e:2a:17:4b:1c:9e:db:3d:f0:a8:b0: 14:ee:40:98:88:4f:06:50:56:21:fa:e9:cb:3e:13: 7f:58:49:14:10:a1:39:a0:e6:a6:a5:1d:8b:e6:9f: e1:ce:f3:35:da:31:88:3d:c2:eb:e9:fa:c9:ea:4d: 4b:0c:01:e3:5f:14:11:42:61:11:40:da:34:61:95: 4a:a0:cb:18:64:5a:35:55:02:51:30:9d:95:62:74: 64:cb:7a:a0:eb:fe:0a:1c:1e:fc:be:06:2c:31:74: cb:62:62:cf:65:d2:a7:a2:a6:e1:ea:a4:de:74:dc: 2b:bd:74:f1:de:89:ae:ad:97:11:66:4f:75:86:d6: 7b:04:91:73:86:7a:0d:19:47:cf:1e:ca:0d:f7:72: fb:62:c2:d3:d9:72:8a:99:2a:b7:e7:42:65:ee:49: 2e:fa:51:40:b6:99:cd:16:f0:13:b9:93:6c:55:2e: a0:59:ec:9b:82:e8:02:e8:cb:a8:8b:8a:f4:d7:83: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.203.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:52:e2:7d:2d:c1:04:62:fd:89:36:32:aa:bb:a6:6f:10:a1: 4b:36:22:cd:8c:c0:4d:e6:e6:0a:48:42:1b:6a:7a:dc:3a:10: ec:d1:f6:ea:43:77:3e:f9:11:89:2e:c2:bb:c6:bf:49:7a:39: c4:cf:7e:17:9c:98:8b:9d:36:98:f7:b2:71:1c:0d:ac:f9:b0: 5f:d8:78:98:ab:dd:35:52:8f:9e:59:84:cb:c1:8b:71:81:cc: 5b:b5:bf:b0:e8:da:98:5b:95:5e:a5:71:05:32:90:e8:f7:51: d6:67:30:99:d4:4c:2b:ec:0f:51:fd:c3:c7:75:7b:3f:be:6a: 50:2c:1b:18:44:f7:4e:7d:62:0a:9d:e4:55:1c:af:13:1c:6b: 20:ce:a8:04:d6:71:2f:71:4a:f2:29:02:3e:c4:a6:f9:aa:88: 2a:a1:78:cd:97:cc:d7:aa:f4:66:e9:4f:af:75:35:32:9a:cb: b3:c3:0f:3b:bd:03:c7:00:22:36:d4:1a:b8:1c:cd:ce:0e:36: 68:8f:67:75:15:39:bc:26:2b:c0:9c:65:1a:84:13:cd:21:0f: de:d4:94:93:84:69:17:05:2c:88:3d:62:17:8c:56:85:0c:0f: 86:1b:72:87:8d:ef:55:a4:57:7c:a7:c4:57:e3:98:a5:9b:67: 4d:97:e1:05 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCx+4Ck8p8PZMJBAV7xfNWVg8B+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcxNzE0NTIwMFoX DTI2MDcxNjE0NTcwMFowMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBC QTYxMTU4NDA5NDdENUQyNEY1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqxZ2lvt5hU5QSKHyJlkHs8CXc7BKjnEsmj1kaeOs1uodcUlJI9WZT5WHAh xrq91mESx0QNjEzPQpbKw3e5QU4qF0scnts98KiwFO5AmIhPBlBWIfrpyz4Tf1hJ FBChOaDmpqUdi+af4c7zNdoxiD3C6+n6yepNSwwB418UEUJhEUDaNGGVSqDLGGRa NVUCUTCdlWJ0ZMt6oOv+Chwe/L4GLDF0y2Jiz2XSp6Km4eqk3nTcK7108d6Jrq2X EWZPdYbWewSRc4Z6DRlHzx7KDfdy+2LC09lyipkqt+dCZe5JLvpRQLaZzRbwE7mT bFUuoFnsm4LoAujLqIuK9NeDJY8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEBeRmhSw4/UzSC6YRWECUfV0k9dMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYzYxNTVl LTJkMmYtNGY5ZS1iMjE4LWViNTI1YjNhMTExOS8wLzQwNUU0NjY4NTJDMzhGRDRD RDIwQkE2MTE1ODQwOTQ3RDVEMjRGNUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGcswDQYJKoZIhvcNAQELBQADggEBAGtS4n0twQRi/Yk2Mqq7pm8QoUs2Is2M wE3m5gpIQhtqetw6EOzR9upDdz75EYkuwrvGv0l6OcTPfhecmIudNpj3snEcDaz5 sF/YeJir3TVSj55ZhMvBi3GBzFu1v7Do2phblV6lcQUykOj3UdZnMJnUTCvsD1H9 w8d1ez++alAsGxhE9059Ygqd5FUcrxMcayDOqATWcS9xSvIpAj7EpvmqiCqheM2X zNeq9GbpT691NTKay7PDDzu9A8cAIjbUGrgczc4ONmiPZ3UVObwmK8CcZRqEE80h D97UlJOEaRcFLIg9YheMVoUMD4YbcoeN71WkV3ynxFfjmKWbZ02X4QU= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:52 2025 by rpki-client