$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer (raw, json) Hash identifier: SB/b+4vKh/SPak362dj0Z7w8H7grllvY2PBfaQiQOCA= Subject key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 225BC0FB81DF22546F47F46A27F102C1525F8EE9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft caRepository: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 13:43:15 +0000 Certificate not after: Fri 17 Jul 2026 13:48:15 +0000 Subordinate resources: IP: 160.25.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 13:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5b:c0:fb:81:df:22:54:6f:47:f4:6a:27:f1:02:c1:52:5f:8e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 18 13:43:15 2025 GMT Not After : Jul 17 13:48:15 2026 GMT Subject: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:52:3f:dd:48:5a:0e:28:70:c0:1d:37:cf: 35:4a:0d:2c:6f:c9:4b:b5:e7:e3:83:d0:f1:48:04: df:d7:33:a4:55:05:0e:72:14:46:2a:af:bc:94:07: 02:4e:ca:7c:49:2a:61:1c:b9:f5:10:b7:38:79:fb: 9b:ef:c7:f7:d4:e0:a0:84:84:c5:a2:b8:87:bb:b6: ea:98:cc:98:76:0d:bc:3e:a9:3b:89:91:a7:53:75: 53:c4:a4:60:f7:87:fc:a7:af:e6:78:03:85:c4:29: 3a:c9:ff:37:7e:f8:3a:6f:fb:31:dd:3b:7c:ff:64: d2:dd:fe:c8:51:46:72:46:40:20:cd:a7:1a:c8:c8: eb:3c:dd:ba:74:7c:cc:a0:db:10:08:10:3e:75:9a: 99:06:1d:9d:9a:ff:b1:fe:c5:25:23:bb:90:95:91: 95:db:dc:60:f8:90:55:67:2e:b6:ac:2f:b9:70:08: 27:48:3a:94:2d:c8:c6:56:43:b9:26:bc:82:a5:2f: 9b:3a:85:e3:e6:89:be:33:08:4e:ef:26:af:80:04: 0c:a4:f9:46:e4:9c:b0:70:d2:8a:a3:c9:01:38:ce: 92:5a:e1:9a:e5:ee:37:6b:1c:b6:21:52:61:11:d3: ab:b7:cb:fb:31:d0:ba:03:00:0d:0f:83:b7:34:38: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.236.0/23 Signature Algorithm: sha256WithRSAEncryption 36:bd:0d:0c:57:c3:78:cc:ea:ed:10:a7:3b:e9:63:a5:aa:29: 86:b0:e1:93:1c:a7:6a:7a:44:a2:10:cb:68:fc:cd:aa:91:f2: cc:f6:bf:8f:3d:2c:f0:87:1d:54:41:d4:bc:d5:ac:18:ab:cb: 39:23:95:7a:2a:5c:f5:69:5d:bd:f0:8f:18:e2:22:ae:af:6e: 2b:bc:45:5a:fc:a9:c7:12:7b:a0:31:96:50:81:50:82:18:ca: 47:ea:8b:b8:5f:ae:df:ec:73:c8:25:b6:27:cb:e6:ee:5c:75: 66:f5:f9:cd:ea:5d:c6:63:59:35:c1:38:61:52:5b:fe:ce:09: 69:e4:5f:a3:87:11:9a:8f:0c:4c:37:b9:59:d5:2f:8f:86:50: 15:e7:36:53:86:08:39:68:24:5c:b2:b3:81:92:6e:82:ed:a4: 56:ef:03:2d:e6:b2:03:c7:bf:aa:46:6a:4a:f8:4f:5a:93:31: 99:2a:30:5d:2e:fc:c2:10:c3:b2:66:bd:a8:7e:53:4a:ce:34: 9b:57:7f:fd:ed:66:54:d5:ba:a5:12:b3:e3:10:35:4f:50:a3: 26:d3:aa:4f:e9:38:15:f6:66:f0:5c:99:f3:ea:67:0c:6c:70: 86:fc:3f:15:5c:d1:55:bd:d2:b0:6c:36:c1:51:6f:d9:49:17: 96:d4:6b:5b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIlvA+4HfIlRvR/RqJ/ECwVJfjukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcxODEzNDMxNVoX DTI2MDcxNzEzNDgxNVowMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIy N0E3QThFMDcwRDMyREMxRTg3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOO/Uj/dSFoOKHDAHTfPNUoNLG/JS7Xn44PQ8UgE39czpFUFDnIURiqvvJQH Ak7KfEkqYRy59RC3OHn7m+/H99TgoISExaK4h7u26pjMmHYNvD6pO4mRp1N1U8Sk YPeH/Kev5ngDhcQpOsn/N374Om/7Md07fP9k0t3+yFFGckZAIM2nGsjI6zzdunR8 zKDbEAgQPnWamQYdnZr/sf7FJSO7kJWRldvcYPiQVWcutqwvuXAIJ0g6lC3IxlZD uSa8gqUvmzqF4+aJvjMITu8mr4AEDKT5RuScsHDSiqPJATjOklrhmuXuN2sctiFS YRHTq7fL+zHQugMADQ+DtzQ4PBsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEafh5nJKD9q+rInp6jgcNMtweh2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlYzJhMWFj LTVhZTQtNDdhZC04ZGIxLTY1MmM3ZjNmN2U4Zi8wLzQ2OUY4Nzk5QzkyODNGNkFG QUIyMjdBN0E4RTA3MEQzMkRDMUU4NzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGewwDQYJKoZIhvcNAQELBQADggEBADa9DQxXw3jM6u0QpzvpY6WqKYaw4ZMc p2p6RKIQy2j8zaqR8sz2v489LPCHHVRB1LzVrBiryzkjlXoqXPVpXb3wjxjiIq6v biu8RVr8qccSe6AxllCBUIIYykfqi7hfrt/sc8gltifL5u5cdWb1+c3qXcZjWTXB OGFSW/7OCWnkX6OHEZqPDEw3uVnVL4+GUBXnNlOGCDloJFyys4GSboLtpFbvAy3m sgPHv6pGakr4T1qTMZkqMF0u/MIQw7Jmvah+U0rONJtXf/3tZlTVuqUSs+MQNU9Q oybTqk/pOBX2ZvBcmfPqZwxscIb8PxVc0VW90rBsNsFRb9lJF5bUa1s= -----END CERTIFICATE-----Generated at Mon Jul 21 00:17:52 2025 by rpki-client