$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer (raw, json) Hash identifier: rvnfwwSU8Qo6wkn5y5Uv5xPVFd3fMGzZCt+e4dsQlsw= Subject key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2F9223B3644E725BDF82607896EC1D1A74F23034 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft caRepository: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 27 Feb 2025 05:31:04 +0000 Certificate not after: Thu 26 Feb 2026 05:36:04 +0000 Subordinate resources: IP: 160.25.249.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:92:23:b3:64:4e:72:5b:df:82:60:78:96:ec:1d:1a:74:f2:30:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 27 05:31:04 2025 GMT Not After : Feb 26 05:36:04 2026 GMT Subject: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:83:00:76:1d:64:93:72:29:ec:7e:38:b6: 19:27:36:ba:e1:96:4e:d3:9c:ea:4e:53:32:a3:59: 95:f2:d1:52:4a:6d:0b:81:8f:a5:18:c7:12:cb:da: 4c:6d:cb:9e:97:f4:db:a2:cd:fb:39:86:70:78:c0: f4:e7:75:d5:9c:76:ca:57:cf:c3:8f:10:d6:be:6a: 32:47:20:44:af:a5:62:a4:5c:6b:6d:c2:ae:3c:c7: 74:26:cd:a9:2f:a0:c1:43:d5:84:85:1f:f2:35:de: 98:0a:90:5b:42:be:4b:c3:93:7e:44:ec:13:9f:ed: bc:05:73:98:98:10:88:86:4c:2d:44:1b:85:1b:68: e0:9d:52:9c:a7:b6:a8:d8:86:34:8b:7a:a1:c5:4a: 34:2d:10:cf:8b:5f:bf:2b:29:9a:06:70:c9:c5:bf: 21:cb:b0:5e:bf:66:ef:ec:81:63:59:28:a5:60:c2: b9:b1:df:c4:62:a7:bf:ca:b6:c4:3d:82:b0:ba:7b: 06:52:97:ee:27:23:2a:b6:0f:41:b7:70:5d:7c:07: d9:09:99:9a:51:15:46:4b:e0:74:4e:2c:61:ad:1b: 14:c9:e3:83:fd:56:09:90:b0:ab:15:52:97:ee:74: 4d:b8:c1:86:46:a9:6e:4a:e3:44:4a:e4:e6:44:62: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.249.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:19:54:f6:9b:80:f9:55:69:f4:d4:72:a7:b3:e4:a4:f4:3b: 7f:a7:7c:e7:fa:37:a5:72:14:30:71:4b:81:00:ca:b2:fc:d0: 17:89:51:f7:9d:50:d4:24:82:c8:7e:ed:85:9f:36:6a:33:5e: af:7a:df:31:4b:7e:1e:f3:d1:01:64:3a:c4:4c:66:52:b0:43: 9d:4e:e0:fe:33:fd:49:83:f8:89:23:9b:e5:90:ed:f4:4b:ae: ae:70:da:42:53:1e:9b:c0:4b:c1:2b:95:2a:07:9b:16:54:01: b9:80:e9:d0:86:1b:7f:48:71:d1:2c:d8:bb:27:eb:24:47:7b: 2a:0a:e7:f2:35:72:b1:ab:00:83:af:14:29:9b:29:4d:d7:41: 40:3c:4e:30:69:63:79:ed:18:cb:47:84:c0:9e:a1:f7:86:37: 5d:24:7a:8f:c0:9c:6c:29:cc:b3:0d:09:fd:0b:07:50:56:dc: 6e:fc:f8:8f:d1:29:6c:d6:91:4d:12:c9:e8:36:22:a3:43:52: fb:48:ff:ef:5e:e0:5e:69:70:86:89:9c:3d:2e:35:09:d3:7b: 2d:ec:72:04:29:58:17:d5:cc:61:ad:de:a7:c8:7b:a6:9e:86: c7:2c:3e:6d:3e:cc:b4:81:bf:1e:d4:76:ac:8c:3f:03:fd:db: 91:fb:40:23 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUL5Ijs2ROclvfgmB4luwdGnTyMDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIyNzA1MzEwNFoX DTI2MDIyNjA1MzYwNFowMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYw Mzg1QjY2NTM4NDI1NzBFRDNBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHMgwB2HWSTcinsfji2GSc2uuGWTtOc6k5TMqNZlfLRUkptC4GPpRjHEsva TG3Lnpf026LN+zmGcHjA9Od11Zx2ylfPw48Q1r5qMkcgRK+lYqRca23CrjzHdCbN qS+gwUPVhIUf8jXemAqQW0K+S8OTfkTsE5/tvAVzmJgQiIZMLUQbhRto4J1SnKe2 qNiGNIt6ocVKNC0Qz4tfvyspmgZwycW/IcuwXr9m7+yBY1kopWDCubHfxGKnv8q2 xD2CsLp7BlKX7icjKrYPQbdwXXwH2QmZmlEVRkvgdE4sYa0bFMnjg/1WCZCwqxVS l+50TbjBhkapbkrjRErk5kRiRzMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKIbpw347kcP56YDhbZlOEJXDtOkMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxNDA1NTQ1 LWMzNWQtNGRlMS05NjE4LTQ0YjVmNDE3YTMwMy8xL0EyMUJBNzBERjhFRTQ3MEZF N0E2MDM4NUI2NjUzODQyNTcwRUQzQTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGfkwDQYJKoZIhvcNAQELBQADggEBAE8ZVPabgPlVafTUcqez5KT0O3+nfOf6 N6VyFDBxS4EAyrL80BeJUfedUNQkgsh+7YWfNmozXq963zFLfh7z0QFkOsRMZlKw Q51O4P4z/UmD+Ikjm+WQ7fRLrq5w2kJTHpvAS8ErlSoHmxZUAbmA6dCGG39IcdEs 2Lsn6yRHeyoK5/I1crGrAIOvFCmbKU3XQUA8TjBpY3ntGMtHhMCeofeGN10keo/A nGwpzLMNCf0LB1BW3G78+I/RKWzWkU0Syeg2IqNDUvtI/+9e4F5pcIaJnD0uNQnT ey3scgQpWBfVzGGt3qfIe6aehscsPm0+zLSBvx7UdqyMPwP925H7QCM= -----END CERTIFICATE-----Generated at Mon Apr 7 03:56:18 2025 by rpki-client