$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer (raw, json) Hash identifier: fn5yC13i1RwG4lLOPfIl4cJYBBmZoLahzuffYvFAJ8I= Subject key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1394910EC87D0AC3E9F595D1F879B84D0FD26E85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft caRepository: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 May 2025 12:49:58 +0000 Certificate not after: Wed 20 May 2026 12:54:58 +0000 Subordinate resources: IP: 160.19.144.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:94:91:0e:c8:7d:0a:c3:e9:f5:95:d1:f8:79:b8:4d:0f:d2:6e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 21 12:49:58 2025 GMT Not After : May 20 12:54:58 2026 GMT Subject: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:4a:43:8e:d3:7c:16:a0:46:a7:6f:c4:2e: b4:c4:d2:54:c4:10:11:b0:a4:95:7d:b3:64:3b:0d: 97:b2:95:d9:cc:b5:05:8b:1d:7a:f4:ac:a2:32:10: e3:46:c1:60:11:b6:e7:15:01:dd:fc:57:98:ca:21: 85:66:cd:00:c0:2f:3a:9b:4e:57:a3:2f:97:63:ef: 41:7f:65:12:d3:22:1c:41:43:39:23:b6:d9:6d:57: b8:f3:4f:75:c9:31:34:6e:6a:ae:ff:03:c6:b9:32: 19:c8:83:9a:fc:02:2c:62:ef:ec:d0:9c:9e:f6:a0: 2c:e6:4e:67:94:37:40:c2:b0:80:18:9d:39:7d:0c: b3:80:fb:11:05:2c:59:28:64:ee:41:cc:ce:e6:2a: 19:54:f8:c9:c4:15:8a:89:2f:2e:04:55:7f:87:f6: b8:fd:f0:d7:18:e0:82:dc:36:ec:3b:21:8b:ac:6e: 4e:32:b6:4b:0f:7b:c0:d6:ef:b4:e5:57:56:48:d8: ed:25:bc:0a:89:a0:33:86:8f:96:e1:cc:ff:db:d6: 49:cf:94:78:13:e6:88:f7:c8:78:73:ea:6b:48:36: 19:76:f5:e4:c6:06:b5:2e:86:d7:d0:ce:a9:2c:1c: 2e:3f:77:5f:3e:93:b2:d2:33:c3:ea:71:4a:b2:8a: 58:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.144.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:ae:e1:2a:76:8d:35:da:72:fb:7a:85:91:92:bb:99:36:18: 15:6c:75:8c:64:57:1b:05:e6:5f:8a:8f:31:62:a9:fc:40:50: 67:0e:a7:31:c8:cf:69:05:dc:12:f5:ea:df:ba:04:bc:6d:d1: ab:0f:c0:68:41:87:9c:8b:6b:1c:a0:94:3c:48:ca:09:28:89: ef:71:9e:60:9d:0a:6e:28:19:68:03:a9:21:2d:d5:c4:b3:b2: 69:64:bc:86:0e:6e:36:92:e6:2d:29:6e:34:0d:1c:95:94:6b: bb:07:8b:4d:06:04:18:7b:99:3c:ff:22:29:45:a4:e5:e4:73: 98:4e:8e:a8:33:11:4b:57:a7:2e:fa:cf:0c:70:1f:10:b4:6e: cd:76:dd:bf:36:94:90:2d:f9:06:cd:2a:f2:86:75:74:6e:25: 88:ac:98:ee:fd:55:aa:67:03:91:ce:f0:be:19:47:76:5a:5f: b7:53:b2:91:e6:b3:4f:e6:50:08:f1:07:7e:a4:99:d6:87:93: b0:77:f1:f2:7d:73:77:9c:4c:94:23:54:b7:7b:17:e5:96:df: 69:6b:a7:a2:c2:1c:c1:a8:9e:c9:f7:51:dc:a6:11:4d:59:66: 0c:0c:20:5f:82:7d:71:aa:99:fd:54:38:07:3c:6c:4e:15:7d: e8:6b:9e:9f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUE5SRDsh9CsPp9ZXR+Hm4TQ/SboUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUyMTEyNDk1OFoX DTI2MDUyMDEyNTQ1OFowMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlC RUE0RDUxNkJBRkM1QTg3OTUwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUkSkOO03wWoEanb8QutMTSVMQQEbCklX2zZDsNl7KV2cy1BYsdevSsojIQ 40bBYBG25xUB3fxXmMohhWbNAMAvOptOV6Mvl2PvQX9lEtMiHEFDOSO22W1XuPNP dckxNG5qrv8DxrkyGciDmvwCLGLv7NCcnvagLOZOZ5Q3QMKwgBidOX0Ms4D7EQUs WShk7kHMzuYqGVT4ycQViokvLgRVf4f2uP3w1xjggtw27Dshi6xuTjK2Sw97wNbv tOVXVkjY7SW8ComgM4aPluHM/9vWSc+UeBPmiPfIeHPqa0g2GXb15MYGtS6G19DO qSwcLj93Xz6TstIzw+pxSrKKWNkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKjN1XapteRIqGm+pNUWuvxah5UDMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyZTVmZjgx LWIwODItNDMzNC1hZDI5LTU1ZGM4ZDFlNTNiOS8wL0E4Q0RENTc2QTlCNUU0NDhB ODY5QkVBNEQ1MTZCQUZDNUE4Nzk1MDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE5AwDQYJKoZIhvcNAQELBQADggEBAC2u4Sp2jTXacvt6hZGSu5k2GBVsdYxk VxsF5l+KjzFiqfxAUGcOpzHIz2kF3BL16t+6BLxt0asPwGhBh5yLaxyglDxIygko ie9xnmCdCm4oGWgDqSEt1cSzsmlkvIYObjaS5i0pbjQNHJWUa7sHi00GBBh7mTz/ IilFpOXkc5hOjqgzEUtXpy76zwxwHxC0bs123b82lJAt+QbNKvKGdXRuJYismO79 VapnA5HO8L4ZR3ZaX7dTspHms0/mUAjxB36kmdaHk7B38fJ9c3ecTJQjVLd7F+WW 32lrp6LCHMGonsn3UdymEU1ZZgwMIF+CfXGqmf1UOAc8bE4Vfehrnp8= -----END CERTIFICATE-----Generated at Fri Jun 6 04:56:30 2025 by rpki-client