$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer (raw, json) Hash identifier: W162OeI0H6P5kf7QlB5X4umIWeZRqBXLiGczYecDHMg= Subject key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 37122D1A082B48545C19FC3B75309B5059C33998 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Jun 2025 05:27:39 +0000 Certificate not after: Fri 19 Jun 2026 05:32:39 +0000 Subordinate resources: IP: 160.25.58.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:12:2d:1a:08:2b:48:54:5c:19:fc:3b:75:30:9b:50:59:c3:39:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 20 05:27:39 2025 GMT Not After : Jun 19 05:32:39 2026 GMT Subject: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:12:aa:33:3f:9f:49:60:df:fd:03:80:50: fa:0c:d9:51:28:b1:a7:28:bc:34:cb:4d:0a:9e:29: d6:91:64:68:52:a0:d9:87:68:bf:34:0f:0f:b3:51: 4e:c5:bd:15:56:ca:33:e0:d0:41:c2:95:1e:76:e6: 2d:51:aa:fe:b5:98:ca:10:2e:3f:fb:e1:b8:eb:53: a6:95:b8:65:07:a3:3f:7b:fc:8f:df:36:83:cc:13: 5b:5c:42:ca:a5:d8:59:ba:74:a6:3e:62:0b:26:01: 74:29:8d:71:87:88:14:91:64:05:24:e3:de:fc:6e: ee:00:a6:26:33:b4:f8:96:84:fa:71:a2:d0:cd:49: 79:60:8e:a5:1e:81:41:20:79:47:7e:d8:dd:99:58: 9c:6a:cf:3e:d7:32:43:a8:5d:33:ff:be:41:fa:83: 4d:e8:e4:f8:a0:4c:fe:75:c5:25:82:bf:03:1e:22: 4f:7d:0e:41:4e:1a:b2:5d:9e:36:d6:ac:b8:65:39: b7:1c:7d:d8:8d:db:92:24:16:ca:72:e4:11:56:3f: c4:fe:26:92:1f:0e:a1:81:f8:a5:89:bc:a8:64:a2: 60:ff:88:8d:01:95:6c:23:c6:6a:20:2f:26:63:f7: 59:70:28:8d:a3:6b:20:55:79:96:c9:91:73:34:1f: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.58.0/23 Signature Algorithm: sha256WithRSAEncryption 48:43:eb:1e:2e:0e:f0:45:ea:ca:7f:1e:ea:96:98:6f:b5:3a: 7f:a0:0b:28:82:5c:bd:11:7c:62:3f:5e:8b:84:2c:87:6d:f7: c2:3d:13:36:2b:d0:5d:fa:74:8c:ae:82:d2:09:67:aa:96:ee: 43:45:ab:0c:7d:36:44:f8:ec:b4:bf:d7:f8:4a:b2:33:7b:5f: 87:7f:ca:f9:72:54:a0:e9:ff:c6:5a:c4:53:95:e3:b6:32:db: fd:bb:26:52:e2:38:a4:90:5f:0f:ee:10:fc:12:d9:48:67:31: 6c:62:14:50:37:bc:36:e4:0f:a1:9f:84:d5:c2:b2:aa:ea:a4: 9c:a1:a2:db:9c:32:2d:fe:ee:fc:e4:2e:ec:3c:a7:98:55:15: 9c:6c:72:30:f7:d4:58:90:aa:ec:5e:a7:9f:d9:48:8a:a4:4b: 06:07:10:f4:39:a7:48:97:c4:03:08:20:bb:aa:52:be:f4:e8: 1e:b9:31:71:b8:f7:a7:ce:4a:c9:a6:28:5e:4e:8c:0a:4a:5d: f5:f6:88:2a:e6:84:bb:fe:04:43:0a:d5:6e:92:04:f6:0f:b8: 69:45:5d:f0:9a:32:4e:e1:18:2f:b7:ab:38:d8:61:a8:16:37: 2d:97:87:53:ec:fb:33:c5:f9:49:1c:49:4f:95:8f:c0:47:7a: 33:e8:d7:81 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNxItGggrSFRcGfw7dTCbUFnDOZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYyMDA1MjczOVoX DTI2MDYxOTA1MzIzOVowMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0 MzdFMjM4RjNEMkEzRjA2M0I0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMx8EqozP59JYN/9A4BQ+gzZUSixpyi8NMtNCp4p1pFkaFKg2YdovzQPD7NR TsW9FVbKM+DQQcKVHnbmLVGq/rWYyhAuP/vhuOtTppW4ZQejP3v8j982g8wTW1xC yqXYWbp0pj5iCyYBdCmNcYeIFJFkBSTj3vxu7gCmJjO0+JaE+nGi0M1JeWCOpR6B QSB5R37Y3ZlYnGrPPtcyQ6hdM/++QfqDTejk+KBM/nXFJYK/Ax4iT30OQU4asl2e NtasuGU5txx92I3bkiQWynLkEVY/xP4mkh8OoYH4pYm8qGSiYP+IjQGVbCPGaiAv JmP3WXAojaNrIFV5lsmRczQfQrUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLDXJkGfvzXnxutDfiOPPSo/BjtMMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyZGFiNDZh LTA4NWUtNDQzMi05ODMzLTcxYjhkYjE0NGQ5NC8wL0IwRDcyNjQxOUZCRjM1RTdD NkVCNDM3RTIzOEYzRDJBM0YwNjNCNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGTowDQYJKoZIhvcNAQELBQADggEBAEhD6x4uDvBF6sp/HuqWmG+1On+gCyiC XL0RfGI/XouELIdt98I9EzYr0F36dIyugtIJZ6qW7kNFqwx9NkT47LS/1/hKsjN7 X4d/yvlyVKDp/8ZaxFOV47Yy2/27JlLiOKSQXw/uEPwS2UhnMWxiFFA3vDbkD6Gf hNXCsqrqpJyhotucMi3+7vzkLuw8p5hVFZxscjD31FiQquxep5/ZSIqkSwYHEPQ5 p0iXxAMIILuqUr706B65MXG496fOSsmmKF5OjApKXfX2iCrmhLv+BEMK1W6SBPYP uGlFXfCaMk7hGC+3qzjYYagWNy2Xh1Ps+zPF+UkcSU+Vj8BHejPo14E= -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:35 2025 by rpki-client