$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer (raw, json) Hash identifier: l/z5ZvlksLOjQPwCDa7cr1XV1pfO4S+tb8lhL45MIqY= Subject key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5582184B587EB8A7E5EFE675B5B05800645FCB66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft caRepository: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Sep 2025 05:10:18 +0000 Certificate not after: Thu 03 Sep 2026 05:15:18 +0000 Subordinate resources: IP: 157.20.238.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:82:18:4b:58:7e:b8:a7:e5:ef:e6:75:b5:b0:58:00:64:5f:cb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 4 05:10:18 2025 GMT Not After : Sep 3 05:15:18 2026 GMT Subject: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:72:86:a2:b4:13:b4:c6:37:20:8e:e5:62: 73:fd:73:59:e1:1b:d5:28:75:b3:fd:53:de:c3:8e: 38:4f:d7:87:8c:00:c8:5b:15:7e:0f:ee:87:b9:fc: 12:8e:7e:2a:aa:eb:b0:3a:3a:1f:4c:ba:f3:bd:01: 64:e2:24:f6:0e:fb:3d:12:53:ec:2c:25:eb:f2:16: bb:a7:9e:e0:ec:5d:2c:d5:90:ac:27:1b:76:42:6a: f5:e4:ab:4b:7c:15:0c:65:43:c1:61:b1:96:51:7a: 0b:c2:57:4e:3d:69:a1:2d:7a:66:a5:27:6f:12:f4: 83:89:c5:86:2b:12:f4:94:bf:a1:d2:8a:fc:c9:1f: 0c:e5:40:cc:43:b0:d8:02:53:3c:d1:04:96:e2:b3: 4f:6a:04:d1:2b:29:7d:77:59:a7:88:cb:9d:b5:9f: ef:ed:ee:bc:30:1e:3d:74:87:58:e8:3f:39:26:1b: 79:eb:e3:34:0b:18:af:d2:86:9c:58:0a:b1:ca:e3: 48:d8:d2:81:17:54:dd:69:0c:69:7f:e5:03:62:55: f4:5f:79:ce:68:e0:6c:a9:e8:62:ed:2c:34:b1:83: fa:67:c0:81:6c:4b:80:cd:42:35:16:43:13:e6:84: 33:9c:cf:bf:f2:b4:0c:1d:8b:64:7a:4a:ce:33:9f: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.238.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:c7:2d:f7:c0:c7:c4:36:be:57:0c:fa:2f:05:f7:cc:63:a2: e9:dc:6a:fe:48:e0:e9:b1:2b:76:ac:6d:80:be:29:7b:fc:14: 24:ab:38:06:b7:f8:bc:84:1d:1d:10:ea:4c:50:ad:99:1a:4e: 11:d2:c7:46:dc:be:e4:ca:a0:9f:7a:84:ec:b9:b3:23:2a:f8: 85:60:a4:01:b8:50:33:22:ae:7f:b9:61:40:a4:b6:e5:c1:06: 1f:79:1e:a5:6b:9b:ba:be:e2:f5:09:36:eb:79:77:3f:f7:2d: fc:0c:a3:c1:65:d8:41:e4:5e:f1:74:9d:ab:bd:1f:9f:fd:74: 7d:c8:35:f4:11:1a:56:92:06:b6:a6:42:e7:df:0f:cb:a0:06: e7:87:32:67:6c:91:60:d6:65:5a:d4:35:00:40:60:ba:2b:8c: 4f:69:5e:6a:2a:a9:5f:e2:1e:5b:1f:32:d6:b7:38:f3:16:1b: 86:ca:d2:68:cf:a2:0e:ca:4b:8a:c4:f5:bc:d5:93:aa:28:89: c4:0f:9b:ac:fd:6e:32:01:73:7e:83:17:45:f6:53:16:0d:ad: c8:21:01:cd:ca:53:72:35:69:d9:21:fa:68:15:4e:95:33:41: c7:74:72:d0:32:8b:32:c5:d1:d1:05:38:a4:e0:a1:c2:db:81: 4a:4f:05:5b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVYIYS1h+uKfl7+Z1tbBYAGRfy2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkwNDA1MTAxOFoX DTI2MDkwMzA1MTUxOFowMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMy NzIwRjE5Q0NGMjc5MjcwRkQyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANaQcoaitBO0xjcgjuVic/1zWeEb1Sh1s/1T3sOOOE/Xh4wAyFsVfg/uh7n8 Eo5+KqrrsDo6H0y6870BZOIk9g77PRJT7Cwl6/IWu6ee4OxdLNWQrCcbdkJq9eSr S3wVDGVDwWGxllF6C8JXTj1poS16ZqUnbxL0g4nFhisS9JS/odKK/MkfDOVAzEOw 2AJTPNEEluKzT2oE0SspfXdZp4jLnbWf7+3uvDAePXSHWOg/OSYbeevjNAsYr9KG nFgKscrjSNjSgRdU3WkMaX/lA2JV9F95zmjgbKnoYu0sNLGD+mfAgWxLgM1CNRZD E+aEM5zPv/K0DB2LZHpKzjOf/TUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMeDlCf0TI7YnmwnIPGczyeScP0qMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4ZDFjNDQ5 LTk3OGMtNDg0NS1iODIzLWI1OTI1YTkwNTQyNy8wL0M3ODM5NDI3RjQ0QzhFRDg5 RTZDMjcyMEYxOUNDRjI3OTI3MEZEMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFO4wDQYJKoZIhvcNAQELBQADggEBAE7HLffAx8Q2vlcM+i8F98xjouncav5I 4OmxK3asbYC+KXv8FCSrOAa3+LyEHR0Q6kxQrZkaThHSx0bcvuTKoJ96hOy5syMq +IVgpAG4UDMirn+5YUCktuXBBh95HqVrm7q+4vUJNut5dz/3LfwMo8Fl2EHkXvF0 nau9H5/9dH3INfQRGlaSBramQuffD8ugBueHMmdskWDWZVrUNQBAYLorjE9pXmoq qV/iHlsfMta3OPMWG4bK0mjPog7KS4rE9bzVk6ooicQPm6z9bjIBc36DF0X2UxYN rcghAc3KU3I1adkh+mgVTpUzQcd0ctAyizLF0dEFOKTgocLbgUpPBVs= -----END CERTIFICATE-----Generated at Sun Sep 7 10:15:02 2025 by rpki-client