$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer File: EAD173629E4F955F44EC781A3739775E738ACCFD.cer (raw, json) Hash identifier: 1o5gSf85tYGyX/NJy1YNqAA5DIwurgtOEGfljDS6dQ8= Subject key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0F781787C36E2E049A92A134DDC9A0C6440D4745 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft caRepository: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Apr 2025 08:39:29 +0000 Certificate not after: Tue 14 Apr 2026 08:44:29 +0000 Subordinate resources: IP: 157.66.29.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:78:17:87:c3:6e:2e:04:9a:92:a1:34:dd:c9:a0:c6:44:0d:47:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 15 08:39:29 2025 GMT Not After : Apr 14 08:44:29 2026 GMT Subject: CN=EAD173629E4F955F44EC781A3739775E738ACCFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:48:d8:b3:ec:89:bd:a6:1c:03:b0:75:4b: a8:b7:25:84:20:aa:97:71:50:ea:79:07:4c:8e:9c: 4a:0c:a4:b4:09:f7:71:fa:f1:5c:0d:03:bc:1c:c2: dc:c9:f3:d2:26:a6:f8:9b:1f:3e:b5:ba:6d:7a:3e: c7:68:07:04:c3:1f:f9:dd:79:fb:e0:5f:85:0b:47: 7b:e0:9e:13:34:e2:d4:1c:13:c1:7f:eb:6c:bc:99: 92:1a:db:65:97:7e:fa:93:a0:a4:18:18:f4:79:1e: 7f:3d:e0:4d:e9:7f:27:b6:bc:97:fe:9f:51:de:08: d6:34:a0:a3:24:24:3d:34:0f:76:17:65:db:e5:df: 03:71:28:6d:e6:8b:3f:75:44:56:73:d3:04:f3:e8: 14:c7:6b:09:75:88:4c:4d:38:b4:37:5a:72:c4:b8: c8:dc:da:fb:cd:57:8f:5a:96:8f:4a:1d:5d:90:f8: d2:7c:1b:dd:7f:f9:12:6c:87:3f:31:df:2b:03:54: a2:32:2c:cd:72:c1:26:2f:46:48:ef:4c:e0:0f:59: ed:cc:3c:e2:0c:90:be:bd:da:4e:a0:32:34:1b:e3: 9d:96:6e:3e:ab:36:68:34:d9:f9:72:00:2e:c8:93: b6:ce:bc:41:9d:3b:25:2d:27:09:0d:b9:06:fc:6d: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.29.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:c6:db:d6:af:d1:75:6e:53:60:28:7e:58:79:8a:97:94:89: af:40:96:47:be:d0:81:ea:e4:e0:41:21:83:85:dc:08:89:56: a1:12:35:de:1f:ee:d4:8c:92:fa:91:f5:ce:2d:dd:63:e1:73: 39:ee:00:cf:88:e7:aa:c1:d4:ed:30:57:1f:85:a9:9c:bc:7c: 67:34:cd:72:dd:a3:87:e0:19:30:4b:53:d5:7d:e4:85:1c:dc: b7:ab:af:ea:d8:de:c9:a7:ab:cc:74:4e:7e:29:59:fe:28:ff: 6b:47:14:6f:22:4a:a9:8e:55:27:1e:35:1f:6a:7e:66:a8:bf: ac:d6:01:4f:e7:84:3a:6a:11:e7:f3:b5:08:c2:38:f8:83:45: a2:bc:ce:03:e5:26:b4:38:8a:40:58:f7:c1:e5:50:5f:f3:11: 4e:9b:9a:ae:59:b1:d8:84:e5:25:88:1a:1a:c4:9e:46:19:76: 3b:e2:76:c5:35:91:02:64:03:cd:54:8c:70:b5:43:72:d0:d1: a6:22:dd:fa:78:7b:b9:a0:7d:3d:38:39:72:5a:6c:46:70:df: 2a:7f:b6:00:cc:44:c1:2c:96:63:a6:ad:04:96:d3:38:33:df: 5f:e2:c8:56:69:61:a6:f8:52:b2:0a:21:04:a0:4e:e8:0b:15: 65:1d:d8:17 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUD3gXh8NuLgSakqE03cmgxkQNR0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQxNTA4MzkyOVoX DTI2MDQxNDA4NDQyOVowMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3 ODFBMzczOTc3NUU3MzhBQ0NGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQ9SNiz7Im9phwDsHVLqLclhCCql3FQ6nkHTI6cSgyktAn3cfrxXA0DvBzC 3Mnz0iam+JsfPrW6bXo+x2gHBMMf+d15++BfhQtHe+CeEzTi1BwTwX/rbLyZkhrb ZZd++pOgpBgY9Hkefz3gTel/J7a8l/6fUd4I1jSgoyQkPTQPdhdl2+XfA3EobeaL P3VEVnPTBPPoFMdrCXWITE04tDdacsS4yNza+81Xj1qWj0odXZD40nwb3X/5EmyH PzHfKwNUojIszXLBJi9GSO9M4A9Z7cw84gyQvr3aTqAyNBvjnZZuPqs2aDTZ+XIA LsiTts68QZ07JS0nCQ25Bvxt/rcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOrRc2KeT5VfROx4Gjc5d15zisz9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxYjQzM2E1 LTcyYjEtNDY1My05OWQzLTk0NjljOGI4Yjc2Mi8wL0VBRDE3MzYyOUU0Rjk1NUY0 NEVDNzgxQTM3Mzk3NzVFNzM4QUNDRkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQh0wDQYJKoZIhvcNAQELBQADggEBAF/G29av0XVuU2Aoflh5ipeUia9Alke+ 0IHq5OBBIYOF3AiJVqESNd4f7tSMkvqR9c4t3WPhcznuAM+I56rB1O0wVx+FqZy8 fGc0zXLdo4fgGTBLU9V95IUc3Lerr+rY3smnq8x0Tn4pWf4o/2tHFG8iSqmOVSce NR9qfmaov6zWAU/nhDpqEefztQjCOPiDRaK8zgPlJrQ4ikBY98HlUF/zEU6bmq5Z sdiE5SWIGhrEnkYZdjvidsU1kQJkA81UjHC1Q3LQ0aYi3fp4e7mgfT04OXJabEZw 3yp/tgDMRMEslmOmrQSW0zgz31/iyFZpYab4UrIKIQSgTugLFWUd2Bc= -----END CERTIFICATE-----Generated at Wed Oct 29 07:52:13 2025 by rpki-client