$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer File: F69535097C181B143312D8EA1A6A52D500443902.cer (raw, json) Hash identifier: MMW7wbkzqYMCqOdvBWDTszeExY3knfKT/Pi1wIej3TM= Subject key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3F68E4FFF9F1A26F0874FAA863716550ADD9139A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft caRepository: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Jul 2025 04:01:21 +0000 Certificate not after: Tue 14 Jul 2026 04:06:21 +0000 Subordinate resources: IP: 160.25.248.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:68:e4:ff:f9:f1:a2:6f:08:74:fa:a8:63:71:65:50:ad:d9:13:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 15 04:01:21 2025 GMT Not After : Jul 14 04:06:21 2026 GMT Subject: CN=F69535097C181B143312D8EA1A6A52D500443902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:21:1f:aa:e7:07:e5:86:0b:66:12:bf:6c: 8b:85:51:1a:49:ea:4e:45:63:49:43:3b:ed:58:1e: 36:22:95:e6:7c:d2:40:ca:10:3f:1c:cd:19:0a:8e: 75:54:cc:77:29:67:0f:3a:1a:58:f8:e3:cd:bb:48: 31:49:2d:37:c0:01:8d:6c:ee:c2:00:67:3d:44:05: be:8e:62:ba:d8:7b:4f:ab:71:fd:fb:3c:65:3e:fd: b2:f3:94:3b:0b:43:aa:12:37:6c:39:9c:35:35:3e: 4c:51:07:db:a0:55:df:75:79:ec:ad:50:01:4b:a1: 22:f5:e1:d6:c5:bf:e7:c9:20:97:fb:3f:97:b6:74: b0:ae:b6:56:cf:39:b7:cd:da:9a:19:a4:1c:f1:e2: 43:14:17:1a:e5:55:f5:85:75:80:83:be:24:8d:aa: 23:47:52:6c:75:c1:4f:11:be:4b:7b:29:24:3f:98: 2e:cb:39:0d:be:d3:16:5a:9f:11:a8:00:14:63:c5: 9d:46:a7:fb:74:61:2b:89:74:54:bf:8d:24:55:2c: 2a:74:f1:5b:a2:1e:7a:c1:13:22:20:14:e7:fc:d9: c0:b3:8a:0c:ea:89:c3:77:7f:0d:82:5a:2f:bb:db: ae:fd:e3:eb:e4:a4:80:1a:97:b8:86:5e:be:23:41: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.248.0/24 Signature Algorithm: sha256WithRSAEncryption 73:7a:1c:f8:34:7c:8a:3e:80:0e:42:23:31:77:12:50:2d:f3: 8a:44:17:73:9b:a5:bf:af:c9:df:87:25:b5:da:bf:be:0d:f4: 11:b5:df:07:d0:a5:14:70:e3:94:49:11:f4:c1:df:51:93:38: 0d:47:2a:aa:b0:18:75:b0:a1:7e:f5:9a:69:f9:79:9a:9b:b7: 70:8b:1f:34:84:9f:b1:f5:0e:66:a2:35:49:23:e5:2c:6e:bf: f2:7a:14:ee:74:43:85:d5:3e:56:99:68:42:32:36:85:c2:7b: a0:6a:49:ab:e6:69:35:1a:9f:5e:71:da:f0:46:e5:39:b8:ed: 15:f3:2f:49:2e:e8:01:89:e2:f3:cf:0e:d0:2e:0c:97:92:38: 9d:57:3a:e3:f6:6d:eb:42:45:58:3b:a1:c4:a2:63:8f:d6:4e: 7f:54:5a:61:8c:cf:53:f3:b4:e1:c9:95:9b:79:ca:d8:88:00: ea:b2:ed:df:8f:4a:0f:f5:20:87:b4:c5:06:c1:4d:69:8c:e7: 74:12:02:e0:fb:5b:67:2d:22:71:44:05:a6:b5:88:86:b6:37: 6b:8e:61:1f:de:a5:a6:85:76:2e:fd:d2:45:65:c0:d7:eb:2a: 92:ff:88:4c:03:22:c3:cb:cf:82:dc:6d:e3:28:7a:3d:33:e9: df:fe:1f:77 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUP2jk//nxom8IdPqoY3FlUK3ZE5owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcxNTA0MDEyMVoX DTI2MDcxNDA0MDYyMVowMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJE OEVBMUE2QTUyRDUwMDQ0MzkwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd0IR+q5wflhgtmEr9si4VRGknqTkVjSUM77VgeNiKV5nzSQMoQPxzNGQqO dVTMdylnDzoaWPjjzbtIMUktN8ABjWzuwgBnPUQFvo5iuth7T6tx/fs8ZT79svOU OwtDqhI3bDmcNTU+TFEH26BV33V57K1QAUuhIvXh1sW/58kgl/s/l7Z0sK62Vs85 t83amhmkHPHiQxQXGuVV9YV1gIO+JI2qI0dSbHXBTxG+S3spJD+YLss5Db7TFlqf EagAFGPFnUan+3RhK4l0VL+NJFUsKnTxW6IeesETIiAU5/zZwLOKDOqJw3d/DYJa L7vbrv3j6+SkgBqXuIZeviNBBIsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPaVNQl8GBsUMxLY6hpqUtUARDkCMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNGM1NzBh LTQ0NzQtNGNiZi1iOGY5LWZmOTc5MTc4MTU0OS8wL0Y2OTUzNTA5N0MxODFCMTQz MzEyRDhFQTFBNkE1MkQ1MDA0NDM5MDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGfgwDQYJKoZIhvcNAQELBQADggEBAHN6HPg0fIo+gA5CIzF3ElAt84pEF3Ob pb+vyd+HJbXav74N9BG13wfQpRRw45RJEfTB31GTOA1HKqqwGHWwoX71mmn5eZqb t3CLHzSEn7H1DmaiNUkj5Sxuv/J6FO50Q4XVPlaZaEIyNoXCe6BqSavmaTUan15x 2vBG5Tm47RXzL0ku6AGJ4vPPDtAuDJeSOJ1XOuP2betCRVg7ocSiY4/WTn9UWmGM z1PztOHJlZt5ytiIAOqy7d+PSg/1IIe0xQbBTWmM53QSAuD7W2ctInFEBaa1iIa2 N2uOYR/epaaFdi790kVlwNfrKpL/iEwDIsPLz4LcbeMoej0z6d/+H3c= -----END CERTIFICATE-----Generated at Mon Jul 21 03:17:19 2025 by rpki-client