$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer (raw, json) Hash identifier: j7ir+ShI8C5SdaIJIEenjkDIe+Cnynu+SApPrV5SMxw= Subject key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 181EEAB50980B13C1C016C08ECA4B5B69BB97E19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft caRepository: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 May 2025 18:40:13 +0000 Certificate not after: Thu 30 Apr 2026 18:45:13 +0000 Subordinate resources: IP: 157.66.9.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1e:ea:b5:09:80:b1:3c:1c:01:6c:08:ec:a4:b5:b6:9b:b9:7e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 1 18:40:13 2025 GMT Not After : Apr 30 18:45:13 2026 GMT Subject: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:db:12:f7:39:3b:f1:d8:36:1b:c5:ed:7a: 04:dd:9c:83:e2:37:01:82:26:a8:b8:22:4a:01:db: 39:d0:74:9f:f4:9e:5c:76:ac:2e:38:05:57:91:ef: b2:45:f4:19:92:fa:c0:cd:55:50:3c:17:fe:f1:ec: fc:51:9a:9f:18:4c:29:46:46:e1:7e:91:af:a1:31: 18:29:c4:8a:9f:65:95:d7:12:14:56:e6:e3:a1:dc: 01:a3:7e:9d:a0:9b:9c:ab:73:52:94:da:11:80:c1: f0:36:c6:c2:85:80:83:e8:e8:56:c2:15:25:dd:f1: 4e:70:63:80:33:96:00:14:3d:96:85:f0:8f:a4:14: b2:e9:a2:e1:00:95:db:89:6c:49:b6:ec:a7:e3:06: aa:53:16:82:24:2a:c3:68:98:ae:43:a3:e1:25:4c: 01:81:07:2b:e8:88:84:6d:6d:f7:cf:da:23:34:26: 99:44:cd:73:91:31:05:d0:82:48:47:e5:34:f0:81: eb:a9:25:ab:71:8d:e5:28:f6:06:d2:53:b3:50:c5: e6:a1:45:81:c9:3d:24:78:e9:16:f9:01:20:c0:0a: bc:aa:b9:a3:30:75:e9:ef:c3:23:38:1c:ae:24:5b: 44:37:3c:27:d0:28:1a:22:dc:39:90:cc:ad:01:94: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.9.0/24 Signature Algorithm: sha256WithRSAEncryption 26:a0:cb:92:f7:2e:d3:fb:c0:e7:08:30:b2:7d:85:c2:75:e4: 9f:96:cf:b2:ac:22:09:2f:e4:6e:97:19:f8:12:14:26:93:5c: ac:22:07:42:1b:2a:65:0e:5c:44:23:3d:5b:13:30:1b:a8:e7: ec:d6:97:1f:6f:95:9f:4a:8a:0f:ff:e2:73:c7:16:26:28:1e: 22:c1:3e:b8:08:42:bd:2a:29:f8:93:17:be:1d:fc:8b:62:e6: fc:0a:4b:23:57:52:74:f0:3d:52:cd:7a:12:f7:16:e0:ac:fd: 7d:ed:11:b1:d5:c3:9e:73:9f:f9:cb:68:0c:37:f3:a5:39:2e: f2:69:c5:52:29:2b:c1:cd:e4:e4:ce:04:aa:b3:2c:a6:f5:68: 53:86:98:bc:3b:2a:9c:bb:b7:6e:d4:e0:9a:e2:4d:85:f4:c3: a1:69:6f:ff:47:f6:59:16:7e:19:b3:53:38:27:82:dd:a7:eb: b0:96:f1:49:88:86:4c:7c:0e:c1:88:eb:2d:ff:21:b1:36:ef: 5e:d4:fd:e3:e5:c1:27:68:38:ec:e3:b0:98:70:df:28:8a:63: cc:05:20:d8:0c:37:36:1a:e7:65:d3:90:ad:a9:f3:8f:9f:95: 88:b1:22:0f:98:98:3a:af:bb:96:00:0a:81:08:2e:f4:36:e5: 7d:a6:63:f4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGB7qtQmAsTwcAWwI7KS1tpu5fhkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUwMTE4NDAxM1oX DTI2MDQzMDE4NDUxM1owMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZG N0VCMEQzNDM3QTBCN0VDRTdCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/u2xL3OTvx2DYbxe16BN2cg+I3AYImqLgiSgHbOdB0n/SeXHasLjgFV5Hv skX0GZL6wM1VUDwX/vHs/FGanxhMKUZG4X6Rr6ExGCnEip9lldcSFFbm46HcAaN+ naCbnKtzUpTaEYDB8DbGwoWAg+joVsIVJd3xTnBjgDOWABQ9loXwj6QUsumi4QCV 24lsSbbsp+MGqlMWgiQqw2iYrkOj4SVMAYEHK+iIhG1t98/aIzQmmUTNc5ExBdCC SEflNPCB66klq3GN5Sj2BtJTs1DF5qFFgck9JHjpFvkBIMAKvKq5ozB16e/DIzgc riRbRDc8J9AoGiLcOZDMrQGUpPUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPmTDjCNMLPhXP/36w00N6C37Oe9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlYmY1NWNh LWQ3ODMtNGEzYi05NWNjLTczY2MzNDZkYjQ2ZS8wL0Y5OTMwRTMwOEQzMEIzRTE1 Q0ZGRjdFQjBEMzQzN0EwQjdFQ0U3QkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQgkwDQYJKoZIhvcNAQELBQADggEBACagy5L3LtP7wOcIMLJ9hcJ15J+Wz7Ks Igkv5G6XGfgSFCaTXKwiB0IbKmUOXEQjPVsTMBuo5+zWlx9vlZ9Kig//4nPHFiYo HiLBPrgIQr0qKfiTF74d/Iti5vwKSyNXUnTwPVLNehL3FuCs/X3tEbHVw55zn/nL aAw386U5LvJpxVIpK8HN5OTOBKqzLKb1aFOGmLw7Kpy7t27U4JriTYX0w6Fpb/9H 9lkWfhmzUzgngt2n67CW8UmIhkx8DsGI6y3/IbE2717U/ePlwSdoOOzjsJhw3yiK Y8wFINgMNzYa52XTkK2p84+flYixIg+YmDqvu5YACoEILvQ25X2mY/Q= -----END CERTIFICATE-----Generated at Wed Jun 4 11:36:50 2025 by rpki-client