$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer File: 1F969EE9B0838D22156118A888B81BF27B859BD5.cer (raw, json) Hash identifier: P9TQ+D3BB2Kdrlov9LfJGGd2XPojJZN1eFIr2zmeP5E= Subject key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EF554B46A9CB58C7F93ABF6E774FD9E6DBA6EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft caRepository: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 14 Feb 2025 01:15:43 +0000 Certificate not after: Fri 13 Feb 2026 01:20:43 +0000 Subordinate resources: IP: 202.57.16.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f5:54:b4:6a:9c:b5:8c:7f:93:ab:f6:e7:74:fd:9e:6d:ba:6e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 14 01:15:43 2025 GMT Not After : Feb 13 01:20:43 2026 GMT Subject: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:ea:b8:3a:4d:a0:b1:73:7a:53:3e:85:14: 63:d7:bf:6f:75:da:1a:0e:9c:04:55:6e:1f:4d:40: 20:09:22:5a:e1:33:7a:23:30:69:1d:1e:27:46:54: 3d:b1:da:fe:c6:62:46:ff:dd:86:c7:ba:7c:57:15: 7e:9e:02:f4:49:2b:a2:a6:65:c0:f7:58:8a:e5:43: a9:9b:a5:6b:4e:70:d9:2a:d5:57:dc:f7:dc:9f:0d: d4:f9:9e:b0:75:0a:b9:7f:0a:1d:8c:74:f4:8e:ae: 3e:09:da:23:0b:7c:d2:0e:58:a5:c3:23:52:96:75: 0e:2b:97:ba:b0:4e:76:e4:af:75:30:6f:3e:00:52: cc:8a:d8:16:2f:17:01:b5:ff:fd:e3:ef:42:3c:14: 90:35:39:8f:b9:14:be:fe:ce:0a:18:11:58:b3:6d: b1:b5:d2:82:b6:db:ff:b2:69:99:cf:0d:9f:1a:b8: e5:64:cd:42:7e:9e:f9:97:19:e4:53:b7:03:c0:d0: 75:2f:f7:f0:4e:b7:2b:95:10:4d:ec:62:a5:53:4f: 1d:fc:40:cc:32:06:93:bd:56:e1:53:a6:95:94:04: 2e:4d:1d:d1:87:c7:6d:d9:12:38:9b:5c:b8:fd:e8: f5:da:d8:99:cd:8a:ce:84:66:ed:35:db:2e:f0:37: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.16.0/20 Signature Algorithm: sha256WithRSAEncryption 88:17:f4:d3:82:96:a4:ca:0e:5c:fa:76:84:67:d5:38:b3:3e: 86:6a:ac:5d:06:55:bb:48:db:bb:7f:df:39:59:c7:46:f8:2c: fa:ba:75:01:2b:0f:5f:c4:2f:72:05:10:0c:88:e5:70:da:0d: 93:18:c2:d5:7e:b9:b1:8c:bf:6f:dc:90:71:70:25:6b:cc:0e: 71:d4:57:0b:07:8d:05:53:f6:52:e6:6f:b0:d5:6b:f6:13:a7: b7:15:dd:0e:76:63:d6:e2:b8:6a:c6:ff:c8:eb:3d:18:f7:28: f3:26:77:89:12:20:96:9f:1d:e3:7e:6e:b5:49:93:eb:11:f4: e9:95:eb:e1:53:a1:74:d5:35:fa:8c:6c:e8:76:ee:04:9c:63: 89:df:b1:45:9e:62:cf:c3:2b:f0:4c:e5:40:5d:b2:9d:5e:69: 4d:f7:16:a7:48:17:37:c5:31:67:d1:37:c4:d6:b7:ba:4a:06: 8b:93:5d:58:6f:dd:ae:2a:33:56:a9:34:d0:73:f3:9b:c5:90: a3:1b:b1:32:ad:66:96:45:1b:14:ac:30:60:1e:52:2c:ac:2a: 1f:4a:bf:af:9c:b2:1b:d5:cb:a8:b4:85:06:65:c5:9a:d7:b9: d7:9a:d3:5d:6d:32:60:2d:92:f0:0d:bc:8d:d3:04:9e:46:bf: de:55:73:c2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHvVUtGqctYx/k6v253T9nm26brkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxNDAxMTU0M1oX DTI2MDIxMzAxMjA0M1owMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjEx OEE4ODhCODFCRjI3Qjg1OUJENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMda6rg6TaCxc3pTPoUUY9e/b3XaGg6cBFVuH01AIAkiWuEzeiMwaR0eJ0ZU PbHa/sZiRv/dhse6fFcVfp4C9EkroqZlwPdYiuVDqZula05w2SrVV9z33J8N1Pme sHUKuX8KHYx09I6uPgnaIwt80g5YpcMjUpZ1DiuXurBOduSvdTBvPgBSzIrYFi8X AbX//ePvQjwUkDU5j7kUvv7OChgRWLNtsbXSgrbb/7Jpmc8Nnxq45WTNQn6e+ZcZ 5FO3A8DQdS/38E63K5UQTexipVNPHfxAzDIGk71W4VOmlZQELk0d0YfHbdkSOJtc uP3o9drYmc2KzoRm7TXbLvA3yokCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB+Wnumwg40iFWEYqIi4G/J7hZvVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkM2YwOTVi LTcxMzAtNDEyMi1hZjI1LTdkMmU3YTExYjFiMS8wLzFGOTY5RUU5QjA4MzhEMjIx NTYxMThBODg4QjgxQkYyN0I4NTlCRDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKORAwDQYJKoZIhvcNAQELBQADggEBAIgX9NOClqTKDlz6doRn1TizPoZqrF0G VbtI27t/3zlZx0b4LPq6dQErD1/EL3IFEAyI5XDaDZMYwtV+ubGMv2/ckHFwJWvM DnHUVwsHjQVT9lLmb7DVa/YTp7cV3Q52Y9biuGrG/8jrPRj3KPMmd4kSIJafHeN+ brVJk+sR9OmV6+FToXTVNfqMbOh27gScY4nfsUWeYs/DK/BM5UBdsp1eaU33FqdI FzfFMWfRN8TWt7pKBouTXVhv3a4qM1apNNBz85vFkKMbsTKtZpZFGxSsMGAeUiys Kh9Kv6+cshvVy6i0hQZlxZrXudea011tMmAtkvANvI3TBJ5Gv95Vc8I= -----END CERTIFICATE-----Generated at Sat Nov 1 13:29:57 2025 by rpki-client