$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.cer (raw, json) Hash identifier: ZkNzmC5uD1vswrjz4mrornH8e+RFYEQYYKqJdLGFX+s= Subject key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 593B78F4D971EEF2F6B2A074A40982503FAE3D30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft caRepository: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 30 Sep 2025 06:25:47 +0000 Certificate not after: Tue 29 Sep 2026 06:30:47 +0000 Subordinate resources: IP: 2001:df4:84c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:78:f4:d9:71:ee:f2:f6:b2:a0:74:a4:09:82:50:3f:ae:3d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 30 06:25:47 2025 GMT Not After : Sep 29 06:30:47 2026 GMT Subject: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:ad:74:32:e8:12:43:06:19:ee:38:e5:a4: e4:b2:75:89:e3:6c:73:3a:54:b3:20:3f:65:c5:13: 24:e4:c2:d2:72:ac:e5:db:4e:36:55:cb:24:97:40: 7e:ff:a4:3c:c0:73:96:c6:87:d3:6e:e9:70:4e:b7: 41:80:81:e0:46:57:57:23:88:05:5d:6c:30:9e:54: 74:e4:44:ae:70:8d:66:0d:44:93:51:0a:f6:52:61: 65:f1:9f:68:02:cb:1b:57:87:dd:f1:1e:6d:7d:c9: fd:a1:39:67:ab:c8:5f:c0:d7:e0:1f:e1:af:fe:f9: c0:92:88:96:4f:f1:f0:24:18:3a:a1:75:79:55:88: 4b:44:2e:94:e0:12:a4:c6:2a:8b:59:d1:83:28:cc: 66:1a:5c:31:38:c8:96:bf:59:c8:00:38:7b:8a:f8: 23:c5:88:79:66:32:61:5e:d4:87:92:57:de:68:82: 43:71:49:68:cd:be:67:37:93:a9:36:a2:13:c9:cf: 36:80:23:f6:79:90:9d:f6:89:26:f5:4e:82:d0:6d: 58:fa:35:c5:01:ff:33:3a:17:d5:b3:c7:39:b4:82: 70:e8:1d:05:21:7b:d4:28:f8:85:52:9b:6e:b1:97: c1:e0:d9:27:de:99:ea:3e:a5:17:aa:c7:f8:e0:01: 2f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:84c0::/48 Signature Algorithm: sha256WithRSAEncryption 48:e8:1c:e3:60:c9:d9:09:f2:06:d5:5f:4f:87:2a:aa:10:cc: 58:42:51:ba:f7:7c:2d:44:e5:f4:9b:4f:76:ee:7b:ee:9a:dd: 7e:b5:af:92:ef:41:c4:52:7e:3d:77:aa:9f:9c:cc:8b:3b:92: 5a:14:ce:c4:7f:2c:87:f1:a6:f9:ad:dc:6c:4b:50:fc:03:ad: d6:b9:6d:6f:89:e5:bb:7c:8f:59:e2:7a:d3:5c:3e:f1:f2:84: cb:2a:16:0d:dc:71:07:95:9b:31:c0:aa:ef:ab:5d:a9:c6:5a: ef:42:c9:3e:9e:e0:45:60:b7:71:0e:e2:c5:67:70:ff:2a:84: 2b:f3:22:8b:25:e2:0c:78:fd:05:0d:28:8d:6a:0a:50:91:c5: 93:02:26:79:4c:10:1a:30:a8:63:83:a5:9e:f3:11:9e:11:b8: 6c:4b:df:88:bc:51:53:01:87:bc:fc:e5:b7:f8:e8:1a:4c:37: 99:c9:b2:01:81:29:01:f9:b6:82:a7:1f:e8:0e:fc:ea:7b:de: d4:23:26:68:5d:3b:5c:46:90:0d:05:1f:8c:dc:e4:df:e1:2a: e6:3f:00:29:36:62:67:f6:d6:0a:48:24:30:2e:ea:f2:d8:c0: 7b:ac:7d:f9:d6:64:6c:9e:bd:a6:dc:27:a0:d0:6a:53:8c:c3: e9:3a:e6:89 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUWTt49Nlx7vL2sqB0pAmCUD+uPTAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkzMDA2MjU0N1oX DTI2MDkyOTA2MzA0N1owMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RB NEE3MzZDMDhBOEMxN0MwMDA0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMX1rXQy6BJDBhnuOOWk5LJ1ieNsczpUsyA/ZcUTJOTC0nKs5dtONlXLJJdA fv+kPMBzlsaH027pcE63QYCB4EZXVyOIBV1sMJ5UdORErnCNZg1Ek1EK9lJhZfGf aALLG1eH3fEebX3J/aE5Z6vIX8DX4B/hr/75wJKIlk/x8CQYOqF1eVWIS0QulOAS pMYqi1nRgyjMZhpcMTjIlr9ZyAA4e4r4I8WIeWYyYV7Uh5JX3miCQ3FJaM2+ZzeT qTaiE8nPNoAj9nmQnfaJJvVOgtBtWPo1xQH/MzoX1bPHObSCcOgdBSF71Cj4hVKb brGXweDZJ96Z6j6lF6rH+OABL3MCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCg0HP2ysj8Ukj2kpzbAiowXwABGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5Mzg5NWUy LTQwMjAtNGMzZi05ODdmLWRhY2RmOGU4ZWEyOS8wLzI4MzQxQ0ZEQjJCMjNGMTQ5 MjNEQTRBNzM2QzA4QThDMTdDMDAwNDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30hMAwDQYJKoZIhvcNAQELBQADggEBAEjoHONgydkJ8gbVX0+HKqoQzFhC Ubr3fC1E5fSbT3bue+6a3X61r5LvQcRSfj13qp+czIs7kloUzsR/LIfxpvmt3GxL UPwDrda5bW+J5bt8j1nietNcPvHyhMsqFg3ccQeVmzHAqu+rXanGWu9CyT6e4EVg t3EO4sVncP8qhCvzIosl4gx4/QUNKI1qClCRxZMCJnlMEBowqGODpZ7zEZ4RuGxL 34i8UVMBh7z85bf46BpMN5nJsgGBKQH5toKnH+gO/Op73tQjJmhdO1xGkA0FH4zc 5N/hKuY/ACk2Ymf21gpIJDAu6vLYwHusffnWZGyevabcJ6DQalOMw+k65ok= -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:13 2025 by rpki-client