$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer (raw, json) Hash identifier: j/dNmA3IGC6sJEG5jB5RTnnJWgsVshhQ3EERVR3rOpo= Subject key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B4D285F39E3433C3843376E2B26170B5FBCB086 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Sep 2025 12:14:56 +0000 Certificate not after: Thu 03 Sep 2026 12:19:56 +0000 Subordinate resources: IP: 2406:b140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4d:28:5f:39:e3:43:3c:38:43:37:6e:2b:26:17:0b:5f:bc:b0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 4 12:14:56 2025 GMT Not After : Sep 3 12:19:56 2026 GMT Subject: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:8d:d9:a9:b5:3e:4b:a7:45:5d:d1:e9:64: 9a:1e:d0:a8:36:a9:2f:e9:2b:e2:00:0d:bc:40:21: a7:f3:cb:c3:64:95:42:c9:ad:51:00:ba:a7:2a:47: 5e:93:19:fb:a6:dc:ab:cb:34:83:0c:ff:3c:b7:c9: b4:63:ab:3d:d0:f2:3c:55:a5:e9:27:09:e5:a2:ca: 33:0b:46:f3:1c:20:b6:6f:15:bf:98:18:38:3e:34: b1:af:8e:cb:69:a9:d4:84:c2:4d:16:4a:21:2f:ac: b9:34:94:d5:c4:5e:58:be:c5:0a:22:0d:19:0b:23: cc:1e:ef:05:e8:7a:e3:8e:a4:af:32:72:d2:67:ad: 23:c7:61:8f:9d:7b:96:ff:c6:f6:98:1f:16:2c:1a: 22:99:90:16:68:69:d7:6b:6a:bb:d8:4f:87:b8:2c: 71:1d:45:52:58:cd:8c:c1:a6:d4:fe:d6:4e:d7:f3: 9b:4d:12:ac:95:a5:95:c1:f5:32:cb:db:49:50:41: df:4d:c2:a5:f0:bc:4d:51:33:69:98:8f:9c:cc:8c: 05:48:14:18:d5:be:af:8c:c1:10:06:22:ae:c1:45: 4d:cb:b5:65:78:1b:cb:87:4b:f3:f2:60:57:66:58: 39:8b:02:3b:95:fc:be:f5:31:5e:51:70:d1:e4:cc: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:b140::/32 Signature Algorithm: sha256WithRSAEncryption 5d:53:6b:f3:e0:18:bf:21:65:a2:40:4d:04:bc:71:18:97:51: 69:03:46:02:80:7c:55:f8:aa:3e:49:41:40:6b:ba:56:0c:2e: 9d:a8:4c:ed:5b:80:70:2a:b7:9d:f9:ba:91:86:31:84:44:5b: a7:3f:34:6a:ba:67:26:e5:67:cf:3e:b0:7b:ad:54:e0:93:50: 36:48:f2:d6:e8:18:66:66:95:07:b8:e8:35:58:32:cc:52:38: e1:de:96:fe:c7:5f:8f:2b:a0:20:a4:76:41:f8:bb:41:69:34: 3e:f0:d5:27:be:37:28:35:ff:d0:f1:a8:66:ed:a1:d0:9c:a5: 96:5f:26:2c:c2:54:9d:4c:bc:4e:0d:cc:36:33:66:23:e7:7c: ab:90:52:4f:74:19:e5:70:84:88:79:33:ed:04:94:6f:c5:f3: 2e:0b:51:30:0f:a7:84:fa:ed:2a:11:cc:bf:c8:1c:6a:43:d1: f7:08:4c:3b:e1:a8:e5:ab:52:df:35:d7:75:5a:87:2e:ad:c2: e4:ec:9c:65:6d:69:6b:4f:7f:f4:98:63:7f:b6:81:c3:e7:d9: e7:d6:97:e1:c8:e7:09:bd:3d:f7:55:88:26:99:1f:18:72:94: d8:6d:fb:71:63:1b:7f:cd:f5:36:7b:1a:0b:6d:b2:13:85:61: 77:65:c5:88 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUO00oXznjQzw4QzduKyYXC1+8sIYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwNDEyMTQ1NloX DTI2MDkwMzEyMTk1NlowMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZB REE0QzcwQTQzQ0FBODIzNzQ2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsfjdmptT5Lp0Vd0elkmh7QqDapL+kr4gANvEAhp/PLw2SVQsmtUQC6pypH XpMZ+6bcq8s0gwz/PLfJtGOrPdDyPFWl6ScJ5aLKMwtG8xwgtm8Vv5gYOD40sa+O y2mp1ITCTRZKIS+suTSU1cReWL7FCiINGQsjzB7vBeh6446krzJy0metI8dhj517 lv/G9pgfFiwaIpmQFmhp12tqu9hPh7gscR1FUljNjMGm1P7WTtfzm00SrJWllcH1 MsvbSVBB303CpfC8TVEzaZiPnMyMBUgUGNW+r4zBEAYirsFFTcu1ZXgby4dL8/Jg V2ZYOYsCO5X8vvUxXlFw0eTMr48CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHidt4n+GfHwuSatpMcKQ8qoI3RpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNzRkNzZi LTViMTYtNGFiNS1hYmNmLWU0YTg2MDdhMjhiMi8wLzc4OURCNzg5RkUxOUYxRjBC OTI2QURBNEM3MEE0M0NBQTgyMzc0NjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBrFAMA0GCSqGSIb3DQEBCwUAA4IBAQBdU2vz4Bi/IWWiQE0EvHEYl1FpA0YC gHxV+Ko+SUFAa7pWDC6dqEztW4BwKred+bqRhjGERFunPzRqumcm5WfPPrB7rVTg k1A2SPLW6BhmZpUHuOg1WDLMUjjh3pb+x1+PK6AgpHZB+LtBaTQ+8NUnvjcoNf/Q 8ahm7aHQnKWWXyYswlSdTLxODcw2M2Yj53yrkFJPdBnlcISIeTPtBJRvxfMuC1Ew D6eE+u0qEcy/yBxqQ9H3CEw74ajlq1LfNdd1WocurcLk7JxlbWlrT3/0mGN/toHD 59nn1pfhyOcJvT33VYgmmR8YcpTYbftxYxt/zfU2exoLbbIThWF3ZcWI -----END CERTIFICATE-----Generated at Fri Sep 5 08:16:03 2025 by rpki-client