$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (raw, json) Hash identifier: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw= Subject key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 63754FB58F859C9EFFD3C93CB06B40965C29F18B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Manifest: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft caRepository: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 01:21:34 +0000 Certificate not after: Tue 02 Jun 2026 01:26:34 +0000 Subordinate resources: IP: 212.117.48.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:75:4f:b5:8f:85:9c:9e:ff:d3:c9:3c:b0:6b:40:96:5c:29:f1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jun 3 01:21:34 2025 GMT Not After : Jun 2 01:26:34 2026 GMT Subject: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:5b:1d:b7:fa:da:86:d9:aa:1d:2c:2b:48: 7f:75:5b:6b:59:aa:a3:9d:10:34:eb:44:a3:79:f6: c3:15:a9:e0:6f:d7:4e:d1:fb:00:0e:87:9a:26:ea: b9:db:bd:36:a2:d7:fb:5d:3a:50:e1:09:b0:79:6e: d9:f1:bf:d0:cd:82:57:ea:fd:2d:b4:f8:20:be:0f: ed:30:43:8b:e1:35:fd:67:25:99:7f:52:0e:71:96: 22:79:2a:e7:82:6d:36:3a:e4:c1:fd:e4:29:5b:a9: cd:e2:45:f8:36:f4:3b:08:ea:74:a0:8d:77:e3:a2: 49:0a:c1:e0:77:c0:2c:02:92:14:6b:b7:84:4b:31: 30:ce:07:6e:62:67:96:db:e5:00:43:9f:6f:92:69: de:ff:dc:32:ff:55:7d:91:56:37:63:2a:3a:4b:68: 7a:0b:cf:2a:00:90:63:6f:44:e6:be:e3:6a:68:30: 29:6a:32:cd:19:ea:41:10:da:c3:35:14:87:ef:57: 47:9b:01:37:8d:a0:3f:d3:8b:8d:1a:47:aa:aa:90: bf:19:30:69:1b:a2:17:60:91:9f:f3:c4:63:40:69: ff:47:5b:d7:5e:d1:27:72:7c:eb:d3:94:31:42:21: 64:43:44:13:de:4e:74:f3:98:96:06:e6:cd:2c:7e: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.117.48.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:ab:90:1c:68:a2:b8:7c:cc:57:b1:15:c8:e3:d7:4e:e7:2b: 5c:cb:e7:6b:5b:4d:83:63:1b:93:2b:bc:f7:5e:0e:6a:94:0e: 54:7d:b2:01:86:3f:f9:5d:5d:7e:11:ac:44:cb:95:b1:2e:26: 50:46:71:74:ee:0e:b5:08:5e:ee:05:d6:e7:b9:32:d6:62:9d: 3b:d2:61:cc:2b:39:89:0c:94:ad:82:36:d8:65:9a:57:bd:d5: 8d:aa:87:de:34:f5:9f:52:56:07:95:cb:92:31:28:12:7d:e9: e9:6a:67:c3:69:2a:e5:8b:2e:17:eb:16:7b:ee:fc:6e:6e:1d: ab:38:2a:d4:6c:76:26:53:3d:22:44:f4:7b:8b:13:30:ee:d7: 48:c2:36:6b:84:01:19:d4:e0:bb:e0:16:65:3b:81:21:58:3f: 31:24:be:cf:b6:74:be:11:7b:28:c5:d8:84:13:33:e2:c7:be: 46:4f:99:39:bc:92:13:52:e1:37:ab:f7:6e:a5:d4:34:a3:05: af:f4:95:5f:5f:fa:3f:ff:e6:d1:fc:e7:e8:75:02:44:98:f8: 14:b0:b0:ce:8a:00:83:39:9b:23:58:e8:04:be:7a:aa:95:53: 0d:88:90:b6:6e:94:ba:ff:ba:ee:46:6f:b0:86:18:a1:a1:b6: fc:fd:79:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY3VPtY+FnJ7/08k8sGtAllwp8YswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MDYwMzAxMjEzNFoX DTI2MDYwMjAxMjYzNFowMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFC MjY1Q0E2N0MwQkQ2MEQ0Q0Y5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMoWx23+tqG2aodLCtIf3Vba1mqo50QNOtEo3n2wxWp4G/XTtH7AA6Hmibq udu9NqLX+106UOEJsHlu2fG/0M2CV+r9LbT4IL4P7TBDi+E1/WclmX9SDnGWInkq 54JtNjrkwf3kKVupzeJF+Db0OwjqdKCNd+OiSQrB4HfALAKSFGu3hEsxMM4HbmJn ltvlAEOfb5Jp3v/cMv9VfZFWN2MqOktoegvPKgCQY29E5r7jamgwKWoyzRnqQRDa wzUUh+9XR5sBN42gP9OLjRpHqqqQvxkwaRuiF2CRn/PEY0Bp/0db117RJ3J869OU MUIhZENEE95OdPOYlgbmzSx+nUECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFXnnB1gsS5Y0SGyZcpnwL1g1M+SMB8GA1UdIwQYMBaAFBI0 XxFaxLYqUfUnTFTIHoZGO9C6MA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8w LzEyMzQ1RjExNUFDNEI2MkE1MUY1Mjc0QzU0QzgxRTg2NDYzQkQwQkEuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0Vq UmZFVnJFdGlwUjlTZE1WTWdlaGtZNzBMby5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMw LTk1ZGMtNGI3Mi1hZTFiLWFkMWU5OGIwZTE3OS8xLzU1RTc5QzFENjBCMTJFNThE MTIxQjI2NUNBNjdDMEJENjBENENGOTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATUdTAwDQYJKoZIhvcNAQELBQADggEBAEurkBxoorh8zFexFcjj107nK1zL52tb TYNjG5MrvPdeDmqUDlR9sgGGP/ldXX4RrETLlbEuJlBGcXTuDrUIXu4F1ue5MtZi nTvSYcwrOYkMlK2CNthlmle91Y2qh9409Z9SVgeVy5IxKBJ96elqZ8NpKuWLLhfr Fnvu/G5uHas4KtRsdiZTPSJE9HuLEzDu10jCNmuEARnU4LvgFmU7gSFYPzEkvs+2 dL4ReyjF2IQTM+LHvkZPmTm8khNS4Ter926l1DSjBa/0lV9f+j//5tH85+h1AkSY +BSwsM6KAIM5myNY6AS+eqqVUw2IkLZulLr/uu5Gb7CGGKGhtvz9eYU= -----END CERTIFICATE-----Generated at Tue Jun 17 23:34:48 2025 by rpki-client