$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer File: 020EA2304929066809CA6F723574798639D77438.cer (raw, json) Hash identifier: YB0UijazmoibyAmZGaGRsjihdQwm/ERdJUc6g/6uRPc= Subject key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 08F5C4611CCDF68F4116088ADB245884A44C3014 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft caRepository: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Jun 2025 12:50:25 +0000 Certificate not after: Mon 08 Jun 2026 12:55:25 +0000 Subordinate resources: IP: 160.25.54.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f5:c4:61:1c:cd:f6:8f:41:16:08:8a:db:24:58:84:a4:4c:30:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 9 12:50:25 2025 GMT Not After : Jun 8 12:55:25 2026 GMT Subject: CN=020EA2304929066809CA6F723574798639D77438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:d6:73:1c:ef:d0:f5:07:c7:c7:0a:57:f2: 63:49:c9:e9:89:cc:44:8d:ef:ce:4f:3f:40:1a:57: 79:66:b1:f3:1b:a7:c3:53:04:e3:69:6b:9a:76:c7: fb:f7:82:c2:fc:ba:63:c0:2a:74:db:d5:53:39:3d: 0f:7e:b5:58:c3:30:cb:15:da:05:54:bd:5c:c2:51: 1f:58:1e:08:8e:64:a8:26:e7:03:6c:99:db:e9:2f: 49:60:61:14:85:fb:c2:18:f1:86:67:17:d0:c2:6b: 90:a5:5e:17:9d:2a:56:be:bb:0d:6d:13:64:9e:73: 58:ae:4e:eb:cb:e2:6a:1a:cf:db:a3:b6:c3:7d:4d: 5e:ca:68:5e:a5:e8:45:68:24:aa:65:3b:dc:4f:7a: 6d:15:33:ef:8a:aa:ee:f2:71:b5:5a:bc:fe:28:90: 92:0c:2b:74:7a:f4:ea:a7:4d:89:c3:fb:76:52:ea: ba:4e:f5:4c:2d:25:da:5b:29:7b:86:fe:ed:98:83: a4:a8:ae:e3:dc:41:be:b2:36:4a:08:59:61:73:bd: 14:d7:03:84:fc:bb:3c:48:df:d2:6d:04:09:af:3f: 37:52:92:c3:99:61:9d:a8:9e:40:fc:9c:fa:da:59: 82:6c:31:2b:2b:f2:9f:64:40:f0:b1:18:dd:2f:25: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.54.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:64:c4:e6:a1:35:e5:04:2f:22:9f:b1:11:79:12:5b:a7:29: 5c:2e:b1:32:ee:68:9b:42:e5:84:e2:b6:af:07:c3:b6:02:d4: 04:f0:be:5a:dd:9a:f6:46:4d:ac:e9:7c:da:e9:00:b9:f5:2e: 3b:38:8f:4d:4e:81:93:ae:fd:6c:72:6d:3d:a7:66:4f:3f:9b: c4:5a:dd:cb:ed:54:71:0c:47:6b:1b:dc:34:e5:4a:ae:4e:2f: 7a:36:3b:68:ad:6e:45:89:ab:47:42:0c:83:34:5e:9f:bb:a4: 67:1e:e9:72:3a:a7:83:5a:6f:76:fc:55:25:b9:28:14:02:b4: 93:e3:d2:a0:fb:d2:2a:b9:16:a9:41:46:35:62:0e:77:dd:16: 61:ec:0e:f1:ed:e2:9a:b4:f3:55:f2:d4:1a:f7:3d:10:61:d4: 26:fc:7c:11:fd:d2:65:79:ea:11:dc:b0:76:c9:57:9b:88:eb: 05:dd:91:e6:a7:7f:be:5e:93:14:cc:04:d8:11:04:16:d3:95: ed:02:cf:68:a2:c4:64:e7:17:e7:5c:ef:26:55:e5:b3:7e:48: bc:74:47:4f:37:e1:85:ab:7d:1a:78:03:67:d1:e8:4f:36:be: 4e:88:64:c3:1d:93:c6:a4:c5:7f:1e:de:bf:0f:b0:e6:3f:bd: d0:b3:92:43 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCPXEYRzN9o9BFgiK2yRYhKRMMBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYwOTEyNTAyNVoX DTI2MDYwODEyNTUyNVowMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2 RjcyMzU3NDc5ODYzOUQ3NzQzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALb11nMc79D1B8fHClfyY0nJ6YnMRI3vzk8/QBpXeWax8xunw1ME42lrmnbH +/eCwvy6Y8AqdNvVUzk9D361WMMwyxXaBVS9XMJRH1geCI5kqCbnA2yZ2+kvSWBh FIX7whjxhmcX0MJrkKVeF50qVr67DW0TZJ5zWK5O68viahrP26O2w31NXspoXqXo RWgkqmU73E96bRUz74qq7vJxtVq8/iiQkgwrdHr06qdNicP7dlLquk71TC0l2lsp e4b+7ZiDpKiu49xBvrI2SghZYXO9FNcDhPy7PEjf0m0ECa8/N1KSw5lhnaieQPyc +tpZgmwxKyvyn2RA8LEY3S8lDRECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAIOojBJKQZoCcpvcjV0eYY513Q4MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTI2YTEw LTU4ZTgtNDNjNy05NDdlLTcyMjE3M2Q2NjYxNC8wLzAyMEVBMjMwNDkyOTA2Njgw OUNBNkY3MjM1NzQ3OTg2MzlENzc0MzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGTYwDQYJKoZIhvcNAQELBQADggEBAHpkxOahNeUELyKfsRF5ElunKVwusTLu aJtC5YTitq8Hw7YC1ATwvlrdmvZGTazpfNrpALn1Ljs4j01OgZOu/WxybT2nZk8/ m8Ra3cvtVHEMR2sb3DTlSq5OL3o2O2itbkWJq0dCDIM0Xp+7pGce6XI6p4Nab3b8 VSW5KBQCtJPj0qD70iq5FqlBRjViDnfdFmHsDvHt4pq081Xy1Br3PRBh1Cb8fBH9 0mV56hHcsHbJV5uI6wXdkeanf75ekxTMBNgRBBbTle0Cz2iixGTnF+dc7yZV5bN+ SLx0R0834YWrfRp4A2fR6E82vk6IZMMdk8akxX8e3r8PsOY/vdCzkkM= -----END CERTIFICATE-----Generated at Mon Jun 16 16:26:17 2025 by rpki-client