$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.cer (raw, json) Hash identifier: 7ucn8lFGLOESPlBGCG73g7FIOMpEXH388sN2ZhWHZcM= Subject key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0988BB17EF978BC179432553836AC9340C2CC8B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft caRepository: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 May 2025 07:42:05 +0000 Certificate not after: Thu 30 Apr 2026 07:47:05 +0000 Subordinate resources: IP: 160.19.146.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:88:bb:17:ef:97:8b:c1:79:43:25:53:83:6a:c9:34:0c:2c:c8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 1 07:42:05 2025 GMT Not After : Apr 30 07:47:05 2026 GMT Subject: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:3a:85:02:42:85:1f:84:51:41:a8:bc:2f: 59:7e:5d:31:8e:b6:a7:bb:94:70:1f:d0:57:b0:a6: 2e:5b:37:9f:3a:fb:22:20:e0:8f:c9:a3:a5:68:11: 77:5c:fa:28:a2:70:30:cb:f7:b2:ff:33:15:a9:74: 3e:94:fc:da:cc:be:e8:1d:3e:ec:d8:89:29:f1:5e: 2d:dd:c9:f1:c3:1b:bc:25:dc:33:32:f2:69:3a:0e: 02:78:cb:85:18:f6:4a:b2:91:66:dc:69:49:90:59: 20:01:a1:5c:05:02:0d:0a:b6:a9:91:e8:5a:6a:bc: 26:a8:47:7a:29:73:81:9e:6b:37:f7:e3:6c:4c:73: af:82:b8:c8:1a:c1:90:47:f9:b1:37:3b:ac:7e:49: 10:79:24:c7:08:e0:52:11:07:33:43:31:9b:57:28: 63:e6:34:a1:fa:89:d5:24:f9:65:be:27:b7:29:8d: f0:60:d5:23:2c:a9:55:41:13:b4:29:c5:ab:6a:88: b1:42:24:01:1a:6a:73:d8:d6:6c:83:93:ff:26:0f: d4:f5:66:5c:22:94:b7:96:61:76:bc:af:a7:13:e5: 60:a5:f0:7d:39:c5:76:2f:41:3a:a1:e3:42:ae:ef: cd:96:e8:cb:e2:56:d0:85:09:05:27:b5:e4:32:e6: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.146.0/23 Signature Algorithm: sha256WithRSAEncryption 39:be:fa:5a:ff:d0:d6:03:eb:34:f7:99:7a:61:08:2a:36:1c: df:10:0e:6e:45:ce:aa:94:d4:28:b1:ff:a8:45:f3:8e:1d:bd: ac:d9:71:c9:c2:21:fb:66:08:da:3a:63:99:56:b2:01:75:2d: 26:1e:d5:83:74:f8:1a:7f:2c:c6:a2:97:7d:2e:d9:02:a3:dc: 4d:58:7f:be:76:ef:3f:44:ae:ff:05:f6:a6:4b:6a:91:00:00: 11:d8:7d:04:ce:87:1f:88:17:9b:dc:16:80:32:36:67:5f:9e: 57:90:53:23:27:7e:f5:97:cd:20:0b:ca:e2:95:76:dd:8d:35: 4c:9c:74:6f:3c:a3:36:50:43:61:fa:10:95:80:ae:0c:f6:40: 11:9a:09:4f:2c:b6:df:fe:5c:c8:9b:52:e6:4b:87:3d:df:60: 60:b9:71:92:76:5a:11:ee:9b:b0:0b:a5:b5:68:88:9e:82:62: 90:87:6c:da:d4:87:e8:10:39:7e:15:f8:97:97:35:4f:7e:88: cf:56:8e:65:bc:69:72:f0:aa:41:18:b7:80:9c:ff:1f:d1:88: 8d:ba:95:39:88:fa:80:1c:c8:25:f7:e1:f1:e4:da:13:de:12: c3:f7:74:84:d9:ba:9b:d9:17:2e:b5:67:bb:24:97:68:53:74: ca:0d:37:04 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCYi7F++Xi8F5QyVTg2rJNAwsyLgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUwMTA3NDIwNVoX DTI2MDQzMDA3NDcwNVowMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRG N0I4RjQ4MjA3OTkyNDEwNzc1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBAOoUCQoUfhFFBqLwvWX5dMY62p7uUcB/QV7CmLls3nzr7IiDgj8mjpWgR d1z6KKJwMMv3sv8zFal0PpT82sy+6B0+7NiJKfFeLd3J8cMbvCXcMzLyaToOAnjL hRj2SrKRZtxpSZBZIAGhXAUCDQq2qZHoWmq8JqhHeilzgZ5rN/fjbExzr4K4yBrB kEf5sTc7rH5JEHkkxwjgUhEHM0Mxm1coY+Y0ofqJ1ST5Zb4ntymN8GDVIyypVUET tCnFq2qIsUIkARpqc9jWbIOT/yYP1PVmXCKUt5ZhdryvpxPlYKXwfTnFdi9BOqHj Qq7vzZboy+JW0IUJBSe15DLmfdkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBORq5Dxv1apL733uPSCB5kkEHdeMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iOWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5YjliZDM4 LTJlZmEtNGQ0Yy1hOTU2LTQyNDkyYTNlNjAwMC8wLzEzOTFBQjkwRjFCRjU2QTky RkJERjdCOEY0ODIwNzk5MjQxMDc3NUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE5IwDQYJKoZIhvcNAQELBQADggEBADm++lr/0NYD6zT3mXphCCo2HN8QDm5F zqqU1Cix/6hF844dvazZccnCIftmCNo6Y5lWsgF1LSYe1YN0+Bp/LMail30u2QKj 3E1Yf7527z9Erv8F9qZLapEAABHYfQTOhx+IF5vcFoAyNmdfnleQUyMnfvWXzSAL yuKVdt2NNUycdG88ozZQQ2H6EJWArgz2QBGaCU8stt/+XMibUuZLhz3fYGC5cZJ2 WhHum7ALpbVoiJ6CYpCHbNrUh+gQOX4V+JeXNU9+iM9WjmW8aXLwqkEYt4Cc/x/R iI26lTmI+oAcyCX34fHk2hPeEsP3dITZupvZFy61Z7skl2hTdMoNNwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:58 2025 by rpki-client