$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer File: 22476F90C7B08131974F5B19834906C325ABEF12.cer (raw, json) Hash identifier: p7LyuY5G74hfgSAqODCorDxU9GmmelC+YtRczQuihP0= Subject key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7BC2004A8034438F36AE981736C270CAAA73F81A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft caRepository: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Jul 2025 21:04:59 +0000 Certificate not after: Thu 23 Jul 2026 21:09:59 +0000 Subordinate resources: IP: 160.25.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c2:00:4a:80:34:43:8f:36:ae:98:17:36:c2:70:ca:aa:73:f8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 24 21:04:59 2025 GMT Not After : Jul 23 21:09:59 2026 GMT Subject: CN=22476F90C7B08131974F5B19834906C325ABEF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:68:5e:f6:e9:c3:5f:bd:f5:31:57:e3:6b: 28:b3:28:32:99:0f:b4:f9:93:f3:d9:71:6c:bc:35: 2d:34:3b:26:c3:53:33:ef:91:c9:e2:7f:66:d4:6b: 84:78:35:4f:fc:79:5d:52:10:a1:27:ad:8f:1b:71: 20:9d:c0:ac:0e:28:39:05:f9:7c:40:ac:4b:c4:2c: a5:a9:18:df:55:a2:47:ad:06:83:e8:b2:00:4b:e5: 60:77:6c:9c:9c:dc:46:e6:46:a2:cd:3e:a7:70:cd: b3:7b:f1:fa:35:ac:a9:64:eb:02:6e:a4:ff:19:39: 5d:b2:41:80:90:6d:34:db:d1:41:c7:a4:0a:f8:49: fd:2b:a4:7d:98:47:11:a9:df:bf:fd:c8:af:74:58: 47:3a:6e:8c:66:2e:8a:22:3c:6f:7b:7f:c9:eb:ec: 11:34:52:73:f5:af:e5:4e:e5:c7:db:5d:ec:f4:65: 06:74:9d:6e:fd:96:9c:dc:35:ab:9f:b8:72:89:b9: ef:a6:83:20:bf:20:bf:64:0a:d5:29:6f:e5:a2:d0: 61:e0:f1:73:29:a8:ee:ca:4f:74:11:0b:d5:e9:3c: bb:77:4b:2b:16:8a:43:82:c8:39:a0:a0:4b:88:cf: 08:aa:39:47:85:57:f3:4f:b2:3f:6d:f7:cd:04:48: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.68.0/23 Signature Algorithm: sha256WithRSAEncryption 29:95:4a:24:d8:1c:ce:33:4f:dd:41:67:f9:d4:59:7d:c0:75: ad:a3:f3:a7:1d:36:6b:52:58:b8:8a:44:e5:81:d3:fa:e8:0b: 69:db:8b:91:78:bd:c9:f6:f8:d3:60:19:ea:69:99:45:2e:89: 16:a7:5f:6a:8a:df:e5:91:63:bd:c5:e5:b2:f6:d1:71:77:b5: e0:75:e2:99:d7:5e:38:47:46:cc:f7:98:42:5f:b3:51:40:99: a0:eb:1a:f0:cb:fe:06:36:78:29:3c:71:34:49:59:c3:b8:b8: ac:f3:ed:a6:57:2b:0b:e5:5d:ad:17:f3:0b:d1:81:9c:9d:2b: 13:70:1f:af:4d:28:74:b6:c9:77:8a:a9:bf:d1:77:a9:f6:5f: e4:96:e4:ea:89:1e:25:33:6c:7e:15:aa:70:c2:8f:47:fe:11: 5b:e8:f1:ef:6c:b2:e0:7d:07:bf:8a:86:71:f2:98:ea:26:e5: e8:0f:85:6c:df:ad:94:7a:cd:2a:86:fd:a4:2e:aa:3f:0e:40: 8d:17:58:81:f6:51:71:54:38:fd:78:fa:d7:ff:70:17:5b:8f: fc:e8:4c:3f:32:f7:f7:e3:2d:0e:e5:ae:7f:a8:5f:da:cc:57: 4b:c1:85:d0:7c:58:eb:ab:a7:7c:7c:27:09:ea:9c:1d:8f:8a: 76:3b:48:d5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUe8IASoA0Q482rpgXNsJwyqpz+BowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcyNDIxMDQ1OVoX DTI2MDcyMzIxMDk1OVowMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1 QjE5ODM0OTA2QzMyNUFCRUYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHVaF726cNfvfUxV+NrKLMoMpkPtPmT89lxbLw1LTQ7JsNTM++RyeJ/ZtRr hHg1T/x5XVIQoSetjxtxIJ3ArA4oOQX5fECsS8QspakY31WiR60Gg+iyAEvlYHds nJzcRuZGos0+p3DNs3vx+jWsqWTrAm6k/xk5XbJBgJBtNNvRQcekCvhJ/SukfZhH Eanfv/3Ir3RYRzpujGYuiiI8b3t/yevsETRSc/Wv5U7lx9td7PRlBnSdbv2WnNw1 q5+4com576aDIL8gv2QK1Slv5aLQYeDxcymo7spPdBEL1ek8u3dLKxaKQ4LIOaCg S4jPCKo5R4VX80+yP233zQRIWI0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJHb5DHsIExl09bGYNJBsMlq+8SMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyZmJhYWZj LTRkYjItNGZjNC1hMWE4LTJkOGU0YzhiMmNlMC8wLzIyNDc2RjkwQzdCMDgxMzE5 NzRGNUIxOTgzNDkwNkMzMjVBQkVGMTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGUQwDQYJKoZIhvcNAQELBQADggEBACmVSiTYHM4zT91BZ/nUWX3Ada2j86cd NmtSWLiKROWB0/roC2nbi5F4vcn2+NNgGeppmUUuiRanX2qK3+WRY73F5bL20XF3 teB14pnXXjhHRsz3mEJfs1FAmaDrGvDL/gY2eCk8cTRJWcO4uKzz7aZXKwvlXa0X 8wvRgZydKxNwH69NKHS2yXeKqb/Rd6n2X+SW5OqJHiUzbH4VqnDCj0f+EVvo8e9s suB9B7+KhnHymOom5egPhWzfrZR6zSqG/aQuqj8OQI0XWIH2UXFUOP14+tf/cBdb j/zoTD8y9/fjLQ7lrn+oX9rMV0vBhdB8WOurp3x8JwnqnB2PinY7SNU= -----END CERTIFICATE-----Generated at Wed Aug 6 14:14:46 2025 by rpki-client