$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer File: 277D3C0811B597BC22847329E543CCEE7E2449A0.cer (raw, json) Hash identifier: k/tNyKEclhW8b5hKA8BkPECW9IO4Mtk8rdVGDD17TFw= Subject key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 66B2BF5EE11E767F83842E401BB3A291EE143C56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft caRepository: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Jun 2025 15:04:34 +0000 Certificate not after: Thu 18 Jun 2026 15:09:34 +0000 Subordinate resources: IP: 160.25.116.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b2:bf:5e:e1:1e:76:7f:83:84:2e:40:1b:b3:a2:91:ee:14:3c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 19 15:04:34 2025 GMT Not After : Jun 18 15:09:34 2026 GMT Subject: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:f3:2f:f4:12:02:00:6f:f5:2e:3e:ef:72: 16:6a:6b:88:30:57:bb:f5:8e:cd:41:d9:e3:68:dc: 85:98:fd:a2:b9:63:b9:ec:af:ad:e2:cf:90:0c:9e: 0a:a3:48:f9:24:0f:6f:e7:1a:65:0e:a6:a4:73:b7: 3c:b4:3e:6b:18:91:a8:e8:9c:af:5e:6b:7b:7a:94: 03:1a:99:d1:f6:86:86:ce:27:35:84:85:82:57:aa: bf:0c:1f:84:34:c2:7f:99:6c:21:d3:cb:c5:0b:fd: c4:c9:c2:26:4b:39:41:91:dd:37:6c:be:94:11:ed: 1b:56:67:cc:8f:31:8e:bd:aa:f4:58:e8:11:17:30: be:24:b4:3e:a2:f4:0f:bb:42:e2:9c:8c:6f:a3:1f: 67:16:3e:03:44:da:da:76:ee:ed:0a:87:5d:fb:fd: 8c:ea:84:df:0c:75:1b:36:81:fe:16:66:5b:e3:99: b2:bc:c0:d5:98:73:7c:d3:9c:0e:d2:b1:42:13:fe: a6:95:2c:f4:f6:9a:54:21:70:47:08:b7:94:0c:77: ef:c1:76:0a:8e:34:6a:55:36:1f:46:17:06:62:c3: 77:8a:07:63:4d:7a:f1:2b:88:b0:e7:98:82:85:bd: ad:9c:f8:02:af:4d:84:3e:d8:3a:99:ca:f1:57:52: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.116.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ab:2b:55:54:d3:8a:19:d4:c4:f7:50:1b:12:63:8a:9d:b6: ab:3d:9f:56:8f:93:ea:99:f7:1b:15:83:f0:54:3e:88:b3:ab: 29:ec:8c:76:8d:65:e5:d7:13:fc:c0:06:e2:4b:11:91:ef:cb: 0c:97:1c:d5:7c:bf:74:5b:91:df:1c:ac:33:35:b2:c6:d5:28: 7e:8e:d8:cc:c7:99:80:40:a5:52:05:63:b6:24:38:c9:bd:cd: 93:c5:e6:10:94:12:90:ec:79:2b:fc:60:c2:92:76:f0:f4:51: cc:35:5c:b3:e7:82:30:f9:55:a2:c7:1e:bc:a8:0e:39:e5:ad: 1a:d5:2c:85:61:0a:23:c4:78:2c:0a:18:45:cb:97:ab:e2:66: 48:33:df:d1:a7:ac:84:13:e7:c2:3f:34:2e:22:89:a6:70:c9: a9:fe:d3:f5:2c:9e:00:64:65:f5:06:7d:58:d8:c3:35:81:fc: 17:72:59:e4:e0:a5:ae:88:a3:5a:5e:ce:7e:b9:c1:02:dc:70: d3:13:ea:75:ef:6b:0f:15:02:14:d6:92:d7:16:5f:8c:a3:02: 6e:d5:b2:dd:91:87:17:fc:22:3d:ee:5d:c6:dd:1e:f7:3c:a0: 65:ad:cc:59:0a:54:44:20:79:6d:ae:d0:a0:7d:83:8e:2e:27: aa:06:0b:4a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZrK/XuEedn+DhC5AG7Oike4UPFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxOTE1MDQzNFoX DTI2MDYxODE1MDkzNFowMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3 MzI5RTU0M0NDRUU3RTI0NDlBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNn8y/0EgIAb/UuPu9yFmpriDBXu/WOzUHZ42jchZj9orljueyvreLPkAye CqNI+SQPb+caZQ6mpHO3PLQ+axiRqOicr15re3qUAxqZ0faGhs4nNYSFgleqvwwf hDTCf5lsIdPLxQv9xMnCJks5QZHdN2y+lBHtG1ZnzI8xjr2q9FjoERcwviS0PqL0 D7tC4pyMb6MfZxY+A0Ta2nbu7QqHXfv9jOqE3wx1GzaB/hZmW+OZsrzA1ZhzfNOc DtKxQhP+ppUs9PaaVCFwRwi3lAx378F2Co40alU2H0YXBmLDd4oHY0168SuIsOeY goW9rZz4Aq9NhD7YOpnK8VdSQ3MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCd9PAgRtZe8IoRzKeVDzO5+JEmgMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ODI1OWQ2 LTI2NTUtNDQxNy1iZWM0LTgzZWY2NjQ0ZjU3ZS8wLzI3N0QzQzA4MTFCNTk3QkMy Mjg0NzMyOUU1NDNDQ0VFN0UyNDQ5QTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGXQwDQYJKoZIhvcNAQELBQADggEBAGirK1VU04oZ1MT3UBsSY4qdtqs9n1aP k+qZ9xsVg/BUPoizqynsjHaNZeXXE/zABuJLEZHvywyXHNV8v3Rbkd8crDM1ssbV KH6O2MzHmYBApVIFY7YkOMm9zZPF5hCUEpDseSv8YMKSdvD0Ucw1XLPngjD5VaLH HryoDjnlrRrVLIVhCiPEeCwKGEXLl6viZkgz39GnrIQT58I/NC4iiaZwyan+0/Us ngBkZfUGfVjYwzWB/BdyWeTgpa6Io1pezn65wQLccNMT6nXvaw8VAhTWktcWX4yj Am7Vst2Rhxf8Ij3uXcbdHvc8oGWtzFkKVEQgeW2u0KB9g44uJ6oGC0o= -----END CERTIFICATE-----Generated at Tue Nov 4 18:32:21 2025 by rpki-client