$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer (raw, json) Hash identifier: niP3/w8xtxFgNUDkYvg5gT65WxxaGWwWYejC/OH62Ss= Subject key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0E4DE4DCE5B5972E8EF4E36F57C7D54263C5BEE4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft caRepository: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 May 2025 08:29:07 +0000 Certificate not after: Thu 28 May 2026 08:34:07 +0000 Subordinate resources: IP: 160.22.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 03:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4d:e4:dc:e5:b5:97:2e:8e:f4:e3:6f:57:c7:d5:42:63:c5:be:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 29 08:29:07 2025 GMT Not After : May 28 08:34:07 2026 GMT Subject: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:17:4e:84:a8:77:7d:31:12:2f:33:c3:bd: ba:4e:c0:95:75:ba:90:f1:be:61:93:f4:3c:e2:85: 0e:15:de:92:62:2d:15:d9:e7:c4:04:29:35:af:97: eb:54:10:fc:87:db:87:25:66:ad:94:b2:19:0b:c5: 13:bc:e1:33:30:71:03:17:cd:61:08:43:76:5d:7d: 52:f5:ed:38:c9:98:50:6d:2f:3d:af:ab:8c:98:48: a7:3b:b7:f9:ef:27:ce:d8:36:20:1e:14:64:8d:53: 22:5d:5c:cc:eb:38:e9:2a:12:21:54:d0:a4:e9:bf: 4d:ba:f4:d3:5e:c8:57:60:95:d9:7d:2a:31:fa:39: 79:7d:56:99:d0:6f:b5:6f:28:f5:e7:ad:10:a0:f0: fd:a6:4f:d9:12:45:5a:05:ae:51:5b:87:9a:a8:e6: d2:cc:55:0f:36:e5:37:39:4c:f8:88:d7:25:4c:cb: 2c:a4:ca:8e:a2:79:e0:02:7e:66:70:70:d7:1d:4e: 6d:be:11:ac:3b:77:46:0a:40:6e:06:fd:16:9c:15: b8:12:b2:95:ae:9c:dd:40:5f:cf:10:0d:f2:ff:37: e0:79:3a:df:9c:63:64:17:5e:5c:ca:7c:97:e7:2d: 95:2a:6d:60:14:d7:e3:26:18:f5:1a:e7:05:d2:b7: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.62.0/23 Signature Algorithm: sha256WithRSAEncryption 02:5a:dc:16:ec:b5:d3:af:86:8f:62:e0:f9:0e:52:72:82:97: 2f:3b:e5:d4:b2:7b:50:7c:48:77:52:58:c5:c7:3d:57:24:81: 7d:12:11:e3:5e:f3:eb:da:30:e5:05:6c:b8:7d:2c:8a:b6:e9: e6:39:53:5c:cf:f4:ca:cb:84:61:80:7a:14:27:9d:ae:2f:82: cd:93:7c:15:b9:ed:0f:c7:3c:72:47:2d:b6:d6:fd:ab:8a:33: a3:c7:a7:3a:fa:24:70:71:09:f1:70:dc:f8:11:ff:a2:a8:06: b8:df:60:70:b0:f2:52:c2:98:16:f3:5e:59:5d:60:91:ff:fc: 12:92:dd:f0:5a:26:be:23:2c:e1:c2:9b:57:0c:55:a2:aa:78: 9c:67:a3:7d:15:da:23:a9:c5:d7:19:d3:2a:63:55:80:28:ea: 47:1d:c5:c8:f4:48:e8:42:65:21:cf:92:11:c6:a6:e5:8b:e3: d0:9f:6a:ae:0e:bc:92:b1:c2:80:37:7c:25:fc:e6:d8:b9:ed: 54:e2:20:76:e3:3e:3b:37:33:05:ac:5c:37:34:34:8b:8b:01: 2c:11:b1:aa:d7:e9:a3:73:b7:52:f1:e4:c2:63:5d:91:db:cf: 4d:67:04:6b:be:9b:1f:98:e4:0b:97:c8:5b:40:e4:a1:39:45: 92:ea:3c:6e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDk3k3OW1ly6O9ONvV8fVQmPFvuQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUyOTA4MjkwN1oX DTI2MDUyODA4MzQwN1owMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3 MzkwNzgxRDM4Q0IwRDU4MDIxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfNF06EqHd9MRIvM8O9uk7AlXW6kPG+YZP0POKFDhXekmItFdnnxAQpNa+X 61QQ/IfbhyVmrZSyGQvFE7zhMzBxAxfNYQhDdl19UvXtOMmYUG0vPa+rjJhIpzu3 +e8nztg2IB4UZI1TIl1czOs46SoSIVTQpOm/Tbr0017IV2CV2X0qMfo5eX1WmdBv tW8o9eetEKDw/aZP2RJFWgWuUVuHmqjm0sxVDzblNzlM+IjXJUzLLKTKjqJ54AJ+ ZnBw1x1Obb4RrDt3RgpAbgb9FpwVuBKyla6c3UBfzxAN8v834Hk635xjZBdeXMp8 l+ctlSptYBTX4yYY9RrnBdK3MwUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCrXiev8WMHw5PhzkHgdOMsNWAIQMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2Zk LWQ1NjktNGNjNS1hNTYzLTliMGYyNDhiMWFmMS8wLzJBRDc4OUVCRkM1OEMxRjBF NEY4NzM5MDc4MUQzOENCMEQ1ODAyMTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFj4wDQYJKoZIhvcNAQELBQADggEBAAJa3BbstdOvho9i4PkOUnKCly875dSy e1B8SHdSWMXHPVckgX0SEeNe8+vaMOUFbLh9LIq26eY5U1zP9MrLhGGAehQnna4v gs2TfBW57Q/HPHJHLbbW/auKM6PHpzr6JHBxCfFw3PgR/6KoBrjfYHCw8lLCmBbz XlldYJH//BKS3fBaJr4jLOHCm1cMVaKqeJxno30V2iOpxdcZ0ypjVYAo6kcdxcj0 SOhCZSHPkhHGpuWL49Cfaq4OvJKxwoA3fCX85ti57VTiIHbjPjs3MwWsXDc0NIuL ASwRsarX6aNzt1Lx5MJjXZHbz01nBGu+mx+Y5AuXyFtA5KE5RZLqPG4= -----END CERTIFICATE-----Generated at Wed Jun 18 02:33:42 2025 by rpki-client