$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer (raw, json) Hash identifier: fYEey1wPs3BKbo4gJgG9YfdWzPq2YF5lFx4Z16AaKS8= Subject key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3D000925E97DFBB615F66867F011A590824A62EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft caRepository: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Apr 2025 03:27:55 +0000 Certificate not after: Thu 23 Apr 2026 03:32:55 +0000 Subordinate resources: IP: 157.66.16.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:00:09:25:e9:7d:fb:b6:15:f6:68:67:f0:11:a5:90:82:4a:62:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 24 03:27:55 2025 GMT Not After : Apr 23 03:32:55 2026 GMT Subject: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:00:67:a7:86:c3:8d:e1:0e:09:8a:3a:2f: a0:ca:b3:d5:c0:c6:05:6f:b3:6d:b2:3b:65:c7:bb: d7:3e:98:8f:6d:bd:fd:23:0b:25:e3:5e:6b:ef:57: 7f:98:7d:71:7f:ee:61:c9:f4:83:09:72:a8:b8:5b: 08:ac:61:4e:0e:6a:c2:1c:8d:a8:59:1c:b4:d5:8c: 0f:86:f2:7a:29:47:4d:90:e0:e0:25:12:72:6b:d0: b3:05:73:ae:22:29:21:de:85:73:de:2a:61:d4:12: f3:e3:d1:b2:5f:51:42:e9:ec:15:49:81:fc:50:5b: de:a0:a3:72:c0:91:b6:e6:97:ee:b0:71:ad:86:78: c1:c2:ce:2b:ef:11:a1:3f:b8:e0:e9:86:04:78:4f: 09:ed:f7:b2:01:ec:c3:13:fc:1c:c0:77:2f:44:7f: 89:66:30:23:e3:c5:0f:35:a6:d9:ee:c6:59:c0:b5: be:da:4b:9e:af:c5:80:d6:ec:cd:54:a2:7e:9a:97: 60:66:64:3e:77:76:31:40:8d:25:7e:d3:2b:03:3f: 48:19:d0:28:f3:1e:8a:d1:5a:6f:6a:b9:48:55:6e: b6:3a:e7:18:bb:bf:87:f1:8e:af:19:32:49:9f:63: 25:da:51:07:19:d9:37:e7:b5:c2:b0:35:b1:b7:a3: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.16.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:6f:fc:40:64:89:24:c2:8b:10:53:d3:b8:5a:51:48:1d:aa: a5:ba:c0:bf:b5:73:54:1f:7e:dc:6c:fd:99:8c:91:2b:30:08: 37:b2:4a:f7:56:01:4b:9d:20:4a:c6:3f:ce:34:25:02:73:05: 9d:5c:0b:09:fb:ce:ea:5c:ff:0b:ea:88:59:1a:31:af:77:4d: 19:b3:be:05:3b:31:b3:a4:6a:da:16:c1:5c:7b:fe:8b:2f:fb: 4c:9e:39:7a:85:3b:18:5e:0d:a1:2a:3d:63:47:74:1a:ab:40: c5:26:8c:56:a8:7e:b8:e8:99:83:47:97:32:24:b5:35:f6:ec: 54:d8:68:1a:72:01:6f:dc:80:c9:0f:c2:7c:de:00:34:3e:c0: c5:08:48:8e:2e:16:6d:04:5c:f6:97:29:da:d8:5d:92:9a:bc: 31:f6:dd:c4:76:a8:de:b6:07:6f:4f:38:0f:95:b6:79:36:73: 7a:5d:8b:cb:1a:8b:11:46:90:7c:95:68:02:bf:b0:e9:80:4b: fe:4a:27:e0:44:88:9f:61:5d:41:e1:a2:18:d5:c0:02:13:7a: eb:e8:b2:76:64:c0:71:4d:b3:6e:ec:c8:21:2d:4f:43:69:29: 91:6b:6e:ff:be:f5:b2:f0:75:33:1d:a7:e4:16:57:5d:f0:d4: f7:9a:04:ee -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPQAJJel9+7YV9mhn8BGlkIJKYu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQyNDAzMjc1NVoX DTI2MDQyMzAzMzI1NVowMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdC NjNEMzIwM0U0MEUyMTA2RjFCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKq0AGenhsON4Q4JijovoMqz1cDGBW+zbbI7Zce71z6Yj229/SMLJeNea+9X f5h9cX/uYcn0gwlyqLhbCKxhTg5qwhyNqFkctNWMD4byeilHTZDg4CUScmvQswVz riIpId6Fc94qYdQS8+PRsl9RQunsFUmB/FBb3qCjcsCRtuaX7rBxrYZ4wcLOK+8R oT+44OmGBHhPCe33sgHswxP8HMB3L0R/iWYwI+PFDzWm2e7GWcC1vtpLnq/FgNbs zVSifpqXYGZkPnd2MUCNJX7TKwM/SBnQKPMeitFab2q5SFVutjrnGLu/h/GOrxky SZ9jJdpRBxnZN+e1wrA1sbejwCcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDCKUQBA/fm8KLe2PTID5A4hBvG0MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ZWQ4ZDZj LWYwZmEtNDdjYy1hZWFhLWI0ZTNlZTExNjg4Mi8wLzMwOEE1MTAwNDBGREY5QkMy OEI3QjYzRDMyMDNFNDBFMjEwNkYxQjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQhAwDQYJKoZIhvcNAQELBQADggEBAB9v/EBkiSTCixBT07haUUgdqqW6wL+1 c1Qfftxs/ZmMkSswCDeySvdWAUudIErGP840JQJzBZ1cCwn7zupc/wvqiFkaMa93 TRmzvgU7MbOkatoWwVx7/osv+0yeOXqFOxheDaEqPWNHdBqrQMUmjFaofrjomYNH lzIktTX27FTYaBpyAW/cgMkPwnzeADQ+wMUISI4uFm0EXPaXKdrYXZKavDH23cR2 qN62B29POA+Vtnk2c3pdi8saixFGkHyVaAK/sOmAS/5KJ+BEiJ9hXUHhohjVwAIT euvosnZkwHFNs27syCEtT0NpKZFrbv++9bLwdTMdp+QWV13w1PeaBO4= -----END CERTIFICATE-----Generated at Tue Nov 4 18:31:42 2025 by rpki-client