$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer File: 30C896473FC5DE403F4651059F6BE1586BFAC473.cer (raw, json) Hash identifier: 4vvkRBLmsMKCrQDNmTFDp/8BD6UbsoX2uDbgYZxG1+E= Subject key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2EF71C7C0B152213D45DD0035EE8BAC778CD1691 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft caRepository: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Jul 2025 09:42:22 +0000 Certificate not after: Thu 23 Jul 2026 09:47:22 +0000 Subordinate resources: IP: 157.66.66.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f7:1c:7c:0b:15:22:13:d4:5d:d0:03:5e:e8:ba:c7:78:cd:16:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 24 09:42:22 2025 GMT Not After : Jul 23 09:47:22 2026 GMT Subject: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:3e:a7:c3:f8:70:0c:a1:5c:cf:34:a0:0d: 7d:d9:aa:67:72:48:f5:4e:ba:22:79:83:7f:ea:05: 96:3c:a4:ae:de:ac:e1:4f:bd:a3:e3:bd:b7:c2:ba: c5:5e:4d:80:a0:17:ce:60:b4:69:dd:ad:c0:1d:33: d1:1f:73:bc:5e:90:7e:fb:16:f6:26:1b:64:c2:55: 4d:52:f0:96:8f:9f:fc:80:18:6b:36:35:ef:3e:1b: 1c:6e:bc:5f:3e:61:fc:ca:4d:27:53:74:37:b4:d8: ea:82:ab:a1:68:51:a0:11:97:f0:ed:04:2b:3d:5f: 75:d1:e2:4f:4b:3e:43:a0:44:87:13:f9:b9:54:15: dd:82:12:55:8f:31:82:cd:66:c6:94:07:88:48:0f: 31:1e:24:32:8f:8f:c3:58:34:b7:8d:eb:40:ad:02: ac:d4:df:cf:42:1f:d7:79:4a:a0:57:43:53:bf:a3: ee:15:58:62:90:ab:2c:22:41:d5:44:9f:4c:9a:61: aa:0c:99:a3:d7:60:32:5f:c3:41:6a:63:f0:a2:78: ff:dc:96:49:b9:b5:4b:1d:f5:0c:78:8b:c9:13:cc: 72:0a:5a:5b:83:5b:bc:c5:86:d3:92:14:de:ff:06: b0:80:bd:c2:0f:3f:92:86:ab:62:21:af:18:93:ef: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.66.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:bc:e6:2a:dd:b4:61:d2:f8:42:ac:d1:20:33:a9:50:63:54: 9b:4a:9c:e6:7c:b6:29:ad:6f:9d:b9:e0:71:94:6f:52:c2:f1: 73:f4:18:c1:03:ba:07:0f:3f:75:a7:6a:d4:93:18:83:32:6d: 02:fc:70:27:db:93:16:11:05:71:76:27:df:bf:25:26:6d:a3: 25:de:f3:18:78:f9:c4:2e:a0:6e:51:59:08:cb:c3:f6:82:0d: a2:59:d3:24:04:a0:b1:25:a0:d9:d4:98:f4:db:e1:3c:29:03: 9d:d5:f2:b1:bd:e2:15:ce:a7:18:72:40:ab:35:85:c8:42:0f: 8a:85:a0:a6:b9:69:3f:da:81:8a:5b:b2:a3:62:e0:3a:a2:0b: b6:e0:ec:73:b4:ca:35:22:92:74:cd:f4:5d:7d:91:73:b7:9b: 24:8c:1d:84:95:c8:ef:30:98:a9:b7:38:c1:26:3b:d1:0b:f9: f5:bc:74:9f:9c:3e:49:e3:fd:72:a3:3e:81:87:8b:74:54:d5: 15:5c:3d:9d:bf:f1:10:51:5b:3b:a2:30:94:17:5f:60:9a:8e: 4f:98:a0:89:05:b7:d9:77:5c:66:7f:27:22:cd:aa:d2:49:c3: 1e:d5:ba:12:f6:09:2d:e0:5c:20:46:d3:0a:9f:fb:e4:9f:3a: f3:63:08:41 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULvccfAsVIhPUXdADXui6x3jNFpEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcyNDA5NDIyMloX DTI2MDcyMzA5NDcyMlowMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1 MTA1OUY2QkUxNTg2QkZBQzQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9yPqfD+HAMoVzPNKANfdmqZ3JI9U66InmDf+oFljykrt6s4U+9o+O9t8K6 xV5NgKAXzmC0ad2twB0z0R9zvF6QfvsW9iYbZMJVTVLwlo+f/IAYazY17z4bHG68 Xz5h/MpNJ1N0N7TY6oKroWhRoBGX8O0EKz1fddHiT0s+Q6BEhxP5uVQV3YISVY8x gs1mxpQHiEgPMR4kMo+Pw1g0t43rQK0CrNTfz0If13lKoFdDU7+j7hVYYpCrLCJB 1USfTJphqgyZo9dgMl/DQWpj8KJ4/9yWSbm1Sx31DHiLyRPMcgpaW4NbvMWG05IU 3v8GsIC9wg8/koarYiGvGJPv0eMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDDIlkc/xd5AP0ZRBZ9r4Vhr+sRzMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2NzBhZTc2 LTk1OTQtNDk4MC1iNDEwLTQ5MWE2MzE5ZmYzYS8wLzMwQzg5NjQ3M0ZDNURFNDAz RjQ2NTEwNTlGNkJFMTU4NkJGQUM0NzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQkIwDQYJKoZIhvcNAQELBQADggEBAHy85irdtGHS+EKs0SAzqVBjVJtKnOZ8 timtb5254HGUb1LC8XP0GMEDugcPP3WnatSTGIMybQL8cCfbkxYRBXF2J9+/JSZt oyXe8xh4+cQuoG5RWQjLw/aCDaJZ0yQEoLEloNnUmPTb4TwpA53V8rG94hXOpxhy QKs1hchCD4qFoKa5aT/agYpbsqNi4DqiC7bg7HO0yjUiknTN9F19kXO3mySMHYSV yO8wmKm3OMEmO9EL+fW8dJ+cPknj/XKjPoGHi3RU1RVcPZ2/8RBRWzuiMJQXX2Ca jk+YoIkFt9l3XGZ/JyLNqtJJwx7VuhL2CS3gXCBG0wqf++SfOvNjCEE= -----END CERTIFICATE-----Generated at Sat Aug 9 14:31:13 2025 by rpki-client