$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer File: 3E08DEC2AE0EB41653597023376671331769A43E.cer (raw, json) Hash identifier: vk9Z5bAUu/b8TkpiKpnCrveiJZxfNKjCaD8uwVmOllU= Subject key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 32F2ABD83B10B2A7095B289E418B4483923B22C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft caRepository: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 28 Oct 2025 09:31:49 +0000 Certificate not after: Tue 27 Oct 2026 09:36:49 +0000 Subordinate resources: IP: 160.22.91.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f2:ab:d8:3b:10:b2:a7:09:5b:28:9e:41:8b:44:83:92:3b:22:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 28 09:31:49 2025 GMT Not After : Oct 27 09:36:49 2026 GMT Subject: CN=3E08DEC2AE0EB41653597023376671331769A43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:58:0c:61:4c:ed:7f:9b:7f:a7:ed:64:2e: 02:a4:1f:30:f2:31:34:45:40:a3:1f:8f:19:f3:ac: 22:a1:fa:29:49:9c:57:6d:30:75:01:15:00:7a:92: 7c:5c:ce:78:f9:bb:de:d7:d6:a6:40:e4:80:37:8f: c2:83:15:12:ef:eb:fc:44:a0:bc:e2:b2:9c:34:f7: 09:1c:cf:13:5a:26:01:d4:20:a6:fa:4f:c5:05:98: 57:39:25:1b:e0:78:4a:34:fb:ea:b0:4e:23:27:b1: 74:d8:96:20:ab:17:9c:8f:f9:60:89:f7:3e:81:00: 0a:85:e5:84:71:05:34:52:d8:72:93:98:a7:d1:76: 96:53:a1:44:4e:e4:c9:db:39:3b:b4:72:16:10:10: b3:0f:c2:99:dc:a5:83:45:5e:2b:ea:c1:2e:5a:ad: 5b:4f:01:cd:eb:17:8e:20:59:3d:24:45:86:7c:99: 56:4a:70:0b:ba:13:e5:4a:2e:37:a1:bf:ef:9d:1e: dd:ac:a4:b2:c9:6e:77:a3:a4:41:ea:15:a9:d1:16: a5:e3:cf:1f:46:13:52:85:c6:dd:33:9b:6c:6a:f9: 61:15:bd:8c:2f:fa:e4:b7:ee:f3:83:10:49:b6:24: 19:ef:c3:5b:0d:da:bf:af:d1:e8:64:55:46:7d:3e: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.91.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:34:21:96:37:e2:f9:05:d0:cb:e7:df:86:6b:e3:2e:ad:99: 4d:0b:c6:61:14:89:71:de:de:1f:5c:ed:a8:5f:73:13:f2:1f: cb:1e:60:4b:4c:ac:0d:f4:b9:7c:ea:dc:20:ed:24:d6:5f:2c: 28:63:9d:20:32:cd:08:3e:ff:72:1e:1c:bb:94:b9:3d:9b:a4: 6d:be:ec:33:43:0f:d7:19:2f:06:73:99:f2:92:c6:f7:47:8c: 18:61:43:2f:fa:24:fa:2c:e6:a5:92:90:45:a0:e1:d6:0e:9f: 8b:cd:06:cf:4d:c0:91:2a:c6:a0:91:ca:47:cc:7d:fd:7e:c7: 15:9f:20:8c:68:09:35:04:98:db:c4:bb:de:69:e3:3c:0f:5a: 02:1b:4a:d2:fe:1f:85:2f:2c:86:a8:80:2b:22:54:e9:b9:a8: 41:d3:40:b4:33:65:dd:81:a9:85:de:e4:68:35:be:fc:6b:6c: e4:9d:d6:33:43:91:8c:91:01:f6:2f:9f:80:60:0e:3f:03:35: 4f:7b:f8:5c:bd:9b:c6:e4:ad:80:dd:ae:21:3d:ef:b1:3f:b3: d7:91:88:28:df:2f:5a:e5:c6:7a:ca:1f:3a:de:b4:c9:00:1a: d8:3f:0f:9d:35:68:29:95:0a:bd:f5:c4:21:a1:40:a6:25:9a: bd:d1:ca:9a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMvKr2DsQsqcJWyieQYtEg5I7IsQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyODA5MzE0OVoX DTI2MTAyNzA5MzY0OVowMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3 MDIzMzc2NjcxMzMxNzY5QTQzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3tWAxhTO1/m3+n7WQuAqQfMPIxNEVAox+PGfOsIqH6KUmcV20wdQEVAHqS fFzOePm73tfWpkDkgDePwoMVEu/r/ESgvOKynDT3CRzPE1omAdQgpvpPxQWYVzkl G+B4SjT76rBOIyexdNiWIKsXnI/5YIn3PoEACoXlhHEFNFLYcpOYp9F2llOhRE7k yds5O7RyFhAQsw/Cmdylg0VeK+rBLlqtW08BzesXjiBZPSRFhnyZVkpwC7oT5Uou N6G/750e3ayksslud6OkQeoVqdEWpePPH0YTUoXG3TObbGr5YRW9jC/65Lfu84MQ SbYkGe/DWw3av6/R6GRVRn0+v1UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD4I3sKuDrQWU1lwIzdmcTMXaaQ+MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyODE5YmE5 LTVmNDQtNDEyNS04YjhjLWZjMTY0YjU0ZDczYS8wLzNFMDhERUMyQUUwRUI0MTY1 MzU5NzAyMzM3NjY3MTMzMTc2OUE0M0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgFlswDQYJKoZIhvcNAQELBQADggEBAFs0IZY34vkF0Mvn34Zr4y6tmU0LxmEU iXHe3h9c7ahfcxPyH8seYEtMrA30uXzq3CDtJNZfLChjnSAyzQg+/3IeHLuUuT2b pG2+7DNDD9cZLwZzmfKSxvdHjBhhQy/6JPos5qWSkEWg4dYOn4vNBs9NwJEqxqCR ykfMff1+xxWfIIxoCTUEmNvEu95p4zwPWgIbStL+H4UvLIaogCsiVOm5qEHTQLQz Zd2BqYXe5Gg1vvxrbOSd1jNDkYyRAfYvn4BgDj8DNU97+Fy9m8bkrYDdriE977E/ s9eRiCjfL1rlxnrKHzretMkAGtg/D501aCmVCr31xCGhQKYlmr3Rypo= -----END CERTIFICATE-----Generated at Tue Nov 4 18:38:22 2025 by rpki-client