$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer File: 47571F0366875B7351B244D25CB7E8258FB33E93.cer (raw, json) Hash identifier: LarjaX1oLd3I3vXUbz4UIQGba+6b/eT59O7/8qwJz3Q= Subject key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5EAA3228E9B1019073C276ABC3DABF4950BF9F71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft caRepository: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 17 Oct 2025 02:07:58 +0000 Certificate not after: Fri 16 Oct 2026 02:12:58 +0000 Subordinate resources: IP: 160.187.164.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:aa:32:28:e9:b1:01:90:73:c2:76:ab:c3:da:bf:49:50:bf:9f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 17 02:07:58 2025 GMT Not After : Oct 16 02:12:58 2026 GMT Subject: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:48:3f:15:fd:df:85:76:0a:0e:36:6b:aa: d7:ce:fe:a3:bf:4a:cf:2b:8d:65:a6:c6:31:11:dd: 42:64:99:d0:fc:90:62:5a:e9:2e:32:99:a0:7d:02: 07:d8:1e:5d:b0:d8:6b:a7:3d:18:f8:7f:fb:2b:61: d3:bd:a2:dd:e9:42:af:8c:ff:81:16:22:5b:9a:d3: f3:8b:21:c5:c7:63:f9:04:5e:08:e9:9d:a8:63:ea: ab:af:b6:7c:c7:b2:9f:c7:9a:d5:11:2a:a4:08:bf: f1:e5:33:cd:8d:ed:44:25:9d:1a:7c:ba:ba:92:2e: d9:4e:e9:d3:d5:af:b1:73:8b:1c:d3:37:e2:7d:3f: e5:f5:3b:54:a1:3d:31:cd:e9:db:10:86:d4:3a:8a: e3:91:b0:cb:f7:73:16:61:32:37:71:ad:56:5d:29: 1d:26:77:55:1d:e7:0b:51:1a:32:4b:74:a0:0b:33: 64:d0:ed:57:e1:4d:75:f5:fa:ff:5e:f3:1d:6f:36: 7e:16:11:f3:9b:4f:fb:06:ea:6b:e4:ab:53:d1:01: 72:1f:a7:78:2d:1a:27:d3:ad:4f:32:04:a8:03:3f: e1:f7:c9:79:d3:e6:21:ed:6e:50:5f:bf:3f:2c:ae: e6:50:77:3a:7d:89:90:f8:4a:44:bd:40:a1:28:ad: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.164.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:4b:7c:71:02:09:a4:53:0e:3c:1b:97:7f:de:4d:68:be:41: 28:37:8b:41:81:93:c8:e9:d8:39:e5:1e:77:4a:71:de:85:aa: 75:22:d5:ac:2f:d7:c7:51:84:8b:42:67:26:a8:cd:f4:49:a2: 91:33:47:81:5d:39:f2:e7:12:da:cb:a0:75:71:3e:bc:33:7c: e7:56:75:4f:97:e9:ee:1f:a4:9f:48:cf:eb:52:37:3d:ba:b1: 83:ec:f4:6a:e1:57:b5:ba:d7:1a:aa:03:2b:3a:24:b1:3e:c4: d2:b6:4d:07:af:76:d1:66:e8:d2:06:9d:5e:6d:35:f9:f7:9c: da:a0:93:fe:47:7e:24:3f:2b:5e:17:8f:b4:9b:fe:d8:c8:7c: 92:9e:78:7e:c9:ef:69:99:b5:e7:a0:bd:64:25:33:cb:d2:93: ba:81:be:07:f8:a2:7f:70:aa:b4:28:60:23:97:52:b8:8e:f0: e8:4e:d4:c3:1b:91:d1:d0:ad:6f:7a:bd:b4:3d:f5:c0:18:ba: fd:7c:10:00:97:01:d7:95:01:1a:a0:0a:3d:fb:6e:6a:f1:11: 6a:e8:58:71:b6:81:d5:8a:4f:7e:47:6d:03:ef:e8:2c:7a:63: 72:5a:d8:3a:39:90:77:28:19:cc:d8:32:f2:19:de:1f:d4:6b: 57:3b:26:c6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXqoyKOmxAZBzwnarw9q/SVC/n3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAxNzAyMDc1OFoX DTI2MTAxNjAyMTI1OFowMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0 NEQyNUNCN0U4MjU4RkIzM0U5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0dSD8V/d+FdgoONmuq187+o79KzyuNZabGMRHdQmSZ0PyQYlrpLjKZoH0C B9geXbDYa6c9GPh/+yth072i3elCr4z/gRYiW5rT84shxcdj+QReCOmdqGPqq6+2 fMeyn8ea1REqpAi/8eUzzY3tRCWdGny6upIu2U7p09WvsXOLHNM34n0/5fU7VKE9 Mc3p2xCG1DqK45Gwy/dzFmEyN3GtVl0pHSZ3VR3nC1EaMkt0oAszZNDtV+FNdfX6 /17zHW82fhYR85tP+wbqa+SrU9EBch+neC0aJ9OtTzIEqAM/4ffJedPmIe1uUF+/ Pyyu5lB3On2JkPhKRL1AoSit/GUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEdXHwNmh1tzUbJE0ly36CWPsz6TMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmMjk3NWQ1 LWY5OTAtNDg0ZS05NDYwLWYxMzZiNDU1MWY4ZC8wLzQ3NTcxRjAzNjY4NzVCNzM1 MUIyNDREMjVDQjdFODI1OEZCMzNFOTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgu6QwDQYJKoZIhvcNAQELBQADggEBAAtLfHECCaRTDjwbl3/eTWi+QSg3i0GB k8jp2DnlHndKcd6FqnUi1awv18dRhItCZyaozfRJopEzR4FdOfLnEtrLoHVxPrwz fOdWdU+X6e4fpJ9Iz+tSNz26sYPs9GrhV7W61xqqAys6JLE+xNK2TQevdtFm6NIG nV5tNfn3nNqgk/5HfiQ/K14Xj7Sb/tjIfJKeeH7J72mZteegvWQlM8vSk7qBvgf4 on9wqrQoYCOXUriO8OhO1MMbkdHQrW96vbQ99cAYuv18EACXAdeVARqgCj37bmrx EWroWHG2gdWKT35HbQPv6Cx6Y3Ja2Do5kHcoGczYMvIZ3h/Ua1c7JsY= -----END CERTIFICATE-----Generated at Tue Nov 4 18:32:12 2025 by rpki-client