$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer (raw, json) Hash identifier: Oa4m2PGJ3dc+GuvbgL2qDR3ZdfamiCpyLM0KIuM3mug= Subject key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 532A106A5D7E6606C67237745E09DEDE8A1117F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft caRepository: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 16:02:27 +0000 Certificate not after: Tue 22 Sep 2026 16:07:27 +0000 Subordinate resources: IP: 160.25.196.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2a:10:6a:5d:7e:66:06:c6:72:37:74:5e:09:de:de:8a:11:17:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 23 16:02:27 2025 GMT Not After : Sep 22 16:07:27 2026 GMT Subject: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:b7:b1:f4:2d:ce:8c:24:b3:25:5a:c9:f8: 5f:fb:11:55:e8:f6:b0:e9:76:e6:ad:6a:db:7e:fd: 5b:e2:73:c6:08:a8:8b:2f:13:24:52:11:19:18:1b: e8:e3:b2:04:14:bc:2f:24:2f:f6:5c:5d:e7:1e:01: a5:c8:c6:fe:f5:b6:f1:25:8e:96:31:e8:c5:1a:c7: be:03:27:3d:f3:01:21:4c:3d:6c:1a:fa:75:00:08: cf:ba:ac:61:0d:e8:54:4b:7c:73:42:fa:ce:9b:8b: 1f:5f:02:27:6b:cb:f5:b0:4c:59:53:aa:07:7c:1b: c8:b8:11:4d:b1:d4:df:7f:6a:f3:f0:36:b4:ec:e7: 6f:7e:b9:d4:1b:d0:f8:d1:b2:9f:3b:15:db:24:a4: 06:44:4c:af:b9:f0:8b:0a:52:e8:19:52:9e:d3:8f: 3d:47:06:31:19:a7:94:62:42:a5:41:40:28:1c:73: 95:a1:9f:c2:17:de:ca:3f:a1:7a:7d:f0:f6:3b:38: 67:25:d5:1f:f5:52:f3:23:d1:fe:2b:42:1a:ac:fc: 14:c7:6f:c4:22:c4:cd:76:7b:74:75:6b:2e:c3:1d: d2:04:a6:f7:76:3e:9c:65:de:63:07:20:a9:04:6f: de:8c:6c:4d:9f:f3:a1:8f:14:a1:c9:95:2e:d9:b5: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.196.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:1c:d8:19:8f:11:20:92:e9:d9:2a:a2:ea:68:2a:cf:55:8d: a3:c8:3b:34:fe:80:d3:31:fd:f6:68:70:0b:82:69:e2:03:fe: 80:c6:62:11:cc:7e:af:ee:b9:e0:ca:9c:2f:27:cd:b5:8f:32: c9:ae:fd:50:79:3e:59:c0:7d:41:8d:be:20:6f:6c:f4:a1:fd: 03:23:1e:52:74:00:ab:30:d8:53:e6:c0:3d:43:d0:8a:c3:d1: d4:0b:0f:e6:dd:fc:61:ca:e3:41:60:53:90:e6:41:4a:d1:47: 58:a7:87:3d:9f:bc:a3:48:b0:33:04:dd:a1:d2:08:95:d6:6e: 9d:0e:84:cd:9d:d0:0b:e0:e7:31:a2:ee:1e:b2:94:ee:23:49: 9a:c1:05:2f:1d:9e:89:53:2e:c9:ba:8c:22:b8:a8:25:c4:9c: ce:67:34:99:df:20:f6:36:6f:fb:42:ad:22:96:36:0e:d0:c1: 13:72:c7:3a:20:ef:84:39:ba:bb:df:a0:55:4c:a1:4d:b5:6c: b9:d0:88:00:47:44:43:4a:4b:5b:99:10:1e:77:2c:13:ce:eb: b8:72:f6:d3:98:15:64:0e:d3:8b:ca:05:a6:35:82:83:97:86: 08:ec:32:46:39:71:10:af:52:d9:5f:0c:7d:69:79:f6:95:e4: d3:83:b9:66 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUyoQal1+ZgbGcjd0Xgne3ooRF/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkyMzE2MDIyN1oX DTI2MDkyMjE2MDcyN1owMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNE QTVBMjMxMENGMDZCMzM0QTY1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUmt7H0Lc6MJLMlWsn4X/sRVej2sOl25q1q2379W+Jzxgioiy8TJFIRGRgb 6OOyBBS8LyQv9lxd5x4BpcjG/vW28SWOljHoxRrHvgMnPfMBIUw9bBr6dQAIz7qs YQ3oVEt8c0L6zpuLH18CJ2vL9bBMWVOqB3wbyLgRTbHU339q8/A2tOznb3651BvQ +NGynzsV2ySkBkRMr7nwiwpS6BlSntOPPUcGMRmnlGJCpUFAKBxzlaGfwhfeyj+h en3w9js4ZyXVH/VS8yPR/itCGqz8FMdvxCLEzXZ7dHVrLsMd0gSm93Y+nGXeYwcg qQRv3oxsTZ/zoY8UocmVLtm1Ks8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFErOCt27W/O0mxzaWiMQzwazNKZZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JiNjlkNjY3 LTE3YTQtNGZkZC05YzU3LTExMjIwMzNlZjk5OS8wLzRBQ0UwQUREQkI1QkYzQjQ5 QjFDREE1QTIzMTBDRjA2QjMzNEE2NTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGcQwDQYJKoZIhvcNAQELBQADggEBAG8c2BmPESCS6dkqoupoKs9VjaPIOzT+ gNMx/fZocAuCaeID/oDGYhHMfq/uueDKnC8nzbWPMsmu/VB5PlnAfUGNviBvbPSh /QMjHlJ0AKsw2FPmwD1D0IrD0dQLD+bd/GHK40FgU5DmQUrRR1inhz2fvKNIsDME 3aHSCJXWbp0OhM2d0Avg5zGi7h6ylO4jSZrBBS8dnolTLsm6jCK4qCXEnM5nNJnf IPY2b/tCrSKWNg7QwRNyxzog74Q5urvfoFVMoU21bLnQiABHRENKS1uZEB53LBPO 67hy9tOYFWQO04vKBaY1goOXhgjsMkY5cRCvUtlfDH1pefaV5NODuWY= -----END CERTIFICATE-----Generated at Tue Nov 4 18:32:09 2025 by rpki-client