$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer (raw, json) Hash identifier: LkpCLmkUcV/Rpwsa0ac8ly1o0Ty4Kjg1K6WRTwBpNDc= Subject key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 132A5488B9E92BFDBE6D33CBE0EF243BFE8F23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft caRepository: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 May 2025 10:38:58 +0000 Certificate not after: Thu 28 May 2026 10:43:58 +0000 Subordinate resources: IP: 160.22.126.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 13:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2a:54:88:b9:e9:2b:fd:be:6d:33:cb:e0:ef:24:3b:fe:8f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 29 10:38:58 2025 GMT Not After : May 28 10:43:58 2026 GMT Subject: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:db:9d:01:32:28:a6:de:1e:45:22:d0:da: 5f:57:34:cd:d7:18:2e:78:22:09:f7:10:fd:3c:8c: b7:f5:ef:07:fc:99:44:f4:1f:ad:0e:69:35:ec:5b: 1b:d1:09:1a:6c:cc:e4:74:be:47:f0:6e:aa:75:6a: e7:8f:7d:a2:ba:65:25:a6:74:8f:32:5a:3a:9a:6a: 74:15:3c:9f:46:3d:ea:38:a6:b7:4a:11:58:78:8b: 20:fe:36:2d:1e:d9:18:14:82:eb:e3:6d:72:58:64: 45:fa:26:c7:61:bd:38:17:e3:b5:14:c4:e7:35:63: 83:26:83:4d:09:a0:ee:0d:7e:87:12:2b:6d:1c:1d: 23:bd:da:91:98:ee:dd:7a:75:2b:12:31:13:28:11: ef:43:d9:e7:b8:00:db:31:35:fc:e0:be:f8:53:47: 07:3c:36:6f:be:1b:72:24:18:e9:4f:4f:b4:dd:f0: 4f:e1:65:d5:63:0b:c8:7c:7d:d8:20:f2:92:6c:ed: 8f:76:e3:2f:a6:97:a6:40:e3:d8:9e:28:c7:a0:59: 23:cb:a8:2d:1d:98:b8:2a:66:71:ad:d2:e8:5c:f6: 6a:71:d3:16:39:72:95:5e:ef:ba:98:71:5f:7c:b2: 75:48:2a:4f:ce:40:de:8a:27:99:b1:92:8f:02:07: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.126.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:6f:7a:2d:b1:a5:d3:3b:bb:2d:d6:9d:91:eb:2c:1a:df:9d: 8b:e5:d1:d8:09:ee:75:cd:2c:92:ff:57:b0:36:67:a2:cc:f3: 95:eb:59:80:eb:75:be:fe:5a:12:44:88:21:32:08:44:fe:eb: ed:21:6f:93:6c:c9:f7:a9:6d:f4:f3:c7:5f:fb:4b:79:b8:21: 6a:39:85:c0:27:72:df:e5:1a:cb:25:c3:79:2e:24:83:5d:86: 78:81:a4:d9:ab:ad:66:04:9e:b1:8b:d3:bc:7a:72:cd:8d:9f: ad:2a:84:3d:5c:43:29:f3:39:c9:2e:9a:34:72:54:33:79:74: 04:b8:6c:f1:57:32:e8:2a:de:e4:98:95:fb:31:30:f9:8f:ac: 36:9b:9a:8d:45:b6:f5:15:37:b8:ac:71:81:e7:fd:3c:b5:9e: cf:ee:8a:c0:45:d7:76:a9:10:ab:95:c1:ca:14:97:04:f5:95: 0a:80:f2:3c:cb:b3:f6:ec:a2:b1:ed:93:3b:09:02:34:50:1b: 51:8e:2e:cb:f1:fd:b4:66:2a:14:78:c1:5b:6a:6d:25:0a:fd: 86:0c:a0:13:6d:81:cb:17:68:5e:b3:44:a9:8b:1e:f5:73:54: 98:db:a5:29:0a:d6:90:7e:d4:65:24:33:38:ea:90:3c:1a:0d: 3b:20:be:2c -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITEypUiLnpK/2+bTPL4O8kO/6PIzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDYwRjhCRTlDMTY2 MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQwHhcNMjUwNTI5MTAzODU4WhcN MjYwNTI4MTA0MzU4WjAzMTEwLwYDVQQDEyg2MUU5QjY3OENENDJEQTJBMUIzRUYz RDg4NzlFREY3RUNEMkEwMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTHbnQEyKKbeHkUi0NpfVzTN1xgueCIJ9xD9PIy39e8H/JlE9B+tDmk17Fsb 0QkabMzkdL5H8G6qdWrnj32iumUlpnSPMlo6mmp0FTyfRj3qOKa3ShFYeIsg/jYt HtkYFILr421yWGRF+ibHYb04F+O1FMTnNWODJoNNCaDuDX6HEittHB0jvdqRmO7d enUrEjETKBHvQ9nnuADbMTX84L74U0cHPDZvvhtyJBjpT0+03fBP4WXVYwvIfH3Y IPKSbO2PduMvppemQOPYnijHoFkjy6gtHZi4KmZxrdLoXPZqcdMWOXKVXu+6mHFf fLJ1SCpPzkDeiieZsZKPAgdkFwIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUYem2eM1C2iobPvPYh57ffs0qAGMwHwYDVR0jBBgwFoAUYPi+ nBZiXEJLJp7gbGSoO6uFBtQwDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEv NjBGOEJFOUMxNjYyNUM0MjRCMjY5RUUwNkM2NEE4M0JBQjg1MDZENC5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvWVBp LW5CWmlYRUpMSnA3Z2JHU29PNnVGQnRRLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzA1NDZlMDlhLWMwMDctNGIwYy05NDYwLTdjNDAzNDFjYTJmNy8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEt YzAwNy00YjBjLTk0NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFC M0VGM0Q4ODc5RURGN0VDRDJBMDA2My5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AaAWfjANBgkqhkiG9w0BAQsFAAOCAQEAf296LbGl0zu7LdadkessGt+di+XR2Anu dc0skv9XsDZnoszzletZgOt1vv5aEkSIITIIRP7r7SFvk2zJ96lt9PPHX/tLebgh ajmFwCdy3+UayyXDeS4kg12GeIGk2autZgSesYvTvHpyzY2frSqEPVxDKfM5yS6a NHJUM3l0BLhs8Vcy6Cre5JiV+zEw+Y+sNpuajUW29RU3uKxxgef9PLWez+6KwEXX dqkQq5XByhSXBPWVCoDyPMuz9uyise2TOwkCNFAbUY4uy/H9tGYqFHjBW2ptJQr9 hgygE22ByxdoXrNEqYse9XNUmNulKQrWkH7UZSQzOOqQPBoNOyC+LA== -----END CERTIFICATE-----Generated at Sun Jun 15 06:47:40 2025 by rpki-client