$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer (raw, json) Hash identifier: PVmDFKmMVnPqZ6SCMQjpqqZaWO+Dyjf7/SJczdoq2g4= Subject key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 262405565D1CD11242166CA3D56DBF2864BC8015 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft caRepository: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 28 Oct 2025 18:29:02 +0000 Certificate not after: Tue 27 Oct 2026 18:34:02 +0000 Subordinate resources: IP: 160.191.180.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:24:05:56:5d:1c:d1:12:42:16:6c:a3:d5:6d:bf:28:64:bc:80:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 28 18:29:02 2025 GMT Not After : Oct 27 18:34:02 2026 GMT Subject: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5c:fe:05:cb:8b:2b:07:42:55:e0:88:69:7a: 5f:0d:9d:9f:91:cc:56:7a:60:e9:e4:6c:5b:9c:c3: 10:e6:a2:68:75:1e:28:61:68:22:66:5c:70:a5:a8: 6f:ec:b7:57:20:ca:34:ac:49:b2:b4:05:42:a9:1c: 48:d7:60:bf:98:e8:9a:2e:f5:f5:f6:a1:d3:72:2b: a8:18:78:5d:dc:11:dd:93:36:f6:e1:80:8f:dc:6e: c3:50:00:95:04:9d:6f:88:3e:3f:78:83:24:c5:a7: 2d:ae:d2:86:c5:88:ab:67:3e:9b:06:75:b5:9d:62: 65:de:80:88:e6:aa:44:bb:19:33:37:be:27:35:13: 87:65:0e:d0:92:7e:a4:54:01:39:fe:f6:77:e8:15: ac:64:0a:15:c5:df:ab:03:2d:90:00:71:16:93:83: a9:b3:68:8f:0d:54:11:79:d6:1b:81:e8:7f:c0:61: 40:00:19:54:02:a7:22:5b:ff:5d:2f:75:94:65:3c: 4b:83:b4:16:20:d6:30:e6:4c:47:84:b6:81:55:66: 4e:d0:9a:0b:3b:5d:a7:1e:75:44:40:6e:ce:ac:c9: 24:c7:5a:f2:36:e7:d0:a2:82:ae:53:09:7b:1d:54: c9:aa:de:af:cc:f2:d8:45:43:67:bf:bc:72:17:b5: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.180.0/23 Signature Algorithm: sha256WithRSAEncryption 88:0e:26:c6:50:60:17:01:e0:33:0e:96:e0:8e:ba:5e:81:06: 25:a7:71:39:6e:14:fa:fc:55:29:ca:56:bf:8f:51:e5:9c:6d: 05:c9:9d:c6:61:57:6d:69:12:12:97:28:7e:32:63:1e:44:8d: 0e:d8:37:8e:8a:6c:73:e4:69:32:e8:30:2d:6a:74:74:9c:15: 88:37:4d:ea:ab:a4:80:f5:91:ab:e3:5b:4f:4f:fb:79:3b:eb: 4a:53:55:4e:fc:f7:ed:95:74:65:b8:8a:91:d5:27:a4:1f:2a: 47:ff:bc:41:ca:b3:eb:e4:38:23:92:16:82:49:ee:0d:3c:f8: 93:9e:8d:fd:7d:ef:cf:20:2e:d7:c7:8c:23:9d:a1:74:71:7c: 1d:91:22:ee:90:c2:0b:d4:ed:4a:09:67:c7:e7:94:00:11:27: 66:73:82:73:d3:b8:ba:df:55:54:8d:b6:57:68:75:ba:a8:52: 82:89:c8:5f:1e:a1:59:da:80:a3:b9:a2:ca:00:b7:0c:19:69: a0:03:06:11:e8:bc:84:ca:78:7d:76:54:62:cc:76:81:ca:ac: 2d:41:a6:2f:d4:d3:c9:68:66:c9:03:22:08:d6:dd:4a:da:4a: ca:e6:77:a1:7a:99:ed:68:cf:51:06:e6:bb:26:de:ec:3d:6f: 36:08:bb:b3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJiQFVl0c0RJCFmyj1W2/KGS8gBUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyODE4MjkwMloX DTI2MTAyNzE4MzQwMlowMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTcz RTQ0RTU5RTJDMDAwQjk0RjhBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO1c/gXLiysHQlXgiGl6Xw2dn5HMVnpg6eRsW5zDEOaiaHUeKGFoImZccKWo b+y3VyDKNKxJsrQFQqkcSNdgv5jomi719fah03IrqBh4XdwR3ZM29uGAj9xuw1AA lQSdb4g+P3iDJMWnLa7ShsWIq2c+mwZ1tZ1iZd6AiOaqRLsZMze+JzUTh2UO0JJ+ pFQBOf72d+gVrGQKFcXfqwMtkABxFpODqbNojw1UEXnWG4Hof8BhQAAZVAKnIlv/ XS91lGU8S4O0FiDWMOZMR4S2gVVmTtCaCztdpx51REBuzqzJJMda8jbn0KKCrlMJ ex1Uyarer8zy2EVDZ7+8che1AX0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGJH0arzsVtQ06c+ROWeLAALlPikMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1OTYxMmEy LTQ0MzMtNDJiOS04ZjRmLWI4NDc3NzZhY2FmZC8wLzYyNDdEMUFBRjNCMTVCNTBE M0E3M0U0NEU1OUUyQzAwMEI5NEY4QTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgv7QwDQYJKoZIhvcNAQELBQADggEBAIgOJsZQYBcB4DMOluCOul6BBiWncTlu FPr8VSnKVr+PUeWcbQXJncZhV21pEhKXKH4yYx5EjQ7YN46KbHPkaTLoMC1qdHSc FYg3TeqrpID1kavjW09P+3k760pTVU789+2VdGW4ipHVJ6QfKkf/vEHKs+vkOCOS FoJJ7g08+JOejf19788gLtfHjCOdoXRxfB2RIu6QwgvU7UoJZ8fnlAARJ2ZzgnPT uLrfVVSNtldodbqoUoKJyF8eoVnagKO5osoAtwwZaaADBhHovITKeH12VGLMdoHK rC1Bpi/U08loZskDIgjW3UraSsrmd6F6me1oz1EG5rsm3uw9bzYIu7M= -----END CERTIFICATE-----Generated at Tue Nov 4 12:35:03 2025 by rpki-client