$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer File: 69FEA3D523BC4635AE385A6D91412834159FF34B.cer (raw, json) Hash identifier: IdzwopYOY7CsSfyChyIqregm11mKMVPAs+TZK6YT6/E= Subject key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 58DEF3C271D88CD6D92C70EC50FB36DE593F85CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft caRepository: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Jun 2025 11:33:23 +0000 Certificate not after: Wed 24 Jun 2026 11:38:23 +0000 Subordinate resources: IP: 160.22.217.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:de:f3:c2:71:d8:8c:d6:d9:2c:70:ec:50:fb:36:de:59:3f:85:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 25 11:33:23 2025 GMT Not After : Jun 24 11:38:23 2026 GMT Subject: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:75:0b:42:ce:8d:5e:89:da:1b:e7:96:69: 1b:9d:17:42:de:5e:20:5d:de:21:32:5c:0a:d0:b6: 18:eb:54:7f:31:62:f2:bc:1a:fe:72:3b:88:36:12: e0:cf:4f:9d:f7:eb:31:5f:97:7e:ea:ea:7c:1f:02: 41:d9:74:f7:03:80:b4:33:59:cf:0b:62:2b:82:a1: 33:28:a2:41:bd:0f:ef:42:73:9b:aa:de:52:30:b6: 7c:1c:4b:78:24:cf:3f:cb:87:b7:c1:c1:84:ce:b5: 29:47:4f:24:61:c6:a9:fe:0c:70:94:d2:06:e0:7a: 07:8a:43:8c:26:9b:21:9d:a4:78:4f:62:5f:fb:7e: 4c:a7:04:42:96:ca:06:27:6b:76:e6:05:13:f8:08: 17:1e:fd:4f:17:7f:71:6d:d4:95:3a:b3:4c:6c:9d: 98:2c:13:b9:89:3d:76:81:4a:ca:84:1f:a8:ee:25: 1a:80:5d:5b:b7:e3:b0:c8:c0:9f:e2:7c:2f:96:f5: 53:dd:1f:e0:73:0f:64:4c:56:0e:c7:02:6b:4f:6f: 2f:4d:03:e5:81:0e:34:2c:53:e2:2c:78:1f:74:b8: 89:dd:a3:af:65:24:bc:38:8a:86:d5:68:5d:9b:99: 04:47:8d:49:88:36:10:77:63:ed:5c:0f:10:87:f5: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.217.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:d2:d7:46:ad:87:5b:d8:e2:a3:b0:8b:7f:bc:8d:63:21:6c: 8a:9b:c7:93:1b:06:89:c0:db:98:fd:07:da:38:0d:d5:b3:54: 7c:90:67:7d:5a:3e:84:fe:97:43:78:c3:67:51:3e:04:34:51: e0:83:3b:67:d4:42:28:0a:00:83:c8:5b:97:72:9c:85:8a:3f: a8:1c:90:66:6c:c3:cc:7b:c3:2d:98:2e:71:95:e0:e0:6c:48: c4:11:95:8d:93:4f:50:94:40:dc:27:46:07:b3:74:76:e4:2f: 83:8b:ec:81:82:ec:01:73:ab:25:ab:b6:26:41:b3:4a:86:39: 08:e6:87:c1:d1:d6:e2:86:45:13:91:2b:69:32:53:ec:d6:8e: 92:b8:d4:96:da:59:36:1e:2f:e8:d8:a6:7a:60:4a:60:25:16: 16:71:ea:1b:68:02:63:ef:eb:11:ff:3e:ca:a8:54:c9:19:d9: d1:06:98:47:60:09:68:0b:1d:2a:64:aa:2a:c4:e1:88:99:ff: 7b:bb:59:bf:42:2e:b4:c1:32:68:01:fe:1b:d0:f1:b4:38:39: b4:c1:46:a1:41:bd:af:db:f7:bf:48:32:48:30:54:22:6f:06: b7:58:b4:b6:bd:e9:76:87:12:bc:b5:80:83:76:d8:b0:a5:74: 29:01:3b:f1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWN7zwnHYjNbZLHDsUPs23lk/hc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYyNTExMzMyM1oX DTI2MDYyNDExMzgyM1owMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1 QTZEOTE0MTI4MzQxNTlGRjM0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1ldQtCzo1eidob55ZpG50XQt5eIF3eITJcCtC2GOtUfzFi8rwa/nI7iDYS 4M9PnffrMV+XfurqfB8CQdl09wOAtDNZzwtiK4KhMyiiQb0P70Jzm6reUjC2fBxL eCTPP8uHt8HBhM61KUdPJGHGqf4McJTSBuB6B4pDjCabIZ2keE9iX/t+TKcEQpbK BidrduYFE/gIFx79Txd/cW3UlTqzTGydmCwTuYk9doFKyoQfqO4lGoBdW7fjsMjA n+J8L5b1U90f4HMPZExWDscCa09vL00D5YEONCxT4ix4H3S4id2jr2UkvDiKhtVo XZuZBEeNSYg2EHdj7VwPEIf1whsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGn+o9UjvEY1rjhabZFBKDQVn/NLMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlN2Q3Mzhl LTJjYzctNGJkMi1iYjI4LTkxNDJlMWJhYTBiYS8wLzY5RkVBM0Q1MjNCQzQ2MzVB RTM4NUE2RDkxNDEyODM0MTU5RkYzNEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgFtkwDQYJKoZIhvcNAQELBQADggEBAAvS10ath1vY4qOwi3+8jWMhbIqbx5Mb BonA25j9B9o4DdWzVHyQZ31aPoT+l0N4w2dRPgQ0UeCDO2fUQigKAIPIW5dynIWK P6gckGZsw8x7wy2YLnGV4OBsSMQRlY2TT1CUQNwnRgezdHbkL4OL7IGC7AFzqyWr tiZBs0qGOQjmh8HR1uKGRRORK2kyU+zWjpK41JbaWTYeL+jYpnpgSmAlFhZx6hto AmPv6xH/PsqoVMkZ2dEGmEdgCWgLHSpkqirE4YiZ/3u7Wb9CLrTBMmgB/hvQ8bQ4 ObTBRqFBva/b979IMkgwVCJvBrdYtLa96XaHEry1gIN22LCldCkBO/E= -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:23 2025 by rpki-client