$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer (raw, json) Hash identifier: jQgNE0YCRW8fERPLJpJzYbNfApQ/ulLGlE/1dPZHkJM= Subject key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 79227FAE0A7F98958B0A0A3DA006A2ADD7665EEE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft caRepository: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 20:54:08 +0000 Certificate not after: Tue 16 Jun 2026 20:59:08 +0000 Subordinate resources: IP: 160.19.206.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 03:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:22:7f:ae:0a:7f:98:95:8b:0a:0a:3d:a0:06:a2:ad:d7:66:5e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 17 20:54:08 2025 GMT Not After : Jun 16 20:59:08 2026 GMT Subject: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:c2:0c:58:8d:b8:88:3a:b5:71:42:ad:cc: 9d:68:b0:17:a0:ba:de:f9:46:28:35:4d:5a:a7:ca: e7:f0:0f:70:6a:ad:67:2e:ce:51:62:7a:33:be:f8: 38:28:23:f0:70:c8:b1:6d:bb:19:cf:c2:4b:df:4c: 23:21:a2:c1:e3:fa:59:f3:2b:76:4c:a9:0e:1c:61: 99:34:43:9e:8a:80:e6:d8:c4:dd:5d:8d:06:24:21: 60:08:28:d5:1b:05:65:b2:a2:30:ec:25:86:4e:e4: 99:99:4d:97:6b:8e:ca:59:0f:dd:c3:d7:a4:f1:9b: 3d:0f:3c:83:e8:29:67:37:07:83:35:f2:ba:25:6b: 2e:e9:34:c8:fc:98:56:6e:28:62:ad:cd:f2:7b:27: 13:3c:d0:ed:a2:8e:24:eb:4c:0d:12:58:db:f2:3b: 37:35:de:68:5b:ff:0a:0a:b5:80:21:b0:55:f4:fa: dc:b1:0e:48:75:b5:42:47:3c:95:c9:98:95:fd:f1: d8:17:99:ad:76:e9:9b:32:00:eb:5a:d8:e3:a3:d7: 83:50:ab:42:8c:c9:33:fe:5f:70:94:77:8a:6b:7e: 04:b5:b5:95:28:b7:55:eb:f3:2b:b7:3a:6b:02:22: 51:33:1f:87:60:e6:49:c9:54:37:a8:e2:2f:6f:ff: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.206.0/23 Signature Algorithm: sha256WithRSAEncryption 06:e0:5e:18:1d:fd:57:39:c0:e9:2f:3c:9a:84:6e:1d:b8:18: d4:1c:4d:19:54:42:e0:2a:d8:a1:30:6d:3a:aa:c1:b0:20:30: 4f:3a:8e:0d:a7:fe:59:e0:9e:3e:65:c4:95:17:14:c4:32:62: 91:37:ff:8d:04:76:ed:af:7d:63:a8:05:8e:d6:9a:f0:0b:f1: 3e:3c:49:c8:cf:91:b9:10:85:b5:2b:bb:35:c6:b2:89:1d:e6: ba:71:20:dc:ea:12:83:43:f8:c3:c3:1b:af:b4:ee:c1:24:da: 14:c0:0a:a5:58:af:78:06:44:36:7b:47:84:57:4d:19:8d:60: b6:62:69:e1:d7:15:89:05:e8:5a:99:c0:26:23:15:90:6f:48: 15:25:31:6c:e8:b2:fb:57:7d:f1:12:00:2f:33:a0:7a:d0:e9: a0:7e:3a:35:e5:af:d1:44:61:68:80:36:3e:94:17:6f:49:86: ae:17:1f:72:bf:67:2d:ad:6c:19:92:9b:a9:85:e3:e4:c5:e6: a3:e4:13:e5:c0:db:6a:4a:47:32:29:a9:7d:ab:14:4d:70:43: db:8d:46:c8:b3:55:4b:86:80:ef:3f:7d:ea:20:a5:17:39:76: 30:21:2d:05:86:e4:8b:58:c1:7a:26:61:2f:5a:8f:00:71:63: f2:4d:b8:4a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeSJ/rgp/mJWLCgo9oAairddmXu4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxNzIwNTQwOFoX DTI2MDYxNjIwNTkwOFowMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5 NjYxOTI5QzFBRTlFM0QxOEQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaqwgxYjbiIOrVxQq3MnWiwF6C63vlGKDVNWqfK5/APcGqtZy7OUWJ6M774 OCgj8HDIsW27Gc/CS99MIyGiweP6WfMrdkypDhxhmTRDnoqA5tjE3V2NBiQhYAgo 1RsFZbKiMOwlhk7kmZlNl2uOylkP3cPXpPGbPQ88g+gpZzcHgzXyuiVrLuk0yPyY Vm4oYq3N8nsnEzzQ7aKOJOtMDRJY2/I7NzXeaFv/Cgq1gCGwVfT63LEOSHW1Qkc8 lcmYlf3x2BeZrXbpmzIA61rY46PXg1CrQozJM/5fcJR3imt+BLW1lSi3VevzK7c6 awIiUTMfh2DmSclUN6jiL2//tEMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGosydPHMUjiZemWYZKcGunj0Y0xMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiMmE5MTZh LWFkMjItNDk3OS1iZTQzLTk1MWM3NmYyZjkyMC8wLzZBMkNDOUQzQzczMTQ4RTI2 NUU5OTY2MTkyOUMxQUU5RTNEMThEMzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE84wDQYJKoZIhvcNAQELBQADggEBAAbgXhgd/Vc5wOkvPJqEbh24GNQcTRlU QuAq2KEwbTqqwbAgME86jg2n/lngnj5lxJUXFMQyYpE3/40Edu2vfWOoBY7WmvAL 8T48ScjPkbkQhbUruzXGsokd5rpxINzqEoND+MPDG6+07sEk2hTACqVYr3gGRDZ7 R4RXTRmNYLZiaeHXFYkF6FqZwCYjFZBvSBUlMWzosvtXffESAC8zoHrQ6aB+OjXl r9FEYWiANj6UF29Jhq4XH3K/Zy2tbBmSm6mF4+TF5qPkE+XA22pKRzIpqX2rFE1w Q9uNRsizVUuGgO8/feogpRc5djAhLQWG5ItYwXomYS9ajwBxY/JNuEo= -----END CERTIFICATE-----Generated at Wed Jun 18 14:57:33 2025 by rpki-client