$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer File: 73238FE50473DF8F457921BE1B0C04764209BBF1.cer (raw, json) Hash identifier: oy8s9tJ4ZDmK+7CuyynQvs2nC5wYSUeFbmDt6gezpOg= Subject key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0ECDD6956653FE24596ACEEFADFABE48D4B5389C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft caRepository: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Jun 2025 22:47:58 +0000 Certificate not after: Thu 18 Jun 2026 22:52:58 +0000 Subordinate resources: IP: 160.22.100.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cd:d6:95:66:53:fe:24:59:6a:ce:ef:ad:fa:be:48:d4:b5:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 19 22:47:58 2025 GMT Not After : Jun 18 22:52:58 2026 GMT Subject: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:f2:14:f1:f1:b2:f1:2f:d9:62:ff:a6:47: 3e:67:12:19:ec:03:bc:34:30:4b:11:5f:cc:7d:97: 1c:6d:03:0b:33:41:92:cf:54:ac:b7:f8:06:1f:ba: 9d:6e:cb:e1:69:90:ba:1e:13:8f:87:23:64:82:f5: 41:64:6e:20:9f:7e:13:6e:43:42:3d:d5:23:f2:fe: 57:44:4c:16:77:26:a8:d8:60:50:52:bf:31:22:00: 0c:f3:68:c2:e5:1b:9c:2a:5b:ed:6e:c5:a4:5f:16: 0e:8c:97:50:0a:76:49:9f:db:39:87:f2:68:77:8b: 86:e4:b3:dd:0c:8f:c7:f5:af:fa:2e:e0:83:19:de: 48:db:87:24:10:93:c3:33:c4:f3:31:12:e5:09:54: 5d:55:db:8e:51:ec:9b:6e:e3:1e:98:4c:2b:26:d6: 45:9b:96:bc:01:fa:8c:c1:5a:c0:d9:31:04:33:af: 83:6e:33:a9:95:f2:d1:7d:89:9f:ec:96:f6:12:58: 34:bd:f5:75:29:ed:49:92:c3:39:6b:53:01:38:80: fd:f8:e1:90:82:80:56:2d:c7:95:e7:af:1d:d4:ae: a6:40:ef:3b:9e:b0:09:cb:7f:3c:8e:93:7f:3b:06: e8:a6:9a:09:cb:86:ed:db:8d:ef:3b:5d:6f:b0:90: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.100.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:26:6c:02:f2:bf:54:0c:77:80:93:1a:0b:05:ff:c5:c1:df: 1e:d4:9d:9d:ba:ca:99:67:05:e6:d5:58:0f:43:e8:11:8b:7b: 2b:97:eb:79:19:58:e2:14:be:7b:98:12:d4:2d:ae:24:be:44: 5c:8a:fb:e1:be:1b:b8:a6:9b:94:5e:44:11:a7:2f:a1:fc:1b: 4c:da:cd:7b:cc:1b:99:a0:4a:b3:0d:20:df:ac:6f:d4:ad:41: a2:3d:c0:e1:31:41:68:2b:6d:b2:ad:f9:ac:2b:2d:4d:8a:22: 4f:3a:b5:ea:c0:75:5b:a9:dd:db:83:5d:7f:7d:d3:58:d3:01: ee:47:5b:39:4a:04:41:ea:67:02:28:80:4c:53:78:21:38:32: 88:3f:71:2d:ed:9f:01:89:fd:a6:1d:42:59:a0:5f:ae:ea:db: df:4d:be:c2:d3:21:f9:ac:64:81:c0:c0:ff:ed:1c:23:27:3f: 98:28:de:9c:d0:39:90:9e:32:83:0b:bf:6d:e2:b9:5f:3c:70: 32:42:68:24:0b:df:f2:cd:db:e3:a0:54:e8:54:ad:7f:19:ee: 79:6e:b2:9e:89:1b:e5:c3:22:7a:f4:b9:ae:88:ea:f9:45:6c: 37:80:1f:11:b7:ad:5b:01:86:5e:1b:3b:0f:49:4e:99:6b:77: 5c:ab:ed:db -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDs3WlWZT/iRZas7vrfq+SNS1OJwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxOTIyNDc1OFoX DTI2MDYxODIyNTI1OFowMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1Nzky MUJFMUIwQzA0NzY0MjA5QkJGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTn8hTx8bLxL9li/6ZHPmcSGewDvDQwSxFfzH2XHG0DCzNBks9UrLf4Bh+6 nW7L4WmQuh4Tj4cjZIL1QWRuIJ9+E25DQj3VI/L+V0RMFncmqNhgUFK/MSIADPNo wuUbnCpb7W7FpF8WDoyXUAp2SZ/bOYfyaHeLhuSz3QyPx/Wv+i7ggxneSNuHJBCT wzPE8zES5QlUXVXbjlHsm27jHphMKybWRZuWvAH6jMFawNkxBDOvg24zqZXy0X2J n+yW9hJYNL31dSntSZLDOWtTATiA/fjhkIKAVi3HleevHdSupkDvO56wCct/PI6T fzsG6KaaCcuG7duN7ztdb7CQ2P0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHMjj+UEc9+PRXkhvhsMBHZCCbvxMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwYThjZTZj LTgyOTAtNGI5ZC05YWVkLTA3NTRkM2ZkOGQzMi8wLzczMjM4RkU1MDQ3M0RGOEY0 NTc5MjFCRTFCMEMwNDc2NDIwOUJCRjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgFmQwDQYJKoZIhvcNAQELBQADggEBAB4mbALyv1QMd4CTGgsF/8XB3x7UnZ26 yplnBebVWA9D6BGLeyuX63kZWOIUvnuYEtQtriS+RFyK++G+G7imm5ReRBGnL6H8 G0zazXvMG5mgSrMNIN+sb9StQaI9wOExQWgrbbKt+awrLU2KIk86terAdVup3duD XX9901jTAe5HWzlKBEHqZwIogExTeCE4Mog/cS3tnwGJ/aYdQlmgX67q299NvsLT IfmsZIHAwP/tHCMnP5go3pzQOZCeMoMLv23iuV88cDJCaCQL3/LN2+OgVOhUrX8Z 7nlusp6JG+XDInr0ua6I6vlFbDeAHxG3rVsBhl4bOw9JTplrd1yr7ds= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:20 2025 by rpki-client