$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.cer (raw, json) Hash identifier: Xpk30VLuBeCY4vbwFIRS/ONWyUbhbeI6vuseot7P5cI= Subject key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 68B574D77296765649DB9AD021991C1AB4280CD1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft caRepository: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 21:53:03 +0000 Certificate not after: Thu 02 Apr 2026 21:58:03 +0000 Subordinate resources: IP: 157.20.94.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b5:74:d7:72:96:76:56:49:db:9a:d0:21:99:1c:1a:b4:28:0c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 3 21:53:03 2025 GMT Not After : Apr 2 21:58:03 2026 GMT Subject: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:ec:9d:ab:6e:83:08:58:12:0d:46:ad:bc: 9c:0c:68:34:ee:33:9e:24:ac:14:4d:03:14:39:8d: cd:7b:0f:fd:65:c8:7b:db:99:b1:70:5d:30:40:f1: 43:fa:bb:98:48:5c:c0:a3:ba:f4:29:41:97:88:90: 10:33:a2:44:bc:a0:f2:f7:1e:e7:e3:a4:41:64:66: 96:f5:5d:2e:0e:48:3c:66:00:00:d9:8f:65:4d:b8: f8:bc:72:14:44:ad:d2:40:f7:e9:26:50:13:be:5d: 85:00:49:91:c3:b4:06:d4:42:d0:f5:51:2f:7d:9f: 56:69:23:d9:f9:33:21:0b:94:22:a5:b6:b4:d2:56: b8:cd:92:f9:59:a4:53:d9:14:1a:68:1f:4d:b4:bb: e6:0f:5f:a3:c7:bf:64:11:36:d2:5d:33:90:b6:37: f5:aa:af:57:4c:b4:0b:81:0e:7a:da:a1:30:0a:7a: 2c:73:cf:0a:8e:e0:63:92:74:f0:14:05:cd:8f:fd: 97:aa:3d:4d:2f:e8:6c:1e:01:0a:4d:52:d2:5d:03: 60:da:7b:aa:e7:c6:4f:a9:4c:4a:a0:dc:81:7b:33: 83:b8:49:a3:d0:1e:e9:62:3d:dd:9d:85:4b:76:1a: ed:c6:ad:19:23:2d:df:89:6e:bd:e4:cf:ab:0f:2b: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.94.0/24 Signature Algorithm: sha256WithRSAEncryption 52:37:6c:f8:57:90:fa:54:a3:6e:74:1c:6e:26:32:32:26:00: e4:e1:6d:9a:b8:41:5e:86:70:93:bf:65:eb:b0:cf:70:08:6e: 78:f3:3d:b9:da:e8:c2:57:a0:7b:e4:72:e6:eb:9f:5d:45:09: bf:04:d4:1f:e8:79:b2:07:d6:74:68:17:22:7a:2f:53:13:b1: a1:02:13:27:e9:54:38:ce:78:97:22:f6:3a:ac:8c:59:76:2c: 89:db:00:50:b0:93:ad:da:c2:b4:91:6c:65:5b:bf:b3:32:43: 71:00:b7:ac:5d:fb:fd:5c:4d:e8:28:4d:81:d4:d5:97:4a:be: 8a:27:93:34:bc:d5:69:68:ae:ca:22:b1:d1:91:93:9b:e6:9a: 46:a4:34:93:65:f4:73:0e:bf:7e:61:6d:c2:4b:99:b0:67:f8: b0:03:55:50:06:44:35:49:0b:d2:26:d9:3b:3f:a1:a8:9d:3b: 01:ec:ab:3a:c0:3b:2e:53:67:1c:71:27:5e:20:a2:46:2f:b9: 57:5e:4a:2f:95:17:9f:40:53:ea:92:d4:44:d4:49:e3:5a:79: 5b:b2:c6:06:b1:cf:61:7c:63:24:10:75:8e:14:a2:29:f9:4a: 10:15:6e:e1:b2:35:cf:68:3c:4a:27:02:9e:0e:42:a3:47:ad: da:a7:29:59 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaLV013KWdlZJ25rQIZkcGrQoDNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQwMzIxNTMwM1oX DTI2MDQwMjIxNTgwM1owMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3 Mjc2NjM3NEVBMDNFNkYxOEY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnT7J2rboMIWBINRq28nAxoNO4zniSsFE0DFDmNzXsP/WXIe9uZsXBdMEDx Q/q7mEhcwKO69ClBl4iQEDOiRLyg8vce5+OkQWRmlvVdLg5IPGYAANmPZU24+Lxy FESt0kD36SZQE75dhQBJkcO0BtRC0PVRL32fVmkj2fkzIQuUIqW2tNJWuM2S+Vmk U9kUGmgfTbS75g9fo8e/ZBE20l0zkLY39aqvV0y0C4EOetqhMAp6LHPPCo7gY5J0 8BQFzY/9l6o9TS/obB4BCk1S0l0DYNp7qufGT6lMSqDcgXszg7hJo9Ae6WI93Z2F S3Ya7catGSMt34luveTPqw8r5K0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH7Wmw2yMuQZ6Q1ydmN06gPm8Y9zMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MmQxNzUy LTQ4NTMtNGM3NC1iNTc0LTk5NGQzYjEyNDA5MC8wLzdFRDY5QjBEQjIzMkU0MTlF OTBENzI3NjYzNzRFQTAzRTZGMThGNzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFF4wDQYJKoZIhvcNAQELBQADggEBAFI3bPhXkPpUo250HG4mMjImAOThbZq4 QV6GcJO/Zeuwz3AIbnjzPbna6MJXoHvkcubrn11FCb8E1B/oebIH1nRoFyJ6L1MT saECEyfpVDjOeJci9jqsjFl2LInbAFCwk63awrSRbGVbv7MyQ3EAt6xd+/1cTego TYHU1ZdKvoonkzS81WlorsoisdGRk5vmmkakNJNl9HMOv35hbcJLmbBn+LADVVAG RDVJC9Im2Ts/oaidOwHsqzrAOy5TZxxxJ14gokYvuVdeSi+VF59AU+qS1ETUSeNa eVuyxgaxz2F8YyQQdY4Uoin5ShAVbuGyNc9oPEonAp4OQqNHrdqnKVk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:50 2025 by rpki-client