$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer (raw, json) Hash identifier: IJIMr4EW6bicuCA0Duq1Nw4VJZ3PqYGv/QgSt/vN3L8= Subject key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4C732EE06471E90774F3BA0E2A185B9966B432F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft caRepository: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 14 May 2025 14:24:23 +0000 Certificate not after: Wed 13 May 2026 14:29:23 +0000 Subordinate resources: IP: 157.66.131.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:73:2e:e0:64:71:e9:07:74:f3:ba:0e:2a:18:5b:99:66:b4:32:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 14 14:24:23 2025 GMT Not After : May 13 14:29:23 2026 GMT Subject: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:bf:09:50:3b:3c:cf:83:22:dd:3b:40:bd: 57:02:03:79:ae:66:ba:cf:70:e2:46:34:b0:3e:39: 1c:69:06:16:7e:ac:99:0f:71:1d:27:fd:86:e2:9a: 01:64:6b:19:a6:25:27:69:d3:1d:ec:14:8c:61:f9: 5d:a7:9b:14:b5:8a:26:76:19:55:60:b8:bf:16:7b: e5:6a:ed:d3:f8:5f:7e:27:c3:4a:4d:c2:c9:6a:b4: 4a:14:ad:f7:f3:f0:01:3a:d6:4d:c4:eb:f4:35:3a: 6b:2f:0b:b0:56:ca:35:a1:62:2c:17:4e:56:48:6f: f0:a4:56:39:b3:51:1d:76:32:ad:e6:a3:45:e4:ed: cb:63:5d:37:8a:39:03:6c:07:a6:88:49:93:8e:92: 37:60:df:7a:3b:74:73:92:ce:e9:ea:cf:b7:f0:70: 61:5a:53:cc:69:89:2f:5b:ec:6f:08:c4:9b:69:bb: 5c:de:dd:85:0a:87:f9:a0:d7:b7:79:f4:e7:10:4c: dc:54:cd:fa:74:13:0a:6b:4d:8f:bb:37:53:56:a4: f8:05:f2:e8:22:a1:b3:b6:93:0d:d9:1b:db:4d:de: 41:6e:3b:6b:a9:fa:93:99:1c:97:bd:ac:a3:99:23: 83:b2:0c:8d:6d:76:7d:88:59:c8:72:0e:51:9e:1c: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.131.0/24 Signature Algorithm: sha256WithRSAEncryption 53:93:5e:7c:e5:09:f3:41:7b:fb:2b:77:b8:6a:0b:12:8a:5e: 0a:64:af:39:31:c0:69:4d:ff:61:c4:17:fa:d9:cb:ca:f6:e1: 10:aa:c0:94:37:c8:35:71:44:07:a0:c7:4e:a7:84:22:62:09: fe:bd:af:8c:ab:b0:cc:59:53:12:f5:ae:26:c0:dd:46:c2:57: 43:f0:55:9e:21:18:91:6f:58:2c:2f:4d:af:a1:1f:59:55:ef: da:f7:4b:1a:ef:b9:be:18:24:5f:a2:69:8b:f1:cd:05:19:7d: 41:1a:e8:de:58:97:2a:f6:b2:6c:d2:f0:9c:89:31:66:e3:5c: 03:55:52:15:1f:87:5b:fd:4c:aa:59:d2:ad:5c:fb:87:69:df: ec:dd:eb:69:9b:35:71:35:a5:3e:47:b4:88:d1:3f:aa:2a:5e: 55:af:a1:38:9c:f2:ed:a5:12:91:fa:86:02:a6:e4:86:66:80: 0f:14:9b:93:34:50:97:c8:10:2d:6a:8e:ca:41:b0:c3:52:fa: ae:ae:0f:97:68:ed:be:c2:60:d5:77:f9:16:42:6f:34:fc:22: a8:36:7a:e4:da:2a:5d:ed:7b:7a:f1:e7:84:53:0d:d9:63:78: 34:e5:fa:2e:09:6b:ef:4f:8b:19:b5:90:1c:d4:ba:3f:a6:00: cc:e0:bd:b0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTHMu4GRx6Qd087oOKhhbmWa0MvgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUxNDE0MjQyM1oX DTI2MDUxMzE0MjkyM1owMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVD QTJBNDI3RTA5N0YyODFDQ0VCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpovwlQOzzPgyLdO0C9VwIDea5mus9w4kY0sD45HGkGFn6smQ9xHSf9huKa AWRrGaYlJ2nTHewUjGH5XaebFLWKJnYZVWC4vxZ75Wrt0/hffifDSk3CyWq0ShSt 9/PwATrWTcTr9DU6ay8LsFbKNaFiLBdOVkhv8KRWObNRHXYyreajReTty2NdN4o5 A2wHpohJk46SN2Dfejt0c5LO6erPt/BwYVpTzGmJL1vsbwjEm2m7XN7dhQqH+aDX t3n05xBM3FTN+nQTCmtNj7s3U1ak+AXy6CKhs7aTDdkb203eQW47a6n6k5kcl72s o5kjg7IMjW12fYhZyHIOUZ4c7UMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFITVMoli0K3Kdy7KKkJ+CX8oHM60MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmOGQ4MjRk LWQ2YTEtNDU0My05Y2YwLWQ5OTI2ODMyZjI5Zi8wLzg0RDUzMjg5NjJEMEFEQ0E3 NzJFQ0EyQTQyN0UwOTdGMjgxQ0NFQjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQoMwDQYJKoZIhvcNAQELBQADggEBAFOTXnzlCfNBe/srd7hqCxKKXgpkrzkx wGlN/2HEF/rZy8r24RCqwJQ3yDVxRAegx06nhCJiCf69r4yrsMxZUxL1ribA3UbC V0PwVZ4hGJFvWCwvTa+hH1lV79r3Sxrvub4YJF+iaYvxzQUZfUEa6N5Ylyr2smzS 8JyJMWbjXANVUhUfh1v9TKpZ0q1c+4dp3+zd62mbNXE1pT5HtIjRP6oqXlWvoTic 8u2lEpH6hgKm5IZmgA8Um5M0UJfIEC1qjspBsMNS+q6uD5do7b7CYNV3+RZCbzT8 Iqg2euTaKl3te3rx54RTDdljeDTl+i4Ja+9Pixm1kBzUuj+mAMzgvbA= -----END CERTIFICATE-----Generated at Sun Jun 15 23:06:45 2025 by rpki-client