$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer (raw, json) Hash identifier: nWFa+NSiLPsRwdF+Q2Q44i+R8925GGOcUVUAyZst+k0= Subject key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 74666C952FF75A942F7BECEF2A590A9CD25BA367 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft caRepository: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Oct 2025 19:03:30 +0000 Certificate not after: Tue 20 Oct 2026 19:08:30 +0000 Subordinate resources: IP: 157.66.238.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:66:6c:95:2f:f7:5a:94:2f:7b:ec:ef:2a:59:0a:9c:d2:5b:a3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 21 19:03:30 2025 GMT Not After : Oct 20 19:08:30 2026 GMT Subject: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fa:50:ec:08:ba:3c:0b:0c:8a:a6:27:5f:fa: 02:ff:93:9f:d2:d5:5a:aa:63:4c:41:e7:d0:87:c9: 0b:4e:4d:c5:21:d8:29:08:e5:49:ec:49:8e:7b:fe: c8:e4:8d:93:18:77:44:13:40:78:13:c6:7a:f2:84: 4d:e4:09:48:e3:28:31:c5:66:18:61:70:f6:a8:cb: 16:d7:3a:d1:7b:40:71:c7:c1:3f:b5:37:51:ce:7b: be:b3:9a:e4:22:2d:d1:d1:f8:3b:a2:9a:42:07:5c: 14:bc:f1:b7:d2:25:2e:40:b6:b8:88:28:bc:e3:03: b2:71:c3:84:5e:1b:0a:bb:22:26:17:27:17:0e:6a: 26:55:8b:ec:04:0b:d3:b9:53:f4:19:89:06:e6:a5: 16:e0:80:eb:e3:d6:09:f7:a5:6b:aa:7f:c8:a3:5d: 59:c4:60:63:e4:3b:d6:14:33:72:fc:75:a4:a2:0e: e2:80:3d:e9:e2:02:c8:c3:50:56:ab:f3:99:23:cb: 8b:03:a0:c6:fa:a4:08:0d:86:6a:ab:36:51:d1:9f: 46:81:d7:01:55:79:d0:e7:62:af:86:ac:c0:24:26: 03:86:6d:8e:9b:96:45:8a:9b:c2:f7:86:c1:36:17: 19:e4:08:77:56:a4:c5:70:29:1c:1c:b0:86:fc:4c: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.238.0/23 Signature Algorithm: sha256WithRSAEncryption 53:83:04:dc:bb:62:3a:3c:d2:eb:5c:2c:8c:26:ee:47:2b:a7: cf:c5:ec:a8:46:76:e5:90:73:05:f4:dc:ff:68:7b:fc:7b:b3: 1d:80:08:b5:40:da:6d:93:c3:7a:fd:c5:90:38:a9:04:74:e9: 58:af:84:c5:a2:c9:0c:ef:f9:f6:ca:71:9c:ce:25:7f:c8:c8: f9:eb:fa:a4:30:97:2d:4c:05:e8:05:bf:6d:25:60:86:fc:1d: 39:74:e0:27:2a:ed:f0:7a:f6:00:88:29:f2:49:33:ef:8a:be: cf:97:5d:77:e9:09:5f:09:87:fc:ee:cc:9c:ab:20:46:50:ed: da:3c:d0:43:2e:e3:dc:95:f9:a6:93:fc:b0:99:ed:9c:2f:63: 23:e2:9e:1e:8d:cd:28:7b:90:3b:1c:e2:a6:de:23:0b:79:02: 09:dd:86:3a:8d:cb:c2:a0:71:7d:6e:89:10:a2:61:1b:12:97: fb:da:03:d0:96:06:9a:a4:ab:0b:e3:65:9f:41:36:02:c5:b6: 3d:c4:19:53:5c:c5:98:3f:cc:f2:f8:45:a3:c9:f2:d8:7b:2c: 48:ff:26:ee:9c:96:ca:96:b1:64:ed:ad:b1:48:fb:b1:16:76: ea:f3:e3:0f:75:88:6b:98:54:7c:ba:9b:cc:18:70:6e:21:6f: e7:32:93:57 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdGZslS/3WpQve+zvKlkKnNJbo2cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyMTE5MDMzMFoX DTI2MTAyMDE5MDgzMFowMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1 RTI0OUJDRjZGMkM0N0Q0ODU0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOH6UOwIujwLDIqmJ1/6Av+Tn9LVWqpjTEHn0IfJC05NxSHYKQjlSexJjnv+ yOSNkxh3RBNAeBPGevKETeQJSOMoMcVmGGFw9qjLFtc60XtAccfBP7U3Uc57vrOa 5CIt0dH4O6KaQgdcFLzxt9IlLkC2uIgovOMDsnHDhF4bCrsiJhcnFw5qJlWL7AQL 07lT9BmJBualFuCA6+PWCfela6p/yKNdWcRgY+Q71hQzcvx1pKIO4oA96eICyMNQ VqvzmSPLiwOgxvqkCA2Gaqs2UdGfRoHXAVV50Odir4aswCQmA4ZtjpuWRYqbwveG wTYXGeQId1akxXApHBywhvxMTgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsttqgOilhglD1eJJvPbyxH1IVJMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kN2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGQyNTE5 LTMwNzgtNDdkMy05ZTg2LTQ4ZmQzYmRlNzZjOC8wLzlCMkRCNkE4MEU4QTU4NjA5 NDNENUUyNDlCQ0Y2RjJDNDdENDg1NDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQu4wDQYJKoZIhvcNAQELBQADggEBAFODBNy7Yjo80utcLIwm7kcrp8/F7KhG duWQcwX03P9oe/x7sx2ACLVA2m2Tw3r9xZA4qQR06VivhMWiyQzv+fbKcZzOJX/I yPnr+qQwly1MBegFv20lYIb8HTl04Ccq7fB69gCIKfJJM++Kvs+XXXfpCV8Jh/zu zJyrIEZQ7do80EMu49yV+aaT/LCZ7ZwvYyPinh6NzSh7kDsc4qbeIwt5AgndhjqN y8KgcX1uiRCiYRsSl/vaA9CWBpqkqwvjZZ9BNgLFtj3EGVNcxZg/zPL4RaPJ8th7 LEj/Ju6clsqWsWTtrbFI+7EWdurz4w91iGuYVHy6m8wYcG4hb+cyk1c= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:56 2025 by rpki-client