$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer (raw, json) Hash identifier: qCtOLO4TJSoj7zbHM0m+/fA0JldlJPZ1RS7yggYje50= Subject key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1AA82800E0EB2A9F67C95501102A626780173F50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft caRepository: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 21:08:20 +0000 Certificate not after: Mon 02 Nov 2026 21:13:20 +0000 Subordinate resources: IP: 160.187.231.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a8:28:00:e0:eb:2a:9f:67:c9:55:01:10:2a:62:67:80:17:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 3 21:08:20 2025 GMT Not After : Nov 2 21:13:20 2026 GMT Subject: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ce:60:ce:58:0d:51:3a:f3:38:8d:17:3d:c3: 99:01:07:cb:6a:46:d6:ab:04:ee:09:9e:bb:fb:a2: 53:25:d1:f7:a6:8a:39:f8:96:82:64:63:cf:6e:c0: dd:48:f7:86:2e:14:b8:df:6e:4c:7b:63:0c:6f:99: d6:c9:08:01:a2:3a:f8:7d:02:50:94:94:78:37:40: a2:a7:d0:c8:5e:9c:e8:20:db:22:c0:1b:eb:07:df: 8b:4b:ae:2d:d6:7e:9a:40:06:44:2f:a7:64:96:3b: 16:ee:06:1c:f9:11:ea:94:26:55:b4:29:38:7d:3c: 9b:ac:5a:48:7f:ec:b3:85:4d:ab:a3:36:b4:b7:81: 55:e0:e8:01:32:31:92:cd:dd:8c:43:b6:77:6e:6e: 47:83:c3:f0:5b:ba:92:73:02:10:48:04:f5:20:30: 33:93:48:6f:54:82:80:67:b2:89:fd:c6:44:80:b5: 9e:11:8f:7a:77:96:b1:57:33:bf:98:ed:1e:f2:a6: 8b:da:17:80:1f:c5:cd:e1:9e:7e:46:95:72:63:e1: 16:c8:d5:aa:d8:21:42:ce:3c:b0:a1:fa:70:19:9b: 41:b5:2b:6a:51:2d:f0:a2:2a:5e:80:1b:11:79:2a: 89:1e:65:f2:c4:1b:58:24:40:d6:9f:d3:be:f3:c7: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.231.0/24 Signature Algorithm: sha256WithRSAEncryption 29:97:84:ad:24:ad:d6:61:a6:28:c8:6d:00:81:47:f6:af:08: 36:c8:be:01:5d:8c:2d:d9:2d:31:d6:37:02:3b:3c:96:c6:1f: 97:f1:bc:4b:ab:fa:41:b1:5d:6f:00:51:8b:4c:6b:d3:da:bb: d8:36:86:ad:7f:5d:bc:d5:c8:b9:48:00:04:2c:a0:37:af:27: c5:a1:d8:55:a2:38:fe:04:92:c0:b3:99:e9:5d:9c:74:14:1d: 54:65:b0:a4:25:ab:c9:90:91:d1:6c:a5:67:f8:1a:c4:f5:af: 20:66:b4:3a:cc:03:f2:f6:b1:48:64:e3:91:2b:c2:95:ba:74: ce:31:24:1f:36:0f:4b:f2:af:75:9a:e6:8a:00:bc:81:59:d2: 1a:d9:21:3c:59:86:73:b1:72:55:a3:6d:7d:d4:f5:86:13:3f: bf:e0:58:ca:1f:c6:18:d2:15:36:3e:03:73:03:7b:53:1e:46: 1b:90:1f:37:19:4d:11:a9:07:b3:a8:89:9d:b0:c6:62:8e:60: 46:bd:ac:54:c5:79:b7:a3:2c:26:04:91:d3:90:86:30:77:89: 7b:32:2e:9a:01:ce:28:04:6d:ac:fa:78:3d:01:ec:a6:59:4d: 36:4f:89:24:78:af:8c:26:7a:93:c7:ae:69:bd:5a:83:d6:fb: d6:8a:13:2b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGqgoAODrKp9nyVUBECpiZ4AXP1AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTEwMzIxMDgyMFoX DTI2MTEwMjIxMTMyMFowMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4 M0ZDNDhFMzIxNDNEOEE0Q0Y5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPHOYM5YDVE68ziNFz3DmQEHy2pG1qsE7gmeu/uiUyXR96aKOfiWgmRjz27A 3Uj3hi4UuN9uTHtjDG+Z1skIAaI6+H0CUJSUeDdAoqfQyF6c6CDbIsAb6wffi0uu LdZ+mkAGRC+nZJY7Fu4GHPkR6pQmVbQpOH08m6xaSH/ss4VNq6M2tLeBVeDoATIx ks3djEO2d25uR4PD8Fu6knMCEEgE9SAwM5NIb1SCgGeyif3GRIC1nhGPeneWsVcz v5jtHvKmi9oXgB/FzeGefkaVcmPhFsjVqtghQs48sKH6cBmbQbUralEt8KIqXoAb EXkqiR5l8sQbWCRA1p/TvvPHR/UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJwNvXrhky5rnQmD/EjjIUPYpM+TMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZmNiZmJi LWJhM2YtNGQ1My1hMDRmLTE0ZDZmNGJlMGNiMS8wLzlDMERCRDdBRTE5MzJFNkI5 RDA5ODNGQzQ4RTMyMTQzRDhBNENGOTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgu+cwDQYJKoZIhvcNAQELBQADggEBACmXhK0krdZhpijIbQCBR/avCDbIvgFd jC3ZLTHWNwI7PJbGH5fxvEur+kGxXW8AUYtMa9Pau9g2hq1/XbzVyLlIAAQsoDev J8Wh2FWiOP4EksCzmeldnHQUHVRlsKQlq8mQkdFspWf4GsT1ryBmtDrMA/L2sUhk 45ErwpW6dM4xJB82D0vyr3Wa5ooAvIFZ0hrZITxZhnOxclWjbX3U9YYTP7/gWMof xhjSFTY+A3MDe1MeRhuQHzcZTRGpB7OoiZ2wxmKOYEa9rFTFebejLCYEkdOQhjB3 iXsyLpoBzigEbaz6eD0B7KZZTTZPiSR4r4wmepPHrmm9WoPW+9aKEys= -----END CERTIFICATE-----Generated at Tue Nov 4 18:38:35 2025 by rpki-client