$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer (raw, json) Hash identifier: brWkZMnbXWU6mlIrEhFK+fkR/M+7oY15F9iDVyCjHDc= Subject key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 04E46459BBE4773B70F86362A9084B9FEB0B5944 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft caRepository: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Jun 2025 06:17:12 +0000 Certificate not after: Sat 06 Jun 2026 06:22:12 +0000 Subordinate resources: IP: 160.22.66.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 13:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e4:64:59:bb:e4:77:3b:70:f8:63:62:a9:08:4b:9f:eb:0b:59:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 7 06:17:12 2025 GMT Not After : Jun 6 06:22:12 2026 GMT Subject: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:66:33:85:c0:59:09:13:b7:96:a0:34:2e: 53:2c:d6:1a:47:7e:62:f5:fd:5c:84:44:53:fc:b2: e5:2c:35:e7:a5:e3:44:8f:4a:82:bd:49:3b:c6:51: 4d:18:7c:d9:d3:58:4f:67:53:f5:41:10:c7:a3:df: 23:ed:9a:0f:29:d9:a9:b0:1c:95:5a:b0:18:fb:41: 0d:e5:92:9c:b1:ad:3b:bf:b3:d0:36:ef:1c:40:f9: d9:8d:5e:d7:1c:19:db:c8:5c:a3:fa:52:87:4e:90: 77:31:8a:ae:f3:82:d8:a2:b1:04:3a:55:3f:07:3c: ba:06:bf:27:c2:60:33:c0:9f:65:de:9d:17:ab:fe: 1b:3b:c8:15:c2:42:1c:46:8c:6f:ac:ab:2e:45:21: ff:1f:67:9a:3f:6f:96:2f:cf:f0:bf:bc:12:48:17: aa:f8:a0:9c:35:fe:52:50:59:5c:1c:01:98:92:1d: 17:b2:d9:a9:95:1c:47:2c:eb:10:e2:29:66:83:9c: 5c:cb:ff:88:1a:9c:85:0d:f9:44:db:6e:df:5f:2b: 30:08:45:f0:3a:e2:e0:b5:13:5a:aa:11:90:d0:c2: 68:d1:19:ae:72:69:da:53:58:00:8f:97:29:98:ea: 75:7a:b0:70:34:4d:69:97:6c:e6:23:72:74:60:c0: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.66.0/23 Signature Algorithm: sha256WithRSAEncryption 50:09:1a:e8:96:8a:8d:f7:cf:bd:6f:cb:43:6c:11:a6:82:e5: 67:68:f1:cc:ec:fb:61:62:fe:67:be:0e:12:3c:3c:b7:21:a2: f6:13:7d:06:ca:96:d1:16:75:1b:0a:b0:d2:05:3e:26:5a:80: 13:1c:d4:e4:26:7b:e0:47:42:db:f4:a3:74:46:ad:18:b1:05: c1:e0:ac:2e:72:d8:bb:02:3f:5f:b0:55:6c:96:f7:29:a8:eb: fa:64:f0:cd:19:c4:23:33:20:4e:28:45:3d:56:c7:f5:b3:2e: 39:9c:bb:a5:76:28:82:e5:3a:20:e3:46:61:cb:13:f0:8d:73: 48:e4:19:dd:4d:e1:6e:f8:76:e8:fa:d6:dc:f9:f8:79:60:24: e4:bb:9b:e4:47:1e:10:9c:36:d6:f9:c3:b7:14:86:17:ea:6f: c1:e5:0d:08:ee:54:5a:9d:75:7a:35:49:f7:a5:3a:eb:87:80: 4f:e2:3f:a9:3b:92:ba:00:37:32:9a:12:f1:5d:f8:6b:8f:bb: 63:94:a3:04:a4:ee:33:22:6b:2e:49:6e:19:97:56:44:71:67: 28:4d:8f:01:9b:08:5b:77:ab:36:b6:2c:00:12:5e:98:46:a0: 72:75:4d:50:75:a9:f4:6e:be:84:9f:62:27:7c:95:9e:34:a2: e3:61:2d:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBORkWbvkdztw+GNiqQhLn+sLWUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYwNzA2MTcxMloX DTI2MDYwNjA2MjIxMlowMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0Qy N0JEMTZGQkYzM0RDMDlDRjY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEKZjOFwFkJE7eWoDQuUyzWGkd+YvX9XIREU/yy5Sw156XjRI9Kgr1JO8ZR TRh82dNYT2dT9UEQx6PfI+2aDynZqbAclVqwGPtBDeWSnLGtO7+z0DbvHED52Y1e 1xwZ28hco/pSh06QdzGKrvOC2KKxBDpVPwc8uga/J8JgM8CfZd6dF6v+GzvIFcJC HEaMb6yrLkUh/x9nmj9vli/P8L+8EkgXqvignDX+UlBZXBwBmJIdF7LZqZUcRyzr EOIpZoOcXMv/iBqchQ35RNtu318rMAhF8Dri4LUTWqoRkNDCaNEZrnJp2lNYAI+X KZjqdXqwcDRNaZds5iNydGDAgSMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ7p6HFd56mVJz0nvRb78z3AnPZSMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYjkyN2Rm LWJjOWMtNGJlNi1hMWZhLTJlMTI1YzQ2OWY3MS8wLzlFRTlFODcxNURFN0E5OTUy NzNEMjdCRDE2RkJGMzNEQzA5Q0Y2NTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFkIwDQYJKoZIhvcNAQELBQADggEBAFAJGuiWio33z71vy0NsEaaC5Wdo8czs +2Fi/me+DhI8PLchovYTfQbKltEWdRsKsNIFPiZagBMc1OQme+BHQtv0o3RGrRix BcHgrC5y2LsCP1+wVWyW9ymo6/pk8M0ZxCMzIE4oRT1Wx/WzLjmcu6V2KILlOiDj RmHLE/CNc0jkGd1N4W74duj61tz5+HlgJOS7m+RHHhCcNtb5w7cUhhfqb8HlDQju VFqddXo1SfelOuuHgE/iP6k7kroANzKaEvFd+GuPu2OUowSk7jMiay5JbhmXVkRx ZyhNjwGbCFt3qza2LAASXphGoHJ1TVB1qfRuvoSfYid8lZ40ouNhLYU= -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:47 2025 by rpki-client