$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer (raw, json) Hash identifier: eg4+2DW7g6G2aFZnq2qS4hH8oLZ5WWpoJNwGdAe6GrE= Subject key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6B4282035C2387822A3E936E0918CE59B91D2D0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft caRepository: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 07 May 2025 03:05:31 +0000 Certificate not after: Wed 06 May 2026 03:10:31 +0000 Subordinate resources: IP: 160.20.124.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:42:82:03:5c:23:87:82:2a:3e:93:6e:09:18:ce:59:b9:1d:2d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 7 03:05:31 2025 GMT Not After : May 6 03:10:31 2026 GMT Subject: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:c3:d7:a4:eb:0d:86:30:6e:53:90:74:46: e5:38:5c:58:14:b5:c2:27:8b:c8:56:50:bf:ff:73: 6e:d3:00:14:12:de:61:57:64:19:4d:67:2d:56:88: 81:fb:5e:fb:df:96:fb:d3:1a:65:f6:5b:01:36:81: d7:5e:97:c0:25:ce:93:d0:36:20:dc:e0:a6:7a:a6: f8:9f:03:67:1a:8e:5a:dc:df:9e:28:97:ca:38:2f: 5a:12:f9:a8:e7:0a:8f:68:9b:5a:00:cc:54:a5:45: f8:bf:bb:55:55:d9:93:7e:17:9e:69:b3:e8:13:d2: 8f:6b:79:a4:12:c3:2f:18:47:f9:fe:8c:53:97:78: f1:83:81:af:93:6d:22:6c:c1:d9:3b:21:d7:e3:92: 8e:5f:c4:18:82:31:ba:a2:f6:1f:88:93:b6:8f:c6: 18:33:76:6d:a7:59:2d:04:dd:36:d9:e2:e9:78:4a: 9b:99:9b:fd:46:0e:95:03:43:ac:c0:e1:40:0d:c1: 1b:7b:80:e6:16:dd:5b:1b:b2:39:82:95:71:eb:db: ef:58:ae:0c:06:55:19:7d:a4:f3:0f:e4:8e:f5:a7: 01:d2:cf:b3:45:d7:24:4f:b9:b4:55:ad:4d:73:b0: 7e:79:19:70:cf:4d:1c:5f:40:e2:d8:9b:f7:27:72: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.124.0/23 Signature Algorithm: sha256WithRSAEncryption 56:c3:79:1a:89:a1:fe:0f:e5:d0:e5:1c:39:f7:8b:8b:79:22: 81:d2:7f:30:10:ce:9e:cc:68:fa:ae:02:1e:32:50:0d:72:2c: 4d:f8:2d:ab:b2:86:b8:f4:d0:f6:04:99:52:a3:ed:b6:01:8d: 53:bf:d0:d7:23:23:f9:a7:1e:ba:00:50:28:58:87:6c:dd:1f: e4:15:91:ea:2d:35:bc:be:4a:c4:98:3a:58:96:07:dc:9d:e8: c7:71:02:58:6e:31:2d:46:c6:b7:60:fc:f1:d8:d1:f0:5c:f2: 63:20:cd:a0:7e:af:b6:b5:82:91:ab:7e:17:d2:89:c2:eb:21: 41:8c:d5:61:3f:a5:11:ce:f5:4f:9e:20:e9:e7:de:71:07:2c: 12:29:7f:c0:78:32:4d:74:4f:c7:4b:11:ad:e4:eb:1b:e5:b2: 67:f5:7d:95:1b:38:93:ff:1a:67:3b:c4:65:9b:56:bc:f5:24: 5e:68:a8:20:d7:fa:eb:45:16:80:d4:26:bf:85:90:50:e3:00: 5e:49:61:ed:92:5f:3c:e7:3c:65:5e:e4:ec:66:d7:4e:dd:c7: b9:e8:26:52:c0:7a:e1:2b:4c:3e:60:ca:8d:9f:2f:e4:39:7b: 71:f9:0e:5d:91:37:6c:60:59:fb:5c:aa:8c:78:57:85:c9:9d: fb:2c:79:6e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUa0KCA1wjh4IqPpNuCRjOWbkdLQowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUwNzAzMDUzMVoX DTI2MDUwNjAzMTAzMVowMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NE MERFMEI2Mjg3RjRCMDgyRDgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/jw9ek6w2GMG5TkHRG5ThcWBS1wieLyFZQv/9zbtMAFBLeYVdkGU1nLVaI gfte+9+W+9MaZfZbATaB116XwCXOk9A2INzgpnqm+J8DZxqOWtzfniiXyjgvWhL5 qOcKj2ibWgDMVKVF+L+7VVXZk34Xnmmz6BPSj2t5pBLDLxhH+f6MU5d48YOBr5Nt ImzB2Tsh1+OSjl/EGIIxuqL2H4iTto/GGDN2badZLQTdNtni6XhKm5mb/UYOlQND rMDhQA3BG3uA5hbdWxuyOYKVcevb71iuDAZVGX2k8w/kjvWnAdLPs0XXJE+5tFWt TXOwfnkZcM9NHF9A4tib9ydyoTkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKPXR2XB8Xj3LDzQ3gtih/SwgtgZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFk LWVlMTgtNDM1Yy04YjZlLWViYTIyNDFiODNhYi8wL0EzRDc0NzY1QzFGMTc4Rjcy QzNDRDBERTBCNjI4N0Y0QjA4MkQ4MTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFHwwDQYJKoZIhvcNAQELBQADggEBAFbDeRqJof4P5dDlHDn3i4t5IoHSfzAQ zp7MaPquAh4yUA1yLE34Lauyhrj00PYEmVKj7bYBjVO/0NcjI/mnHroAUChYh2zd H+QVkeotNby+SsSYOliWB9yd6MdxAlhuMS1Gxrdg/PHY0fBc8mMgzaB+r7a1gpGr fhfSicLrIUGM1WE/pRHO9U+eIOnn3nEHLBIpf8B4Mk10T8dLEa3k6xvlsmf1fZUb OJP/Gmc7xGWbVrz1JF5oqCDX+utFFoDUJr+FkFDjAF5JYe2SXzznPGVe5Oxm107d x7noJlLAeuErTD5gyo2fL+Q5e3H5Dl2RN2xgWftcqox4V4XJnfsseW4= -----END CERTIFICATE-----Generated at Tue Nov 4 18:35:13 2025 by rpki-client