$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer File: A603F8DE41A0C254133C531FFB98C664160BB962.cer (raw, json) Hash identifier: f6a1K6CcS699eg+Yr0yZ7THqNgsPBJfIvx9EZsd7Ti4= Subject key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3DC91FB6AB1F2D003DACD3E2D524BC18E06965DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft caRepository: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 25 May 2025 17:19:15 +0000 Certificate not after: Sun 24 May 2026 17:24:15 +0000 Subordinate resources: IP: 160.20.244.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 13:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c9:1f:b6:ab:1f:2d:00:3d:ac:d3:e2:d5:24:bc:18:e0:69:65:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 25 17:19:15 2025 GMT Not After : May 24 17:24:15 2026 GMT Subject: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:a3:a7:f8:96:52:65:0f:eb:21:ff:22:15: c7:72:30:f8:c0:7e:7c:f0:39:7d:f9:bf:91:16:94: c7:2a:7d:56:0d:a8:97:63:80:de:94:66:55:bf:d0: 42:5c:ed:2a:03:bb:33:41:ca:5a:55:08:b0:47:63: b7:39:1e:86:3d:31:fe:0c:f4:2a:2c:29:97:1b:b3: 10:fe:88:64:f5:27:1f:4e:11:d2:88:a2:df:df:77: 10:ca:8b:bb:31:d0:75:40:de:35:88:fb:b9:49:54: c1:18:62:1a:fe:69:aa:fd:2e:a1:28:ee:4f:cb:5c: f3:a2:a5:fb:4c:30:40:72:d0:bb:c2:7a:8b:c6:d0: 61:81:d9:7f:e0:5e:0c:fb:55:fe:fb:85:fd:ef:21: 2c:52:7f:22:81:2b:b8:c5:bc:cf:a4:a4:36:c2:45: a6:f2:33:7a:ae:da:e9:55:b2:6d:2a:56:16:a0:b6: b0:85:63:18:08:93:cd:f0:1f:b1:9b:ea:a6:6d:a7: e7:87:32:b9:7b:24:42:6e:e2:f8:e9:cc:67:bd:4d: 44:3f:1a:46:55:6e:29:49:be:9f:cc:52:d2:fb:e0: 7d:a2:55:a3:4b:0a:ef:5a:5d:0d:af:69:34:86:01: 59:64:26:de:60:9c:f5:bd:cd:36:81:dc:f1:5e:ae: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.244.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:11:21:e9:5e:d4:ce:27:25:98:dd:9e:4e:32:2f:a7:dd:a3: b8:ff:6b:a8:38:77:8d:7a:10:04:05:58:4a:ea:8d:ec:f9:17: 2f:99:24:65:de:7f:97:b5:bc:ad:4c:dc:a5:bb:7b:62:ae:e7: d4:1b:da:b8:03:42:3b:6b:c6:a5:7d:cb:8a:94:08:14:cd:e2: df:88:bf:df:24:9e:72:4b:9b:e1:13:9e:df:74:d6:6a:20:62: e6:8d:a3:aa:97:46:a1:12:e8:e4:99:a1:23:2f:6b:ac:fb:77: 5b:e1:70:d1:54:01:74:bd:11:b4:0e:4d:58:25:a0:d1:e7:f6: 1f:d0:39:ff:71:89:62:8c:4f:51:aa:24:3b:d8:f8:68:4b:5d: 01:c8:ad:e5:4d:df:ae:35:b4:0e:dd:7a:de:c2:a0:4a:c5:5a: 67:8d:db:7d:67:f6:c2:2c:98:7c:77:cb:d0:f7:1b:52:d7:6b: 30:8f:a1:d4:f7:16:d3:b9:dd:57:65:66:61:3c:b0:c1:10:e4: 66:88:52:92:4a:85:d3:27:9d:90:76:d3:ed:b6:72:f3:31:7b: 11:39:49:8c:11:45:fc:9a:ec:b5:a6:3a:d3:a9:b8:e0:19:73: bf:9f:b9:ce:02:af:a0:be:7b:a7:5a:ed:42:a4:6e:aa:ad:b6: ff:f8:f9:c8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPckftqsfLQA9rNPi1SS8GOBpZdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUyNTE3MTkxNVoX DTI2MDUyNDE3MjQxNVowMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1 MzFGRkI5OEM2NjQxNjBCQjk2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDYo6f4llJlD+sh/yIVx3Iw+MB+fPA5ffm/kRaUxyp9Vg2ol2OA3pRmVb/Q QlztKgO7M0HKWlUIsEdjtzkehj0x/gz0KiwplxuzEP6IZPUnH04R0oii3993EMqL uzHQdUDeNYj7uUlUwRhiGv5pqv0uoSjuT8tc86Kl+0wwQHLQu8J6i8bQYYHZf+Be DPtV/vuF/e8hLFJ/IoEruMW8z6SkNsJFpvIzeq7a6VWybSpWFqC2sIVjGAiTzfAf sZvqpm2n54cyuXskQm7i+OnMZ71NRD8aRlVuKUm+n8xS0vvgfaJVo0sK71pdDa9p NIYBWWQm3mCc9b3NNoHc8V6uCK0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKYD+N5BoMJUEzxTH/uYxmQWC7liMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5YjgxNTJl LWFhODYtNGQ4YS04MWRhLWU3MTA4NmIyOTU2Yy8wL0E2MDNGOERFNDFBMEMyNTQx MzNDNTMxRkZCOThDNjY0MTYwQkI5NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgFPQwDQYJKoZIhvcNAQELBQADggEBAG8RIele1M4nJZjdnk4yL6fdo7j/a6g4 d416EAQFWErqjez5Fy+ZJGXef5e1vK1M3KW7e2Ku59Qb2rgDQjtrxqV9y4qUCBTN 4t+Iv98knnJLm+ETnt901mogYuaNo6qXRqES6OSZoSMva6z7d1vhcNFUAXS9EbQO TVgloNHn9h/QOf9xiWKMT1GqJDvY+GhLXQHIreVN3641tA7det7CoErFWmeN231n 9sIsmHx3y9D3G1LXazCPodT3FtO53VdlZmE8sMEQ5GaIUpJKhdMnnZB20+22cvMx exE5SYwRRfya7LWmOtOpuOAZc7+fuc4Cr6C+e6da7UKkbqqttv/4+cg= -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:59 2025 by rpki-client