$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer (raw, json) Hash identifier: dTdQfmZO0DmKvKXPCGI+42xeW5yIOnNKGmp4omM2JGE= Subject key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 288BEE811D885D6E9AA100F6C60402972A9BA103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 12:02:18 +0000 Certificate not after: Fri 17 Jul 2026 12:07:18 +0000 Subordinate resources: IP: 160.20.36.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8b:ee:81:1d:88:5d:6e:9a:a1:00:f6:c6:04:02:97:2a:9b:a1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 18 12:02:18 2025 GMT Not After : Jul 17 12:07:18 2026 GMT Subject: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:ad:37:e7:51:ae:64:9e:69:b8:4c:d8:a6: 25:dd:8e:52:e0:7b:67:b4:cb:19:76:71:02:0c:a0: 9a:5f:da:03:fe:4e:bc:dc:11:b3:f6:d0:64:59:3b: 8c:82:63:7c:d0:fa:50:21:bc:81:e1:e4:df:2d:6f: f4:99:30:7a:15:55:de:26:84:d6:d0:be:00:39:d8: 7f:b1:c5:62:95:57:ca:e1:39:4a:20:ec:c5:df:5f: 8d:1f:54:50:69:94:28:0f:9b:a6:25:fa:a3:89:86: 45:26:85:d4:50:93:55:ff:d5:ce:1f:da:fe:37:08: d2:15:9b:10:b2:d7:09:a0:ba:22:86:75:c3:1b:84: 3a:3f:3a:23:9a:39:7f:55:29:d9:5a:ea:ff:7c:91: 0b:24:12:c4:0c:13:3f:da:78:28:03:c8:27:cb:57: 47:e9:a4:30:3a:1b:49:cc:13:78:f1:7b:11:9f:8b: 35:a7:1b:6d:a5:97:b2:11:df:c3:bf:a7:ee:64:a6: 7e:e8:49:00:2f:28:1a:c4:ce:bc:0f:9d:b9:f8:c9: 89:f1:ee:86:21:b6:49:7b:ab:f6:9e:43:7a:40:3a: 56:40:17:32:6b:0e:cb:2f:47:31:9a:9d:19:9c:dc: ba:fe:35:82:2f:57:e7:5b:af:66:a5:43:0e:92:ce: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.36.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:2e:d7:13:8e:c0:43:77:4d:8f:f7:7b:d1:fc:01:8d:6e:7d: 78:fc:22:34:d6:d8:ef:f2:6c:53:f3:5f:bd:bf:5a:04:80:56: 7d:ad:a3:eb:39:a2:7c:58:c9:36:d1:01:b0:ba:1c:e8:54:79: 6e:ca:13:89:01:93:02:98:30:1f:b8:0f:0c:bd:2c:b1:7b:1f: 2b:2c:19:e3:dc:a0:98:f7:24:87:e7:5c:ab:7b:dc:ef:85:aa: c5:b5:0e:47:6e:3f:c0:3a:aa:cb:79:39:b2:e7:b4:00:9c:4b: 3a:d0:75:9a:9b:fe:2f:c5:e7:ad:dd:d4:65:65:92:6a:be:cc: 82:85:5d:af:30:3d:a1:97:3f:17:b8:6d:96:43:94:b0:ff:f0: 71:43:65:6f:22:15:39:1c:27:33:48:30:48:0f:6e:7a:bc:23: d5:6d:c6:f3:2d:df:a1:26:c0:e5:68:c1:70:c8:ba:5c:92:5e: db:c7:e9:b7:00:cd:9e:76:95:9e:52:35:ae:0b:76:e8:d4:15: 9b:bd:df:e9:cb:20:fd:76:e0:08:a7:2b:e5:89:67:ca:6e:a0: 93:3a:e3:57:f5:1c:71:f0:92:34:5e:2c:18:5b:69:0f:c7:84: 58:91:d5:be:2f:f4:d4:d6:9d:dd:bc:5c:1b:38:ec:1e:07:02: 84:73:26:04 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKIvugR2IXW6aoQD2xgQClyqboQMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcxODEyMDIxOFoX DTI2MDcxNzEyMDcxOFowMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVB N0M0MEJDQkNBODU1RTUyRThFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXmrTfnUa5knmm4TNimJd2OUuB7Z7TLGXZxAgygml/aA/5OvNwRs/bQZFk7 jIJjfND6UCG8geHk3y1v9JkwehVV3iaE1tC+ADnYf7HFYpVXyuE5SiDsxd9fjR9U UGmUKA+bpiX6o4mGRSaF1FCTVf/Vzh/a/jcI0hWbELLXCaC6IoZ1wxuEOj86I5o5 f1Up2Vrq/3yRCyQSxAwTP9p4KAPIJ8tXR+mkMDobScwTePF7EZ+LNacbbaWXshHf w7+n7mSmfuhJAC8oGsTOvA+dufjJifHuhiG2SXur9p5DekA6VkAXMmsOyy9HMZqd GZzcuv41gi9X51uvZqVDDpLOWWkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKcbqmZiOEe3vZ6nxAvLyoVeUujrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4MWVmNDQw LTVhNWYtNGE0Zi1iNTA5LWIxMDMyNDVjNWNmMS8wL0E3MUJBQTY2NjIzODQ3QjdC RDlFQTdDNDBCQ0JDQTg1NUU1MkU4RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFCQwDQYJKoZIhvcNAQELBQADggEBAG4u1xOOwEN3TY/3e9H8AY1ufXj8IjTW 2O/ybFPzX72/WgSAVn2to+s5onxYyTbRAbC6HOhUeW7KE4kBkwKYMB+4Dwy9LLF7 HyssGePcoJj3JIfnXKt73O+FqsW1DkduP8A6qst5ObLntACcSzrQdZqb/i/F563d 1GVlkmq+zIKFXa8wPaGXPxe4bZZDlLD/8HFDZW8iFTkcJzNIMEgPbnq8I9VtxvMt 36EmwOVowXDIulySXtvH6bcAzZ52lZ5SNa4LdujUFZu93+nLIP124AinK+WJZ8pu oJM641f1HHHwkjReLBhbaQ/HhFiR1b4v9NTWnd28XBs47B4HAoRzJgQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:23 2025 by rpki-client