$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer (raw, json) Hash identifier: e+3K+O+ZWApUIVc/OeoXWbNxmzs3faTA23Hwkw9AEec= Subject key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6568333145F5D5E0BF7317CDB49B5369850EC597 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft caRepository: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Aug 2025 08:09:49 +0000 Certificate not after: Fri 31 Jul 2026 08:14:49 +0000 Subordinate resources: IP: 160.22.198.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:68:33:31:45:f5:d5:e0:bf:73:17:cd:b4:9b:53:69:85:0e:c5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 1 08:09:49 2025 GMT Not After : Jul 31 08:14:49 2026 GMT Subject: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:13:3c:6b:3b:64:9e:33:d5:fb:4d:27:ec: 3b:10:25:01:7e:05:50:b0:89:84:c1:70:85:5a:8a: 5f:93:5d:54:3d:c4:b0:45:80:02:e5:dd:25:d6:5d: e3:0c:f6:1c:c8:1f:e0:77:92:24:f0:6f:19:95:b0: 38:1d:eb:f6:d8:30:44:ff:b6:b5:11:59:34:8d:3a: b1:5d:bd:40:da:9d:ea:9f:f8:47:da:f9:3f:d5:d0: 1c:ec:59:a2:50:b9:22:4d:44:9b:ed:85:37:f7:2d: 47:e1:38:b6:fb:bb:90:41:15:d3:e6:03:0d:4e:ea: 68:19:1d:bb:d3:ba:8f:e5:85:32:33:e4:5e:b5:d7: 43:e6:2d:0e:ae:74:2d:c3:12:2b:76:1c:ec:38:05: 87:2f:48:04:06:46:2e:e3:80:a4:e1:e2:eb:96:37: c6:48:14:4e:75:45:d9:7f:ad:2d:aa:2a:0a:c9:23: e6:2e:cb:58:54:64:09:33:80:63:7c:79:74:04:3f: 89:f4:ac:cd:3e:30:4e:bf:ae:9d:68:54:d2:24:74: bd:30:5f:20:82:87:c4:a8:be:0d:a3:1f:d1:ba:e3: 2b:32:49:aa:95:73:1e:71:5d:e6:31:0c:da:96:cb: c3:b8:61:a4:45:2b:f4:a1:2d:62:11:4c:3a:32:3d: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.198.0/23 Signature Algorithm: sha256WithRSAEncryption 83:e0:d7:bb:95:56:47:10:f4:2e:16:0e:f0:a0:91:b2:03:d0: f7:d0:ca:e2:2e:9c:b3:26:12:ad:be:67:13:80:d8:a9:e8:33: 12:0d:25:5f:e9:53:75:21:23:c8:5d:55:79:96:02:6e:06:2c: 14:7e:0e:9a:eb:70:ed:48:33:85:57:65:82:bc:c0:a8:64:36: 3c:be:65:cc:8b:3c:b8:b1:52:fe:24:ac:69:f7:99:5f:e2:a2: c8:f9:3e:8c:19:55:9c:22:f7:09:c7:24:4e:c5:ec:0d:0c:94: 5d:29:3c:46:d1:72:90:34:17:d7:14:0e:03:27:5c:4f:b3:8e: 08:7a:63:c0:3d:51:a3:10:13:cd:53:1b:b4:33:4c:8f:14:1b: 15:55:b4:6b:f0:13:ff:0a:bb:0d:4a:d9:dc:6a:ee:75:1d:ce: 12:76:26:a3:84:91:95:de:02:94:08:df:f0:e5:88:0a:33:43: 75:e9:98:35:22:9e:90:c6:f2:a1:cc:ee:dc:70:26:ac:ee:80: f1:ef:33:05:4a:e9:f8:f5:8f:4e:3d:80:f4:0e:1d:18:cb:a4: f9:4a:cd:b5:19:84:42:1e:db:fe:67:5c:28:e7:2f:cb:35:3f: 59:08:b2:b7:03:99:29:ff:ac:71:7a:79:9a:5f:3d:6f:a0:eb: e1:29:7b:e8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZWgzMUX11eC/cxfNtJtTaYUOxZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgwMTA4MDk0OVoX DTI2MDczMTA4MTQ0OVowMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIy RTEzNTkwOEVCRjIzMEM1QjVGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzuEzxrO2SeM9X7TSfsOxAlAX4FULCJhMFwhVqKX5NdVD3EsEWAAuXdJdZd 4wz2HMgf4HeSJPBvGZWwOB3r9tgwRP+2tRFZNI06sV29QNqd6p/4R9r5P9XQHOxZ olC5Ik1Em+2FN/ctR+E4tvu7kEEV0+YDDU7qaBkdu9O6j+WFMjPkXrXXQ+YtDq50 LcMSK3Yc7DgFhy9IBAZGLuOApOHi65Y3xkgUTnVF2X+tLaoqCskj5i7LWFRkCTOA Y3x5dAQ/ifSszT4wTr+unWhU0iR0vTBfIIKHxKi+DaMf0brjKzJJqpVzHnFd5jEM 2pbLw7hhpEUr9KEtYhFMOjI9Sg8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKfmxixHwC7qMkIuE1kI6/IwxbX6MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmMzBlNGFl LTNlNDctNDU0MC04MjNjLTUzY2FmMjI2N2IzNi8wL0E3RTZDNjJDNDdDMDJFRUEz MjQyMkUxMzU5MDhFQkYyMzBDNUI1RkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFsYwDQYJKoZIhvcNAQELBQADggEBAIPg17uVVkcQ9C4WDvCgkbID0PfQyuIu nLMmEq2+ZxOA2KnoMxINJV/pU3UhI8hdVXmWAm4GLBR+DprrcO1IM4VXZYK8wKhk Njy+ZcyLPLixUv4krGn3mV/iosj5PowZVZwi9wnHJE7F7A0MlF0pPEbRcpA0F9cU DgMnXE+zjgh6Y8A9UaMQE81TG7QzTI8UGxVVtGvwE/8Kuw1K2dxq7nUdzhJ2JqOE kZXeApQI3/DliAozQ3XpmDUinpDG8qHM7txwJqzugPHvMwVK6fj1j049gPQOHRjL pPlKzbUZhEIe2/5nXCjnL8s1P1kIsrcDmSn/rHF6eZpfPW+g6+Epe+g= -----END CERTIFICATE-----Generated at Tue Nov 4 18:37:46 2025 by rpki-client