$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer File: ABF793B534686EC2D5820CF153E43AAEF088BE41.cer (raw, json) Hash identifier: 7OQ92r0dzS5oRWQ0axIDsVreciemhOtO1V5fCO7DOK0= Subject key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5D150ECFD28A8CC72BD0A200F1136CAEF3AA29A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft caRepository: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 31 May 2025 18:27:56 +0000 Certificate not after: Sat 30 May 2026 18:32:56 +0000 Subordinate resources: IP: 157.66.132.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:15:0e:cf:d2:8a:8c:c7:2b:d0:a2:00:f1:13:6c:ae:f3:aa:29:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 31 18:27:56 2025 GMT Not After : May 30 18:32:56 2026 GMT Subject: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6a:57:91:6b:25:b8:84:e9:56:d1:84:ef:ed: 54:1c:83:f3:f5:a3:d4:75:c9:a5:ae:df:af:da:1b: 5d:d0:92:60:a8:2c:a7:f1:18:ee:86:2b:3a:a2:19: 46:78:2c:a7:c2:6c:96:c1:ec:15:9c:0b:35:c5:27: 27:5e:ba:16:05:1b:6f:b4:bd:b4:25:4c:d1:9c:76: 2d:17:22:7b:2a:cb:c2:97:12:80:d8:09:06:eb:cb: 13:ac:f5:78:d7:7b:78:0e:3a:b1:e5:56:16:da:0e: 30:86:dd:5d:76:4f:fe:20:fc:a2:6c:ac:63:06:b0: a5:38:4f:67:74:49:9c:8b:dd:f1:93:56:c7:58:60: 09:d1:0c:02:31:33:2c:12:ba:a5:78:77:6a:fc:cb: 67:4e:27:55:7d:96:fe:8a:b8:c2:0a:76:df:46:b8: 6b:85:79:cf:44:e1:81:50:59:4b:be:73:4f:b9:03: 35:22:57:f1:ba:09:3d:24:db:70:5a:5a:ce:ed:75: 72:23:95:82:64:16:7c:f6:5c:13:55:7d:bd:ba:be: ee:b7:b1:76:4c:5b:cd:69:6c:e8:26:21:21:81:d9: 3f:00:c8:09:aa:fa:2a:d5:10:27:1c:b2:be:d7:04: 0e:5f:c1:92:0e:49:2c:c6:74:53:f4:49:44:82:94: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.132.0/23 Signature Algorithm: sha256WithRSAEncryption 81:c5:8e:27:14:9d:71:40:47:dc:63:5f:77:b0:cf:55:85:f4: 35:61:9f:b4:f6:3a:da:c5:5a:3a:e4:b8:8d:44:e1:06:5f:0b: d6:72:2e:c2:21:d0:f4:e0:54:df:92:e9:9f:a5:60:ba:d7:e6: 03:73:6a:24:93:7b:a5:d4:d5:37:9a:40:30:c1:3e:71:1b:9f: 04:5b:97:83:37:fc:11:35:bd:96:46:bc:bb:ae:7d:59:ef:f8: 73:89:e9:19:01:de:26:1e:26:5d:b9:7f:95:74:d9:21:12:5d: 01:be:77:c8:87:3d:26:2a:cb:e5:da:0f:19:af:e7:ad:d7:c9: 9e:2e:3b:c3:ed:d0:60:e6:f0:ef:e8:a8:9f:3b:15:35:6d:73: dd:f4:0c:50:4c:d6:ac:7a:8e:55:dd:e3:c2:b1:63:9d:5c:01: 39:7d:c8:cf:b3:d5:d7:7f:5e:43:05:0a:73:65:c2:16:2c:77: e9:dd:7b:cb:37:8e:d4:ff:c0:a0:39:c1:d6:1f:36:bc:7b:5c: 7d:ba:19:1f:c2:f9:7a:66:18:df:82:c7:c5:d9:e7:ce:ef:b9: c6:71:85:6f:9b:25:3a:c3:ab:91:20:d5:b2:82:7c:03:9b:74: d3:cb:b7:44:e6:e1:c5:44:01:30:c2:40:08:58:ca:d9:9e:8e: cc:83:9b:fd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXRUOz9KKjMcr0KIA8RNsrvOqKagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUzMTE4Mjc1NloX DTI2MDUzMDE4MzI1NlowMzExMC8GA1UEAxMoQUJGNzkzQjUzNDY4NkVDMkQ1ODIw Q0YxNTNFNDNBQUVGMDg4QkU0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZqV5FrJbiE6VbRhO/tVByD8/Wj1HXJpa7fr9obXdCSYKgsp/EY7oYrOqIZ Rngsp8JslsHsFZwLNcUnJ166FgUbb7S9tCVM0Zx2LRcieyrLwpcSgNgJBuvLE6z1 eNd7eA46seVWFtoOMIbdXXZP/iD8omysYwawpThPZ3RJnIvd8ZNWx1hgCdEMAjEz LBK6pXh3avzLZ04nVX2W/oq4wgp230a4a4V5z0ThgVBZS75zT7kDNSJX8boJPSTb cFpazu11ciOVgmQWfPZcE1V9vbq+7rexdkxbzWls6CYhIYHZPwDICar6KtUQJxyy vtcEDl/Bkg5JLMZ0U/RJRIKU6ccCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKv3k7U0aG7C1YIM8VPkOq7wiL5BMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MWE0Yjc4Mi1jMzdmLTQzNzktYThhNi00ZGE1ZDgyYjIzOWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxYTRiNzgy LWMzN2YtNDM3OS1hOGE2LTRkYTVkODJiMjM5Zi8wL0FCRjc5M0I1MzQ2ODZFQzJE NTgyMENGMTUzRTQzQUFFRjA4OEJFNDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQoQwDQYJKoZIhvcNAQELBQADggEBAIHFjicUnXFAR9xjX3ewz1WF9DVhn7T2 OtrFWjrkuI1E4QZfC9ZyLsIh0PTgVN+S6Z+lYLrX5gNzaiSTe6XU1TeaQDDBPnEb nwRbl4M3/BE1vZZGvLuufVnv+HOJ6RkB3iYeJl25f5V02SESXQG+d8iHPSYqy+Xa Dxmv563XyZ4uO8Pt0GDm8O/oqJ87FTVtc930DFBM1qx6jlXd48KxY51cATl9yM+z 1dd/XkMFCnNlwhYsd+nde8s3jtT/wKA5wdYfNrx7XH26GR/C+XpmGN+Cx8XZ587v ucZxhW+bJTrDq5Eg1bKCfAObdNPLt0Tm4cVEATDCQAhYytmejsyDm/0= -----END CERTIFICATE-----Generated at Tue Nov 4 18:32:00 2025 by rpki-client