$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer (raw, json) Hash identifier: l8XCi3KQgBBHA2VWIDX7k1TEcj+rqo6OfYXfF9gDPdI= Subject key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1BA27955DE4C77B9085ED364D73F235BA737AB05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft caRepository: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Jul 2025 11:53:42 +0000 Certificate not after: Tue 14 Jul 2026 11:58:42 +0000 Subordinate resources: IP: 160.25.157.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a2:79:55:de:4c:77:b9:08:5e:d3:64:d7:3f:23:5b:a7:37:ab:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 15 11:53:42 2025 GMT Not After : Jul 14 11:58:42 2026 GMT Subject: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:fb:8a:2e:45:8f:3b:fd:7b:ab:8a:d2:42: 90:a9:2a:e7:88:21:44:94:82:fd:f7:37:0a:ce:31: 20:87:e9:4e:4f:c3:77:ab:9b:1c:61:5c:82:84:03: 41:c4:fe:40:7d:98:87:ef:6c:86:02:37:0f:72:35: 44:4b:4a:7c:d5:7b:30:3c:e3:e0:1d:99:03:d9:7e: cf:29:80:9a:26:9c:9f:07:71:b3:60:ac:50:2e:30: 9c:cc:d7:57:bd:4a:a6:ea:ba:0c:64:51:1d:c1:4a: 58:5d:50:85:68:cd:e2:5c:de:7f:6d:c1:43:99:c4: a9:e5:8e:69:b2:39:34:ca:cc:91:7e:c9:8e:c0:aa: a1:e8:f8:e0:a1:f2:b6:db:9e:57:28:a4:12:c8:e3: ce:01:a4:d9:5a:27:f3:9a:f3:93:dc:7b:0b:68:3d: 49:a3:48:bd:1d:57:b1:b1:10:69:da:de:63:72:69: 13:64:82:1d:36:f7:12:3f:15:ae:d4:cf:81:ba:63: 18:95:3e:14:99:b7:18:0b:27:b1:05:fa:95:00:42: 2d:c4:24:69:c4:c0:db:c2:fc:fa:47:9a:a6:74:5f: 9f:a6:68:ae:5a:6e:ec:b8:a8:50:57:4c:45:cc:2d: 92:f5:14:4d:8c:58:90:d0:76:b5:01:92:50:9d:9c: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.157.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:89:3c:90:35:6f:bd:92:6e:05:f2:8b:9d:d6:47:e7:b9:9f: 9b:c8:12:79:2d:97:30:1e:2f:4a:b3:90:30:9f:af:50:d6:c1: e3:1d:1e:46:a2:08:23:2c:07:c7:f5:31:04:a1:ff:33:26:07: ed:4f:4a:0f:e4:29:0c:e6:18:45:70:df:fb:5a:69:12:4a:b1: 53:44:81:13:15:14:68:9a:23:c8:e6:cf:16:1a:d4:c5:15:46: c4:60:2c:1f:00:ad:05:8f:ff:0c:45:ef:85:e6:2b:20:9b:0a: 4d:20:23:d5:2c:09:af:e8:86:c2:13:6e:68:c1:4f:0e:9d:68: 9f:46:ee:8a:94:f6:2e:63:3c:d4:48:af:63:17:e7:3a:80:43: 92:32:20:a2:04:1e:4a:cd:71:ae:f0:24:21:12:10:82:6a:de: a1:b5:e0:b3:26:cc:a0:52:c5:18:4b:98:98:10:51:4c:f2:a1: 08:99:99:fe:7c:bd:dc:d4:8f:64:d6:ad:aa:8e:d6:11:44:64: 20:50:22:25:7f:c5:8c:dc:d0:ef:56:77:4b:e7:ad:43:b9:a0: fe:b1:79:9d:d6:88:f8:5c:61:a9:5b:ef:c2:7c:5e:da:2e:27: fb:1c:6b:33:30:75:cc:45:ea:6c:26:53:b6:21:36:ff:4d:af: 26:dd:a5:bd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG6J5Vd5Md7kIXtNk1z8jW6c3qwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcxNTExNTM0MloX DTI2MDcxNDExNTg0MlowMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRB ODMyRDVCNzlDMDMyNDg2QTc1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3F+4ouRY87/XuritJCkKkq54ghRJSC/fc3Cs4xIIfpTk/Dd6ubHGFcgoQD QcT+QH2Yh+9shgI3D3I1REtKfNV7MDzj4B2ZA9l+zymAmiacnwdxs2CsUC4wnMzX V71Kpuq6DGRRHcFKWF1QhWjN4lzef23BQ5nEqeWOabI5NMrMkX7JjsCqoej44KHy ttueVyikEsjjzgGk2Von85rzk9x7C2g9SaNIvR1XsbEQadreY3JpE2SCHTb3Ej8V rtTPgbpjGJU+FJm3GAsnsQX6lQBCLcQkacTA28L8+keapnRfn6Zorlpu7LioUFdM RcwtkvUUTYxYkNB2tQGSUJ2crLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKz7Gl2ZOKZLO1SoMtW3nAMkhqdZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlOTU0ZjQy LTk0NTItNDI0Ny05OWE1LTMxYTUzZTU2YTlmOC8wL0FDRkIxQTVEOTkzOEE2NEIz QjU0QTgzMkQ1Qjc5QzAzMjQ4NkE3NTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGZ0wDQYJKoZIhvcNAQELBQADggEBAE6JPJA1b72SbgXyi53WR+e5n5vIEnkt lzAeL0qzkDCfr1DWweMdHkaiCCMsB8f1MQSh/zMmB+1PSg/kKQzmGEVw3/taaRJK sVNEgRMVFGiaI8jmzxYa1MUVRsRgLB8ArQWP/wxF74XmKyCbCk0gI9UsCa/ohsIT bmjBTw6daJ9G7oqU9i5jPNRIr2MX5zqAQ5IyIKIEHkrNca7wJCESEIJq3qG14LMm zKBSxRhLmJgQUUzyoQiZmf58vdzUj2TWraqO1hFEZCBQIiV/xYzc0O9Wd0vnrUO5 oP6xeZ3WiPhcYalb78J8XtouJ/scazMwdcxF6mwmU7YhNv9Nrybdpb0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:52 2025 by rpki-client