$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer (raw, json) Hash identifier: OVH/wxlgjeq11m7tM84z7oUu3c/RUJc69K0ofFhsX+s= Subject key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 15335B6C864C1527B968BC6AD258E8D308D3C651 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 05 Oct 2025 03:37:11 +0000 Certificate not after: Sun 04 Oct 2026 03:42:11 +0000 Subordinate resources: IP: 157.66.40.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:33:5b:6c:86:4c:15:27:b9:68:bc:6a:d2:58:e8:d3:08:d3:c6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 5 03:37:11 2025 GMT Not After : Oct 4 03:42:11 2026 GMT Subject: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:d5:76:7c:da:14:c7:44:f5:b9:88:a5:af: 2e:f5:fb:53:20:86:1e:d8:2f:f3:9d:ee:01:a8:47: 71:cc:46:d1:ff:2f:00:9b:15:7b:41:b5:9f:b2:2a: 15:cf:7e:f0:63:cf:cd:a0:ee:64:e3:19:3d:8e:6a: c7:05:47:a2:f0:56:19:41:ce:53:4e:43:9e:d0:73: 28:8c:d2:d2:ee:23:ef:00:9b:24:8e:9e:4d:61:ce: 6e:88:20:fb:f5:ae:f6:46:f4:e7:fb:69:a4:fc:bc: 19:8b:85:d4:32:7e:79:40:f9:31:92:9c:39:90:a6: 62:aa:ae:da:c0:b2:e5:17:1a:14:1c:a9:41:9b:c5: 95:c6:e5:cf:a8:71:ab:f7:4c:9a:5d:d5:61:34:94: 4b:3e:28:de:01:c6:0f:4a:92:c8:b3:b6:ef:20:09: c4:42:d1:60:0b:e9:66:97:63:bd:b8:ef:dc:8e:0b: 86:0f:71:0b:6b:21:f9:20:06:ba:3f:98:5e:64:58: 9f:25:77:af:84:cf:71:9c:7e:d0:ac:9d:e2:5c:f2: b2:3f:f0:7e:17:78:24:f6:d9:be:55:bc:31:8f:9f: 9a:da:53:47:fc:8d:fe:e0:7e:c6:fc:8f:fe:ed:f7: 78:29:30:58:cd:a7:aa:14:b1:34:09:0a:bd:71:82: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.40.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:17:3d:a9:8d:6f:1e:08:d7:b7:77:fe:93:d5:7c:d1:32:d5: 40:b3:5b:6a:d9:a8:82:81:69:ef:28:85:18:44:d3:a8:c2:17: 72:a0:6a:a5:3b:c3:24:6b:04:f7:c8:66:57:ac:b3:c9:b9:f7: 84:9c:cb:d9:f7:03:85:1b:7d:d2:30:4b:94:26:3b:8f:56:f9: 07:06:0d:e7:a3:d0:97:a2:27:8d:18:d5:f2:2e:2d:87:11:9e: e1:e3:95:73:c6:73:f2:13:93:5f:41:20:60:c2:05:ca:10:1f: 80:5f:ed:6f:0f:e7:a6:83:e7:8b:a7:b8:2b:f9:23:66:4e:20: 30:aa:40:c8:14:01:53:a4:01:a1:73:4e:7c:22:59:fc:b0:f2: 11:78:65:95:45:97:e4:d0:22:43:59:c7:ff:42:14:95:76:4f: ca:7e:dc:57:cc:1c:57:e5:58:18:53:5e:f5:b8:03:33:22:e6: 30:fb:12:73:4c:77:92:c2:f0:07:ae:a4:16:28:6e:01:5d:e0: 1c:a7:f5:aa:44:82:44:ad:a3:21:ad:f3:06:d6:95:ef:16:04: 79:1a:0e:33:73:3c:15:35:59:dd:12:9f:18:4e:29:92:ea:ea: 96:55:67:b7:dc:9f:0c:d0:7a:d9:6e:4c:45:83:9b:ea:58:f2: dd:7c:45:14 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFTNbbIZMFSe5aLxq0ljo0wjTxlEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAwNTAzMzcxMVoX DTI2MTAwNDAzNDIxMVowMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNE QzlCM0ZFODY1NkZDRURFQzNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/M1XZ82hTHRPW5iKWvLvX7UyCGHtgv853uAahHccxG0f8vAJsVe0G1n7Iq Fc9+8GPPzaDuZOMZPY5qxwVHovBWGUHOU05DntBzKIzS0u4j7wCbJI6eTWHObogg +/Wu9kb05/tppPy8GYuF1DJ+eUD5MZKcOZCmYqqu2sCy5RcaFBypQZvFlcblz6hx q/dMml3VYTSUSz4o3gHGD0qSyLO27yAJxELRYAvpZpdjvbjv3I4Lhg9xC2sh+SAG uj+YXmRYnyV3r4TPcZx+0Kyd4lzysj/wfhd4JPbZvlW8MY+fmtpTR/yN/uB+xvyP /u33eCkwWM2nqhSxNAkKvXGCE9sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK9occr9Bcb2JZzcmz/oZW/O3sPVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3ZjJjMTkw LTMwZjUtNGYxOS1iZmNhLTBiOTg3YTUyZmQ1NS8wL0FGNjg3MUNBRkQwNUM2RjYy NTlDREM5QjNGRTg2NTZGQ0VERUMzRDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQigwDQYJKoZIhvcNAQELBQADggEBAAsXPamNbx4I17d3/pPVfNEy1UCzW2rZ qIKBae8ohRhE06jCF3KgaqU7wyRrBPfIZless8m594Scy9n3A4UbfdIwS5QmO49W +QcGDeej0JeiJ40Y1fIuLYcRnuHjlXPGc/ITk19BIGDCBcoQH4Bf7W8P56aD54un uCv5I2ZOIDCqQMgUAVOkAaFzTnwiWfyw8hF4ZZVFl+TQIkNZx/9CFJV2T8p+3FfM HFflWBhTXvW4AzMi5jD7EnNMd5LC8AeupBYobgFd4Byn9apEgkStoyGt8wbWle8W BHkaDjNzPBU1Wd0SnxhOKZLq6pZVZ7fcnwzQetluTEWDm+pY8t18RRQ= -----END CERTIFICATE-----Generated at Tue Nov 4 18:38:31 2025 by rpki-client