$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer (raw, json) Hash identifier: 7HB4aMG55QeXFjre+c+yYaOEm9q9gWmXtYe2itDvXG0= Subject key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 372D7EBC528FDB54F66178DF6F6475F7DDBDDD6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft caRepository: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 14 May 2025 07:52:31 +0000 Certificate not after: Wed 13 May 2026 07:57:31 +0000 Subordinate resources: IP: 160.22.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2d:7e:bc:52:8f:db:54:f6:61:78:df:6f:64:75:f7:dd:bd:dd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 14 07:52:31 2025 GMT Not After : May 13 07:57:31 2026 GMT Subject: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:08:da:c1:4a:48:bc:89:71:5e:90:86:39: fc:21:e8:f6:de:0b:c9:2a:97:24:aa:9a:d2:4b:05: 20:81:7f:b0:08:6d:c4:a7:2a:32:d1:55:8b:4d:52: 9b:60:69:4e:f1:70:81:7e:cd:fc:9c:b2:bf:83:2a: 15:64:2a:fe:b0:ee:41:77:b5:f0:93:83:f1:34:ed: e8:de:c1:6c:55:3b:39:f8:c5:c9:de:cf:c9:f3:2f: ee:8e:55:3f:d9:6c:a7:11:df:b6:01:20:88:97:07: 8f:4d:3c:00:7f:6d:6a:a9:2a:e8:23:ab:84:f1:32: 8e:1f:a7:08:f4:35:62:90:04:b4:a3:c7:5e:33:a0: 80:91:ef:1f:39:bd:d8:55:a1:e6:8f:f3:31:00:9a: e6:23:13:2b:da:11:52:05:3b:8e:ef:40:e3:0d:8f: 8a:76:41:ab:7d:e2:18:7b:24:a0:04:ac:22:1c:f9: 25:98:ec:5c:1b:25:a9:d2:8b:dc:63:78:c6:3a:f3: 7f:ed:28:d2:7a:c1:de:53:68:f4:93:de:9e:be:34: 2a:37:d2:ef:43:16:58:e7:e3:4f:b9:92:55:8c:d1: d6:0f:c2:ff:d6:b9:1a:cb:6f:d2:f0:25:a0:f4:5d: cd:e6:97:96:fb:bd:bf:0e:fa:d3:6e:07:98:42:dc: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.22.0/23 Signature Algorithm: sha256WithRSAEncryption 25:a2:59:9f:9d:dc:fd:8e:32:50:40:18:a1:77:ae:01:6a:4f: 58:44:a1:3c:f4:59:1a:75:6b:d3:ad:bf:66:eb:15:b2:eb:90: f9:1d:94:20:54:fc:bf:31:11:14:ba:aa:52:00:5c:6b:9a:59: e0:c1:bd:a2:57:1a:99:5f:6f:d6:88:26:98:f6:f2:7d:1a:9d: 9b:57:26:7c:af:a3:ad:e6:68:18:d6:f0:0b:9c:08:91:9e:c3: b4:83:4e:a7:56:b5:26:bd:62:06:fb:40:ce:6c:a8:5f:69:2a: 5a:ca:48:95:b2:c8:a8:5b:75:f2:e1:bb:dc:9f:4d:02:63:0a: ae:a3:b2:25:2b:3f:78:10:78:87:94:7d:0a:d9:b5:eb:c2:5a: 2c:3e:98:b4:5a:7a:ab:88:95:15:fc:f7:d1:07:b4:df:ac:24: 40:a2:f2:83:02:63:9d:4d:ea:fb:93:20:a9:cb:34:98:4e:ac: 24:a1:56:9e:ae:cf:5a:ac:43:a3:24:54:cb:9f:2c:6c:21:2e: 1a:02:80:be:b5:56:ec:ad:78:b9:2d:10:6d:49:e5:79:12:f4: 38:9a:6e:99:b3:92:2e:86:ee:81:23:de:2f:3a:c1:a3:93:21: 30:21:3c:8f:0f:52:1e:00:f2:ba:c1:b7:95:0e:3a:f8:d0:ce: f1:3b:c5:16 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNy1+vFKP21T2YXjfb2R199293WswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUxNDA3NTIzMVoX DTI2MDUxMzA3NTczMVowMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVG MDU2RTNFNDlGQjZENThBNTU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxzCNrBSki8iXFekIY5/CHo9t4LySqXJKqa0ksFIIF/sAhtxKcqMtFVi01S m2BpTvFwgX7N/Jyyv4MqFWQq/rDuQXe18JOD8TTt6N7BbFU7OfjFyd7PyfMv7o5V P9lspxHftgEgiJcHj008AH9taqkq6COrhPEyjh+nCPQ1YpAEtKPHXjOggJHvHzm9 2FWh5o/zMQCa5iMTK9oRUgU7ju9A4w2PinZBq33iGHskoASsIhz5JZjsXBslqdKL 3GN4xjrzf+0o0nrB3lNo9JPenr40KjfS70MWWOfjT7mSVYzR1g/C/9a5Gstv0vAl oPRdzeaXlvu9vw76024HmELck58CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLDWc7eNviGfHu7wVuPkn7bVilVQMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmN2QyODk0 LWMwNzctNDIxYy1iYzFkLTM3ZDZmOWQ5ODk3ZC8wL0IwRDY3M0I3OERCRTIxOUYx RUVFRjA1NkUzRTQ5RkI2RDU4QTU1NTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFhYwDQYJKoZIhvcNAQELBQADggEBACWiWZ+d3P2OMlBAGKF3rgFqT1hEoTz0 WRp1a9Otv2brFbLrkPkdlCBU/L8xERS6qlIAXGuaWeDBvaJXGplfb9aIJpj28n0a nZtXJnyvo63maBjW8AucCJGew7SDTqdWtSa9Ygb7QM5sqF9pKlrKSJWyyKhbdfLh u9yfTQJjCq6jsiUrP3gQeIeUfQrZtevCWiw+mLRaequIlRX899EHtN+sJECi8oMC Y51N6vuTIKnLNJhOrCShVp6uz1qsQ6MkVMufLGwhLhoCgL61VuyteLktEG1J5XkS 9Diabpmzki6G7oEj3i86waOTITAhPI8PUh4A8rrBt5UOOvjQzvE7xRY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:11:09 2025 by rpki-client