$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer (raw, json) Hash identifier: 060131UUNXPtbS1GUIlqlq2PHmqXtoghA0aFJpcIHCA= Subject key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 354CC6D8BA6939F69267C219717142B934D49B57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 27 Oct 2025 18:21:37 +0000 Certificate not after: Mon 26 Oct 2026 18:26:37 +0000 Subordinate resources: IP: 160.22.92.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4c:c6:d8:ba:69:39:f6:92:67:c2:19:71:71:42:b9:34:d4:9b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 27 18:21:37 2025 GMT Not After : Oct 26 18:26:37 2026 GMT Subject: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:8e:14:c6:a4:01:6e:d2:18:9d:4b:14:34: 17:f8:fb:fd:d4:6c:fe:04:d8:25:d5:84:07:1d:67: 34:21:24:f4:1e:16:c1:6b:10:fd:28:73:be:39:e6: a9:b3:7a:31:b1:7c:32:7d:af:5e:97:f0:59:3c:ea: d0:cd:45:6f:dc:71:b6:04:f4:d5:f9:d7:55:ba:5e: 9d:a1:70:01:db:e7:2f:a6:6f:1c:17:b6:6e:a4:ba: 77:e6:ba:84:dc:43:f1:f1:18:dc:01:36:7c:8b:fc: ae:6c:54:79:a5:67:e5:d2:04:12:7a:80:3f:cb:4c: b5:bf:60:39:df:1e:a6:2c:be:89:ba:f9:9c:72:e5: 2b:04:59:fb:68:3e:d5:70:b8:2c:fb:7a:23:22:1d: 2f:77:80:c1:ab:76:9b:25:1a:ae:15:16:e4:49:87: dd:d8:e8:26:dc:33:bf:b9:e5:bf:d1:e7:02:a6:8e: d8:ef:de:d7:fc:0e:fd:1b:f9:59:f6:b3:af:54:9e: 15:5c:a5:52:e7:85:8b:96:5b:38:34:51:e6:25:7d: a4:38:35:8b:56:b7:00:43:40:59:5a:69:99:0c:32: 2b:5d:21:5b:6e:cb:25:74:be:4f:ba:75:14:a0:c0: b4:00:ce:f8:d4:d0:7f:20:3d:32:30:91:0a:07:6a: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.92.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:11:47:ac:74:2a:ad:ac:41:05:f9:86:bf:b7:7f:48:83:02: 46:10:c6:8f:07:7f:e9:fe:01:3a:fd:b3:15:f9:ed:7b:ca:df: 12:cd:bd:5c:8b:9c:49:35:4c:56:a5:71:15:ad:dd:4d:c3:20: 36:c1:ab:0b:49:95:bd:56:5e:6e:25:47:c7:b9:c2:9f:e6:f0: ab:e4:50:5f:9c:4c:b4:3a:79:8a:e4:c9:c7:9a:cd:f4:c9:a1: 84:11:ad:3a:0a:e5:6e:df:c6:18:ce:42:3e:ff:2f:f0:65:18: 98:93:7f:09:06:89:83:6d:ed:41:34:d9:9f:f1:3c:92:16:01: 03:28:ab:39:57:5f:80:9e:b0:6d:2b:ec:d9:24:8a:2f:dc:76: be:43:f9:9d:d0:a6:f6:12:0c:56:83:63:86:38:95:7d:4d:88: 8c:d1:fa:7c:87:13:92:fe:8f:0a:ed:a7:08:d0:29:ab:fe:3b: 8d:cd:de:84:4b:08:fa:de:0c:10:27:a4:70:69:46:80:e5:2b: 21:3a:a0:04:65:e0:0a:bd:98:9c:74:f0:17:c0:88:01:e7:9e: 00:df:9b:b0:08:4f:ea:37:3b:17:04:30:5a:56:5c:c1:ff:32: ff:82:39:d6:23:be:73:7a:0f:13:60:0d:55:81:3a:2b:68:27: 34:fb:ea:b8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNUzG2LppOfaSZ8IZcXFCuTTUm1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyNzE4MjEzN1oX DTI2MTAyNjE4MjYzN1owMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3 MTFDNjU5RjE3MzEzRUYwRjVFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAJjhTGpAFu0hidSxQ0F/j7/dRs/gTYJdWEBx1nNCEk9B4WwWsQ/Shzvjnm qbN6MbF8Mn2vXpfwWTzq0M1Fb9xxtgT01fnXVbpenaFwAdvnL6ZvHBe2bqS6d+a6 hNxD8fEY3AE2fIv8rmxUeaVn5dIEEnqAP8tMtb9gOd8epiy+ibr5nHLlKwRZ+2g+ 1XC4LPt6IyIdL3eAwat2myUarhUW5EmH3djoJtwzv7nlv9HnAqaO2O/e1/wO/Rv5 Wfazr1SeFVylUueFi5ZbODRR5iV9pDg1i1a3AENAWVppmQwyK10hW27LJXS+T7p1 FKDAtADO+NTQfyA9MjCRCgdqIukCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL1nMdBc1hgVvApxHGWfFzE+8PXrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyZDI5YjMy LTNhMjktNGExNC1iYzliLWM3NmEwMDdjYTAzMi8wL0JENjczMUQwNUNENjE4MTVC QzBBNzExQzY1OUYxNzMxM0VGMEY1RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFlwwDQYJKoZIhvcNAQELBQADggEBAHwRR6x0Kq2sQQX5hr+3f0iDAkYQxo8H f+n+ATr9sxX57XvK3xLNvVyLnEk1TFalcRWt3U3DIDbBqwtJlb1WXm4lR8e5wp/m 8KvkUF+cTLQ6eYrkyceazfTJoYQRrToK5W7fxhjOQj7/L/BlGJiTfwkGiYNt7UE0 2Z/xPJIWAQMoqzlXX4CesG0r7Nkkii/cdr5D+Z3QpvYSDFaDY4Y4lX1NiIzR+nyH E5L+jwrtpwjQKav+O43N3oRLCPreDBAnpHBpRoDlKyE6oARl4Aq9mJx08BfAiAHn ngDfm7AIT+o3OxcEMFpWXMH/Mv+COdYjvnN6DxNgDVWBOitoJzT76rg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:34 2025 by rpki-client