$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer (raw, json) Hash identifier: gmm7B4mLydAAwXOCvuGeBeBjdzUzC8HsJNpIsgLU/a0= Subject key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 32D511DE503871220FA736CD97FBFF9AE234670E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft caRepository: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 May 2025 22:08:46 +0000 Certificate not after: Thu 30 Apr 2026 22:13:46 +0000 Subordinate resources: IP: 157.20.178.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 13:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d5:11:de:50:38:71:22:0f:a7:36:cd:97:fb:ff:9a:e2:34:67:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 1 22:08:46 2025 GMT Not After : Apr 30 22:13:46 2026 GMT Subject: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:ba:8e:2f:59:fb:72:1c:53:d0:ce:52:5e: 5f:73:ff:16:4a:89:75:b0:c7:94:f8:64:e6:6f:9a: 21:13:ca:9c:7a:1b:58:b8:79:01:aa:37:ec:93:f6: 5d:2d:70:37:8b:a6:7c:73:01:de:34:3e:30:d0:29: bd:1d:da:bd:7a:26:aa:bf:1e:50:f0:87:13:1a:76: a6:c5:ac:e0:3e:be:1f:da:c7:a7:f8:11:70:c6:68: 18:af:b4:2c:82:09:55:8d:0f:69:50:ef:84:72:27: 44:b6:0b:75:15:5e:2d:de:70:ed:02:5a:9e:ad:a4: 00:11:2d:07:db:76:3c:75:10:41:27:a3:79:6d:9a: c5:f2:18:44:18:a8:1d:27:86:87:ab:0b:95:e5:bd: 64:a5:97:b8:a1:e0:b9:21:51:0d:2f:33:09:95:78: ee:0b:79:dd:c8:36:29:0b:c5:7d:78:93:07:be:48: db:57:a6:aa:5b:3c:53:27:24:5e:61:d5:ee:bf:77: f9:18:12:22:a0:6b:64:e9:7c:b8:70:47:75:0f:70: af:f4:c3:e8:f1:89:a7:56:72:41:5d:ca:3a:8e:9f: 59:2c:b1:69:ed:2e:22:d3:6a:0d:1a:18:9f:20:08: 83:4d:d8:66:90:75:06:93:a3:8e:0c:c5:41:3b:bf: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.178.0/23 Signature Algorithm: sha256WithRSAEncryption 76:c9:f8:87:75:25:3e:b2:f3:b5:4b:5f:d9:b2:fd:f7:64:56: a4:0f:4d:53:61:4d:ab:4d:b6:be:24:ee:d5:07:bd:06:9d:73: 31:f8:52:bd:7e:e6:4e:eb:dd:ba:14:c1:aa:3c:11:e4:60:07: 4f:25:8a:04:e7:f9:9e:fc:db:cc:74:a5:04:38:c4:21:fd:8a: b4:a0:78:7f:ee:56:db:7a:d7:ec:37:dd:e7:97:aa:18:6a:74: 19:86:55:21:61:66:3f:de:5b:e6:fe:c1:78:63:f6:bf:dd:b2: d9:70:a6:87:d9:5f:73:8a:b2:06:c8:7f:24:5c:f3:ff:fc:cc: 56:0d:c2:84:87:42:7e:d6:97:bb:74:d7:8a:ca:f3:9d:1d:03: 4a:87:c8:2e:58:78:4c:49:9e:14:f6:64:bc:8b:16:f4:f5:f8: c3:4c:2b:d8:66:be:f2:d4:d0:93:c7:c6:2a:2f:53:e0:7f:ae: 2e:4a:39:03:37:d4:38:77:a2:4c:89:0d:be:56:f1:d8:c1:f1: ef:39:47:e1:2e:c2:dc:88:08:ef:cb:ce:37:02:e7:9c:b7:d1: 7f:96:37:57:79:b2:a3:15:23:51:a2:b4:50:5b:ed:8e:1c:e7: 76:38:95:18:ee:75:3c:83:2f:9b:80:f2:29:b6:18:1f:0e:6a: ba:99:b1:1f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMtUR3lA4cSIPpzbNl/v/muI0Zw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUwMTIyMDg0NloX DTI2MDQzMDIyMTM0NlowMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1 QkQ1MUQ0QjdEOTYzNjE4MjMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK20uo4vWftyHFPQzlJeX3P/FkqJdbDHlPhk5m+aIRPKnHobWLh5Aao37JP2 XS1wN4umfHMB3jQ+MNApvR3avXomqr8eUPCHExp2psWs4D6+H9rHp/gRcMZoGK+0 LIIJVY0PaVDvhHInRLYLdRVeLd5w7QJanq2kABEtB9t2PHUQQSejeW2axfIYRBio HSeGh6sLleW9ZKWXuKHguSFRDS8zCZV47gt53cg2KQvFfXiTB75I21emqls8Uyck XmHV7r93+RgSIqBrZOl8uHBHdQ9wr/TD6PGJp1ZyQV3KOo6fWSyxae0uItNqDRoY nyAIg03YZpB1BpOjjgzFQTu/feECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL2beonIXg32eG9b1R1LfZY2GCMaMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzNjA2NmU4 LThlMTktNGRlNy05NDdiLTk0ZWUzY2QwOWY4NS8wL0JEOUI3QTg5Qzg1RTBERjY3 ODZGNUJENTFENEI3RDk2MzYxODIzMUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFLIwDQYJKoZIhvcNAQELBQADggEBAHbJ+Id1JT6y87VLX9my/fdkVqQPTVNh TatNtr4k7tUHvQadczH4Ur1+5k7r3boUwao8EeRgB08ligTn+Z7828x0pQQ4xCH9 irSgeH/uVtt61+w33eeXqhhqdBmGVSFhZj/eW+b+wXhj9r/dstlwpofZX3OKsgbI fyRc8//8zFYNwoSHQn7Wl7t014rK850dA0qHyC5YeExJnhT2ZLyLFvT1+MNMK9hm vvLU0JPHxiovU+B/ri5KOQM31Dh3okyJDb5W8djB8e85R+EuwtyICO/LzjcC55y3 0X+WN1d5sqMVI1GitFBb7Y4c53Y4lRjudTyDL5uA8im2GB8OarqZsR8= -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:04 2025 by rpki-client