$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer (raw, json) Hash identifier: hfu9PmTqm0FLVQaT+N39ybO3QsQ7034A0kyWdKKhDV4= Subject key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5AE51253EC494AC39DD9A32961205C7EB63B0C67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft caRepository: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 10 Jul 2025 23:27:58 +0000 Certificate not after: Thu 09 Jul 2026 23:32:58 +0000 Subordinate resources: IP: 160.25.248.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e5:12:53:ec:49:4a:c3:9d:d9:a3:29:61:20:5c:7e:b6:3b:0c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 10 23:27:58 2025 GMT Not After : Jul 9 23:32:58 2026 GMT Subject: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:6a:dc:5f:86:89:9e:d0:3e:4a:ad:b2:75: 34:a0:55:e1:92:88:00:fe:e1:36:5c:1a:b9:8f:99: f8:cb:83:d1:01:ad:d4:cf:f8:99:fa:83:e3:85:33: 65:84:13:96:b4:00:66:bf:77:07:70:d8:c6:16:39: 48:fa:a8:1c:78:e4:c8:3c:1a:12:ce:da:4a:c7:69: 64:bd:b8:d6:55:8f:43:26:2a:c7:21:58:4c:c8:39: 90:03:ce:56:3f:d0:23:eb:e7:e1:21:60:88:d8:7f: 4e:39:2c:29:f3:3f:e6:a5:d5:36:a9:47:ad:ec:f9: 3c:af:e3:27:ce:e2:1c:dc:c3:65:64:36:33:f0:00: 7b:2c:5d:85:31:4d:3f:d3:57:29:f5:67:b9:72:1e: ff:da:c2:b9:cd:0f:87:bb:54:94:29:d6:49:f9:38: 9b:8c:65:c7:f2:b0:59:34:b5:9a:63:6a:0d:18:08: 41:38:83:ca:5e:2f:ca:53:a3:3f:65:0a:73:b2:d8: 38:7a:85:3f:84:6d:1e:bb:ea:6b:6a:c0:88:05:75: 27:f5:d6:05:e7:fa:78:dd:25:9b:b8:9a:5d:a3:da: 2e:dd:5b:e6:ce:b3:a7:4a:c3:39:72:f0:8d:c3:37: 85:bd:1d:81:be:95:ae:99:30:f0:a9:f3:27:9b:24: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.248.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:eb:fe:73:94:1d:0c:02:1e:5e:59:f4:7d:61:a7:f5:ca:2f: c6:c4:37:2c:11:2b:38:47:86:8d:1e:90:5f:e6:d8:7d:d9:0a: 57:71:14:f5:78:76:3b:2e:d4:eb:87:0d:3f:ce:4d:7e:08:e1: e7:d1:70:29:15:9c:3f:b6:54:74:76:ef:ef:d4:7a:79:e4:73: e1:00:dd:da:b3:81:88:a0:a0:e4:5f:70:72:11:85:86:2d:83: 67:a0:ba:c5:81:bb:ea:54:b1:2e:df:2c:c5:9a:74:4d:f4:35: 21:61:22:c2:4d:42:93:bf:70:ee:5f:0e:4a:dd:46:b7:f7:f7: 1d:09:f9:23:48:1a:53:36:82:ac:4d:47:37:ce:ad:00:ff:fa: 31:08:9c:3c:8b:81:97:ce:a9:88:35:89:61:00:25:e3:e6:6d: 52:bf:76:eb:89:f6:d0:b6:20:d8:7b:bc:62:ac:3c:16:bb:d3: 44:46:2f:55:89:7a:d1:04:5f:ad:46:80:33:eb:43:fe:cd:80: 29:30:4f:1f:ef:4a:4e:e5:4d:02:0a:0d:59:33:1c:91:69:61: b6:fd:bb:0c:b7:c8:81:c2:3f:59:8a:62:12:ee:16:bd:91:64: 51:1e:b5:8d:1a:47:8b:1d:ea:0f:28:20:a8:f8:9d:eb:53:ff: c9:ae:db:e3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWuUSU+xJSsOd2aMpYSBcfrY7DGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcxMDIzMjc1OFoX DTI2MDcwOTIzMzI1OFowMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3 NjY5MzJGREExOUIzRTNBNENCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSEatxfhome0D5KrbJ1NKBV4ZKIAP7hNlwauY+Z+MuD0QGt1M/4mfqD44Uz ZYQTlrQAZr93B3DYxhY5SPqoHHjkyDwaEs7aSsdpZL241lWPQyYqxyFYTMg5kAPO Vj/QI+vn4SFgiNh/TjksKfM/5qXVNqlHrez5PK/jJ87iHNzDZWQ2M/AAeyxdhTFN P9NXKfVnuXIe/9rCuc0Ph7tUlCnWSfk4m4xlx/KwWTS1mmNqDRgIQTiDyl4vylOj P2UKc7LYOHqFP4RtHrvqa2rAiAV1J/XWBef6eN0lm7iaXaPaLt1b5s6zp0rDOXLw jcM3hb0dgb6Vrpkw8KnzJ5skTyMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMI/gy8n24i4vFh2aTL9oZs+Oky/MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyNzllZTlj LWFkMmItNGJlZC04NjQxLTIzYmYyZDNiMTZkYi8wL0MyM0Y4MzJGMjdEQjg4QjhC QzU4NzY2OTMyRkRBMTlCM0UzQTRDQkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGfgwDQYJKoZIhvcNAQELBQADggEBAD7r/nOUHQwCHl5Z9H1hp/XKL8bENywR KzhHho0ekF/m2H3ZCldxFPV4djsu1OuHDT/OTX4I4efRcCkVnD+2VHR27+/Uennk c+EA3dqzgYigoORfcHIRhYYtg2egusWBu+pUsS7fLMWadE30NSFhIsJNQpO/cO5f DkrdRrf39x0J+SNIGlM2gqxNRzfOrQD/+jEInDyLgZfOqYg1iWEAJePmbVK/duuJ 9tC2INh7vGKsPBa700RGL1WJetEEX61GgDPrQ/7NgCkwTx/vSk7lTQIKDVkzHJFp Ybb9uwy3yIHCP1mKYhLuFr2RZFEetY0aR4sd6g8oIKj4netT/8mu2+M= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:18 2025 by rpki-client