$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer File: C4632299E016D269164FA40AEF99CC8602E2B7C1.cer (raw, json) Hash identifier: 60ygtqUAdEVnraGHUJqwTzcN9mAgUPGuYA2PaNjxa2U= Subject key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 57A32C7D71F7D7B0E9AF8670FDE9F00B866BDFFA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft caRepository: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Jun 2025 09:09:12 +0000 Certificate not after: Sun 14 Jun 2026 09:14:12 +0000 Subordinate resources: IP: 160.22.64.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 18:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a3:2c:7d:71:f7:d7:b0:e9:af:86:70:fd:e9:f0:0b:86:6b:df:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 15 09:09:12 2025 GMT Not After : Jun 14 09:14:12 2026 GMT Subject: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:36:7e:13:a2:14:a0:8a:83:9f:0e:28:99:c8: e2:cb:22:49:7c:22:25:32:fe:67:39:01:93:e1:3e: 0d:ef:3a:bd:17:54:0a:a9:94:4c:e5:60:6d:c3:fd: de:ad:45:75:64:0f:97:73:90:25:a2:c9:db:7f:48: 7a:a9:d6:b1:ce:74:f6:06:e7:2b:4b:77:45:24:64: d5:62:00:4b:7c:1b:31:64:d2:0c:b0:3b:47:ad:8c: 67:33:ed:b9:5b:d3:be:51:0f:17:4b:be:b8:2b:ab: 2b:6d:d0:3b:6e:f1:93:9b:d3:17:9e:2b:fa:b2:46: 1e:bc:d9:a0:87:78:b6:45:67:e7:63:20:0d:69:17: 22:6e:89:48:63:8d:0c:03:de:7c:57:b7:8d:2c:7e: 0c:8f:76:bd:fc:b9:26:32:bc:70:41:e6:a1:56:c9: e6:e7:ad:07:43:3d:3f:16:a6:fa:95:d4:ec:3f:f2: 6e:9f:6b:ef:87:79:41:1c:38:c3:48:38:84:35:f3: e6:a1:83:3a:61:7a:ad:21:7e:7b:98:c7:6a:96:56: 34:d8:87:be:c6:e1:96:58:22:84:71:12:bc:5a:5b: 0c:ae:82:a4:a5:e6:45:f9:7d:a1:96:82:92:b8:d5: 6e:26:fa:e5:c5:6f:bc:42:43:07:6c:de:63:25:08: c6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.64.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:27:e5:e8:13:63:ab:d5:56:d7:5d:e2:5d:bf:83:f4:c8:b2: fe:72:32:be:55:c7:57:ef:4e:56:d0:1f:4b:c3:03:47:42:16: e3:eb:1d:8e:8d:99:2a:13:32:fc:80:06:18:f8:67:59:b4:74: c1:e9:6c:1a:bc:69:f8:4b:25:c8:92:f4:15:09:75:d7:aa:79: e1:35:91:c4:1b:9d:cb:79:00:be:f0:92:70:bd:42:05:17:90: 51:3a:e2:13:4d:d0:c7:3b:64:e5:1c:27:eb:94:fb:09:a8:fc: b8:a2:71:73:07:1e:c9:f7:7a:ca:8c:44:56:52:97:3c:cc:98: 4a:f4:6d:61:dc:59:0f:9f:cc:0a:43:78:93:b8:37:25:a1:9b: da:84:60:37:48:32:00:bd:c6:c8:f3:cb:c8:fb:a2:34:20:b1: f9:d9:71:56:87:22:96:88:1f:e5:00:34:f8:d9:9f:2d:91:3e: 81:f4:c9:fa:4e:0f:a0:ad:2f:e4:ae:b5:c5:39:51:5e:68:63: 61:35:56:ee:70:84:c5:0d:1c:3c:7f:04:0f:fe:7e:71:92:17: 56:0e:95:84:2b:1f:78:c7:7b:bd:f8:61:2f:70:9c:55:6e:97: 11:d9:66:56:db:d4:c5:3c:67:e9:37:21:e2:5d:62:60:e7:93: e4:6b:4e:8b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUV6MsfXH317Dpr4Zw/enwC4Zr3/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxNTA5MDkxMloX DTI2MDYxNDA5MTQxMlowMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZB NDBBRUY5OUNDODYwMkUyQjdDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOo2fhOiFKCKg58OKJnI4ssiSXwiJTL+ZzkBk+E+De86vRdUCqmUTOVgbcP9 3q1FdWQPl3OQJaLJ239IeqnWsc509gbnK0t3RSRk1WIAS3wbMWTSDLA7R62MZzPt uVvTvlEPF0u+uCurK23QO27xk5vTF54r+rJGHrzZoId4tkVn52MgDWkXIm6JSGON DAPefFe3jSx+DI92vfy5JjK8cEHmoVbJ5uetB0M9Pxam+pXU7D/ybp9r74d5QRw4 w0g4hDXz5qGDOmF6rSF+e5jHapZWNNiHvsbhllgihHESvFpbDK6CpKXmRfl9oZaC krjVbib65cVvvEJDB2zeYyUIxqcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRjIpngFtJpFk+kCu+ZzIYC4rfBMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlNGFiYTBh LTFjMmMtNGY4YS1hNGI0LWVhNzJkOWIyYTYwYS8wL0M0NjMyMjk5RTAxNkQyNjkx NjRGQTQwQUVGOTlDQzg2MDJFMkI3QzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFkAwDQYJKoZIhvcNAQELBQADggEBAH0n5egTY6vVVtdd4l2/g/TIsv5yMr5V x1fvTlbQH0vDA0dCFuPrHY6NmSoTMvyABhj4Z1m0dMHpbBq8afhLJciS9BUJddeq eeE1kcQbnct5AL7wknC9QgUXkFE64hNN0Mc7ZOUcJ+uU+wmo/LiicXMHHsn3esqM RFZSlzzMmEr0bWHcWQ+fzApDeJO4NyWhm9qEYDdIMgC9xsjzy8j7ojQgsfnZcVaH IpaIH+UANPjZny2RPoH0yfpOD6CtL+SutcU5UV5oY2E1Vu5whMUNHDx/BA/+fnGS F1YOlYQrH3jHe734YS9wnFVulxHZZlbb1MU8Z+k3IeJdYmDnk+RrTos= -----END CERTIFICATE-----Generated at Tue Jun 17 16:20:31 2025 by rpki-client