$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer File: D6FA07102C8726922074D42DFF59946144A13506.cer (raw, json) Hash identifier: zY1I1ZulTm7YpAtUs5LuIGI6idQlj+/oArwbc+GdoQ4= Subject key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2D05CED4EE533B36AF957F1383C21A1B622DD364 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft caRepository: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 30 Oct 2025 18:00:06 +0000 Certificate not after: Thu 29 Oct 2026 18:05:06 +0000 Subordinate resources: IP: 160.25.200.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:05:ce:d4:ee:53:3b:36:af:95:7f:13:83:c2:1a:1b:62:2d:d3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 30 18:00:06 2025 GMT Not After : Oct 29 18:05:06 2026 GMT Subject: CN=D6FA07102C8726922074D42DFF59946144A13506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:94:8f:13:b9:70:f3:65:ac:d3:72:13:01: 72:78:16:1b:01:c5:3c:f3:38:6a:b1:be:9b:70:45: eb:9a:64:dc:0d:7f:e4:21:33:29:c1:ef:0f:e7:75: ae:6c:c4:9c:1a:d4:2c:08:5e:23:41:b8:fc:e4:b0: bb:a4:d3:90:25:7a:83:90:a6:5d:c7:2a:46:d1:58: 19:49:d0:b4:d8:86:01:0d:1e:68:24:80:cd:92:9f: 76:89:0d:80:3c:ca:d5:db:f1:3c:f2:86:b0:6c:bc: cc:7c:21:f9:de:da:49:69:33:6d:28:b7:a8:97:f2: c2:40:07:72:db:c0:f0:3d:18:b0:f4:75:5a:d9:7a: 8c:15:73:41:d1:d6:db:f6:c0:ae:d3:67:b8:ba:aa: b3:56:6d:0a:f3:b6:6b:0d:10:49:fa:b1:4b:c9:49: b9:f6:a0:b6:29:ac:f0:d5:e5:d7:b1:63:82:4b:8e: fc:eb:1f:55:b9:00:cd:4f:0b:cf:17:fd:e1:24:22: fb:4c:4f:df:14:de:87:b0:0f:3a:06:ae:e9:54:6a: 36:7d:2b:39:98:70:44:3c:06:b3:84:e7:09:b2:b8: cf:bf:6f:31:4d:29:57:7e:5b:fc:64:c8:e3:83:b2: 2d:8a:45:04:58:df:a9:0b:03:4f:cb:03:38:2c:9d: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.200.0/24 Signature Algorithm: sha256WithRSAEncryption 58:5f:59:f0:56:1c:ca:80:35:09:3f:90:7e:a9:28:64:ee:bb: 9f:65:63:ce:1d:ca:a7:8b:95:41:10:c1:35:fe:f4:15:9e:23: d3:29:70:34:48:13:a0:d6:5f:05:2e:3e:1c:49:69:39:ed:e8: 18:71:84:8e:22:af:0c:cc:d7:b9:1a:17:93:d5:ec:fd:45:8a: 58:9e:1f:14:df:9a:0f:b2:1e:1d:6e:b0:50:f8:51:cf:f4:ab: aa:77:6e:16:18:37:ac:79:ec:11:57:92:64:2c:a8:29:21:46: 67:0c:24:f8:45:0f:5c:04:83:2c:65:63:4b:6c:ad:4a:ec:07: 87:3e:45:88:0e:d8:82:fb:59:19:cd:d5:6b:28:81:4f:fd:e3: 78:13:64:de:b5:52:b1:ea:42:ca:10:f6:86:97:b2:10:9b:9a: 5a:c9:d7:a9:dc:76:4b:c0:30:df:4d:21:1c:0f:23:49:41:c3: 39:3a:07:34:f0:88:00:99:14:7f:47:5f:bd:8b:53:df:71:d4: 05:71:70:d6:b6:4c:e9:4d:47:09:c5:a9:ed:62:57:40:af:79: 3f:d2:82:e9:7d:27:6d:7e:0b:46:74:95:88:de:bb:bd:d9:1a: 30:f0:af:e7:e6:5b:e3:68:f6:3c:e7:71:52:32:78:f7:27:b2: 1d:20:7a:f5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULQXO1O5TOzavlX8Tg8IaG2It02QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAzMDE4MDAwNloX DTI2MTAyOTE4MDUwNlowMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRE NDJERkY1OTk0NjE0NEExMzUwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOf6lI8TuXDzZazTchMBcngWGwHFPPM4arG+m3BF65pk3A1/5CEzKcHvD+d1 rmzEnBrULAheI0G4/OSwu6TTkCV6g5CmXccqRtFYGUnQtNiGAQ0eaCSAzZKfdokN gDzK1dvxPPKGsGy8zHwh+d7aSWkzbSi3qJfywkAHctvA8D0YsPR1Wtl6jBVzQdHW 2/bArtNnuLqqs1ZtCvO2aw0QSfqxS8lJufagtims8NXl17FjgkuO/OsfVbkAzU8L zxf94SQi+0xP3xTeh7APOgau6VRqNn0rOZhwRDwGs4TnCbK4z79vMU0pV35b/GTI 44OyLYpFBFjfqQsDT8sDOCyd8O8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNb6BxAshyaSIHTULf9ZlGFEoTUGMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNjNhNmU2 LWNhYjMtNGYwYy04NWM3LWUwMmJkNjQxZTNjZS8wL0Q2RkEwNzEwMkM4NzI2OTIy MDc0RDQyREZGNTk5NDYxNDRBMTM1MDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGcgwDQYJKoZIhvcNAQELBQADggEBAFhfWfBWHMqANQk/kH6pKGTuu59lY84d yqeLlUEQwTX+9BWeI9MpcDRIE6DWXwUuPhxJaTnt6BhxhI4irwzM17kaF5PV7P1F ilieHxTfmg+yHh1usFD4Uc/0q6p3bhYYN6x57BFXkmQsqCkhRmcMJPhFD1wEgyxl Y0tsrUrsB4c+RYgO2IL7WRnN1WsogU/943gTZN61UrHqQsoQ9oaXshCbmlrJ16nc dkvAMN9NIRwPI0lBwzk6BzTwiACZFH9HX72LU99x1AVxcNa2TOlNRwnFqe1iV0Cv eT/Sgul9J21+C0Z0lYjeu73ZGjDwr+fmW+No9jzncVIyePcnsh0gevU= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:57 2025 by rpki-client