$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer File: DC0680824B7F80117B62C239676444B0691128B8.cer (raw, json) Hash identifier: Xe8Pc7QSlMx3PBMmyYfSpSOhhGPQdijDycnhTCvhbY0= Subject key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7CD8A07DD47602175CEC314EA920DCFE164EE5FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft caRepository: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 09:48:29 +0000 Certificate not after: Wed 21 Oct 2026 09:53:29 +0000 Subordinate resources: IP: 160.191.106.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d8:a0:7d:d4:76:02:17:5c:ec:31:4e:a9:20:dc:fe:16:4e:e5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 22 09:48:29 2025 GMT Not After : Oct 21 09:53:29 2026 GMT Subject: CN=DC0680824B7F80117B62C239676444B0691128B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:ed:24:7f:f8:21:4b:34:57:b4:f4:eb:1e: 16:9b:c9:74:74:7e:18:7e:c0:86:28:ca:43:26:5d: 2d:ec:63:d1:2f:3f:e8:69:41:d7:55:cd:a8:4c:93: 56:9a:e9:52:be:a6:98:44:ca:96:12:2a:db:76:bb: 5c:80:44:39:33:48:2e:05:52:07:d7:85:1a:35:fd: c4:70:c4:a0:4f:41:6e:9c:e1:6f:d3:06:83:7b:ee: a1:ba:f5:6c:34:cc:6a:99:cb:71:0b:03:c4:70:7c: d4:50:81:b7:51:7f:09:b7:1a:6f:94:ad:0b:87:dd: 46:95:39:c3:c8:e5:41:7f:2e:9b:b3:23:92:73:1d: c3:a8:55:0c:9f:9a:26:f3:52:cd:d0:a6:7a:9b:31: c1:79:b1:39:e0:2e:d8:a2:64:17:71:a1:11:5c:86: 6b:9c:05:88:0e:5c:89:32:02:e8:e5:ef:ce:f6:e2: a5:d3:b0:e6:b2:c7:bb:27:c9:09:0f:b4:b9:20:2e: e3:c6:18:83:e3:8a:64:a4:7f:70:75:3c:d4:b5:07: 63:b8:36:be:43:3a:75:c1:8e:62:f1:54:d9:e2:d5: 3d:6d:54:f1:43:d3:de:f6:9f:a7:7a:47:6f:42:c1: 51:16:bc:75:0a:c7:df:a1:63:a2:fc:89:b7:ec:34: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.106.0/23 Signature Algorithm: sha256WithRSAEncryption 90:16:21:43:1f:80:82:61:82:32:7e:de:8d:b8:36:32:e1:13: af:0e:7c:3e:ac:a0:84:67:e7:08:36:20:da:72:3c:1f:8c:a7: 7d:f4:3c:bc:2e:05:a2:dd:c3:7c:83:f9:dd:69:11:ae:01:b2: cf:82:16:3e:94:44:c7:ec:de:03:73:47:94:c6:ac:09:d3:8d: b7:b3:b0:d3:cf:9c:ee:2a:c3:c5:ae:db:ec:bb:fb:95:52:6a: bf:7b:27:d8:05:41:9c:3d:1b:db:91:99:f2:e2:b1:b7:dc:c0: c1:b7:3b:fc:4e:26:fe:b9:6e:69:4b:36:2f:f2:19:a3:37:5b: f9:b0:5a:90:5c:9e:0b:76:95:fc:40:fe:cf:6b:36:6d:2e:ee: 0e:55:9d:78:95:c8:30:ba:48:f5:dc:67:cd:05:ff:e6:5f:6f: 00:68:74:c8:d5:59:55:83:af:ff:5d:84:6b:4b:a2:54:30:61: 9e:a4:d4:7d:b2:b8:ea:63:01:f9:5d:fd:58:5e:42:dd:f5:64: ae:d8:c4:4f:d5:07:9e:fa:52:dc:12:83:f5:e0:ec:bc:27:90: 6d:c5:50:1f:e6:91:80:1c:4f:f0:51:b5:f0:6a:c8:fc:25:84: a6:2f:26:20:15:a9:05:5e:7d:36:7d:3b:58:12:4d:47:b0:90: 10:f7:bb:ae -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfNigfdR2Ahdc7DFOqSDc/hZO5fwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyMjA5NDgyOVoX DTI2MTAyMTA5NTMyOVowMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJD MjM5Njc2NDQ0QjA2OTExMjhCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1l7SR/+CFLNFe09OseFpvJdHR+GH7AhijKQyZdLexj0S8/6GlB11XNqEyT VprpUr6mmETKlhIq23a7XIBEOTNILgVSB9eFGjX9xHDEoE9Bbpzhb9MGg3vuobr1 bDTMapnLcQsDxHB81FCBt1F/Cbcab5StC4fdRpU5w8jlQX8um7MjknMdw6hVDJ+a JvNSzdCmepsxwXmxOeAu2KJkF3GhEVyGa5wFiA5ciTIC6OXvzvbipdOw5rLHuyfJ CQ+0uSAu48YYg+OKZKR/cHU81LUHY7g2vkM6dcGOYvFU2eLVPW1U8UPT3vafp3pH b0LBURa8dQrH36FjovyJt+w0TWUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNwGgIJLf4ARe2LCOWdkRLBpESi4MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlODU1ZThh LTNmZjgtNDdmZi1hYWVjLTQ4ZDhiMzgwYTkwNC8wL0RDMDY4MDgyNEI3RjgwMTE3 QjYyQzIzOTY3NjQ0NEIwNjkxMTI4QjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgv2owDQYJKoZIhvcNAQELBQADggEBAJAWIUMfgIJhgjJ+3o24NjLhE68OfD6s oIRn5wg2INpyPB+Mp330PLwuBaLdw3yD+d1pEa4Bss+CFj6URMfs3gNzR5TGrAnT jbezsNPPnO4qw8Wu2+y7+5VSar97J9gFQZw9G9uRmfLisbfcwMG3O/xOJv65bmlL Ni/yGaM3W/mwWpBcngt2lfxA/s9rNm0u7g5VnXiVyDC6SPXcZ80F/+ZfbwBodMjV WVWDr/9dhGtLolQwYZ6k1H2yuOpjAfld/VheQt31ZK7YxE/VB576UtwSg/Xg7Lwn kG3FUB/mkYAcT/BRtfBqyPwlhKYvJiAVqQVefTZ9O1gSTUewkBD3u64= -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:03 2025 by rpki-client