$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer (raw, json) Hash identifier: fv2HBmWfX4PVh9A4yMjh7S1/E915NzIuJqI6PfH6tnU= Subject key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 49593651EBA4127DBDC5032B0E259938F9F1CD9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft caRepository: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 May 2025 18:22:07 +0000 Certificate not after: Fri 15 May 2026 18:27:07 +0000 Subordinate resources: IP: 157.66.86.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:59:36:51:eb:a4:12:7d:bd:c5:03:2b:0e:25:99:38:f9:f1:cd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 16 18:22:07 2025 GMT Not After : May 15 18:27:07 2026 GMT Subject: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:77:b6:d7:1e:1a:05:b0:dd:47:cc:b3:ff: 42:99:82:e3:5d:f4:76:24:bf:96:25:66:05:ac:67: 30:67:33:ef:8c:aa:6b:24:54:02:19:7e:5a:c3:94: 08:16:19:2d:ed:ff:55:2a:3e:87:ab:70:6f:7d:1f: 79:39:43:5c:cc:82:29:ad:1b:8b:e2:21:12:0f:f3: be:bc:12:7a:95:ab:e4:d9:9c:f0:6d:49:55:e2:e4: e5:62:6d:0c:4d:eb:be:2d:9f:cc:73:bc:86:63:77: 64:8f:95:ef:8d:ac:ca:22:c3:37:04:16:41:e9:97: 21:a9:b0:b1:87:f0:27:eb:74:ae:68:ca:70:d3:0c: 5b:d2:9b:02:bf:ae:a1:72:8f:09:6a:e2:9b:5d:dd: 4b:70:cb:75:c6:67:b9:f9:6d:fe:d6:a8:1e:37:e0: 93:52:b3:b9:bb:d3:a1:a6:6c:9a:4f:7c:dd:5b:cf: b5:33:da:fb:40:fb:bb:c6:da:8f:a1:f4:3d:4a:ef: 49:73:14:54:85:4d:47:ff:23:7b:6b:53:54:08:e9: 01:3b:54:9f:8a:da:7c:48:f0:57:5b:8f:56:f8:52: 8d:b7:6a:10:18:8c:03:fb:c1:d3:b3:59:f2:f7:88: 3c:1c:19:ca:4c:40:da:d0:ab:0f:fa:67:7a:5b:ff: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.86.0/23 Signature Algorithm: sha256WithRSAEncryption 10:c1:a4:29:ec:59:29:ce:72:b4:f2:53:80:c1:34:54:63:3d: 2c:39:61:3b:cd:be:73:fc:83:3f:d0:9d:37:18:60:33:9a:25: 08:7c:50:62:f6:31:b1:74:fe:55:c3:0e:aa:32:97:ca:5b:bf: 1a:50:de:b1:39:dc:08:83:b8:89:14:ea:99:61:84:d6:d8:1d: 1e:6e:c6:e2:ac:76:e0:c5:a0:c8:66:69:d5:c5:0f:c0:89:d4: 53:e9:6f:52:81:df:07:f1:73:c7:bb:c1:14:6b:0a:3f:ae:1b: 5d:04:88:12:34:19:de:c1:bc:94:48:45:60:99:9f:f5:00:53: f2:ce:23:83:ac:af:cb:05:8f:3e:38:ad:d5:41:55:20:52:a5: 6f:83:a9:f0:84:f6:ed:1a:7b:30:49:ba:86:39:4d:a5:20:10: 1e:d5:30:d6:b5:e7:4a:db:a9:69:8a:a1:ff:ff:46:7d:a5:3b: ed:e3:d4:2a:bc:8e:95:88:47:32:67:12:4f:f9:63:44:82:79: 80:cf:9d:21:3b:0e:b5:f0:29:4f:41:ac:8b:64:a3:fd:66:de: 6c:b7:6d:64:65:9a:11:74:ef:9c:36:c5:10:ca:ad:0d:8a:ff: 0e:37:fd:82:a2:d3:38:32:59:fa:79:09:0f:fd:a5:d2:6c:fe: 4e:6a:51:c9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSVk2UeukEn29xQMrDiWZOPnxzZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUxNjE4MjIwN1oX DTI2MDUxNTE4MjcwN1owMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5 MkNCNkRBN0E4Q0ExNUM4NUIxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9Fd7bXHhoFsN1HzLP/QpmC4130diS/liVmBaxnMGcz74yqayRUAhl+WsOU CBYZLe3/VSo+h6twb30feTlDXMyCKa0bi+IhEg/zvrwSepWr5Nmc8G1JVeLk5WJt DE3rvi2fzHO8hmN3ZI+V742syiLDNwQWQemXIamwsYfwJ+t0rmjKcNMMW9KbAr+u oXKPCWrim13dS3DLdcZnuflt/taoHjfgk1KzubvToaZsmk983VvPtTPa+0D7u8ba j6H0PUrvSXMUVIVNR/8je2tTVAjpATtUn4rafEjwV1uPVvhSjbdqEBiMA/vB07NZ 8veIPBwZykxA2tCrD/pnelv/gi0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO98qCxbRf1BLeiSy22nqMoVyFsXMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y4N2RkNTk3 LTQwY2QtNDA5Yi1iM2M1LTI4NTJjZTAxNDg4OS8wL0VGN0NBODJDNUI0NUZENDEy REU4OTJDQjZEQTdBOENBMTVDODVCMTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQlYwDQYJKoZIhvcNAQELBQADggEBABDBpCnsWSnOcrTyU4DBNFRjPSw5YTvN vnP8gz/QnTcYYDOaJQh8UGL2MbF0/lXDDqoyl8pbvxpQ3rE53AiDuIkU6plhhNbY HR5uxuKsduDFoMhmadXFD8CJ1FPpb1KB3wfxc8e7wRRrCj+uG10EiBI0Gd7BvJRI RWCZn/UAU/LOI4Osr8sFjz44rdVBVSBSpW+DqfCE9u0aezBJuoY5TaUgEB7VMNa1 50rbqWmKof//Rn2lO+3j1Cq8jpWIRzJnEk/5Y0SCeYDPnSE7DrXwKU9BrItko/1m 3my3bWRlmhF075w2xRDKrQ2K/w43/YKi0zgyWfp5CQ/9pdJs/k5qUck= -----END CERTIFICATE-----Generated at Tue Nov 4 18:32:33 2025 by rpki-client