$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer File: F2E8B493535CE192E2A343E44990C2B86B854E0F.cer (raw, json) Hash identifier: /MgFIFdABQsVKk87UT+euU1GU4WCq1aew4Kae+fkyTg= Subject key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0B74778A65A78CA6FBEE3A880AE2508B7D25C4C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft caRepository: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Jun 2025 03:10:12 +0000 Certificate not after: Mon 08 Jun 2026 03:15:12 +0000 Subordinate resources: IP: 160.19.89.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 13:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:74:77:8a:65:a7:8c:a6:fb:ee:3a:88:0a:e2:50:8b:7d:25:c4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 9 03:10:12 2025 GMT Not After : Jun 8 03:15:12 2026 GMT Subject: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:73:17:3c:39:d3:09:fd:9d:18:64:28:e0: ee:0c:83:d6:80:ed:c7:d4:09:5f:4f:a9:5b:0e:77: 61:da:a4:32:67:cd:03:3c:7b:8b:af:1e:5e:ce:b9: 01:65:1d:11:62:f8:17:9c:f3:15:c2:7c:29:c2:8b: 35:23:8a:9b:83:ee:d0:07:8a:3f:47:a7:bc:ad:a2: c7:d1:ef:c8:25:67:26:77:9b:e4:5c:ed:4d:7f:4c: ca:7c:54:98:ea:9d:3d:b8:8e:53:00:5b:c4:b5:58: f6:a3:ea:5a:1a:ca:a4:be:57:10:d2:41:82:6a:f8: 06:f3:fa:b7:ae:8e:26:07:ae:49:9d:7c:33:60:3b: a0:dc:cb:d8:98:02:c4:47:e5:90:c3:ce:b5:57:29: 0e:f8:55:b3:18:68:65:54:10:7b:fc:fb:3b:75:c3: 24:77:ab:ec:8f:9b:65:85:db:a0:51:b8:0f:ad:2b: c4:16:4e:4d:b8:92:bc:21:e9:42:a8:cc:5a:84:bb: 2d:c2:f8:15:7c:a2:da:47:91:37:ef:e1:68:5b:b0: 81:79:72:cf:2a:6b:33:74:7f:9f:48:b7:92:0c:a9: 76:0c:82:f3:b8:99:66:23:ff:83:e0:74:60:96:08: 91:6f:98:96:ee:13:a1:11:47:f9:9c:43:d6:59:77: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.89.0/24 Signature Algorithm: sha256WithRSAEncryption 05:a6:a2:f1:2f:96:b1:fb:50:f6:75:f6:cf:85:b8:e8:86:5d: e6:2e:4c:10:e3:b6:40:05:53:0c:42:a8:c9:e2:28:af:95:17: da:88:ba:8d:1b:11:64:f5:32:45:ae:c6:e6:07:08:f4:2c:bc: c9:93:01:18:e2:71:59:41:f0:9f:df:ac:e2:9f:58:3d:01:e2: a8:18:a2:b2:e3:16:7a:93:d5:bf:e8:7c:79:a3:d8:72:0b:1f: 4b:71:96:22:f6:62:9b:af:c6:4b:58:55:16:b1:09:11:e8:47: ad:4b:39:05:c5:e6:30:14:f0:be:b2:0e:70:3a:bb:a0:d4:d5: 49:66:80:86:b5:31:d8:ac:ba:5b:66:58:b4:ce:94:db:9d:d8: e3:9d:74:32:4e:fe:92:1a:13:a1:db:9f:7c:c1:ba:55:7f:55: 54:38:76:b6:11:f5:86:63:86:6d:9d:57:28:70:1d:76:51:84: b6:8c:03:ba:9c:02:35:dd:eb:19:8e:69:dc:87:03:a8:1e:e7: 3e:3e:e8:06:ee:b6:22:3b:c0:8a:b4:cb:bc:01:04:61:51:23: af:24:e3:78:55:b0:28:91:99:f1:40:59:1f:e5:59:81:a4:52: 27:29:b0:2c:05:9b:2e:18:c0:19:55:a6:9e:4f:1a:ad:01:7d: 2d:be:8d:9a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUC3R3imWnjKb77jqICuJQi30lxMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYwOTAzMTAxMloX DTI2MDYwODAzMTUxMlowMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0 M0U0NDk5MEMyQjg2Qjg1NEUwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKNcxc8OdMJ/Z0YZCjg7gyD1oDtx9QJX0+pWw53YdqkMmfNAzx7i68eXs65 AWUdEWL4F5zzFcJ8KcKLNSOKm4Pu0AeKP0envK2ix9HvyCVnJneb5FztTX9MynxU mOqdPbiOUwBbxLVY9qPqWhrKpL5XENJBgmr4BvP6t66OJgeuSZ18M2A7oNzL2JgC xEflkMPOtVcpDvhVsxhoZVQQe/z7O3XDJHer7I+bZYXboFG4D60rxBZOTbiSvCHp QqjMWoS7LcL4FXyi2keRN+/haFuwgXlyzyprM3R/n0i3kgypdgyC87iZZiP/g+B0 YJYIkW+Ylu4ToRFH+ZxD1ll3tJ8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPLotJNTXOGS4qND5EmQwrhrhU4PMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYzEwMDdk LWZkNjEtNDU0My04ZjVmLTNmZGZmYTRiMDFlNi8wL0YyRThCNDkzNTM1Q0UxOTJF MkEzNDNFNDQ5OTBDMkI4NkI4NTRFMEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgE1kwDQYJKoZIhvcNAQELBQADggEBAAWmovEvlrH7UPZ19s+FuOiGXeYuTBDj tkAFUwxCqMniKK+VF9qIuo0bEWT1MkWuxuYHCPQsvMmTARjicVlB8J/frOKfWD0B 4qgYorLjFnqT1b/ofHmj2HILH0txliL2YpuvxktYVRaxCRHoR61LOQXF5jAU8L6y DnA6u6DU1UlmgIa1MdisultmWLTOlNud2OOddDJO/pIaE6Hbn3zBulV/VVQ4drYR 9YZjhm2dVyhwHXZRhLaMA7qcAjXd6xmOadyHA6ge5z4+6AbutiI7wIq0y7wBBGFR I68k43hVsCiRmfFAWR/lWYGkUicpsCwFmy4YwBlVpp5PGq0BfS2+jZo= -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:39 2025 by rpki-client