$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer File: F5BC050A20C516FEBC061A1B70E488BB426444BC.cer (raw, json) Hash identifier: swwNwnDzlUqR9Whom+h2GEI4+5fvhjk4A8yXEf2U6pk= Subject key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7EFA075C1620B2DBBC4C31DFEDF394C09BA63204 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft caRepository: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 17 Oct 2025 09:19:28 +0000 Certificate not after: Fri 16 Oct 2026 09:24:28 +0000 Subordinate resources: IP: 157.66.172.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fa:07:5c:16:20:b2:db:bc:4c:31:df:ed:f3:94:c0:9b:a6:32:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 17 09:19:28 2025 GMT Not After : Oct 16 09:24:28 2026 GMT Subject: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:34:7c:c9:d3:65:a5:95:c4:8f:29:b6:06: 54:f1:1c:84:b4:07:cf:5a:4b:fa:1a:7e:f4:da:51: dd:ea:47:9d:7b:5b:85:a4:0b:bd:44:9b:b6:57:8f: 3e:3d:df:76:61:6a:a0:e3:6a:c7:26:70:1a:94:30: 62:bd:48:94:08:f0:10:48:b8:9a:89:42:61:89:f8: 6c:ca:fc:29:54:22:3f:d6:81:5e:a2:9b:75:75:16: 9b:28:64:4c:ce:00:08:20:f9:52:b8:90:45:0d:26: 47:a4:e2:7d:89:d1:d9:21:41:32:a4:c1:60:f4:32: 31:26:f1:ee:dd:a9:33:ff:70:92:7d:ad:4e:02:91: 1f:fa:af:07:59:2b:a3:c8:4a:5e:68:3d:4f:ff:4e: ff:bd:03:57:d4:f4:57:c1:fc:9c:5d:5d:2f:18:cd: e1:98:30:9e:1b:5a:ee:22:94:97:ac:36:10:ce:cc: 97:c7:09:21:75:77:50:75:f0:2e:38:02:91:44:14: 36:5c:1b:3d:56:a4:d0:5d:51:16:1a:01:aa:e2:e6: 39:db:10:c9:c6:33:f2:34:ae:76:de:97:50:d3:de: a8:ab:1e:d6:73:13:2e:8a:73:38:40:07:6c:bb:64: 00:6f:bd:9f:89:7d:1d:2a:1d:8c:b4:c5:94:38:cb: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.172.0/23 Signature Algorithm: sha256WithRSAEncryption 72:0c:e4:c6:7e:e6:af:d9:a3:97:9d:8e:71:5e:b1:9b:07:65: a2:33:39:74:b4:85:81:cd:45:b4:cb:9e:a1:77:ba:14:20:fa: 83:d2:f7:be:66:fd:44:30:d6:65:88:f3:5c:7a:70:c2:02:02: 96:e3:67:6d:89:62:15:b6:54:25:93:f2:05:cf:c6:d4:87:f2: 33:64:9c:fb:08:e4:f7:7a:b8:5c:95:49:35:80:d7:33:db:8c: c4:22:66:1b:c3:cc:02:bb:23:e4:46:c0:14:74:39:47:05:40: ab:9e:96:68:4c:f5:08:a1:fe:e8:d5:18:e9:72:9f:31:f9:d6: 9d:fe:04:5c:f9:6e:dd:db:da:5e:ea:37:44:81:54:a7:df:55: f2:29:2e:6d:9d:3c:8c:bd:f3:7e:96:ae:4e:0f:5e:05:47:d5: ec:6c:60:48:9b:f1:a1:ba:a3:1d:68:60:03:89:27:f3:fd:b2: 2d:17:0d:74:97:dd:27:41:5d:27:d2:ac:e3:e4:e8:b1:7d:b6: e4:7b:dc:d4:49:2c:2a:3b:b2:98:ed:5e:5e:b2:06:9d:86:7a: 13:b3:d6:49:0b:ca:97:12:1a:9a:c5:2d:7a:e1:82:9b:03:d1: f4:a5:76:51:ea:c9:24:82:70:60:34:09:ba:6f:57:ed:c3:55: e4:32:cc:1f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfvoHXBYgstu8TDHf7fOUwJumMgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAxNzA5MTkyOFoX DTI2MTAxNjA5MjQyOFowMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYx QTFCNzBFNDg4QkI0MjY0NDRCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrSNHzJ02WllcSPKbYGVPEchLQHz1pL+hp+9NpR3epHnXtbhaQLvUSbtleP Pj3fdmFqoONqxyZwGpQwYr1IlAjwEEi4molCYYn4bMr8KVQiP9aBXqKbdXUWmyhk TM4ACCD5UriQRQ0mR6TifYnR2SFBMqTBYPQyMSbx7t2pM/9wkn2tTgKRH/qvB1kr o8hKXmg9T/9O/70DV9T0V8H8nF1dLxjN4Zgwnhta7iKUl6w2EM7Ml8cJIXV3UHXw LjgCkUQUNlwbPVak0F1RFhoBquLmOdsQycYz8jSudt6XUNPeqKse1nMTLopzOEAH bLtkAG+9n4l9HSodjLTFlDjLBu8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPW8BQogxRb+vAYaG3DkiLtCZES8MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzMmY5OGEw LTA5NDctNGY3YS1iZWU3LWZmYzNkMDViOTQwZS8wL0Y1QkMwNTBBMjBDNTE2RkVC QzA2MUExQjcwRTQ4OEJCNDI2NDQ0QkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQqwwDQYJKoZIhvcNAQELBQADggEBAHIM5MZ+5q/Zo5edjnFesZsHZaIzOXS0 hYHNRbTLnqF3uhQg+oPS975m/UQw1mWI81x6cMICApbjZ22JYhW2VCWT8gXPxtSH 8jNknPsI5Pd6uFyVSTWA1zPbjMQiZhvDzAK7I+RGwBR0OUcFQKuelmhM9Qih/ujV GOlynzH51p3+BFz5bt3b2l7qN0SBVKffVfIpLm2dPIy9836Wrk4PXgVH1exsYEib 8aG6ox1oYAOJJ/P9si0XDXSX3SdBXSfSrOPk6LF9tuR73NRJLCo7spjtXl6yBp2G ehOz1kkLypcSGprFLXrhgpsD0fSldlHqySSCcGA0CbpvV+3DVeQyzB8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:33:33 2025 by rpki-client