$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer (raw, json) Hash identifier: 5VDAwlwSrZ2af+Fxe61pk9Hbrg+SDI+1DPAOpPOWp6M= Subject key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 72E82F61E86CB91A8BFD190F1A5BEEBDDE5AB35E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft caRepository: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 12 Oct 2025 18:04:04 +0000 Certificate not after: Sun 11 Oct 2026 18:09:04 +0000 Subordinate resources: IP: 160.25.114.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e8:2f:61:e8:6c:b9:1a:8b:fd:19:0f:1a:5b:ee:bd:de:5a:b3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 12 18:04:04 2025 GMT Not After : Oct 11 18:09:04 2026 GMT Subject: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:d4:cb:61:c2:61:63:0d:f2:03:13:e5:88: 01:20:bc:45:e9:bf:f6:5d:f7:6b:28:15:9b:18:e4: 50:20:b0:3a:75:ac:f4:cd:40:0d:20:79:2b:9e:eb: d4:08:9b:cb:33:0e:88:68:ab:94:b1:6c:4b:ad:70: 2a:0c:68:e4:4e:5e:a6:0c:2d:78:72:ae:ec:66:2c: 14:89:b7:dd:d1:cb:c4:29:27:06:4d:6f:97:d8:32: d4:1c:bc:40:d0:74:9e:7b:5e:c8:e9:f2:71:b7:e2: 62:88:21:2f:9f:d9:20:39:c9:16:0e:f0:15:ed:28: 5b:d0:55:2d:1b:72:44:4d:38:ab:97:58:04:3a:d6: 26:02:8f:af:c3:35:2f:d8:92:26:8f:ba:21:8f:d7: 46:33:eb:3f:8e:a7:65:40:75:b2:33:09:ad:3e:44: 12:bd:e4:0a:b6:b7:c3:e7:88:fb:81:98:2e:49:35: a6:c4:09:dd:4d:ba:00:06:b7:8b:46:88:df:8f:b7: 4a:f8:6f:03:bf:38:94:34:81:00:6b:2d:20:7b:19: 32:b1:55:8d:3b:93:a2:0f:b0:cd:62:55:52:e1:aa: 8f:da:95:98:f1:65:13:f8:98:ce:3a:8b:ca:7d:bc: 27:fc:8e:e1:33:90:33:cc:84:1e:1a:94:a3:e3:0e: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.114.0/23 Signature Algorithm: sha256WithRSAEncryption 25:3d:f1:af:b1:43:32:48:3d:7b:57:ed:3b:6c:46:41:0e:b4: 1c:71:84:7b:44:e6:a5:a3:f8:e7:48:6e:7b:29:41:96:ca:7b: da:f1:b2:43:6f:a0:e7:e6:5b:49:2e:a0:16:10:9c:a3:d5:95: 50:eb:33:18:12:33:97:af:42:7c:b6:c1:fb:81:8f:7f:14:28: 94:03:a4:92:b1:d3:7e:9a:81:11:ad:90:3e:2f:77:6a:94:64: af:5d:9c:2a:24:18:c8:90:3d:3f:59:e3:77:a6:e4:51:d7:38: b0:8d:5b:0f:5a:06:96:32:c1:a4:9e:a4:09:cd:61:f3:22:a4: 3b:d1:6d:9b:ee:cf:cb:ed:03:64:1b:8d:49:ac:56:4b:7b:1c: 5e:a1:3f:f6:8e:65:5b:5d:e4:04:6a:3a:87:cc:a6:a8:bf:3f: 19:48:2b:bc:07:55:67:fd:66:87:41:8a:ca:3d:28:0b:0e:ab: 74:34:cf:fb:74:c4:ed:33:a0:61:ee:b3:a8:51:73:4a:85:9f: 50:e6:c3:e1:2b:08:4d:25:21:51:e5:b8:d9:27:e3:d6:d7:a4: bc:8f:3d:2b:b3:39:75:3b:fd:77:2f:05:3b:7c:16:7e:12:12: 83:b2:33:49:a7:59:ae:74:ac:65:58:45:24:30:0f:75:07:4b: a7:63:ba:93 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcugvYehsuRqL/RkPGlvuvd5as14wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAxMjE4MDQwNFoX DTI2MTAxMTE4MDkwNFowMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQz MzQxRUNCRTY3QjE3MzFCMzkwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUf1MthwmFjDfIDE+WIASC8Rem/9l33aygVmxjkUCCwOnWs9M1ADSB5K57r 1AibyzMOiGirlLFsS61wKgxo5E5epgwteHKu7GYsFIm33dHLxCknBk1vl9gy1By8 QNB0nnteyOnycbfiYoghL5/ZIDnJFg7wFe0oW9BVLRtyRE04q5dYBDrWJgKPr8M1 L9iSJo+6IY/XRjPrP46nZUB1sjMJrT5EEr3kCra3w+eI+4GYLkk1psQJ3U26AAa3 i0aI34+3SvhvA784lDSBAGstIHsZMrFVjTuTog+wzWJVUuGqj9qVmPFlE/iYzjqL yn28J/yO4TOQM8yEHhqUo+MOdPcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPkbULm9NEgbeu0zQey+Z7FzGzkIMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNjc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2Nzg2MGUz LTZhZDgtNDdhNS05NGMwLTkzZmZkMjQ3Mjg2NS8wL0Y5MUI1MEI5QkQzNDQ4MUI3 QUVEMzM0MUVDQkU2N0IxNzMxQjM5MDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGXIwDQYJKoZIhvcNAQELBQADggEBACU98a+xQzJIPXtX7TtsRkEOtBxxhHtE 5qWj+OdIbnspQZbKe9rxskNvoOfmW0kuoBYQnKPVlVDrMxgSM5evQny2wfuBj38U KJQDpJKx036agRGtkD4vd2qUZK9dnCokGMiQPT9Z43em5FHXOLCNWw9aBpYywaSe pAnNYfMipDvRbZvuz8vtA2QbjUmsVkt7HF6hP/aOZVtd5ARqOofMpqi/PxlIK7wH VWf9ZodBiso9KAsOq3Q0z/t0xO0zoGHus6hRc0qFn1Dmw+ErCE0lIVHluNkn49bX pLyPPSuzOXU7/XcvBTt8Fn4SEoOyM0mnWa50rGVYRSQwD3UHS6djupM= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:19 2025 by rpki-client