$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer (raw, json) Hash identifier: F29zaONR0b3p1yglq5fjrR7+Kz3qOt9SHUcRB3Cfwhs= Subject key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5F000A0396645AA705B9C64E7B0D83B359981871 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft caRepository: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 28 May 2025 01:00:51 +0000 Certificate not after: Wed 27 May 2026 01:05:51 +0000 Subordinate resources: IP: 160.22.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:00:0a:03:96:64:5a:a7:05:b9:c6:4e:7b:0d:83:b3:59:98:18:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 28 01:00:51 2025 GMT Not After : May 27 01:05:51 2026 GMT Subject: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:9e:a3:aa:e3:1f:76:66:73:08:df:26:ad: d4:51:b5:b4:e2:f7:6d:eb:2a:55:e8:80:be:59:0c: 6e:d7:15:22:a6:0b:5e:56:0c:32:15:99:9c:d6:43: 97:55:b8:34:bf:ed:13:a5:9c:c7:2f:65:19:76:5f: 9f:87:71:ad:f5:92:b9:f9:22:a7:0e:e2:b5:76:9c: 6e:a9:fc:c9:3b:65:b9:63:d7:11:e4:13:f8:fd:21: c8:e3:5c:d1:cd:c3:35:4c:b7:4a:32:35:0b:1e:58: b5:70:c6:a2:fc:e4:bf:65:78:1c:44:04:b3:c3:f7: 6a:36:5b:d7:8a:a4:93:26:b5:00:84:c7:ef:89:5d: 2e:0e:48:2d:26:43:3b:95:32:01:69:55:53:32:4e: 2c:b1:2f:84:2e:bc:e5:1c:d7:66:69:60:2a:04:75: 35:4d:25:93:1e:a8:9e:75:b7:ad:ab:25:0c:8f:03: 5a:8f:46:12:5c:0a:2f:3b:73:c5:2d:fa:b9:00:36: 90:49:76:2c:a2:20:bd:05:d8:54:cc:90:06:67:b8: 6e:35:c5:1b:5f:c6:ce:54:75:df:06:99:ce:f0:7a: 08:bc:11:e0:bf:b8:b8:3c:12:39:5c:c7:bd:27:f6: 1a:ed:48:1c:fd:93:99:99:4b:0f:44:cc:95:14:9c: a7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.24.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:3b:0e:f3:04:52:a8:ab:21:44:ca:b3:a1:3f:49:29:f9:e0: af:32:f6:79:6e:a8:a8:6d:da:74:ea:9d:4b:74:17:f0:0c:7c: 92:08:4d:6b:0f:d3:3c:4c:50:91:a1:8f:e6:9e:ab:31:e0:d6: d6:37:62:38:81:76:ce:bf:89:4a:bf:5a:e3:00:34:df:ab:34: 24:bf:8a:f4:f3:64:9a:c9:b8:21:12:e0:c7:70:97:d1:69:34: 06:e3:61:24:e7:bc:87:bf:a7:3c:91:f2:ac:7e:dc:9c:de:1a: f7:56:e3:c8:5f:cb:cb:a2:29:ec:8f:26:56:0a:39:9f:5e:c4: 8b:ab:0f:0b:a3:82:ff:03:40:49:4e:8a:ac:83:60:03:a8:1e: d6:73:cc:98:2b:71:37:77:ee:a4:7d:d0:31:4b:c8:94:e7:e7: 3d:b1:92:d1:0c:06:fa:95:c0:8a:b2:6e:2c:72:6c:87:58:e6: ab:34:88:cf:08:e0:07:cf:97:88:73:5c:11:e5:98:50:63:93: 65:78:db:68:cb:c0:1d:06:6b:33:cd:e0:d6:19:0d:3f:d5:81: a6:e6:95:4a:a6:49:67:6c:2d:2b:6f:86:41:3e:31:21:cb:58: 7d:d2:fb:15:62:ae:7d:ce:c6:52:6e:15:b3:23:cd:7c:a3:7c: e7:9c:69:86 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXwAKA5ZkWqcFucZOew2Ds1mYGHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUyODAxMDA1MVoX DTI2MDUyNzAxMDU1MVowMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4 Nzg2Nzk3RkU5M0ZCMENGNjJBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7ZnqOq4x92ZnMI3yat1FG1tOL3besqVeiAvlkMbtcVIqYLXlYMMhWZnNZD l1W4NL/tE6Wcxy9lGXZfn4dxrfWSufkipw7itXacbqn8yTtluWPXEeQT+P0hyONc 0c3DNUy3SjI1Cx5YtXDGovzkv2V4HEQEs8P3ajZb14qkkya1AITH74ldLg5ILSZD O5UyAWlVUzJOLLEvhC685RzXZmlgKgR1NU0lkx6onnW3raslDI8DWo9GElwKLztz xS36uQA2kEl2LKIgvQXYVMyQBme4bjXFG1/GzlR13waZzvB6CLwR4L+4uDwSOVzH vSf2Gu1IHP2TmZlLD0TMlRScpxsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPow/4VmdTJT+72Hhnl/6T+wz2KtMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2ZGEwZTgy LTA3NjQtNDVkMy1hZWQ5LWZkMjU4ZTcyYjZlMi8wL0ZBMzBGRjg1NjY3NTMyNTNG QkJEODc4Njc5N0ZFOTNGQjBDRjYyQUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFhgwDQYJKoZIhvcNAQELBQADggEBAAo7DvMEUqirIUTKs6E/SSn54K8y9nlu qKht2nTqnUt0F/AMfJIITWsP0zxMUJGhj+aeqzHg1tY3YjiBds6/iUq/WuMANN+r NCS/ivTzZJrJuCES4Mdwl9FpNAbjYSTnvIe/pzyR8qx+3JzeGvdW48hfy8uiKeyP JlYKOZ9exIurDwujgv8DQElOiqyDYAOoHtZzzJgrcTd37qR90DFLyJTn5z2xktEM BvqVwIqybixybIdY5qs0iM8I4AfPl4hzXBHlmFBjk2V422jLwB0GazPN4NYZDT/V gabmlUqmSWdsLStvhkE+MSHLWH3S+xVirn3OxlJuFbMjzXyjfOecaYY= -----END CERTIFICATE-----Generated at Mon Jun 16 09:49:12 2025 by rpki-client