$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer (raw, json) Hash identifier: 5qtX9ZMuH6p/vcKwWVEWBkdK2sPUOzXVZWcQDtWbU38= Subject key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 758866DFD27056A94F1C51512C6FC9943190DC50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft caRepository: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 11 Aug 2025 07:41:25 +0000 Certificate not after: Mon 10 Aug 2026 07:46:25 +0000 Subordinate resources: IP: 160.25.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:88:66:df:d2:70:56:a9:4f:1c:51:51:2c:6f:c9:94:31:90:dc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 11 07:41:25 2025 GMT Not After : Aug 10 07:46:25 2026 GMT Subject: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:3c:c9:9d:49:07:42:36:e9:d6:b2:85:ec: 2e:17:55:65:79:74:6f:48:9a:eb:89:ac:f5:f1:bb: 0b:28:7f:4f:89:d8:3d:3d:28:72:e5:96:ee:f7:9c: 88:66:dd:a2:40:78:56:98:f7:bf:ae:1c:e1:b0:51: fc:eb:86:5f:07:39:f2:40:9b:4d:0d:39:73:60:39: aa:27:cd:7c:c3:20:5a:77:e3:2e:36:6c:f9:dc:21: 63:ae:79:bd:30:62:19:11:9b:ca:15:5c:b0:32:27: 59:f6:d4:f4:9e:e6:2d:6c:78:69:be:9e:0e:ce:c5: a3:2a:86:de:8a:3e:96:ac:9b:22:b8:55:39:a6:c9: 14:a0:48:79:ae:0f:09:fe:db:f1:d5:bd:14:5d:49: 0c:3d:14:e7:4b:70:ea:08:18:b9:80:d0:64:75:1d: 67:49:3e:2b:22:d7:5e:3c:7c:70:77:cc:68:cc:9f: de:4a:5e:90:b0:e4:37:25:9b:b0:25:bc:79:56:cb: f3:10:90:10:c6:1d:28:26:83:51:28:0a:e2:9e:06: c2:4a:3b:9c:24:43:09:34:a9:97:58:1b:47:37:75: 4c:a3:f5:6c:7f:b1:a0:4c:3f:89:44:10:40:80:83: 82:be:fd:06:c4:e8:12:c0:30:78:fd:25:f0:fe:74: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.250.0/23 Signature Algorithm: sha256WithRSAEncryption 63:f7:18:1c:90:8d:65:77:07:69:5d:a0:20:ce:78:f6:63:33: 4f:2b:53:63:de:a8:80:f8:c4:2d:d4:44:37:7a:37:32:af:58: 6d:42:40:8c:5e:a9:94:c7:37:38:f2:c5:60:3c:0b:91:6a:87: 93:72:47:6b:17:66:9d:97:b1:a1:a3:65:cf:e2:42:df:d5:71: 6c:63:38:7f:3d:b5:06:b2:ba:fa:da:e8:75:91:6c:7f:f3:b8: e9:fe:ee:f1:a4:79:c9:ed:40:bc:cf:5d:d7:00:34:89:ba:50: 5d:50:b3:87:02:5f:59:6e:53:67:be:62:be:2e:ca:37:cb:b4: a2:e5:4a:43:0f:3a:1a:25:9c:c6:c6:1b:9d:b7:a2:0b:1b:cb: 68:de:2d:d2:2b:fd:8b:32:1e:27:d5:bc:a2:27:0d:6f:78:10: 45:13:cb:46:eb:08:09:a8:91:77:9d:53:c4:53:35:77:f2:95: d2:72:59:e5:54:a8:7d:5c:b8:9f:a8:52:8a:10:d3:76:30:ae: a7:63:fb:92:c6:17:5d:cd:08:f3:8e:ff:6b:a5:38:50:c3:a8: 84:0b:de:36:84:14:b2:0c:d3:03:ea:92:0b:ee:e2:f3:08:f5: 13:60:d8:d9:fe:11:b8:ad:4b:dd:9f:03:2d:1c:0f:bd:4b:d8: 3c:4d:6f:c0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdYhm39JwVqlPHFFRLG/JlDGQ3FAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgxMTA3NDEyNVoX DTI2MDgxMDA3NDYyNVowMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUy NTdENDQ4OUM1NzU3NEMwN0U4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtzPMmdSQdCNunWsoXsLhdVZXl0b0ia64ms9fG7Cyh/T4nYPT0ocuWW7vec iGbdokB4Vpj3v64c4bBR/OuGXwc58kCbTQ05c2A5qifNfMMgWnfjLjZs+dwhY655 vTBiGRGbyhVcsDInWfbU9J7mLWx4ab6eDs7FoyqG3oo+lqybIrhVOabJFKBIea4P Cf7b8dW9FF1JDD0U50tw6ggYuYDQZHUdZ0k+KyLXXjx8cHfMaMyf3kpekLDkNyWb sCW8eVbL8xCQEMYdKCaDUSgK4p4Gwko7nCRDCTSpl1gbRzd1TKP1bH+xoEw/iUQQ QICDgr79BsToEsAweP0l8P50llUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPvDmm4Xf43Xul4lfUSJxXV0wH6BMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3YWQwYTNh LTI2YjgtNDQ5YS04OGVjLWJmMDM5OGVhNTNhNi8wL0ZCQzM5QTZFMTc3RjhERDdC QTVFMjU3RDQ0ODlDNTc1NzRDMDdFODEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGfowDQYJKoZIhvcNAQELBQADggEBAGP3GByQjWV3B2ldoCDOePZjM08rU2Pe qID4xC3URDd6NzKvWG1CQIxeqZTHNzjyxWA8C5Fqh5NyR2sXZp2XsaGjZc/iQt/V cWxjOH89tQayuvra6HWRbH/zuOn+7vGkecntQLzPXdcANIm6UF1Qs4cCX1luU2e+ Yr4uyjfLtKLlSkMPOholnMbGG523ogsby2jeLdIr/YsyHifVvKInDW94EEUTy0br CAmokXedU8RTNXfyldJyWeVUqH1cuJ+oUooQ03Ywrqdj+5LGF13NCPOO/2ulOFDD qIQL3jaEFLIM0wPqkgvu4vMI9RNg2Nn+EbitS92fAy0cD71L2DxNb8A= -----END CERTIFICATE-----Generated at Tue Nov 4 18:30:44 2025 by rpki-client