$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.cer (raw, json) Hash identifier: 7hkbQfAJw8+oKLpUfYJPT89ooSKoorXl1CX37Svd3zg= Subject key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B42525CF0356ECF62A1C1640D748FA0A57335E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft caRepository: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 27 Oct 2025 23:49:22 +0000 Certificate not after: Mon 26 Oct 2026 23:54:22 +0000 Subordinate resources: IP: 45.123.140.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:42:52:5c:f0:35:6e:cf:62:a1:c1:64:0d:74:8f:a0:a5:73:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 27 23:49:22 2025 GMT Not After : Oct 26 23:54:22 2026 GMT Subject: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d7:9b:02:50:4e:66:05:dd:90:a4:1f:07:93: d6:af:99:09:31:0c:74:ed:a5:77:8e:d5:bc:6b:ca: 0e:b6:ac:16:09:46:4c:64:52:00:9e:65:3d:25:5d: f5:37:cc:d9:ab:e6:7a:ff:22:ed:84:2c:db:d5:00: a6:72:ec:e2:c0:d2:6f:7a:a9:64:4d:18:23:88:c9: 3a:b0:c3:5a:65:69:46:66:1d:d3:e3:7c:27:55:2c: 48:8d:46:6b:97:9b:7c:cf:aa:ad:75:d7:cc:ec:1a: cd:94:54:7b:3b:04:e9:33:18:7e:68:8e:cc:e4:60: 11:16:cd:64:89:61:0f:02:40:73:be:bc:f7:05:65: 88:0e:e1:56:db:b4:a7:a7:f4:45:92:a3:7f:8f:de: 07:48:9c:67:1b:4f:42:f7:c5:b0:dd:9c:6e:2b:4a: a0:37:8c:5b:65:81:55:3c:39:b8:92:b8:c4:da:78: 80:ee:e4:85:b6:5a:9e:4e:41:7e:0b:69:70:4b:4e: 47:0e:15:fe:6f:b2:db:0f:e4:8b:41:e0:1b:56:a1: c8:f4:9d:6e:b4:fa:d9:a4:d0:ab:52:0e:6a:78:3e: d8:d8:a4:f1:41:f4:6d:75:2a:6a:06:c8:c6:2f:d9: 1c:56:b1:e4:f5:b8:64:44:64:0b:75:d0:cb:82:2f: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.140.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:3d:2b:97:2d:ae:2c:74:58:c5:2e:ae:85:fb:93:79:98:ee: 9b:54:ab:5d:d2:a4:2d:87:b4:0f:93:b8:c9:ed:30:1d:13:24: 31:46:36:d6:15:21:01:4d:bc:fd:8b:7b:af:00:3e:cb:56:38: 5f:b5:d9:d7:d9:8e:10:d4:bd:03:57:ff:ad:28:b7:4c:f2:1d: f9:a9:8f:30:a5:dd:bb:85:8f:86:c2:7b:07:e5:c2:dd:b4:34: cf:ca:92:08:46:88:c4:03:fd:c2:d8:a5:75:61:66:fc:3a:e5: f8:f8:bc:51:b1:23:a5:7b:79:fa:da:e1:26:5d:eb:d2:32:db: 80:51:07:4d:56:db:f0:38:48:91:5e:3c:ad:bc:f6:67:5d:56: 62:f2:a3:b9:49:0b:1a:a9:b5:db:00:84:50:27:62:a7:f3:53: e2:39:e0:f0:55:a6:e2:c0:25:92:d6:db:9a:ad:12:53:de:d9: 69:7d:11:b7:36:c3:76:e0:2e:ae:0d:8a:1f:ac:d8:e0:c0:df: 83:f0:8a:6c:bd:1a:01:21:62:45:f8:d9:23:7e:58:e2:5b:21: 9f:6a:93:83:c9:ed:8f:04:66:d9:f7:a9:8b:a5:14:af:c0:a9: 4f:73:73:5a:b0:eb:7c:fc:a5:70:68:5d:58:3b:24:30:05:15: bc:9c:df:e0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW0JSXPA1bs9iocFkDXSPoKVzNeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNzIzNDkyMloX DTI2MTAyNjIzNTQyMlowMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVC OUIwNkU4MDEzMTU3RUI4MkRCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnXmwJQTmYF3ZCkHweT1q+ZCTEMdO2ld47VvGvKDrasFglGTGRSAJ5lPSVd 9TfM2avmev8i7YQs29UApnLs4sDSb3qpZE0YI4jJOrDDWmVpRmYd0+N8J1UsSI1G a5ebfM+qrXXXzOwazZRUezsE6TMYfmiOzORgERbNZIlhDwJAc7689wVliA7hVtu0 p6f0RZKjf4/eB0icZxtPQvfFsN2cbitKoDeMW2WBVTw5uJK4xNp4gO7khbZank5B fgtpcEtORw4V/m+y2w/ki0HgG1ahyPSdbrT62aTQq1IOang+2Nik8UH0bXUqagbI xi/ZHFax5PW4ZERkC3XQy4Iv6ZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9gmBfdCExFWe65sG6AExV+uC24MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2E3ZDk4 LTIzMzgtNGQ3Ny05NjYyLWYzM2VhNjhjODZmMi8wLzFGNjA5ODE3REQwODRDNDU1 OUVFQjlCMDZFODAxMzE1N0VCODJEQjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEte4wwDQYJKoZIhvcNAQELBQADggEBAD49K5ctrix0WMUuroX7k3mY7ptUq13S pC2HtA+TuMntMB0TJDFGNtYVIQFNvP2Le68APstWOF+12dfZjhDUvQNX/60ot0zy HfmpjzCl3buFj4bCewflwt20NM/KkghGiMQD/cLYpXVhZvw65fj4vFGxI6V7efra 4SZd69Iy24BRB01W2/A4SJFePK289mddVmLyo7lJCxqptdsAhFAnYqfzU+I54PBV puLAJZLW25qtElPe2Wl9Ebc2w3bgLq4Nih+s2ODA34Pwimy9GgEhYkX42SN+WOJb IZ9qk4PJ7Y8EZtn3qYulFK/AqU9zc1qw63z8pXBoXVg7JDAFFbyc3+A= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:07 2025 by rpki-client