$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer (raw, json) Hash identifier: JX6SBCCROMhtJRmSrWfiT+KF446D4Y+1Jyyogt0cYug= Subject key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 360B4FCC326819D39BCEEAA81677471D95D53831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft caRepository: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Oct 2025 19:04:26 +0000 Certificate not after: Tue 20 Oct 2026 19:09:26 +0000 Subordinate resources: IP: 2001:df3:d1c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0b:4f:cc:32:68:19:d3:9b:ce:ea:a8:16:77:47:1d:95:d5:38:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 21 19:04:26 2025 GMT Not After : Oct 20 19:09:26 2026 GMT Subject: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:9a:ae:20:0e:ec:61:e1:0a:8d:d9:4e:b4: c9:20:05:1e:f2:d9:96:3e:05:c2:9b:3b:8e:7f:ff: 7d:cf:38:f1:ff:f5:52:6a:91:d3:04:21:c3:7b:7f: c9:5a:9a:be:5b:55:57:60:8f:2a:b5:73:17:c2:77: 5f:92:f1:84:45:8f:2b:73:a2:10:c6:24:69:b5:fd: 6a:cf:92:7f:95:68:b1:2c:4f:56:65:cc:c7:44:c1: 94:c3:2a:09:c3:00:a1:ec:cf:15:9d:14:6a:5e:be: c1:33:06:a2:40:80:40:ce:71:6f:00:f2:6f:13:07: 50:1e:69:1f:35:e1:b3:04:36:11:e1:64:32:4a:79: 94:31:c6:16:f7:de:05:35:3c:e1:88:f1:65:e4:a5: 18:78:6e:09:65:49:ef:31:76:2b:f7:0d:9b:18:6c: 27:2a:0f:7c:0d:36:5b:6b:8f:9a:2d:96:8c:e7:50: d6:07:d3:23:d9:8d:cc:7b:c8:29:be:f9:23:13:25: bf:31:63:9c:cf:38:1c:5c:81:ad:7a:4e:47:30:01: 87:1f:cb:ef:b1:2d:3a:b1:63:b3:ff:13:19:13:a7: 55:57:8f:f9:5f:d5:48:01:c7:f9:c4:46:13:99:ee: a1:4e:77:ff:c2:fb:ab:2d:7e:74:97:56:d4:e6:b1: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d1c0::/48 Signature Algorithm: sha256WithRSAEncryption 37:66:0e:cf:04:13:e2:8b:9c:9a:5f:a9:bf:63:eb:f2:43:75: f9:c8:64:9f:56:0d:76:1d:6a:25:fc:2f:5f:e8:1c:86:74:92: 74:78:42:ff:6e:e0:8e:a6:6e:09:f0:cb:af:eb:30:0b:ce:0a: 6b:47:16:6f:b0:fc:ab:a2:12:d8:82:d0:9e:23:a8:92:a4:95: 99:49:bb:22:7f:7c:1a:0c:83:af:0c:73:45:f5:c2:1f:b8:e3: a3:a6:c4:2c:24:c0:bc:b4:d5:41:0d:9c:2c:df:d2:6f:30:12: bb:8c:e2:65:9d:d3:f0:b2:b9:02:2e:85:03:3b:77:61:8e:ee: 24:84:c1:b6:65:50:52:2b:5e:f1:4f:5e:6d:bb:66:b3:d4:79: 05:0e:3a:25:40:86:93:bb:fa:51:be:2f:84:46:99:e1:a9:84: a8:69:65:dc:ce:d4:ed:97:23:e0:b3:59:78:49:65:70:31:b7: eb:b3:bf:a4:f3:0d:b6:b8:94:31:e3:32:06:b4:dc:c6:eb:5c: 59:0b:54:62:b7:3b:89:3c:82:39:55:78:c1:2c:6d:48:4c:3e: 4c:24:f0:e7:8f:2b:4a:af:c1:e1:67:f0:63:9d:c9:0e:61:d9: 85:65:5a:e7:7e:5a:f4:bf:b1:34:26:b0:e4:58:68:0f:c5:6b: c1:e4:6f:15 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUNgtPzDJoGdObzuqoFndHHZXVODEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMTE5MDQyNloX DTI2MTAyMDE5MDkyNlowMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NE QjFDMjVEQTAyMkEyRTE1Nzc4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNrmq4gDuxh4QqN2U60ySAFHvLZlj4Fwps7jn//fc848f/1UmqR0wQhw3t/ yVqavltVV2CPKrVzF8J3X5LxhEWPK3OiEMYkabX9as+Sf5VosSxPVmXMx0TBlMMq CcMAoezPFZ0Ual6+wTMGokCAQM5xbwDybxMHUB5pHzXhswQ2EeFkMkp5lDHGFvfe BTU84YjxZeSlGHhuCWVJ7zF2K/cNmxhsJyoPfA02W2uPmi2WjOdQ1gfTI9mNzHvI Kb75IxMlvzFjnM84HFyBrXpORzABhx/L77EtOrFjs/8TGROnVVeP+V/VSAHH+cRG E5nuoU53/8L7qy1+dJdW1OaxNNcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKjmSSte/pNiwszbHCXaAiouFXeCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kN2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGQyNTE5 LTMwNzgtNDdkMy05ZTg2LTQ4ZmQzYmRlNzZjOC8xL0E4RTY0OTJCNUVGRTkzNjJD MkNDREIxQzI1REEwMjJBMkUxNTc3ODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3z0cAwDQYJKoZIhvcNAQELBQADggEBADdmDs8EE+KLnJpfqb9j6/JDdfnI ZJ9WDXYdaiX8L1/oHIZ0knR4Qv9u4I6mbgnwy6/rMAvOCmtHFm+w/KuiEtiC0J4j qJKklZlJuyJ/fBoMg68Mc0X1wh+446OmxCwkwLy01UENnCzf0m8wEruM4mWd0/Cy uQIuhQM7d2GO7iSEwbZlUFIrXvFPXm27ZrPUeQUOOiVAhpO7+lG+L4RGmeGphKhp ZdzO1O2XI+CzWXhJZXAxt+uzv6TzDba4lDHjMga03MbrXFkLVGK3O4k8gjlVeMEs bUhMPkwk8OePK0qvweFn8GOdyQ5h2YVlWud+WvS/sTQmsORYaA/Fa8HkbxU= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:31 2025 by rpki-client