$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer File: C79C17C4F5C843791A7028B499932A84B65CD399.cer (raw, json) Hash identifier: WsdzfcPlnJDYByjbFAyxDU6cirPA3qlrRTAZ9PbBYBc= Subject key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 54FD14BA2538ED22E8F3FDD598D7902957B6B10B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft caRepository: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 23:35:35 +0000 Certificate not after: Tue 02 Jun 2026 23:40:35 +0000 Subordinate resources: IP: 2001:df3:dfc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fd:14:ba:25:38:ed:22:e8:f3:fd:d5:98:d7:90:29:57:b6:b1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 23:35:35 2025 GMT Not After : Jun 2 23:40:35 2026 GMT Subject: CN=C79C17C4F5C843791A7028B499932A84B65CD399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:fe:56:67:00:da:3a:7c:b0:67:3b:0c:c2: de:af:45:dc:0b:53:09:48:0e:8b:fd:b6:53:b7:eb: ae:b7:cd:2f:ee:96:ee:0d:3c:b9:9f:d1:ed:af:c3: 34:e9:1d:c2:38:62:e8:75:b7:00:7b:91:80:6d:f7: 91:cc:fa:5b:c6:ef:93:6e:d9:dd:5f:87:7d:71:61: 01:7d:f4:96:27:8c:cc:7d:87:72:fb:97:33:0c:c8: 9f:ad:6f:39:d2:4b:b0:88:c5:9d:22:e7:37:f2:9c: 3e:25:dc:90:77:83:98:b2:16:2b:c0:16:80:6c:4b: bb:21:a2:6b:de:b8:f5:69:e2:8e:88:18:fc:0b:86: 19:d7:f8:f2:57:16:42:94:ea:29:63:2f:bc:7c:04: f8:e7:05:00:ca:53:23:e2:20:f0:e1:06:6f:57:54: 3a:b7:88:32:ed:b8:30:7b:61:42:a6:d1:4e:94:46: b0:96:e6:69:d4:10:42:10:a7:3f:96:ce:cf:a1:be: 8e:4c:90:75:06:6e:0c:f6:be:c2:2c:da:bb:4b:d8: 46:43:e2:66:d9:5e:37:75:76:b5:0e:14:dd:d7:e8: 62:45:6b:6d:65:06:cc:b4:02:fa:2f:6a:23:c2:83: 0a:e1:da:cd:0a:6e:23:8c:92:8e:44:25:d2:5e:8f: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:dfc0::/48 Signature Algorithm: sha256WithRSAEncryption 66:02:95:4d:a8:fd:c6:a1:24:52:d7:f3:9d:c9:59:7f:47:c3: 1a:1e:4e:74:f4:c4:6d:ea:b0:7f:3c:5b:46:49:c1:a7:28:0b: 8e:34:92:9e:16:92:73:8c:d6:91:bb:75:e1:3e:6f:df:ff:5b: 73:64:3a:b7:5a:18:7a:08:33:55:d9:5b:2f:88:e4:56:77:f2: 3c:3e:49:db:3e:4f:b3:57:49:b6:1c:a9:06:16:f5:c1:a5:c5: 0f:97:6e:e7:ab:82:6e:00:f7:16:d6:ae:36:f2:d8:f6:ad:53: 8e:30:fa:e8:94:68:66:e0:6c:f5:c6:c9:43:88:15:1b:c5:75: 36:2e:c9:2c:eb:a6:c7:29:55:95:83:0e:90:68:2a:c4:94:3c: e7:c5:39:c3:f1:94:84:b8:6c:0a:c7:37:ea:2d:ca:b5:58:be: 22:e5:7c:0b:15:2f:61:d6:43:30:62:e2:42:91:58:7d:47:d3: 6b:ae:7d:2a:14:39:ca:68:fa:a8:85:60:e4:05:b9:6d:2c:f7: 74:2d:8b:e7:f2:2b:35:33:8c:6d:11:ad:81:46:47:a7:b8:23: 7d:93:ca:1b:ec:58:ce:e6:1a:89:c7:23:1d:bf:68:ff:ac:20: 06:11:ef:be:77:93:d2:27:4e:60:bc:09:d9:4f:6e:1c:50:e3: cc:3a:f1:bc -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUVP0UuiU47SLo8/3VmNeQKVe2sQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzIzMzUzNVoX DTI2MDYwMjIzNDAzNVowMzExMC8GA1UEAxMoQzc5QzE3QzRGNUM4NDM3OTFBNzAy OEI0OTk5MzJBODRCNjVDRDM5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaL/lZnANo6fLBnOwzC3q9F3AtTCUgOi/22U7frrrfNL+6W7g08uZ/R7a/D NOkdwjhi6HW3AHuRgG33kcz6W8bvk27Z3V+HfXFhAX30lieMzH2HcvuXMwzIn61v OdJLsIjFnSLnN/KcPiXckHeDmLIWK8AWgGxLuyGia9649WnijogY/AuGGdf48lcW QpTqKWMvvHwE+OcFAMpTI+Ig8OEGb1dUOreIMu24MHthQqbRTpRGsJbmadQQQhCn P5bOz6G+jkyQdQZuDPa+wizau0vYRkPiZtleN3V2tQ4U3dfoYkVrbWUGzLQC+i9q I8KDCuHazQpuI4ySjkQl0l6PKUsCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMecF8T1yEN5GnAotJmTKoS2XNOZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyNTZiYmJh LTE4MjYtNGQ4Ni1iODczLTJmNmRkNjMyNTc3MS8xL0M3OUMxN0M0RjVDODQzNzkx QTcwMjhCNDk5OTMyQTg0QjY1Q0QzOTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3z38AwDQYJKoZIhvcNAQELBQADggEBAGYClU2o/cahJFLX853JWX9Hwxoe TnT0xG3qsH88W0ZJwacoC440kp4WknOM1pG7deE+b9//W3NkOrdaGHoIM1XZWy+I 5FZ38jw+Sds+T7NXSbYcqQYW9cGlxQ+Xbuergm4A9xbWrjby2PatU44w+uiUaGbg bPXGyUOIFRvFdTYuySzrpscpVZWDDpBoKsSUPOfFOcPxlIS4bArHN+otyrVYviLl fAsVL2HWQzBi4kKRWH1H02uufSoUOcpo+qiFYOQFuW0s93Qti+fyKzUzjG0RrYFG R6e4I32TyhvsWM7mGonHIx2/aP+sIAYR7753k9InTmC8CdlPbhxQ48w68bw= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:47 2025 by rpki-client