$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer (raw, json) Hash identifier: ckFfLyeTVztdXdkJ7qsrdHKB9na3MUuwWlMT9JXeiEI= Subject key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6154F168EC8C1F0E9CAA25515D48BD8B6D8EDA81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft caRepository: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Aug 2025 15:27:51 +0000 Certificate not after: Fri 14 Aug 2026 15:32:51 +0000 Subordinate resources: IP: 2001:df4:3a40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:54:f1:68:ec:8c:1f:0e:9c:aa:25:51:5d:48:bd:8b:6d:8e:da:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 15:27:51 2025 GMT Not After : Aug 14 15:32:51 2026 GMT Subject: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:5e:99:f7:64:a2:a2:21:db:cf:9f:9e:3a: 95:68:26:73:14:d3:01:48:f7:2e:49:cd:0f:a8:d2: 99:48:04:ec:88:ee:66:b2:f7:63:79:7f:7c:4f:32: bc:3c:ab:99:43:7a:bb:f7:69:bf:e5:1a:c9:e9:d6: 1e:24:80:d5:ad:84:2c:09:0a:bd:a1:08:bf:8c:d3: 30:29:a7:a6:36:7c:92:7a:c8:f3:29:a7:37:14:85: 72:06:6d:c0:71:fd:fb:d3:38:a4:c3:2c:72:30:09: 3f:ae:7b:91:5c:1c:ef:6e:c8:bf:32:93:e4:1d:9e: bb:a5:5e:a5:c7:cd:a5:5d:69:b0:61:76:c2:32:8a: 37:1c:ce:f8:b4:d9:d1:5c:b5:5a:ed:0c:b8:09:a4: 59:5e:31:c5:24:48:a2:c8:7d:79:29:e6:f8:09:9e: f0:3a:51:aa:8e:50:fd:d8:1a:fb:91:79:c7:01:1c: ab:75:13:9f:d4:52:a6:e7:1d:ed:67:7b:24:b0:6c: 31:bc:db:c1:a2:c1:9f:8b:f8:e3:e2:c1:6e:41:63: 32:dc:7a:c7:2e:bb:1f:db:73:31:96:bf:37:a0:9b: 83:d1:6c:8c:c8:72:98:6c:c1:f3:6d:0c:84:54:a4: 38:bb:8f:d6:ef:09:d0:01:c9:ea:c0:d5:c1:33:9b: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:3a40::/48 Signature Algorithm: sha256WithRSAEncryption 2f:29:2f:d8:fc:b3:b4:bd:30:51:93:6c:f9:e9:4f:d2:31:ec: bf:29:d5:a3:86:40:10:0d:8e:18:22:85:f1:e6:1f:74:ee:6c: 92:88:5f:30:f0:9a:db:9c:90:87:a9:d0:cf:13:e2:9f:14:91: 8f:eb:58:81:0d:ac:c3:7a:b0:b6:74:47:32:96:0f:6b:cb:e8: 11:de:98:0a:ae:fe:12:6c:3c:41:28:64:94:99:50:cd:e8:28: 84:14:a0:ba:66:6a:df:82:53:c5:8a:af:ba:9d:78:0b:31:70: a1:1d:35:22:c8:f8:74:81:e9:9e:8b:37:5a:a2:3c:c0:1c:55: c6:c0:30:e4:b5:6f:7a:b8:30:15:11:d2:f7:6b:73:c0:ac:1f: bc:ff:de:18:f8:53:96:f4:11:b9:68:b6:b6:8d:06:f6:42:b5: ca:ec:5f:34:27:9f:d2:67:b8:64:3b:f2:4b:71:bb:2e:ce:53: 8b:7d:47:71:84:95:a5:a4:6c:67:37:a9:bf:66:34:a5:5f:f6: c4:37:b4:b2:ef:45:65:e8:27:99:56:42:f5:67:f6:4f:6d:93: 8d:0a:84:ac:72:9d:88:0a:12:84:95:73:8b:41:72:58:ef:1e: 30:46:2d:be:53:ac:dd:dd:6c:94:09:60:ad:a1:6b:1a:b1:23: 05:83:14:08 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUYVTxaOyMHw6cqiVRXUi9i22O2oEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNTE1Mjc1MVoX DTI2MDgxNDE1MzI1MVowMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdF NUIwRjg4N0U4OEY5OUE2MzA2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrIXpn3ZKKiIdvPn546lWgmcxTTAUj3LknND6jSmUgE7IjuZrL3Y3l/fE8y vDyrmUN6u/dpv+UayenWHiSA1a2ELAkKvaEIv4zTMCmnpjZ8knrI8ymnNxSFcgZt wHH9+9M4pMMscjAJP657kVwc727IvzKT5B2eu6VepcfNpV1psGF2wjKKNxzO+LTZ 0Vy1Wu0MuAmkWV4xxSRIosh9eSnm+Ame8DpRqo5Q/dga+5F5xwEcq3UTn9RSpucd 7Wd7JLBsMbzbwaLBn4v44+LBbkFjMtx6xy67H9tzMZa/N6Cbg9FsjMhymGzB820M hFSkOLuP1u8J0AHJ6sDVwTObGzcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM+km45dmgi3oBflsPiH6I+ZpjBsMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTY1MTll LWFiNjEtNDk0My1iM2U4LTEwYmRkNjA4MGZkYS8xL0NGQTQ5QjhFNUQ5QTA4QjdB MDE3RTVCMEY4ODdFODhGOTlBNjMwNkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30OkAwDQYJKoZIhvcNAQELBQADggEBAC8pL9j8s7S9MFGTbPnpT9Ix7L8p 1aOGQBANjhgihfHmH3TubJKIXzDwmtuckIep0M8T4p8UkY/rWIENrMN6sLZ0RzKW D2vL6BHemAqu/hJsPEEoZJSZUM3oKIQUoLpmat+CU8WKr7qdeAsxcKEdNSLI+HSB 6Z6LN1qiPMAcVcbAMOS1b3q4MBUR0vdrc8CsH7z/3hj4U5b0EblotraNBvZCtcrs XzQnn9JnuGQ78ktxuy7OU4t9R3GElaWkbGc3qb9mNKVf9sQ3tLLvRWXoJ5lWQvVn 9k9tk40KhKxynYgKEoSVc4tBcljvHjBGLb5TrN3dbJQJYK2haxqxIwWDFAg= -----END CERTIFICATE-----Generated at Thu Nov 6 00:37:01 2025 by rpki-client