$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer (raw, json) Hash identifier: yhiBMSV0HzM86ftvw6kAj8xsk4+iS/GFFGDGF+m/GfU= Subject key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0C55A60D688E054236DD6AD73677C9075C2D13A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft caRepository: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 09:49:23 +0000 Certificate not after: Wed 21 Oct 2026 09:54:23 +0000 Subordinate resources: IP: 2001:df4:81c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:55:a6:0d:68:8e:05:42:36:dd:6a:d7:36:77:c9:07:5c:2d:13:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 22 09:49:23 2025 GMT Not After : Oct 21 09:54:23 2026 GMT Subject: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:16:e0:b8:af:34:e4:c5:de:80:5c:ee:ae: fa:26:84:e1:fb:f4:0f:a3:6e:3f:5f:98:0b:2f:d5: e7:33:b5:3a:cd:d3:32:71:b0:c4:66:20:53:2d:9c: d1:dd:41:3d:ac:82:90:1f:5a:88:d3:f9:00:7f:14: af:1c:76:a2:c3:3a:7f:8f:95:f0:65:cf:fc:30:61: 68:f4:bf:cb:7f:d2:75:55:a6:10:d9:85:05:0f:4a: b9:24:c0:97:d3:5f:37:03:72:3f:dc:aa:c6:b9:97: d6:3f:70:14:ef:9e:79:72:6a:78:c2:24:ae:01:18: 37:02:78:79:fa:ba:03:d6:65:08:ef:cd:ab:74:29: 99:fb:69:b0:bc:79:a3:21:8a:c3:95:07:68:1c:75: 01:52:aa:01:81:9a:2e:92:1b:61:75:7b:f4:12:c8: 49:43:f1:e2:0a:fe:32:92:a9:6f:de:b8:4c:c6:7c: 3b:34:56:7d:9f:9d:72:22:19:f1:d3:0d:0f:e9:2b: c1:4a:8c:52:fb:8b:67:8c:3f:28:f4:91:da:4f:03: f5:0f:03:ec:e9:cf:c5:04:62:fd:78:85:50:3d:66: 2a:f3:f3:c8:98:ca:5b:d7:82:12:5c:81:b5:da:e4: 6d:a0:60:be:82:c9:6c:eb:eb:b6:ec:cc:f2:17:4e: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:81c0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:b7:12:25:83:f5:83:28:77:d4:0d:e2:f3:a2:3f:5a:79:28: 29:87:54:ac:7a:cf:06:11:1f:6f:99:2f:84:35:79:92:af:c0: 2c:7a:2b:4c:ee:74:1c:d6:45:c9:48:1e:e6:c6:cd:7e:32:0d: 2d:80:24:e3:ef:38:3c:15:46:3b:4c:77:fa:ba:48:51:54:60: 42:08:28:f9:ab:96:85:fb:b1:0c:cc:e4:53:1d:05:34:49:dd: 85:fb:00:8a:64:ee:a0:c9:2a:88:7d:8d:3d:73:83:2f:a1:23: 73:e5:be:af:b2:91:6f:7c:19:62:16:ab:e6:72:b9:7f:d5:64: 06:7b:38:00:11:e9:7e:bc:11:e4:ba:17:0c:58:99:72:6b:5e: 0e:7c:3d:38:dd:c5:cd:60:ec:34:fa:11:c1:7a:62:bf:c2:e5: 41:c0:23:f2:b5:4a:04:7f:ac:a5:6c:8f:15:40:3f:9d:b1:6a: cd:e8:cf:fb:09:0d:73:9b:53:b7:d3:70:87:10:64:25:06:80: 97:38:08:32:46:01:92:9e:d1:4b:85:45:2e:dc:a5:10:e8:fd: 40:4c:6e:33:73:42:98:0e:88:bf:f2:c1:b6:cf:43:35:00:bd: 95:79:b6:64:b6:81:f2:fd:7f:ef:40:ec:45:e2:0c:2e:7e:6e: 5a:3e:a3:c4 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUDFWmDWiOBUI23WrXNnfJB1wtE6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMjA5NDkyM1oX DTI2MTAyMTA5NTQyM1owMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3 MzkwOEM4NEY0Qzg5RDJFQ0Y3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu0FuC4rzTkxd6AXO6u+iaE4fv0D6NuP1+YCy/V5zO1Os3TMnGwxGYgUy2c 0d1BPayCkB9aiNP5AH8Urxx2osM6f4+V8GXP/DBhaPS/y3/SdVWmENmFBQ9KuSTA l9NfNwNyP9yqxrmX1j9wFO+eeXJqeMIkrgEYNwJ4efq6A9ZlCO/Nq3QpmftpsLx5 oyGKw5UHaBx1AVKqAYGaLpIbYXV79BLISUPx4gr+MpKpb964TMZ8OzRWfZ+dciIZ 8dMND+krwUqMUvuLZ4w/KPSR2k8D9Q8D7OnPxQRi/XiFUD1mKvPzyJjKW9eCElyB tdrkbaBgvoLJbOvrtuzM8hdOR98CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN3mrRMJeltaSkZzkIyE9MidLs98MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlODU1ZThh LTNmZjgtNDdmZi1hYWVjLTQ4ZDhiMzgwYTkwNC8xL0RERTZBRDEzMDk3QTVCNUE0 QTQ2NzM5MDhDODRGNEM4OUQyRUNGN0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30gcAwDQYJKoZIhvcNAQELBQADggEBAJq3EiWD9YMod9QN4vOiP1p5KCmH VKx6zwYRH2+ZL4Q1eZKvwCx6K0zudBzWRclIHubGzX4yDS2AJOPvODwVRjtMd/q6 SFFUYEIIKPmrloX7sQzM5FMdBTRJ3YX7AIpk7qDJKoh9jT1zgy+hI3Plvq+ykW98 GWIWq+ZyuX/VZAZ7OAAR6X68EeS6FwxYmXJrXg58PTjdxc1g7DT6EcF6Yr/C5UHA I/K1SgR/rKVsjxVAP52xas3oz/sJDXObU7fTcIcQZCUGgJc4CDJGAZKe0UuFRS7c pRDo/UBMbjNzQpgOiL/ywbbPQzUAvZV5tmS2gfL9f+9A7EXiDC5+blo+o8Q= -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:41 2025 by rpki-client