$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer (raw, json) Hash identifier: RhvMjCdEw4lLPMj6mojWE7cwkapKz8v/7QYt+nNAZyE= Subject key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5BE465A2BA21D17C3EE86AC57AB8936C88D182EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft caRepository: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Aug 2025 12:27:58 +0000 Certificate not after: Wed 12 Aug 2026 12:32:58 +0000 Subordinate resources: IP: 157.20.98.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e4:65:a2:ba:21:d1:7c:3e:e8:6a:c5:7a:b8:93:6c:88:d1:82:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 13 12:27:58 2025 GMT Not After : Aug 12 12:32:58 2026 GMT Subject: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:a3:c8:34:03:33:c6:39:a8:ea:d4:8c:9b: 94:57:76:f7:88:d1:55:20:67:cc:40:7e:d9:65:91: 18:a0:d0:c8:97:b8:8e:26:67:d3:a9:07:bd:42:33: 7d:ff:fc:ae:de:fe:e4:b6:d1:3d:17:ea:c9:74:81: 5f:ee:e3:f8:9d:21:ea:5c:e6:f8:05:c9:6a:30:00: 41:6d:71:50:b6:bc:45:6c:c9:09:6e:5d:b5:6b:d1: 92:e1:b6:c2:e3:29:68:8b:e9:c7:2c:b2:92:7b:7a: 49:5f:4e:98:ce:7c:d5:26:ec:2a:6a:df:39:7d:33: 50:20:49:82:65:8c:93:f9:fb:4b:e5:d5:a2:77:6d: 09:2b:60:f8:f0:da:40:bd:0c:11:40:34:d5:d9:ed: ac:83:bb:cb:d0:d0:79:e8:b6:ea:f2:dd:a8:2b:26: 40:1c:de:8d:65:9e:dd:da:41:fd:74:ff:15:be:91: 04:49:71:0f:6a:11:bb:c5:30:3d:62:f9:ca:e5:93: 07:ce:be:a2:b1:cf:3b:ec:0b:df:1f:cb:2b:db:5b: 43:c6:54:35:84:7f:a5:5d:b3:da:f5:50:c5:1e:63: 39:61:4c:62:1d:23:99:f3:7a:02:7b:5d:ca:b3:9c: 4e:45:7f:70:58:46:86:77:c9:c3:80:74:48:c8:3f: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.98.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:3c:8b:8b:52:68:db:23:b6:b0:78:0f:b9:24:8c:41:e5:15: eb:90:20:57:c9:d3:de:86:e2:3e:ec:14:b7:c3:a0:e5:ae:55: 09:a4:e8:8f:00:2c:67:43:44:c0:9b:ae:95:47:fc:a9:eb:22: f3:c2:e8:57:98:37:39:51:a6:44:6d:99:fe:56:03:0f:d9:20: a3:73:44:3f:22:83:2f:57:05:48:eb:01:cf:ca:b9:c1:f9:4f: e2:b1:a6:62:75:8f:57:65:28:44:6c:fc:f9:b0:5f:cf:75:d2: 72:f4:3e:32:9d:b7:ec:a6:47:97:09:02:1d:ef:1a:dc:9c:3f: 0d:85:aa:65:08:ee:35:37:74:d7:d7:b2:59:b8:1b:18:4c:85: a5:c5:42:6b:f4:09:62:b4:f1:eb:9b:ca:9f:3c:fd:27:a5:c8: aa:95:bc:3c:b9:ef:c2:65:a5:99:35:cf:29:c8:0c:b9:fa:bb: e8:36:56:de:39:db:86:28:58:0d:42:db:cb:6c:60:95:a7:2f: 59:47:c1:93:b2:12:a5:d7:06:f4:80:87:ec:84:c5:a2:d7:d7: 4d:90:95:6a:63:64:c3:e9:72:97:97:29:01:10:09:1f:75:ff: bb:06:4e:68:01:ec:64:0b:5f:0c:55:88:7b:7a:80:fa:68:67: 09:0f:b5:71 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW+Rloroh0Xw+6GrFeriTbIjRguowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgxMzEyMjc1OFoX DTI2MDgxMjEyMzI1OFowMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4 QjNFNzY5NDg1QzA4M0ZCN0RDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKzo8g0AzPGOajq1IyblFd294jRVSBnzEB+2WWRGKDQyJe4jiZn06kHvUIz ff/8rt7+5LbRPRfqyXSBX+7j+J0h6lzm+AXJajAAQW1xULa8RWzJCW5dtWvRkuG2 wuMpaIvpxyyyknt6SV9OmM581SbsKmrfOX0zUCBJgmWMk/n7S+XVondtCStg+PDa QL0MEUA01dntrIO7y9DQeei26vLdqCsmQBzejWWe3dpB/XT/Fb6RBElxD2oRu8Uw PWL5yuWTB86+orHPO+wL3x/LK9tbQ8ZUNYR/pV2z2vVQxR5jOWFMYh0jmfN6Antd yrOcTkV/cFhGhnfJw4B0SMg/KxsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAwfvoDyHrJmhpeLPnaUhcCD+33NMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzNDZjMGUy LTgxOTQtNDAyNC1iY2IzLWQwMjk1NmNlM2E5OS8wLzBDMUZCRTgwRjIxRUIyNjY4 Njk3OEIzRTc2OTQ4NUMwODNGQjdEQ0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFGIwDQYJKoZIhvcNAQELBQADggEBAF88i4tSaNsjtrB4D7kkjEHlFeuQIFfJ 096G4j7sFLfDoOWuVQmk6I8ALGdDRMCbrpVH/KnrIvPC6FeYNzlRpkRtmf5WAw/Z IKNzRD8igy9XBUjrAc/KucH5T+KxpmJ1j1dlKERs/PmwX8910nL0PjKdt+ymR5cJ Ah3vGtycPw2FqmUI7jU3dNfXslm4GxhMhaXFQmv0CWK08eubyp88/SelyKqVvDy5 78JlpZk1zynIDLn6u+g2Vt4524YoWA1C28tsYJWnL1lHwZOyEqXXBvSAh+yExaLX 102QlWpjZMPpcpeXKQEQCR91/7sGTmgB7GQLXwxViHt6gPpoZwkPtXE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:17 2025 by rpki-client