$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer (raw, json) Hash identifier: MkmcRNoTcUh7JHs9ZNyR1gTYgRAzVaNTgN9gmZwIpjU= Subject key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3AF21388B5467E9A76FB9C8232AE8406A6E0CC29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft caRepository: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 07 Sep 2025 02:44:19 +0000 Certificate not after: Sun 06 Sep 2026 02:49:19 +0000 Subordinate resources: IP: 140.213.0.0/16 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f2:13:88:b5:46:7e:9a:76:fb:9c:82:32:ae:84:06:a6:e0:cc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 7 02:44:19 2025 GMT Not After : Sep 6 02:49:19 2026 GMT Subject: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:7d:61:49:94:bd:93:a2:96:9d:27:95:b6: b1:3c:d3:92:69:16:af:44:dd:03:78:8f:05:d1:a5: e5:72:78:98:ed:93:5d:b4:62:f8:eb:4f:ca:c7:29: 33:d9:1c:b3:fa:74:e0:ec:f4:aa:3f:c3:37:23:99: 28:b2:96:be:a3:72:ba:3d:83:33:67:35:f5:c5:f0: 0d:43:1b:39:8c:a0:f4:ee:49:bf:8e:46:a1:4f:c0: eb:2f:e4:e9:71:06:a7:bf:89:ac:01:c3:0f:2e:1c: d3:f4:f4:c5:55:c9:e1:7a:9c:6d:24:27:6b:25:a3: 9a:48:45:51:50:3c:86:c9:60:0b:17:36:fd:34:b3: 36:cc:fb:3a:1b:b0:08:16:9a:ef:23:ff:c4:fc:5f: 3e:78:5b:15:50:10:e8:a2:7a:0e:51:ac:69:91:4a: 74:ee:b3:9c:da:0b:b7:0d:57:24:8e:27:3a:e5:20: 41:68:ed:59:f3:4c:37:3e:84:16:ca:1b:57:1f:a2: cf:3a:4a:bd:74:d8:d1:94:18:24:2b:b6:21:cb:ff: be:f0:95:25:5f:98:51:e1:01:8f:77:82:85:e5:9b: c6:b2:ab:32:48:d4:d0:ea:9d:df:ae:42:b4:5e:88: 06:3d:5b:e9:d0:46:cc:fc:25:cc:77:68:ef:95:cc: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:c2:3a:aa:b6:2e:3f:d5:1a:7d:7e:55:29:3a:d7:14:ac:1b: b5:1b:24:dd:2c:ed:78:5e:93:53:0e:ea:49:9e:c8:27:49:ce: 2b:9b:0d:77:10:0e:0f:6e:9d:a0:ec:8d:87:81:b3:2f:86:f0: 65:56:84:71:14:b8:1c:60:85:25:b3:6f:f1:41:38:80:5a:ea: 9a:06:64:60:8e:8a:01:13:fc:15:a1:bb:d1:9f:70:3f:80:74: f7:1f:3f:f9:45:de:49:9b:fb:b9:ad:10:e7:65:5d:11:b1:bd: a5:95:ae:ef:b1:60:0f:11:19:2c:4e:18:4b:8f:0d:1b:6a:e7: 12:55:38:0b:3a:7e:c9:ac:90:2d:26:fc:54:7c:5f:40:d4:41: 7a:ec:3d:7d:7f:f3:7c:68:ff:56:a4:92:0c:51:6b:19:10:4d: b1:b0:3c:80:08:51:1a:c8:db:df:5f:3a:d9:cd:44:69:ae:99: ce:1d:bf:b1:60:4f:cf:2a:bb:e5:e5:b4:25:85:eb:3a:05:d0: 83:e7:5d:f1:df:a3:1c:7a:89:10:46:d4:4e:3c:a3:8e:95:cd: 24:49:e9:d1:75:b8:57:ed:a2:93:d5:43:32:d1:e5:a4:22:0c: 75:9e:ee:39:3b:08:a8:14:43:60:e0:4b:dd:47:c4:40:16:9b: 14:c9:b5:8b -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUOvITiLVGfpp2+5yCMq6EBqbgzCkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkwNzAyNDQxOVoX DTI2MDkwNjAyNDkxOVowMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVC NUMyMEM5RjI5QkNGQzY2MEExQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMolfWFJlL2TopadJ5W2sTzTkmkWr0TdA3iPBdGl5XJ4mO2TXbRi+OtPyscp M9kcs/p04Oz0qj/DNyOZKLKWvqNyuj2DM2c19cXwDUMbOYyg9O5Jv45GoU/A6y/k 6XEGp7+JrAHDDy4c0/T0xVXJ4XqcbSQnayWjmkhFUVA8hslgCxc2/TSzNsz7Ohuw CBaa7yP/xPxfPnhbFVAQ6KJ6DlGsaZFKdO6znNoLtw1XJI4nOuUgQWjtWfNMNz6E FsobVx+izzpKvXTY0ZQYJCu2Icv/vvCVJV+YUeEBj3eCheWbxrKrMkjU0Oqd365C tF6IBj1b6dBGzPwlzHdo75XMZNcCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBC6t5B9lToNX961wgyfKbz8ZgobMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBh LWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8xLzEwQkFCNzkwN0Q5NTNBMEQ1 RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCM1TANBgkqhkiG9w0BAQsFAAOCAQEAXMI6qrYuP9UafX5VKTrXFKwbtRsk3Szt eF6TUw7qSZ7IJ0nOK5sNdxAOD26doOyNh4GzL4bwZVaEcRS4HGCFJbNv8UE4gFrq mgZkYI6KARP8FaG70Z9wP4B09x8/+UXeSZv7ua0Q52VdEbG9pZWu77FgDxEZLE4Y S48NG2rnElU4Czp+yayQLSb8VHxfQNRBeuw9fX/zfGj/VqSSDFFrGRBNsbA8gAhR Gsjb31862c1Eaa6Zzh2/sWBPzyq75eW0JYXrOgXQg+dd8d+jHHqJEEbUTjyjjpXN JEnp0XW4V+2ik9VDMtHlpCIMdZ7uOTsIqBRDYOBL3UfEQBabFMm1iw== -----END CERTIFICATE-----Generated at Mon Oct 20 07:51:41 2025 by rpki-client