$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer (raw, json) Hash identifier: Ky9j+9eBgqkcbbGyWR3cbfLcFXtio8hbrpL8Gw0VlVk= Subject key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 65C9DF085BBF20819F015F9168EFF874F516AE92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft caRepository: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 15:01:15 +0000 Certificate not after: Thu 17 Sep 2026 15:06:15 +0000 Subordinate resources: IP: 160.22.30.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c9:df:08:5b:bf:20:81:9f:01:5f:91:68:ef:f8:74:f5:16:ae:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 18 15:01:15 2025 GMT Not After : Sep 17 15:06:15 2026 GMT Subject: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:82:5e:d8:10:84:30:ca:da:05:69:11:52: f6:ea:9e:f5:d2:59:26:47:d6:35:3b:29:9f:1c:a4: 4f:8e:a8:7b:05:ac:95:b9:24:09:ea:59:1e:7b:10: 11:7c:f1:72:27:67:f6:ff:8a:a0:ce:54:93:00:3e: ac:fd:17:73:2d:02:db:c0:1c:29:df:e0:68:73:d4: 02:7b:27:2b:56:48:82:84:58:94:1b:e7:1b:09:a8: 2c:64:f0:d5:d0:05:d2:35:76:cd:16:12:b0:05:88: eb:5d:94:7a:26:70:37:64:c7:0b:7b:9a:13:5a:a2: 63:e8:ae:38:86:b1:df:2d:89:d0:35:f5:37:98:fd: 8e:af:a3:f0:68:03:ab:df:05:61:1f:6b:00:87:24: 3d:b0:7e:32:76:b4:26:50:af:bc:6b:e0:b1:7e:3d: 24:53:ff:2f:95:b5:a5:32:fb:14:db:28:d2:5e:be: 3c:35:d6:4b:87:ae:4b:7f:e5:04:86:9b:91:78:ce: 2a:0d:71:cb:05:dd:1d:ad:f5:20:e0:8d:cf:20:62: 4e:06:37:b1:03:5d:66:bc:a5:f1:bc:fe:dc:51:b2: 12:a7:d7:f4:d6:74:2a:ef:5c:d2:e8:46:39:94:01: 1f:e9:0d:2c:a5:d4:af:15:89:b3:d0:f2:eb:d0:74: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.30.0/23 Signature Algorithm: sha256WithRSAEncryption 72:e2:06:15:07:e0:b0:47:6e:7f:c1:09:48:d5:4b:8e:e3:f3: 6a:5d:19:8c:f9:36:72:05:6e:04:a8:a1:be:c3:d8:9d:1d:5b: 27:62:22:10:e5:31:ba:30:98:0c:ae:db:8f:c6:08:4d:ac:90: 81:b5:4a:ab:63:26:20:ee:76:5f:3e:05:12:43:fb:1a:9d:09: bb:d5:fd:df:3a:f2:69:4b:2d:54:71:24:07:6f:21:6b:af:39: bc:a1:84:00:69:0b:0d:f3:01:b9:d8:6f:37:fb:78:c5:9e:da: ce:69:83:06:c3:81:78:7f:69:f5:79:55:70:77:3d:48:48:18: e6:44:cc:aa:50:7a:04:9f:99:84:a4:2c:b2:4b:e1:72:12:17: ac:2c:50:bb:1f:0d:da:17:b4:42:ed:90:70:d0:69:ff:4d:a9: e3:3e:29:69:79:e1:24:aa:2e:85:3d:64:5d:9a:75:c8:3a:10: 9f:e1:da:5e:41:9d:e0:c5:a8:81:bd:b8:75:ee:85:d1:3b:29: f3:ad:b8:a8:40:98:07:93:d4:d5:36:76:61:f2:7b:08:d0:04: 2b:ed:ff:ee:30:be:e9:1e:49:0f:28:e8:83:fc:42:e8:04:f7: 68:86:e2:01:53:65:36:64:12:35:81:cb:dc:99:85:e1:68:9e: 04:6f:34:d3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZcnfCFu/IIGfAV+RaO/4dPUWrpIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkxODE1MDExNVoX DTI2MDkxNzE1MDYxNVowMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1 M0I2NTU1RTI2N0EzRjVDMjhGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANetgl7YEIQwytoFaRFS9uqe9dJZJkfWNTspnxykT46oewWslbkkCepZHnsQ EXzxcidn9v+KoM5UkwA+rP0Xcy0C28AcKd/gaHPUAnsnK1ZIgoRYlBvnGwmoLGTw 1dAF0jV2zRYSsAWI612UeiZwN2THC3uaE1qiY+iuOIax3y2J0DX1N5j9jq+j8GgD q98FYR9rAIckPbB+Mna0JlCvvGvgsX49JFP/L5W1pTL7FNso0l6+PDXWS4euS3/l BIabkXjOKg1xywXdHa31IOCNzyBiTgY3sQNdZryl8bz+3FGyEqfX9NZ0Ku9c0uhG OZQBH+kNLKXUrxWJs9Dy69B0EcUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCNHWoa7XFFd3XdTtlVeJno/XCj0MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1ZWZjNDEz LTI3MDktNDgzZS1hMzE0LWM1ZDA2NjNkZjkzMi8wLzIzNDc1QTg2QkI1QzUxNURE RDc3NTNCNjU1NUUyNjdBM0Y1QzI4RjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFh4wDQYJKoZIhvcNAQELBQADggEBAHLiBhUH4LBHbn/BCUjVS47j82pdGYz5 NnIFbgSoob7D2J0dWydiIhDlMbowmAyu24/GCE2skIG1SqtjJiDudl8+BRJD+xqd CbvV/d868mlLLVRxJAdvIWuvObyhhABpCw3zAbnYbzf7eMWe2s5pgwbDgXh/afV5 VXB3PUhIGOZEzKpQegSfmYSkLLJL4XISF6wsULsfDdoXtELtkHDQaf9NqeM+KWl5 4SSqLoU9ZF2adcg6EJ/h2l5BneDFqIG9uHXuhdE7KfOtuKhAmAeT1NU2dmHyewjQ BCvt/+4wvukeSQ8o6IP8QugE92iG4gFTZTZkEjWBy9yZheFongRvNNM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:16 2025 by rpki-client