$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer (raw, json) Hash identifier: v7oF168VS0NLgf/OHd8rtsHoGRskBOK48x8xwOqDBs8= Subject key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7F393895E031882E6F089B3ACF454AC171F4EADB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft caRepository: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Oct 2025 09:28:23 +0000 Certificate not after: Tue 06 Oct 2026 09:33:23 +0000 Subordinate resources: IP: 160.187.174.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:39:38:95:e0:31:88:2e:6f:08:9b:3a:cf:45:4a:c1:71:f4:ea:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 7 09:28:23 2025 GMT Not After : Oct 6 09:33:23 2026 GMT Subject: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:0d:23:be:bf:83:4b:c9:71:e4:6f:e0:b7: 51:da:fb:ea:f5:25:4a:a0:0a:e4:ab:ad:83:c1:3a: ff:48:7a:df:e4:c6:83:5a:5c:51:2d:d3:18:d8:fb: 42:b1:78:5f:90:b3:d4:43:2c:5a:22:49:fa:87:03: d9:e2:02:86:c2:ae:9a:f2:26:9e:8e:9d:2c:f2:b4: ce:12:f1:6b:f0:1b:69:8b:4d:11:bd:62:ab:4b:7f: 82:55:74:8b:7a:86:6a:6f:0b:5d:56:aa:f9:7f:c5: 80:bc:47:2c:d9:b2:8b:ec:52:03:24:0d:44:26:f8: 0d:59:cf:c0:b5:ae:8c:38:54:3e:31:c2:f4:97:49: 6e:09:a1:f4:15:af:49:1b:af:22:78:5a:66:a2:27: 8d:9d:55:34:f2:db:06:c9:fb:7a:1a:c6:b9:45:b2: f3:d0:02:64:cc:73:40:76:26:f8:9e:43:0e:1a:bc: a1:5a:9d:af:53:97:65:ba:69:c5:2d:ce:5b:b6:88: c8:9b:af:8e:8d:0c:29:73:09:6f:c6:8c:a4:59:cd: 85:c0:c0:5d:34:1d:47:42:6e:fe:c7:3f:13:b0:d4: eb:4d:96:24:27:2e:33:90:e2:53:6e:ff:70:27:aa: d4:4a:fe:9e:5d:12:cd:c7:e6:a9:3e:bd:a7:1f:ba: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.174.0/24 Signature Algorithm: sha256WithRSAEncryption 46:09:9b:89:73:47:77:50:67:ad:01:13:f5:e3:67:82:87:c4: 32:02:25:c6:0c:87:25:15:2a:0d:07:50:4e:3b:c2:81:47:10: ab:a6:2e:b4:b8:f2:53:0d:c0:80:0f:f7:cf:8b:5b:55:ab:cf: 20:03:80:11:b8:8e:d9:8a:ca:7f:8a:9a:01:e7:ca:aa:a7:2f: 24:b8:ed:c4:8d:4c:23:70:11:56:55:06:e0:23:9d:28:9f:75: 0a:74:a4:e8:cf:72:e8:bf:3a:70:71:ed:62:c6:00:8d:63:2c: fe:9e:22:41:a4:ee:54:f8:e5:a7:ba:75:4d:4b:2f:89:26:f4: e5:16:c4:e1:aa:31:de:02:91:6e:1b:17:a5:1e:60:8c:50:e7: 6c:0d:13:3b:c7:8e:6d:7e:a6:b0:48:da:05:f7:b3:74:e7:7c: 30:1c:e4:df:a8:28:41:10:63:3a:cc:92:56:12:23:da:19:04: 87:81:e8:53:28:55:4a:9c:55:2b:fc:15:68:94:b6:9f:56:99: bf:69:dc:77:0b:9c:a1:ca:1e:04:36:38:c6:15:1b:c2:ba:ca: b8:04:8d:09:a2:61:b4:ac:bc:d8:5f:72:0b:b4:87:84:95:64: 3a:ff:28:e7:60:5b:20:9d:86:9e:6e:f8:cd:1e:7f:35:5f:d5: 4b:fe:b1:df -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfzk4leAxiC5vCJs6z0VKwXH06tswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAwNzA5MjgyM1oX DTI2MTAwNjA5MzMyM1owMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkz OEYyMUVBRjJFODJFODA1OTgxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsLDSO+v4NLyXHkb+C3Udr76vUlSqAK5Kutg8E6/0h63+TGg1pcUS3TGNj7 QrF4X5Cz1EMsWiJJ+ocD2eIChsKumvImno6dLPK0zhLxa/AbaYtNEb1iq0t/glV0 i3qGam8LXVaq+X/FgLxHLNmyi+xSAyQNRCb4DVnPwLWujDhUPjHC9JdJbgmh9BWv SRuvInhaZqInjZ1VNPLbBsn7ehrGuUWy89ACZMxzQHYm+J5DDhq8oVqdr1OXZbpp xS3OW7aIyJuvjo0MKXMJb8aMpFnNhcDAXTQdR0Ju/sc/E7DU602WJCcuM5DiU27/ cCeq1Er+nl0SzcfmqT69px+6macCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC7HIfb8YWob4tk48h6vLoLoBZgeMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ODUzYWFi LThkNmMtNDU3Zi05ZDU3LTQ4NGFjYWNlYTlkOC8wLzJFQzcyMUY2RkM2MTZBMUJF MkQ5MzhGMjFFQUYyRTgyRTgwNTk4MUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgu64wDQYJKoZIhvcNAQELBQADggEBAEYJm4lzR3dQZ60BE/XjZ4KHxDICJcYM hyUVKg0HUE47woFHEKumLrS48lMNwIAP98+LW1WrzyADgBG4jtmKyn+KmgHnyqqn LyS47cSNTCNwEVZVBuAjnSifdQp0pOjPcui/OnBx7WLGAI1jLP6eIkGk7lT45ae6 dU1LL4km9OUWxOGqMd4CkW4bF6UeYIxQ52wNEzvHjm1+prBI2gX3s3TnfDAc5N+o KEEQYzrMklYSI9oZBIeB6FMoVUqcVSv8FWiUtp9Wmb9p3HcLnKHKHgQ2OMYVG8K6 yrgEjQmiYbSsvNhfcgu0h4SVZDr/KOdgWyCdhp5u+M0efzVf1Uv+sd8= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:25 2025 by rpki-client