$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.cer (raw, json) Hash identifier: vinHmOYWJF9KXUCXTloMSuwazy1n5Av2enwVkhWz+CY= Subject key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 77795297F732E2651E56F7FABE18030870B3D5EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft caRepository: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 30 Sep 2025 22:49:01 +0000 Certificate not after: Tue 29 Sep 2026 22:54:01 +0000 Subordinate resources: IP: 160.187.144.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:79:52:97:f7:32:e2:65:1e:56:f7:fa:be:18:03:08:70:b3:d5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 30 22:49:01 2025 GMT Not After : Sep 29 22:54:01 2026 GMT Subject: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:c0:4d:1e:62:52:6a:37:b8:62:58:ae:38: 32:12:11:05:9b:fe:32:86:b4:2b:d5:70:2b:17:b0: a2:5f:5e:c1:5d:d1:de:39:66:22:c5:27:d6:e7:96: 40:d1:15:6c:95:05:03:40:69:97:fd:9d:29:fd:b6: 97:35:4d:10:fc:76:55:e7:5c:58:6a:85:d7:6f:c5: 38:88:39:ac:78:86:bd:70:26:cd:f3:48:b4:90:89: 90:0a:b8:d0:4d:65:7d:74:98:be:d5:3c:35:b9:5b: df:d9:2f:b2:3e:d5:50:0c:4f:0d:56:98:75:f8:69: bc:16:93:b7:8d:50:d1:0c:b7:ed:96:cf:d8:80:e3: ae:83:17:05:fc:85:24:de:b1:3b:d1:f1:07:9b:b2: da:c7:70:b3:fc:78:00:8f:4e:4b:3a:0e:73:a5:bc: cc:40:58:ea:16:56:91:a0:00:4b:66:40:01:39:32: 21:8b:84:c5:cf:44:35:b3:43:02:b1:e2:67:a2:e8: 55:63:78:c1:a3:ab:44:ae:04:4c:0d:90:8e:93:86: 76:de:6b:24:71:12:7b:19:bc:49:9d:aa:e3:df:80: b7:68:9a:02:95:72:70:6e:e0:d4:f7:91:d5:31:db: 45:71:a9:0b:be:42:c3:db:8c:48:e1:5c:1d:61:db: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.144.0/23 Signature Algorithm: sha256WithRSAEncryption 14:18:af:e8:81:9d:4e:e4:ba:62:7a:26:21:99:7c:64:76:e0: 39:19:6c:6d:1b:e9:b5:bf:ab:53:ed:20:db:a5:61:16:a4:95: c0:ad:b7:c8:cf:be:8a:c5:a2:63:55:ea:de:4c:da:9f:36:db: 54:01:dd:f1:54:b4:cd:a4:a1:d5:51:eb:7b:24:d8:c9:8b:8e: 4c:cf:a0:fe:20:9b:91:fe:26:a8:5a:9d:e6:4f:bf:54:34:3e: 4d:cd:ee:8c:0a:82:0d:5a:01:4d:0f:f3:2d:c1:53:d5:36:3f: 41:5b:dd:12:f6:b0:80:c7:a4:de:74:7d:19:60:2e:27:53:06: 80:9e:00:cf:22:5c:d4:0e:4c:74:80:80:4e:e3:ea:ca:0d:46: c5:8e:00:38:3b:4a:71:a0:9b:da:4b:67:62:48:06:02:ec:ab: d5:6f:83:a4:c4:87:27:e7:c4:05:ff:46:88:0f:fa:34:bd:50: 18:27:8e:67:99:fb:87:75:fc:d8:f8:7e:31:13:8f:4a:4b:34: 94:d8:5a:22:bb:53:93:4e:b8:e2:a6:a0:2c:fd:b5:66:17:7d: 5a:3a:da:a0:f1:c7:9f:a3:d8:a6:a8:95:6e:e4:09:c1:50:c2: 0c:fd:66:18:8f:cb:ad:c9:4b:98:61:cd:25:65:57:d5:9a:8d: 76:37:31:3f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUd3lSl/cy4mUeVvf6vhgDCHCz1eowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkzMDIyNDkwMVoX DTI2MDkyOTIyNTQwMVowMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUw RTkwMTMxMDQzNUYyRjQwNkFDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEvwE0eYlJqN7hiWK44MhIRBZv+Moa0K9VwKxewol9ewV3R3jlmIsUn1ueW QNEVbJUFA0Bpl/2dKf22lzVNEPx2VedcWGqF12/FOIg5rHiGvXAmzfNItJCJkAq4 0E1lfXSYvtU8Nblb39kvsj7VUAxPDVaYdfhpvBaTt41Q0Qy37ZbP2IDjroMXBfyF JN6xO9HxB5uy2sdws/x4AI9OSzoOc6W8zEBY6hZWkaAAS2ZAATkyIYuExc9ENbND ArHiZ6LoVWN4waOrRK4ETA2QjpOGdt5rJHESexm8SZ2q49+At2iaApVycG7g1PeR 1THbRXGpC75Cw9uMSOFcHWHbkZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDHC8PJVMeNSTg4OkBMQQ18vQGrGMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JhODliN2Rk LTk5YTctNDUwZS1iZTg0LWIzYmZjNzM0MGYxZi8wLzMxQzJGMEYyNTUzMUUzNTI0 RTBFMEU5MDEzMTA0MzVGMkY0MDZBQzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgu5AwDQYJKoZIhvcNAQELBQADggEBABQYr+iBnU7kumJ6JiGZfGR24DkZbG0b 6bW/q1PtINulYRaklcCtt8jPvorFomNV6t5M2p8221QB3fFUtM2kodVR63sk2MmL jkzPoP4gm5H+JqhaneZPv1Q0Pk3N7owKgg1aAU0P8y3BU9U2P0Fb3RL2sIDHpN50 fRlgLidTBoCeAM8iXNQOTHSAgE7j6soNRsWOADg7SnGgm9pLZ2JIBgLsq9Vvg6TE hyfnxAX/RogP+jS9UBgnjmeZ+4d1/Nj4fjETj0pLNJTYWiK7U5NOuOKmoCz9tWYX fVo62qDxx5+j2KaolW7kCcFQwgz9ZhiPy63JS5hhzSVlV9WajXY3MT8= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:40 2025 by rpki-client