$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer (raw, json) Hash identifier: JNUrqAK0Ce0ihFMwZ5lg4/0ob3eCUCGrJtTq60kliIA= Subject key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 36C4755407E66C77FB01FE737D0A1CCAA64A69D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 22 Jun 2025 22:00:40 +0000 Certificate not after: Sun 21 Jun 2026 22:05:40 +0000 Subordinate resources: IP: 157.66.174.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c4:75:54:07:e6:6c:77:fb:01:fe:73:7d:0a:1c:ca:a6:4a:69:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 22 22:00:40 2025 GMT Not After : Jun 21 22:05:40 2026 GMT Subject: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:46:4c:67:9f:85:84:15:32:21:81:12:8a: e1:60:69:d7:c4:8e:86:ed:a6:7e:28:16:3d:58:5a: 63:31:d3:c2:2e:5a:38:50:b9:16:a6:32:51:c8:86: d1:f9:b2:b5:6f:6c:c9:43:bf:18:47:5b:0d:77:78: c4:b4:53:49:3a:1e:49:81:f2:ed:72:ee:96:0c:30: fc:23:13:46:90:b5:3f:0c:4f:7e:06:7c:80:49:19: 2d:0e:9e:4a:7c:fd:f8:45:f5:ec:aa:38:1e:50:ee: 5f:80:d0:31:b1:bf:ee:b3:f3:d9:da:61:91:0b:20: 7f:bc:a7:a6:97:93:2e:14:38:0c:18:89:87:09:19: 77:ab:10:f4:b9:56:64:f0:6c:bd:57:0d:22:d8:07: f9:df:25:21:1a:e2:52:29:3e:5c:5e:8a:48:2b:51: 81:4a:67:82:af:40:57:3e:f4:f0:09:75:2a:40:27: 89:7b:aa:e1:93:d1:12:18:d2:d8:02:4c:f6:a8:03: 43:25:eb:28:18:7b:84:a6:da:c0:db:4a:d4:66:1c: 72:ee:e1:5a:0c:fb:2b:a6:ac:14:56:9b:90:28:3a: d7:a4:9f:80:43:df:0e:d1:8b:c3:8f:ae:5f:c5:2a: 4a:c3:1e:d5:2a:e3:ae:f7:bc:bd:e6:39:96:13:63: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.174.0/23 Signature Algorithm: sha256WithRSAEncryption 20:7a:55:1a:8d:29:f2:9d:0a:c5:ff:6c:8b:a8:fa:8b:78:48: 7c:b5:4e:ad:8f:4b:62:0c:56:e9:c1:b1:7c:91:14:dd:ac:d0: 09:4f:a6:a9:d2:79:31:7d:7e:0c:63:b5:a7:8b:51:ef:35:a6: 61:3a:30:3f:8c:e0:6d:30:af:ee:2f:68:61:0b:35:91:31:a8: d3:16:bd:79:b8:eb:5a:d1:65:58:c3:e3:2c:e2:d1:f8:26:cb: 90:34:1a:1c:1b:0f:c7:33:79:21:06:75:db:53:30:ea:89:a6: 99:15:02:d4:40:62:e6:65:59:77:1d:f2:13:be:f6:d3:1f:80: dc:ce:57:39:4b:8c:42:46:8d:d4:71:05:18:41:5a:a6:f6:0a: 58:57:ec:35:b7:b3:dd:48:75:f1:e9:a4:7f:4b:70:0c:f7:74: 40:91:45:7c:28:b1:b0:e3:20:8e:1c:85:b7:a7:25:2a:e2:04: 6d:4a:a9:d1:31:22:85:2a:02:80:dc:83:69:e9:fc:d9:12:90: 96:68:ad:32:0e:a6:de:fc:2b:ee:14:b7:d4:73:82:c2:87:d0: a0:52:c1:82:8a:93:b5:f5:a9:ee:3a:60:3d:a4:0e:35:42:26: 49:37:c0:f3:39:14:c0:4d:5f:f0:61:15:af:79:ae:b9:da:54: cf:ad:c8:70 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNsR1VAfmbHf7Af5zfQocyqZKadUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYyMjIyMDA0MFoX DTI2MDYyMTIyMDU0MFowMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4 Q0M1M0Y1QUVDMjRBRDZDRDA4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9ZRkxnn4WEFTIhgRKK4WBp18SOhu2mfigWPVhaYzHTwi5aOFC5FqYyUciG 0fmytW9syUO/GEdbDXd4xLRTSToeSYHy7XLulgww/CMTRpC1PwxPfgZ8gEkZLQ6e Snz9+EX17Ko4HlDuX4DQMbG/7rPz2dphkQsgf7ynppeTLhQ4DBiJhwkZd6sQ9LlW ZPBsvVcNItgH+d8lIRriUik+XF6KSCtRgUpngq9AVz708Al1KkAniXuq4ZPREhjS 2AJM9qgDQyXrKBh7hKbawNtK1GYccu7hWgz7K6asFFabkCg616SfgEPfDtGLw4+u X8UqSsMe1Srjrve8veY5lhNjYSECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEU4dTrQH7kdewKMxT9a7CStbNCCMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzMzZGNm LTlmNWUtNDc3NS05Y2U3LTlkZDUyNWI0NGI4Ni8wLzQ1Mzg3NTNBRDAxRkI5MUQ3 QjAyOENDNTNGNUFFQzI0QUQ2Q0QwODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQq4wDQYJKoZIhvcNAQELBQADggEBACB6VRqNKfKdCsX/bIuo+ot4SHy1Tq2P S2IMVunBsXyRFN2s0AlPpqnSeTF9fgxjtaeLUe81pmE6MD+M4G0wr+4vaGELNZEx qNMWvXm461rRZVjD4yzi0fgmy5A0GhwbD8czeSEGddtTMOqJppkVAtRAYuZlWXcd 8hO+9tMfgNzOVzlLjEJGjdRxBRhBWqb2ClhX7DW3s91IdfHppH9LcAz3dECRRXwo sbDjII4chbenJSriBG1KqdExIoUqAoDcg2np/NkSkJZorTIOpt78K+4Ut9RzgsKH 0KBSwYKKk7X1qe46YD2kDjVCJkk3wPM5FMBNX/BhFa95rrnaVM+tyHA= -----END CERTIFICATE-----Generated at Mon Jun 30 05:34:07 2025 by rpki-client