$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer (raw, json) Hash identifier: a6/qFXbO+bxFaH3yijtl7gKHzThbQ7iLjdVayH8E+2Q= Subject key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 06F234A82D0A661E8DF617D374A31D7595AC86F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft caRepository: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Jun 2025 09:04:06 +0000 Certificate not after: Thu 18 Jun 2026 09:09:06 +0000 Subordinate resources: IP: 157.66.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f2:34:a8:2d:0a:66:1e:8d:f6:17:d3:74:a3:1d:75:95:ac:86:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 19 09:04:06 2025 GMT Not After : Jun 18 09:09:06 2026 GMT Subject: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:14:7e:ac:2d:03:00:03:27:55:5f:01:ee: a5:7e:88:98:e8:e4:7b:8a:17:8c:87:d4:24:0d:fb: 22:f8:6e:a0:bc:cc:c6:16:76:e1:d2:98:a1:27:9e: bb:df:89:14:19:34:14:02:d6:9b:33:fa:07:ac:82: bf:38:aa:41:49:e8:e9:74:39:53:ce:05:49:b4:ad: 8d:a9:dd:32:76:b0:78:65:a2:73:03:26:b3:7f:0a: 6c:32:ea:b0:43:ec:47:f2:46:2d:6f:ad:ed:ba:c3: ca:37:ea:f9:7d:fb:1d:31:d5:22:0f:e9:85:7b:bf: e5:81:87:63:ca:5f:3c:11:10:61:c7:3e:a0:d3:69: bf:8a:56:7e:4e:b5:e6:c0:aa:c4:8b:1f:43:51:4b: 68:17:34:e0:fc:ec:df:77:14:45:59:14:88:03:39: 06:cb:e3:59:91:fa:54:d8:0e:06:26:52:3b:5e:f6: 2e:3e:c8:1c:87:30:61:29:a2:88:11:db:bc:fb:11: 4a:fe:e6:8a:fd:78:87:e7:a0:23:90:1f:94:df:30: b8:49:a8:0e:10:a8:2d:ef:af:ed:ab:e9:b9:66:73: 6a:01:8b:6a:58:5e:05:69:4a:02:84:74:26:28:87: b4:cf:8f:ac:2d:27:a8:00:75:fd:a7:f1:a4:ee:60: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.62.0/23 Signature Algorithm: sha256WithRSAEncryption 86:aa:c8:ef:03:18:eb:35:1f:c8:68:f0:b6:a2:9b:b8:38:a6: 65:af:3d:90:29:fa:e6:f1:1c:98:0b:f4:3c:b5:73:ca:0f:d8: 9b:0b:dd:fb:1b:9c:fd:ca:c6:7a:9e:ff:22:fe:56:5a:f2:23: e8:bc:28:40:77:a4:9c:7f:4d:8b:d3:25:4e:9e:ae:b7:bb:c0: c5:27:27:97:d1:9d:a6:36:85:8d:45:d3:a2:d4:28:5b:6e:fd: 74:d5:8e:d9:b1:3f:a5:40:b5:0e:54:2d:75:50:e8:a7:73:ce: d6:0c:6b:41:ff:49:4d:d0:eb:90:21:89:b5:41:b8:0c:60:dc: 76:cf:d1:66:6e:0b:6d:ba:66:3b:a7:17:a5:33:93:6f:bc:43: 2c:80:14:e2:23:8e:28:17:90:02:82:4b:56:1c:ea:65:92:c0: d6:8d:e2:0f:5b:6b:0a:9b:93:61:0b:d8:45:d0:85:d5:66:9b: d0:86:0c:1e:5e:1c:d7:84:03:ee:b0:1d:c7:88:d3:18:9a:0a: 13:8c:82:ee:11:97:b3:86:e1:1d:24:3c:9b:77:47:90:a8:c5: 24:5e:f0:9a:dd:94:c2:3b:c7:6a:84:05:ac:c7:00:c2:fb:5d: 0d:15:51:bc:ba:a6:13:fb:51:a7:6a:b8:ad:e9:c2:12:12:09: 1a:c5:28:d8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBvI0qC0KZh6N9hfTdKMddZWshvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxOTA5MDQwNloX DTI2MDYxODA5MDkwNlowMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5 MjE2MUIyRTJDNzY2Mjc4MEI3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPwFH6sLQMAAydVXwHupX6ImOjke4oXjIfUJA37IvhuoLzMxhZ24dKYoSee u9+JFBk0FALWmzP6B6yCvziqQUno6XQ5U84FSbStjandMnaweGWicwMms38KbDLq sEPsR/JGLW+t7brDyjfq+X37HTHVIg/phXu/5YGHY8pfPBEQYcc+oNNpv4pWfk61 5sCqxIsfQ1FLaBc04Pzs33cURVkUiAM5BsvjWZH6VNgOBiZSO172Lj7IHIcwYSmi iBHbvPsRSv7miv14h+egI5AflN8wuEmoDhCoLe+v7avpuWZzagGLalheBWlKAoR0 JiiHtM+PrC0nqAB1/afxpO5g7TcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFxyBtyxuANKSFySFhsuLHZieAt/MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkZGJiNzlj LTllYTItNDdmMC1iNDVmLTE4MTY2NTBiYTIzZi8wLzVDNzIwNkRDQjFCODAzNEE0 ODVDOTIxNjFCMkUyQzc2NjI3ODBCN0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQj4wDQYJKoZIhvcNAQELBQADggEBAIaqyO8DGOs1H8ho8Laim7g4pmWvPZAp +ubxHJgL9Dy1c8oP2JsL3fsbnP3Kxnqe/yL+VlryI+i8KEB3pJx/TYvTJU6erre7 wMUnJ5fRnaY2hY1F06LUKFtu/XTVjtmxP6VAtQ5ULXVQ6KdzztYMa0H/SU3Q65Ah ibVBuAxg3HbP0WZuC226ZjunF6Uzk2+8QyyAFOIjjigXkAKCS1Yc6mWSwNaN4g9b awqbk2EL2EXQhdVmm9CGDB5eHNeEA+6wHceI0xiaChOMgu4Rl7OG4R0kPJt3R5Co xSRe8JrdlMI7x2qEBazHAML7XQ0VUby6phP7UadquK3pwhISCRrFKNg= -----END CERTIFICATE-----Generated at Sun Jun 29 23:33:08 2025 by rpki-client