$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer File: 6A755F0ECD114936B4C154BE153030E6BFE42025.cer (raw, json) Hash identifier: 4m1fJxM7GQyU+sYXt0HZ4BT+Glr5d5XOU3POwMSljkg= Subject key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0E5A6D85147E227D7C475E7C549507A69EBE0B37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft caRepository: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 Oct 2025 02:00:56 +0000 Certificate not after: Thu 01 Oct 2026 02:05:56 +0000 Subordinate resources: IP: 160.25.244.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5a:6d:85:14:7e:22:7d:7c:47:5e:7c:54:95:07:a6:9e:be:0b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 2 02:00:56 2025 GMT Not After : Oct 1 02:05:56 2026 GMT Subject: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:41:5e:e9:e2:f2:cb:a2:1d:ad:4b:26:1e: 47:e4:5c:66:5b:b9:ba:a6:d4:17:02:6f:4c:a9:06: 10:da:07:17:58:7b:e1:ba:81:7f:21:f8:ee:b6:ba: d8:a7:3b:9c:d5:2e:d5:a1:95:75:39:a2:fa:08:87: 06:9a:b6:47:c1:00:49:6e:ff:fd:7e:d1:f4:06:3a: 0f:f9:21:02:1f:b4:0d:c0:35:2f:7c:9e:a9:22:da: b6:72:e8:95:ec:40:c5:5e:3f:90:70:ee:1f:4b:cc: cd:58:2f:d2:8c:8f:b8:ff:2c:61:90:db:bc:f0:f5: e7:cc:5c:fe:c3:5f:46:d2:d9:d4:c5:22:59:db:28: e5:d6:31:ce:86:73:dc:69:1e:1f:28:84:65:2c:a7: 13:47:9a:f9:90:97:e8:8d:e4:93:20:35:21:73:06: 08:35:d3:cd:13:83:a9:09:ce:2b:6c:e9:3a:e9:3a: ea:6e:07:49:da:99:e3:bc:28:b8:5b:b0:9d:07:25: a2:9e:6f:06:88:f9:ff:39:d4:ec:13:ad:15:3a:00: e0:80:4f:9d:0c:7a:d2:cc:dc:36:1b:47:b3:97:6a: 7c:39:dc:75:a7:c8:6a:15:30:11:d1:49:59:bb:93: 3d:0c:8a:e3:5c:0a:3c:71:be:e7:8a:09:07:b6:4e: 7a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.244.0/23 Signature Algorithm: sha256WithRSAEncryption 04:0d:2a:c1:b1:82:69:fa:c3:87:b7:1d:a7:d4:67:6c:81:d6: a5:8d:22:a1:2f:be:02:68:47:01:f8:a2:a5:98:e0:29:aa:a7: 1d:41:8c:89:20:e1:b6:71:cc:9a:93:82:30:3a:5b:aa:6b:c9: 8c:da:9c:fd:b0:58:fb:eb:cc:80:01:0a:09:fe:30:f5:6f:9b: 81:18:9e:45:f0:5c:ed:4d:fc:b2:4e:4d:8a:18:bf:a6:c2:03: b1:5f:2d:9e:b6:b5:c7:ea:af:19:1d:52:b8:7a:45:fb:cb:56: 71:f0:13:75:64:08:4b:2b:8a:1f:6c:5f:01:a3:b9:aa:df:68: 08:e3:a5:52:33:65:cc:48:62:85:8e:e7:ce:73:45:8c:30:8b: 11:02:8f:c9:fa:05:55:22:93:b5:f3:87:5e:bf:e7:dc:e4:81: 53:15:a8:f2:4e:32:2e:06:4c:17:69:59:4f:00:86:d1:66:c1: c9:39:33:09:a5:04:71:5d:8a:0d:19:1b:e7:a1:06:c6:e1:cd: 4a:3d:82:09:4b:1a:ae:62:5d:82:24:6e:f0:1d:66:d5:b5:40: ce:7d:34:07:fe:bc:46:e3:9a:0f:aa:f3:6b:e8:53:55:dd:74: 15:8b:36:2f:e7:00:47:1b:d7:0c:87:ad:29:a0:82:ee:82:b9: 78:20:ff:50 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDlpthRR+In18R158VJUHpp6+CzcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAwMjAyMDA1NloX DTI2MTAwMTAyMDU1NlowMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1 NEJFMTUzMDMwRTZCRkU0MjAyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi7QV7p4vLLoh2tSyYeR+RcZlu5uqbUFwJvTKkGENoHF1h74bqBfyH47ra6 2Kc7nNUu1aGVdTmi+giHBpq2R8EASW7//X7R9AY6D/khAh+0DcA1L3yeqSLatnLo lexAxV4/kHDuH0vMzVgv0oyPuP8sYZDbvPD158xc/sNfRtLZ1MUiWdso5dYxzoZz 3GkeHyiEZSynE0ea+ZCX6I3kkyA1IXMGCDXTzRODqQnOK2zpOuk66m4HSdqZ47wo uFuwnQclop5vBoj5/znU7BOtFToA4IBPnQx60szcNhtHs5dqfDncdafIahUwEdFJ WbuTPQyK41wKPHG+54oJB7ZOejECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGp1Xw7NEUk2tMFUvhUwMOa/5CAlMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4Y2MxYzdl LWRhNzQtNGIxMS1iNjdhLWQ1ZjI3ZDk4MTc1Ny8wLzZBNzU1RjBFQ0QxMTQ5MzZC NEMxNTRCRTE1MzAzMEU2QkZFNDIwMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGfQwDQYJKoZIhvcNAQELBQADggEBAAQNKsGxgmn6w4e3HafUZ2yB1qWNIqEv vgJoRwH4oqWY4Cmqpx1BjIkg4bZxzJqTgjA6W6pryYzanP2wWPvrzIABCgn+MPVv m4EYnkXwXO1N/LJOTYoYv6bCA7FfLZ62tcfqrxkdUrh6RfvLVnHwE3VkCEsrih9s XwGjuarfaAjjpVIzZcxIYoWO585zRYwwixECj8n6BVUik7Xzh16/59zkgVMVqPJO Mi4GTBdpWU8AhtFmwck5MwmlBHFdig0ZG+ehBsbhzUo9gglLGq5iXYIkbvAdZtW1 QM59NAf+vEbjmg+q82voU1XddBWLNi/nAEcb1wyHrSmggu6CuXgg/1A= -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:51 2025 by rpki-client