$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer (raw, json) Hash identifier: c3y1m+a+zUAIC8I/MOsNb8IBskzgk8s8Q5pH+ELAcys= Subject key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 472205E70E9647E96776FD28F845817DAB8728D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft caRepository: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Sep 2025 10:07:03 +0000 Certificate not after: Mon 28 Sep 2026 10:12:03 +0000 Subordinate resources: IP: 157.15.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:22:05:e7:0e:96:47:e9:67:76:fd:28:f8:45:81:7d:ab:87:28:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 29 10:07:03 2025 GMT Not After : Sep 28 10:12:03 2026 GMT Subject: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:33:22:c3:65:8b:2a:56:05:9d:d9:7c:dd: 02:48:c8:35:48:57:76:04:19:be:e9:0b:d3:b4:ec: c9:09:d0:7f:4d:30:35:4b:c6:2a:f0:e1:2c:9f:f3: 1c:72:da:1a:09:ec:6a:81:d3:c2:a5:71:a8:96:14: 57:46:a3:a5:4f:1b:52:4b:93:74:4c:48:c3:b3:5a: 28:aa:25:99:5c:19:d4:be:27:b5:e2:f3:e3:7d:da: 4b:51:f9:be:83:df:db:ce:8f:ca:7e:1a:b0:00:e3: 20:2d:69:8b:0b:b2:43:e4:52:0f:89:17:10:d9:10: a9:45:27:bf:99:03:67:57:e8:3c:20:5e:96:e7:56: fb:c1:41:6e:aa:bd:00:94:04:7e:59:54:72:93:a1: 73:be:81:16:ff:01:16:cb:ff:c8:ea:f6:05:11:47: 5c:aa:8f:c8:e1:e1:84:fe:52:38:97:3f:df:33:e9: 6b:8d:03:be:f0:47:d6:33:dc:99:f7:9e:1c:df:9e: 31:ac:f4:ef:8d:b2:54:c4:9e:b3:8b:55:a3:15:7d: 94:f1:cf:de:ae:53:6e:0b:b4:15:6f:ba:87:dd:8d: b7:c9:a4:c8:87:40:f9:94:19:62:50:2b:c0:c8:65: 02:c4:b4:9a:50:79:5a:6c:97:26:f5:04:ad:a4:15: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.116.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:5d:78:76:64:0f:e6:e0:d0:3a:3d:79:e5:fd:5d:58:0e:45: 0f:b6:29:68:d9:4f:dc:6e:f0:d5:38:aa:8c:b7:cd:f7:6f:ab: af:36:70:d1:f3:69:ad:38:7d:68:b8:d9:48:66:92:62:66:20: 06:74:99:3d:c8:1c:d1:03:f9:69:5c:95:13:53:73:fd:ab:22: 41:9f:fe:7b:d5:70:1b:b7:99:ed:69:06:6f:93:df:2f:be:5a: ee:07:77:88:89:22:ac:59:7c:2e:a1:62:ad:53:4e:24:c4:29: fc:a1:ed:da:ec:2e:74:c9:47:1c:e6:0c:cf:1b:bf:8f:fb:e9: 53:2d:ae:37:e8:3c:ec:4c:b7:a8:73:00:a1:82:55:f5:c9:c6: 31:14:11:fb:b1:7b:7f:82:0d:af:1c:0e:33:18:b5:32:d3:93: bb:84:0d:44:97:1d:63:67:28:4a:cf:40:2e:5b:17:bc:32:94: b9:8c:30:fd:70:75:8c:e1:0d:46:fd:fa:2a:3d:ef:5c:d6:8f: e7:f8:df:c0:f6:67:9a:c0:9c:d6:56:56:2c:d6:46:db:fc:f9: 9c:60:08:f8:27:d1:92:d0:d2:31:7e:53:93:3d:aa:51:ba:78: 17:9d:17:6b:11:0e:c6:60:e9:62:4a:cc:f3:e9:bb:09:69:e5: 75:b2:74:1e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURyIF5w6WR+lndv0o+EWBfauHKNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkyOTEwMDcwM1oX DTI2MDkyODEwMTIwM1owMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIy NTk5QzlFM0VDRURGQTNGNEUxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyyMyLDZYsqVgWd2XzdAkjINUhXdgQZvukL07TsyQnQf00wNUvGKvDhLJ/z HHLaGgnsaoHTwqVxqJYUV0ajpU8bUkuTdExIw7NaKKolmVwZ1L4nteLz433aS1H5 voPf286Pyn4asADjIC1piwuyQ+RSD4kXENkQqUUnv5kDZ1foPCBeludW+8FBbqq9 AJQEfllUcpOhc76BFv8BFsv/yOr2BRFHXKqPyOHhhP5SOJc/3zPpa40DvvBH1jPc mfeeHN+eMaz0742yVMSes4tVoxV9lPHP3q5Tbgu0FW+6h92Nt8mkyIdA+ZQZYlAr wMhlAsS0mlB5WmyXJvUEraQVp8MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHLY2v1IGz+PrCslmcnj7O36P04WMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0N2Y2Y2Y2 LWRkMmItNDgyMy1iMjY0LWUyYmY0ZjMwYWJmZS8wLzcyRDhEQUZENDgxQjNGOEZB QzJCMjU5OUM5RTNFQ0VERkEzRjRFMTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdD3QwDQYJKoZIhvcNAQELBQADggEBAHpdeHZkD+bg0Do9eeX9XVgORQ+2KWjZ T9xu8NU4qoy3zfdvq682cNHzaa04fWi42UhmkmJmIAZ0mT3IHNED+WlclRNTc/2r IkGf/nvVcBu3me1pBm+T3y++Wu4Hd4iJIqxZfC6hYq1TTiTEKfyh7drsLnTJRxzm DM8bv4/76VMtrjfoPOxMt6hzAKGCVfXJxjEUEfuxe3+CDa8cDjMYtTLTk7uEDUSX HWNnKErPQC5bF7wylLmMMP1wdYzhDUb9+io971zWj+f438D2Z5rAnNZWVizWRtv8 +ZxgCPgn0ZLQ0jF+U5M9qlG6eBedF2sRDsZg6WJKzPPpuwlp5XWydB4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:17 2025 by rpki-client