$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer (raw, json) Hash identifier: 6686BsI1VxxkxXnBPtgeS7AWE9gWS8F6bwx3D65VO3s= Subject key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 661004C86E21033C9DEB9DB5F5C48D7850CFCAEE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft caRepository: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Sep 2025 05:58:43 +0000 Certificate not after: Tue 15 Sep 2026 06:03:43 +0000 Subordinate resources: IP: 160.22.242.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:10:04:c8:6e:21:03:3c:9d:eb:9d:b5:f5:c4:8d:78:50:cf:ca:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 16 05:58:43 2025 GMT Not After : Sep 15 06:03:43 2026 GMT Subject: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:3c:c8:4d:5b:92:ed:61:8f:09:59:af:3c: b2:f2:92:88:6c:46:a6:f3:7d:31:4c:23:06:e8:ee: 58:cf:34:7f:9d:72:1b:91:01:12:91:08:d1:2e:49: 3a:b1:0f:d6:be:0f:11:28:25:1f:e3:60:f3:54:e5: 8c:82:f2:4d:fd:c4:71:21:af:70:86:7d:f8:bf:a7: bc:14:dd:95:4f:ef:ee:7f:ca:8d:e6:b9:c8:a9:cd: 80:c8:a6:32:94:b4:98:a8:34:e8:f8:ef:3e:ba:85: b5:e6:3b:d0:11:d1:d3:0f:d7:cd:3b:62:a0:7f:7c: b1:29:ff:98:cb:6e:a8:d6:9e:32:a5:06:c8:45:9b: 7a:98:aa:0d:35:18:77:17:60:90:49:f4:ea:d2:86: f9:8d:eb:64:3f:1f:44:21:62:69:af:47:e4:90:c2: d0:59:c3:4e:53:aa:f0:dc:ae:39:33:45:7e:fb:70: af:c3:ef:9e:83:da:1e:8d:35:e9:80:74:fe:f5:e5: 7f:21:99:38:27:dd:01:29:0f:00:fb:80:6e:a3:fb: 6a:dd:8a:fc:d8:29:9a:30:55:d9:49:bf:92:89:72: d9:a3:ee:23:07:17:72:dd:29:23:6e:43:89:f7:26: 69:84:0d:40:1a:94:4d:45:01:2d:61:ee:7b:37:31: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.242.0/23 Signature Algorithm: sha256WithRSAEncryption 49:2f:ae:76:d2:28:4c:fa:9f:8a:83:9c:d5:0e:64:0b:e3:b5: e0:2d:46:df:b1:98:42:b4:22:9f:a3:6a:3c:11:a3:5e:fd:a6: b8:38:0f:1e:cc:a9:7a:77:b8:cc:b9:52:57:8e:39:79:55:ac: e5:97:6a:c0:2c:35:6f:b5:44:5b:e6:54:10:37:2a:96:79:40: 96:1a:3a:1d:43:eb:d7:43:14:fd:b1:36:0d:e2:fd:e4:a6:9e: 64:1d:84:f2:e9:11:38:ae:5e:ee:2f:8d:a9:82:cd:28:db:4c: 80:60:f8:9f:9f:c0:f0:a5:e4:fd:59:06:08:30:fb:08:3e:e2: 84:41:49:f0:79:08:64:6c:ec:e4:0c:18:49:a4:9b:40:04:62: c3:f3:66:68:00:f4:49:06:98:04:9b:a5:26:66:1f:ca:ba:d7: 4e:2f:14:82:5f:5e:c3:63:5e:e9:81:1f:62:5a:99:c1:f9:77: 14:e9:a0:2f:24:58:61:5c:9e:d7:f0:f3:11:5b:59:35:03:77: 1e:b2:15:ff:96:4c:34:2d:fb:e1:98:ba:81:89:02:8a:9b:29: 30:75:42:9b:d4:98:96:bf:64:3d:e5:e2:06:65:7a:7e:cc:3b: fc:e0:ee:b1:12:85:a5:da:2b:4b:18:cb:78:2e:ee:02:50:c6: e6:1a:0d:2a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZhAEyG4hAzyd65219cSNeFDPyu4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkxNjA1NTg0M1oX DTI2MDkxNTA2MDM0M1owMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEz OUVFRkVGNDlGMUJCNDFFMDQwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLiPMhNW5LtYY8JWa88svKSiGxGpvN9MUwjBujuWM80f51yG5EBEpEI0S5J OrEP1r4PESglH+Ng81TljILyTf3EcSGvcIZ9+L+nvBTdlU/v7n/Kjea5yKnNgMim MpS0mKg06PjvPrqFteY70BHR0w/XzTtioH98sSn/mMtuqNaeMqUGyEWbepiqDTUY dxdgkEn06tKG+Y3rZD8fRCFiaa9H5JDC0FnDTlOq8NyuOTNFfvtwr8PvnoPaHo01 6YB0/vXlfyGZOCfdASkPAPuAbqP7at2K/NgpmjBV2Um/koly2aPuIwcXct0pI25D ifcmaYQNQBqUTUUBLWHuezcxyrMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHhN2Tc7ewsY1FE57v70nxu0HgQIMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlOWFmNGRi LWNmNmYtNDliMy1hMDViLTYxYTdiOWM4MTdjMS8wLzc4NEREOTM3M0I3QjBCMThE NDUxMzlFRUZFRjQ5RjFCQjQxRTA0MDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFvIwDQYJKoZIhvcNAQELBQADggEBAEkvrnbSKEz6n4qDnNUOZAvjteAtRt+x mEK0Ip+jajwRo179prg4Dx7MqXp3uMy5UleOOXlVrOWXasAsNW+1RFvmVBA3KpZ5 QJYaOh1D69dDFP2xNg3i/eSmnmQdhPLpETiuXu4vjamCzSjbTIBg+J+fwPCl5P1Z Bggw+wg+4oRBSfB5CGRs7OQMGEmkm0AEYsPzZmgA9EkGmASbpSZmH8q6104vFIJf XsNjXumBH2JamcH5dxTpoC8kWGFcntfw8xFbWTUDdx6yFf+WTDQt++GYuoGJAoqb KTB1QpvUmJa/ZD3l4gZlen7MO/zg7rEShaXaK0sYy3gu7gJQxuYaDSo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:30:48 2025 by rpki-client