$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer (raw, json) Hash identifier: FpJ06zxoPnGKYqF/20BVvZTgDp36hVRq6nI++qi1o6o= Subject key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7C8F78EC8B29DA8C296B09FD1924E6531EAADCB9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 Oct 2025 14:53:46 +0000 Certificate not after: Tue 13 Oct 2026 14:58:46 +0000 Subordinate resources: IP: 160.187.136.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8f:78:ec:8b:29:da:8c:29:6b:09:fd:19:24:e6:53:1e:aa:dc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 14 14:53:46 2025 GMT Not After : Oct 13 14:58:46 2026 GMT Subject: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:ab:84:2c:27:b9:1e:d7:b2:e9:6b:63:2c: 08:95:7a:94:2a:05:5c:4f:dc:45:d1:d9:2f:c9:91: 11:03:d0:6c:41:5c:32:10:87:f0:98:ad:d4:3c:7a: a5:4a:1d:f5:35:e9:6b:bd:3e:4e:39:c1:6d:9d:9c: 38:d7:db:70:c1:b4:b8:a9:f2:63:1f:5f:09:9a:46: ea:26:cf:f5:b8:77:ea:c2:5c:8b:7d:0d:57:33:e0: b0:ce:ff:fa:09:6f:ed:44:98:0b:47:67:35:3c:ba: ee:5a:e5:19:13:8f:d7:72:88:26:a8:55:98:e2:01: 5c:30:92:55:45:33:65:54:4c:0f:9e:31:85:bb:5d: 70:40:b6:2b:24:a7:75:fe:c4:83:6e:e8:a0:a0:cd: 34:4c:58:8a:b1:25:b8:ac:99:97:78:78:d0:61:32: 65:d7:d8:bd:b4:91:88:e4:e5:91:62:7b:78:30:9f: 03:9c:c4:c1:3a:93:28:0a:a6:8b:06:64:67:b2:e1: 9e:0c:37:06:84:67:a3:34:3d:95:a6:c0:0f:5a:11: 62:2f:22:7d:cc:99:5d:dd:66:21:c5:9b:50:7b:38: 6f:94:18:57:88:bc:d8:33:3b:fe:16:31:af:58:e3: ba:cd:54:5b:47:6e:36:5c:26:e5:1c:41:d6:24:00: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.136.0/23 Signature Algorithm: sha256WithRSAEncryption 66:ef:4a:40:cd:fc:ee:28:db:8e:c9:a2:66:80:46:30:b1:2f: 43:f1:ed:3f:0b:01:e5:18:ff:11:40:a2:e4:88:8d:12:7e:94: 01:38:54:0f:11:96:50:c4:90:f9:16:5f:4a:2c:5a:5a:95:43: 98:86:4c:2c:e6:f5:25:94:3a:bd:6c:de:ed:f8:70:d4:f1:70: b8:8f:55:bc:08:4d:a2:c2:51:d1:08:99:22:8a:fc:6c:02:55: 38:b3:54:23:1f:03:4f:ac:77:2e:64:fa:c4:5c:be:1f:99:87: 9c:bc:81:37:34:c4:a2:b6:b8:62:11:e5:ee:ee:2c:8a:af:15: e0:d2:63:5a:9d:00:f5:15:eb:f0:95:d0:05:53:79:68:3d:e0: cd:1c:dd:6c:da:d7:d0:f1:b3:38:82:c2:b4:22:4d:8a:95:10: dd:96:28:15:1c:c9:77:7a:54:8e:f2:0e:66:10:db:7f:a8:ff: 22:c1:11:44:a6:12:fc:a2:b3:3d:12:77:ae:9a:20:e1:3d:a2: 1b:b0:e2:1e:51:68:06:a9:d7:26:93:14:b0:84:44:f9:4b:40: 62:8d:5c:e3:57:3f:52:f1:44:c0:5c:60:2d:e0:15:be:1a:c4: d8:8b:59:03:11:a8:d9:b4:29:4d:05:3d:7b:15:da:ea:f5:b8: 16:4b:28:70 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfI947Isp2owpawn9GSTmUx6q3LkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAxNDE0NTM0NloX DTI2MTAxMzE0NTg0NlowMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBG MjU2QUU2OUQ5RkE4NDM5NDhEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjAq4QsJ7ke17Lpa2MsCJV6lCoFXE/cRdHZL8mREQPQbEFcMhCH8Jit1Dx6 pUod9TXpa70+TjnBbZ2cONfbcMG0uKnyYx9fCZpG6ibP9bh36sJci30NVzPgsM7/ +glv7USYC0dnNTy67lrlGROP13KIJqhVmOIBXDCSVUUzZVRMD54xhbtdcEC2KySn df7Eg27ooKDNNExYirEluKyZl3h40GEyZdfYvbSRiOTlkWJ7eDCfA5zEwTqTKAqm iwZkZ7Lhngw3BoRnozQ9labAD1oRYi8ifcyZXd1mIcWbUHs4b5QYV4i82DM7/hYx r1jjus1UW0duNlwm5RxB1iQA4OsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxN/XiRTcH2YTDyVq5p2fqEOUjcMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhOTIzMzk3 LThjZjgtNGNlZi04ODU2LTBkMjY4ZDczZWRiMS8wLzdDNERGRDc4OTE0REMxRjY2 MTMwRjI1NkFFNjlEOUZBODQzOTQ4REMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgu4gwDQYJKoZIhvcNAQELBQADggEBAGbvSkDN/O4o247JomaARjCxL0Px7T8L AeUY/xFAouSIjRJ+lAE4VA8RllDEkPkWX0osWlqVQ5iGTCzm9SWUOr1s3u34cNTx cLiPVbwITaLCUdEImSKK/GwCVTizVCMfA0+sdy5k+sRcvh+Zh5y8gTc0xKK2uGIR 5e7uLIqvFeDSY1qdAPUV6/CV0AVTeWg94M0c3Wza19DxsziCwrQiTYqVEN2WKBUc yXd6VI7yDmYQ23+o/yLBEUSmEvyisz0Sd66aIOE9ohuw4h5RaAap1yaTFLCERPlL QGKNXONXP1LxRMBcYC3gFb4axNiLWQMRqNm0KU0FPXsV2ur1uBZLKHA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:51:25 2025 by rpki-client