$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer File: 8137472FE4C7D48501352601D84D624E0EC41C19.cer (raw, json) Hash identifier: DWbXyBu4TuAZE/N0stSA8U8KfwbfKKdGGLKOFXDR5aY= Subject key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 271D2AB63A293574AA844E630659ADEB2981F228 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft caRepository: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Aug 2025 10:26:35 +0000 Certificate not after: Wed 12 Aug 2026 10:31:35 +0000 Subordinate resources: IP: 160.20.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1d:2a:b6:3a:29:35:74:aa:84:4e:63:06:59:ad:eb:29:81:f2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 13 10:26:35 2025 GMT Not After : Aug 12 10:31:35 2026 GMT Subject: CN=8137472FE4C7D48501352601D84D624E0EC41C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:31:57:13:04:53:27:56:c5:54:08:e0:42: 5a:5c:f7:e8:61:d9:9c:9b:2a:b0:53:67:c2:e3:0e: 55:5a:24:73:70:0a:48:f0:fe:0e:d8:78:ea:61:11: 01:21:ee:e5:f3:79:58:bf:00:1e:6b:4d:3a:73:3d: bf:76:cc:9c:97:62:b9:fe:59:91:93:b9:bc:a6:b9: 17:3f:d5:74:d2:e4:c9:0b:be:b3:bf:a6:73:ab:f0: c9:40:17:82:99:44:5c:bf:e0:b5:97:a9:55:f1:f7: e6:76:5e:cf:f8:71:bf:88:56:f0:e8:94:90:39:e1: 84:63:e3:d2:f8:97:a2:7f:04:d2:2e:d8:bf:3d:6f: 06:f5:54:66:0e:5a:f9:63:39:01:2d:1a:42:c0:49: 78:a4:f2:99:e8:e7:fe:2d:91:00:2a:33:7d:38:6c: d0:35:de:46:c1:ac:ef:8b:42:7b:a6:98:46:b8:b7: 01:d1:51:ce:7b:1f:56:11:61:78:d0:8b:4b:4f:fc: 45:4f:81:6f:73:10:79:24:97:fc:39:09:0b:3e:57: 43:ca:07:ef:6a:76:f5:89:e7:55:81:e6:98:4d:db: 47:3a:d5:08:91:03:4c:36:72:a1:a6:77:83:61:1d: a4:4c:8b:66:b9:6b:99:ad:a6:1b:15:68:20:bf:eb: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.76.0/23 Signature Algorithm: sha256WithRSAEncryption 74:60:51:04:71:03:04:f4:cb:a7:e5:12:a4:4e:f9:69:22:3e: 1b:8c:62:3a:a6:40:4e:37:36:57:51:49:cc:b3:f3:4f:37:b7: b6:93:82:48:97:6b:da:92:d9:2b:e2:c2:0e:3e:99:2d:02:68: ad:d2:4d:8e:0d:35:83:bf:48:52:74:4a:50:86:69:91:39:3b: bc:12:75:01:be:ef:08:30:bc:a3:07:59:67:13:13:74:33:44: ba:64:9b:be:d2:17:7b:57:a4:e4:3c:e3:31:96:c6:62:e4:a9: fe:15:1e:8b:7a:72:00:9e:e3:c4:92:a4:ce:53:24:21:ed:59: 6d:3c:0e:a6:ca:8d:4a:34:7d:de:01:bd:f4:32:85:c9:d3:8c: c7:5a:be:0d:44:01:b0:6a:df:eb:08:43:32:60:99:70:d4:a1: 9d:75:ff:a4:23:ff:ba:f7:98:04:19:9f:0c:b5:ff:1f:39:81: 2b:dc:ce:30:a0:d5:87:86:f5:78:05:53:71:83:fa:bb:dc:d8: 1c:13:38:e6:73:01:15:0a:57:99:00:43:84:57:cb:24:dc:20: 32:e8:58:2b:10:9f:7b:19:c8:f0:56:7a:3f:6f:88:1f:cd:0a: 6f:f3:bf:71:9a:6d:08:53:2a:16:9e:cd:61:c2:73:5d:73:37: 3c:67:e4:d6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJx0qtjopNXSqhE5jBlmt6ymB8igwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgxMzEwMjYzNVoX DTI2MDgxMjEwMzEzNVowMzExMC8GA1UEAxMoODEzNzQ3MkZFNEM3RDQ4NTAxMzUy NjAxRDg0RDYyNEUwRUM0MUMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOOMVcTBFMnVsVUCOBCWlz36GHZnJsqsFNnwuMOVVokc3AKSPD+Dth46mER ASHu5fN5WL8AHmtNOnM9v3bMnJdiuf5ZkZO5vKa5Fz/VdNLkyQu+s7+mc6vwyUAX gplEXL/gtZepVfH35nZez/hxv4hW8OiUkDnhhGPj0viXon8E0i7Yvz1vBvVUZg5a +WM5AS0aQsBJeKTymejn/i2RACozfThs0DXeRsGs74tCe6aYRri3AdFRznsfVhFh eNCLS0/8RU+Bb3MQeSSX/DkJCz5XQ8oH72p29YnnVYHmmE3bRzrVCJEDTDZyoaZ3 g2EdpEyLZrlrma2mGxVoIL/rvWsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIE3Ry/kx9SFATUmAdhNYk4OxBwZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MWMwOWM5ZS1mZThhLTQ5ODktYjViYi1hZTQxOTMzOGY4NzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxYzA5Yzll LWZlOGEtNDk4OS1iNWJiLWFlNDE5MzM4Zjg3My8wLzgxMzc0NzJGRTRDN0Q0ODUw MTM1MjYwMUQ4NEQ2MjRFMEVDNDFDMTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFEwwDQYJKoZIhvcNAQELBQADggEBAHRgUQRxAwT0y6flEqRO+WkiPhuMYjqm QE43NldRScyz8083t7aTgkiXa9qS2Sviwg4+mS0CaK3STY4NNYO/SFJ0SlCGaZE5 O7wSdQG+7wgwvKMHWWcTE3QzRLpkm77SF3tXpOQ84zGWxmLkqf4VHot6cgCe48SS pM5TJCHtWW08DqbKjUo0fd4BvfQyhcnTjMdavg1EAbBq3+sIQzJgmXDUoZ11/6Qj /7r3mAQZnwy1/x85gSvczjCg1YeG9XgFU3GD+rvc2BwTOOZzARUKV5kAQ4RXyyTc IDLoWCsQn3sZyPBWej9viB/NCm/zv3GabQhTKhaezWHCc11zNzxn5NY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:40 2025 by rpki-client