$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer File: C08E65A250AEDC93967004D660D25DB8293AB419.cer (raw, json) Hash identifier: k+bwS6yo62r8pU4FAnrMfqVnklhct6+sz0a42hHItzI= Subject key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 106F3A1BED46E8F361E9E83486EEA12248166F74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft caRepository: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 Oct 2025 07:21:48 +0000 Certificate not after: Thu 01 Oct 2026 07:26:48 +0000 Subordinate resources: IP: 160.187.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6f:3a:1b:ed:46:e8:f3:61:e9:e8:34:86:ee:a1:22:48:16:6f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 2 07:21:48 2025 GMT Not After : Oct 1 07:26:48 2026 GMT Subject: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:8e:49:c5:32:c6:73:ef:59:f4:da:fc:d0: 93:9a:95:cc:d1:56:c6:98:16:71:d5:d2:c5:f4:6b: 37:2e:79:80:01:ba:94:d1:0b:4d:fb:fd:fa:c7:e1: 85:df:a9:99:f4:ef:07:1b:e0:5a:82:ce:6a:e4:80: 65:8c:a0:13:a6:f1:e9:f7:75:a1:ff:8a:46:8d:b4: e3:39:a7:52:7c:5c:af:c5:cc:02:36:a5:6d:1a:c4: 40:68:cc:07:2d:88:5b:66:2f:ac:f4:fa:dc:5e:4a: fb:61:cd:08:ba:46:21:65:75:b3:48:31:89:39:a8: c6:41:ea:43:cc:3c:e1:87:3f:ab:a1:03:e4:db:ed: 0a:1d:14:5f:f3:4e:ba:e4:d6:de:ba:47:49:0f:13: 00:fa:d7:4b:26:c2:25:64:f1:ad:6c:43:08:d5:1e: e5:ba:31:59:f5:28:3f:b8:b1:78:1c:ab:52:a5:41: 35:8e:8f:77:41:04:c2:00:9f:58:b4:a4:cb:95:a8: 49:ab:17:22:e0:60:40:44:36:19:f9:c6:18:2c:9f: e1:fa:5c:51:95:7a:4f:ce:de:c0:a2:8b:f6:49:b0: 30:07:8d:26:3f:ed:9e:38:cf:d3:99:ea:55:2b:6c: df:5b:d7:43:5d:5b:0c:2a:4d:0e:ce:8c:86:ff:40: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.218.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:be:b9:aa:b5:a0:9b:f2:4b:2a:45:8c:2e:31:df:9f:48:18: 0d:6f:c6:26:43:8f:1a:78:41:67:c3:27:c9:c0:db:a9:fe:40: 20:f3:2b:f9:11:15:3a:26:22:79:26:e2:36:c1:d1:1e:52:4b: ef:fe:6f:90:37:df:5f:73:79:59:66:99:32:6e:69:e6:95:bf: 23:5a:01:a0:3c:52:69:ff:73:fe:ba:fc:31:53:ca:9e:dc:47: 9f:11:d1:e5:3c:68:9b:c0:cf:02:fb:bc:12:0c:dc:52:17:4e: fa:3b:fc:70:52:c7:b6:38:84:d2:fd:80:26:64:83:34:a8:73: 6d:9f:59:50:a7:1e:ba:4b:ac:aa:b8:80:93:9c:d5:d2:f6:19: f7:62:68:08:62:30:a4:1b:51:04:ea:b2:6d:79:87:58:c8:e1: cd:7b:2f:52:b2:f1:63:ed:19:2b:c3:f5:4d:43:fb:ce:b2:f9: 59:83:f6:71:63:69:cb:7b:62:7b:50:55:05:c1:e8:67:6e:d0: ce:c4:e7:ab:38:74:d9:1f:ef:ae:31:7b:ad:82:34:6b:e0:ba: d4:f7:89:c2:e1:58:94:8f:4c:ca:25:e2:d4:d0:50:2e:41:b8: d2:f5:10:9c:41:d2:b1:ec:d5:22:f2:96:ff:e4:61:df:1f:93: 02:5c:ea:15 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEG86G+1G6PNh6eg0hu6hIkgWb3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAwMjA3MjE0OFoX DTI2MTAwMTA3MjY0OFowMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAw NEQ2NjBEMjVEQjgyOTNBQjQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObyjknFMsZz71n02vzQk5qVzNFWxpgWcdXSxfRrNy55gAG6lNELTfv9+sfh hd+pmfTvBxvgWoLOauSAZYygE6bx6fd1of+KRo204zmnUnxcr8XMAjalbRrEQGjM By2IW2YvrPT63F5K+2HNCLpGIWV1s0gxiTmoxkHqQ8w84Yc/q6ED5NvtCh0UX/NO uuTW3rpHSQ8TAPrXSybCJWTxrWxDCNUe5boxWfUoP7ixeByrUqVBNY6Pd0EEwgCf WLSky5WoSasXIuBgQEQ2GfnGGCyf4fpcUZV6T87ewKKL9kmwMAeNJj/tnjjP05nq VSts31vXQ11bDCpNDs6Mhv9AHuMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMCOZaJQrtyTlnAE1mDSXbgpOrQZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4MWQ1NGNi LTU3YTktNGExNi1hNzBlLWM1ZjYwMjRlMTM5ZC8wL0MwOEU2NUEyNTBBRURDOTM5 NjcwMDRENjYwRDI1REI4MjkzQUI0MTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgu9owDQYJKoZIhvcNAQELBQADggEBAD2+uaq1oJvySypFjC4x359IGA1vxiZD jxp4QWfDJ8nA26n+QCDzK/kRFTomInkm4jbB0R5SS+/+b5A3319zeVlmmTJuaeaV vyNaAaA8Umn/c/66/DFTyp7cR58R0eU8aJvAzwL7vBIM3FIXTvo7/HBSx7Y4hNL9 gCZkgzSoc22fWVCnHrpLrKq4gJOc1dL2GfdiaAhiMKQbUQTqsm15h1jI4c17L1Ky 8WPtGSvD9U1D+86y+VmD9nFjact7YntQVQXB6Gdu0M7E56s4dNkf764xe62CNGvg utT3icLhWJSPTMol4tTQUC5BuNL1EJxB0rHs1SLylv/kYd8fkwJc6hU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:05 2025 by rpki-client