$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer (raw, json) Hash identifier: tuh8jB870xH1PGCvCJrUqTfinm6kl7N9/woj1eXb6X8= Subject key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 33A7DC73F3BF1B5E992A9CD5F92B468ACC61AD49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft caRepository: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Aug 2025 18:12:55 +0000 Certificate not after: Fri 21 Aug 2026 18:17:55 +0000 Subordinate resources: IP: 160.19.178.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a7:dc:73:f3:bf:1b:5e:99:2a:9c:d5:f9:2b:46:8a:cc:61:ad:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 22 18:12:55 2025 GMT Not After : Aug 21 18:17:55 2026 GMT Subject: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:8f:2b:7e:25:73:f5:25:cb:75:e4:b0:56: 17:99:02:cc:31:6c:0b:5d:1f:84:62:7e:9b:df:a1: 16:9c:a8:3b:10:9c:9e:40:15:89:50:89:24:b9:45: 8d:36:30:51:f4:9f:49:9e:4a:a3:44:8a:e2:f8:d3: 49:96:15:59:26:66:dc:10:83:8e:a8:ef:bb:7e:6d: be:ca:44:13:54:f1:bd:ae:43:55:50:ff:8f:6b:72: 8f:d4:58:d2:f7:9f:ea:ea:4b:9c:d4:05:6d:68:b2: 0c:37:3d:ab:b4:58:b4:25:5a:3d:e3:83:0e:14:d6: 0d:5d:67:7b:81:1e:b6:aa:56:56:08:a3:e8:45:16: ff:de:1b:8a:32:b4:3e:14:fe:19:a2:3f:ee:ce:a9: d4:a2:20:aa:10:c9:88:6f:dd:6c:61:22:b1:f0:f8: 82:cf:d5:cf:b3:e6:82:89:f3:4c:cc:8d:d9:7a:1c: f3:87:74:dc:df:c9:fd:a9:e3:bc:fc:18:6a:95:64: ba:11:ae:5a:15:9c:20:8a:c6:32:47:67:d0:f4:ba: d5:aa:0d:12:d4:4b:12:b7:d7:d7:34:31:50:8c:ec: a6:52:77:76:24:ef:e9:c5:35:2a:4b:b3:46:c5:83: bb:8e:59:e8:3a:59:b3:ec:c0:9e:f9:dd:b4:66:71: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.178.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:bb:b1:4a:ce:a3:b6:76:5a:4f:e3:44:fd:29:13:dc:c8:e3: de:5f:60:02:e4:e4:4c:b9:5d:6d:20:e9:5c:6b:46:e3:62:42: 33:b6:3e:81:26:fc:f2:51:3f:6f:1d:7e:69:11:4d:3f:34:59: f4:d4:a0:2c:91:f8:e0:ae:2c:77:50:0c:cb:3f:17:d2:14:df: e7:09:93:9f:e3:12:83:3f:5c:55:92:32:7b:5d:4b:5c:06:66: d2:42:72:36:b5:d9:5a:e8:ab:6d:35:c2:cf:15:59:c6:a0:6c: 00:3b:7f:99:97:f7:74:1b:c3:44:e1:92:db:77:a6:be:78:91: f0:0f:b6:a2:38:25:bb:23:0f:b5:68:48:2a:00:6c:d6:07:89: 9d:d9:84:4a:bf:e7:31:e9:fc:31:6b:48:b5:14:f2:08:e9:c5: 55:ad:ad:6c:60:0e:6a:17:a9:08:fe:48:53:62:c1:b1:d2:4b: 2e:5c:13:eb:c0:5e:71:9a:7a:5a:12:7d:ff:e5:00:18:5a:6a: 27:7c:31:16:35:fa:60:4b:44:52:85:f7:52:6f:4a:48:03:04: 24:40:27:44:21:e6:36:65:eb:61:98:7c:c1:62:33:ea:47:c8: 18:5d:57:84:b8:2e:3c:7a:64:e2:b5:6f:ec:32:c0:e4:52:b6: 5a:77:7c:20 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUM6fcc/O/G16ZKpzV+StGisxhrUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgyMjE4MTI1NVoX DTI2MDgyMTE4MTc1NVowMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1 RDRCREJFNTc3NDkyN0MxNEU1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR9jyt+JXP1Jct15LBWF5kCzDFsC10fhGJ+m9+hFpyoOxCcnkAViVCJJLlF jTYwUfSfSZ5Ko0SK4vjTSZYVWSZm3BCDjqjvu35tvspEE1Txva5DVVD/j2tyj9RY 0vef6upLnNQFbWiyDDc9q7RYtCVaPeODDhTWDV1ne4EetqpWVgij6EUW/94bijK0 PhT+GaI/7s6p1KIgqhDJiG/dbGEisfD4gs/Vz7PmgonzTMyN2Xoc84d03N/J/anj vPwYapVkuhGuWhWcIIrGMkdn0PS61aoNEtRLErfX1zQxUIzsplJ3diTv6cU1Kkuz RsWDu45Z6DpZs+zAnvndtGZxzOsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMLVk9HIp/cNRRJdS9vld0knwU5VMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkYjAxMzBk LWNhYTMtNDc2Zi1hZjgxLWJhNzIyMzMwYmUyYy8wL0MyRDU5M0QxQzhBN0Y3MEQ0 NTEyNUQ0QkRCRTU3NzQ5MjdDMTRFNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE7IwDQYJKoZIhvcNAQELBQADggEBAF+7sUrOo7Z2Wk/jRP0pE9zI495fYALk 5Ey5XW0g6VxrRuNiQjO2PoEm/PJRP28dfmkRTT80WfTUoCyR+OCuLHdQDMs/F9IU 3+cJk5/jEoM/XFWSMntdS1wGZtJCcja12Vroq201ws8VWcagbAA7f5mX93Qbw0Th ktt3pr54kfAPtqI4JbsjD7VoSCoAbNYHiZ3ZhEq/5zHp/DFrSLUU8gjpxVWtrWxg DmoXqQj+SFNiwbHSSy5cE+vAXnGaeloSff/lABhaaid8MRY1+mBLRFKF91JvSkgD BCRAJ0Qh5jZl62GYfMFiM+pHyBhdV4S4Ljx6ZOK1b+wywORStlp3fCA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:44:39 2025 by rpki-client