$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer File: C69451771D2C519C2269EA17115B3E600E9CF809.cer (raw, json) Hash identifier: EACwVn6hCJcmic8EgU9lh5N2mjNZs7lTouvnJ+9XgxA= Subject key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4D2939EEE6CA393F23E84325919F17B9760F1912 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 23 Aug 2025 05:42:04 +0000 Certificate not after: Sat 22 Aug 2026 05:47:04 +0000 Subordinate resources: IP: 160.25.46.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:29:39:ee:e6:ca:39:3f:23:e8:43:25:91:9f:17:b9:76:0f:19:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 23 05:42:04 2025 GMT Not After : Aug 22 05:47:04 2026 GMT Subject: CN=C69451771D2C519C2269EA17115B3E600E9CF809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:d6:cb:f9:0a:2e:69:db:6b:b1:9b:86:31: 92:2f:d0:7d:c4:85:70:0f:13:0d:ba:75:65:3e:48: c1:1d:c8:0c:34:3d:2f:3b:3a:f0:65:29:b0:ed:4e: d3:90:15:cb:9f:08:19:79:0d:51:1f:72:0b:57:bc: f4:86:1f:f3:87:3c:98:61:d5:1e:fd:bf:34:d5:56: fb:7c:70:4c:ed:0b:99:f1:71:5e:be:56:a9:19:b0: 1e:b2:6f:2c:e5:64:29:95:59:cf:bb:24:e9:0c:2a: ea:13:c4:46:f5:82:9b:45:ce:d3:3c:5f:67:0b:d8: ff:35:79:e4:30:b6:d5:11:86:a2:60:c2:69:e5:ba: 8a:88:08:82:ac:ed:f5:6e:a6:45:a0:fa:3f:a4:46: f3:b5:ca:44:49:72:18:97:a9:94:35:7d:57:b7:1c: 86:d5:2e:b0:31:84:4e:bb:74:11:db:b6:fc:32:32: 69:b3:1b:22:42:be:a5:62:0c:9a:91:b4:e4:fd:05: 13:4a:66:67:7a:10:11:5d:d4:b7:28:fd:00:0c:99: e7:9a:4a:f5:1d:cd:d0:77:01:0a:0b:66:aa:51:d4: 91:77:99:b0:41:1e:ad:5b:29:40:19:41:b2:51:71: db:f4:f9:b2:8e:f1:00:1d:0d:a8:19:cb:b3:07:1c: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.46.0/23 Signature Algorithm: sha256WithRSAEncryption 41:e5:aa:da:0b:0d:b1:1d:a5:39:ff:b9:fe:26:cb:ce:83:31: cb:26:70:b1:45:13:bc:88:bf:13:cb:1d:7c:9a:df:b4:b7:2c: 34:ba:56:5a:23:24:e4:7d:15:e0:d3:9e:ac:44:79:9e:26:bd: 27:b6:e2:3c:d4:4f:d1:6a:24:0d:5e:87:eb:18:78:6b:51:7b: 77:42:37:96:9c:6a:04:fd:97:c1:19:b9:d2:22:55:ff:37:bb: fa:7f:cc:fe:c6:45:03:c9:ec:91:33:34:c3:41:0a:52:82:69: e1:f7:c9:62:72:6b:c1:32:fc:45:5a:93:0f:be:46:70:cc:af: 19:69:be:0c:5d:8c:10:f5:99:29:ec:4b:5b:1d:99:9c:2d:26: 5e:7f:0f:62:df:7f:5c:ec:0f:c9:02:39:4e:fa:67:0b:30:4d: e7:8a:b8:70:26:68:2a:6f:d3:45:20:dd:52:f0:94:c0:28:58: 34:bf:23:62:02:d4:5a:6a:dd:57:08:d8:b4:f9:f5:46:60:d2: 5f:7e:11:7a:c2:c1:8c:d1:46:98:33:18:bb:c8:a7:5d:b4:71: 4a:f1:b1:e2:f5:69:1b:31:82:a5:02:8d:c4:f4:a9:1a:2a:92: 1a:1e:25:14:2b:aa:bc:72:42:cf:3c:cd:6f:20:2a:99:5b:ff: 4c:b6:a6:a5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTSk57ubKOT8j6EMlkZ8XuXYPGRIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgyMzA1NDIwNFoX DTI2MDgyMjA1NDcwNFowMzExMC8GA1UEAxMoQzY5NDUxNzcxRDJDNTE5QzIyNjlF QTE3MTE1QjNFNjAwRTlDRjgwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8o1sv5Ci5p22uxm4Yxki/QfcSFcA8TDbp1ZT5IwR3IDDQ9Lzs68GUpsO1O 05AVy58IGXkNUR9yC1e89IYf84c8mGHVHv2/NNVW+3xwTO0LmfFxXr5WqRmwHrJv LOVkKZVZz7sk6Qwq6hPERvWCm0XO0zxfZwvY/zV55DC21RGGomDCaeW6iogIgqzt 9W6mRaD6P6RG87XKRElyGJeplDV9V7cchtUusDGETrt0Edu2/DIyabMbIkK+pWIM mpG05P0FE0pmZ3oQEV3Utyj9AAyZ55pK9R3N0HcBCgtmqlHUkXeZsEEerVspQBlB slFx2/T5so7xAB0NqBnLswccyqsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMaUUXcdLFGcImnqFxFbPmAOnPgJMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTE0M2ExOS0yMTdhLTQ5ZWYtOGNiMS01OTMwMTJkMmI3NTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMTQzYTE5 LTIxN2EtNDllZi04Y2IxLTU5MzAxMmQyYjc1OS8wL0M2OTQ1MTc3MUQyQzUxOUMy MjY5RUExNzExNUIzRTYwMEU5Q0Y4MDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGS4wDQYJKoZIhvcNAQELBQADggEBAEHlqtoLDbEdpTn/uf4my86DMcsmcLFF E7yIvxPLHXya37S3LDS6VlojJOR9FeDTnqxEeZ4mvSe24jzUT9FqJA1eh+sYeGtR e3dCN5acagT9l8EZudIiVf83u/p/zP7GRQPJ7JEzNMNBClKCaeH3yWJya8Ey/EVa kw++RnDMrxlpvgxdjBD1mSnsS1sdmZwtJl5/D2Lff1zsD8kCOU76ZwswTeeKuHAm aCpv00Ug3VLwlMAoWDS/I2IC1Fpq3VcI2LT59UZg0l9+EXrCwYzRRpgzGLvIp120 cUrxseL1aRsxgqUCjcT0qRoqkhoeJRQrqrxyQs88zW8gKplb/0y2pqU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:09 2025 by rpki-client