$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer (raw, json) Hash identifier: P9y29VriaSEaMKRX+3ObNXLi/LAzoBSnyjsWt1MwILQ= Subject key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3C4CA6864057DCA6BC267FBA4654DF10EE9AAEC2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft caRepository: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 17:31:20 +0000 Certificate not after: Fri 05 Jun 2026 17:36:20 +0000 Subordinate resources: IP: 157.66.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4c:a6:86:40:57:dc:a6:bc:26:7f:ba:46:54:df:10:ee:9a:ae:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 6 17:31:20 2025 GMT Not After : Jun 5 17:36:20 2026 GMT Subject: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:66:02:45:11:70:eb:8a:91:3d:a7:b6:5b: 83:46:b4:78:4f:f7:4b:7c:ab:8c:3e:a9:a9:16:2f: 77:e4:6e:1e:e7:d4:f8:e7:97:23:c2:ba:a6:8b:d1: 2d:7f:57:bc:3a:33:27:8e:20:42:2f:e3:4f:20:78: 5f:4a:7f:4c:f6:45:5b:4f:82:ba:03:1d:6e:37:3c: 57:c1:ee:32:58:62:df:6f:28:99:8e:92:72:3d:4f: 47:00:b6:c7:f5:73:1a:ae:59:12:40:f8:41:a5:a0: 48:2d:c3:bd:f5:de:ac:98:9d:f2:36:a0:b8:a4:7d: 18:b6:50:f4:52:4f:cb:c3:01:9f:e3:37:38:cb:43: 36:6e:89:1c:bb:de:67:bf:07:cf:41:79:76:6a:15: 90:56:b0:9c:bf:a3:9c:f5:ae:8a:f8:2f:3c:cd:2a: 6a:b1:ee:35:62:67:b3:e2:ae:a3:7a:72:2a:33:a2: c7:33:b1:c4:37:08:f8:06:08:0b:7d:f6:28:e5:6e: 39:b1:e5:9c:84:09:49:b9:80:56:95:0b:25:a9:76: a8:d0:86:9f:71:fa:8b:bc:9c:97:26:7d:61:de:53: 17:79:5f:47:2a:a3:70:7a:57:e8:e5:e6:03:f3:87: 51:42:59:ce:48:e7:c2:54:3f:2c:b1:15:02:af:b9: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.250.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:e8:ae:00:da:f4:57:2a:f0:bf:df:6e:b1:9c:8e:25:3b:c1: a3:27:ee:27:0d:0c:4b:77:84:77:e7:c2:57:56:7a:56:21:ce: 5a:a5:47:de:fa:92:eb:eb:f6:8c:1d:a1:d0:45:26:d0:64:da: cb:e3:3e:05:1f:11:c1:ae:23:c6:ba:12:46:0b:57:70:43:f4: 26:50:60:be:01:38:99:fb:53:6b:59:33:80:1f:e9:55:cc:26: c5:b3:71:01:2e:2b:d3:b3:e2:e6:c0:31:d6:cf:ff:7e:7c:fc: e1:b6:9e:20:81:ed:76:be:6f:69:36:8e:90:11:8c:e6:95:7e: 1f:a5:2c:e3:93:5f:8b:fa:39:9c:af:fb:7d:0b:25:cc:66:62: f6:fd:34:7f:aa:bd:1f:94:f1:73:11:01:c4:97:55:2e:ed:57: a3:34:3d:aa:96:b8:af:eb:3a:b4:f4:81:25:57:9a:09:59:1a: 99:91:d2:cc:2c:3f:dd:bb:b1:33:b5:a9:87:95:f3:a5:41:2e: 2f:ba:7e:b0:16:73:2c:76:1b:bd:fb:78:01:2e:49:6d:de:3f: 19:2c:e7:0c:a1:85:40:db:22:ea:aa:51:13:60:c0:91:20:80: 04:81:eb:e7:49:bc:cb:e5:ab:0d:01:23:d6:72:61:0c:d5:8a: 26:6b:99:ae -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPEymhkBX3Ka8Jn+6RlTfEO6arsIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYwNjE3MzEyMFoX DTI2MDYwNTE3MzYyMFowMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3 NEFEQThFOTNGNDFFRDRCNUY4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwTZgJFEXDripE9p7Zbg0a0eE/3S3yrjD6pqRYvd+RuHufU+OeXI8K6povR LX9XvDozJ44gQi/jTyB4X0p/TPZFW0+CugMdbjc8V8HuMlhi328omY6Scj1PRwC2 x/VzGq5ZEkD4QaWgSC3DvfXerJid8jaguKR9GLZQ9FJPy8MBn+M3OMtDNm6JHLve Z78Hz0F5dmoVkFawnL+jnPWuivgvPM0qarHuNWJns+Kuo3pyKjOixzOxxDcI+AYI C332KOVuObHlnIQJSbmAVpULJal2qNCGn3H6i7yclyZ9Yd5TF3lfRyqjcHpX6OXm A/OHUUJZzkjnwlQ/LLEVAq+5f3sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNDdVAR4Gr7jz2p0rajpP0HtS1+FMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMmJmODYz LWExZjAtNDJkMC05ZTNhLTNmOWZmNjlhMmQxNS8wL0QwREQ1NDA0NzgxQUJFRTND RjZBNzRBREE4RTkzRjQxRUQ0QjVGODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQvowDQYJKoZIhvcNAQELBQADggEBAI3orgDa9Fcq8L/fbrGcjiU7waMn7icN DEt3hHfnwldWelYhzlqlR976kuvr9owdodBFJtBk2svjPgUfEcGuI8a6EkYLV3BD 9CZQYL4BOJn7U2tZM4Af6VXMJsWzcQEuK9Oz4ubAMdbP/358/OG2niCB7Xa+b2k2 jpARjOaVfh+lLOOTX4v6OZyv+30LJcxmYvb9NH+qvR+U8XMRAcSXVS7tV6M0PaqW uK/rOrT0gSVXmglZGpmR0swsP927sTO1qYeV86VBLi+6frAWcyx2G737eAEuSW3e Pxks5wyhhUDbIuqqURNgwJEggASB6+dJvMvlqw0BI9ZyYQzViiZrma4= -----END CERTIFICATE-----Generated at Tue Jul 1 05:40:54 2025 by rpki-client