$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer File: D5265466AE0186702AF52D11170A29AC32F54EF5.cer (raw, json) Hash identifier: dovmE3M8nPC5K+gew42/COc2YMz0ZIfU3uzY5wlPxgg= Subject key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6092378C29DE9D1DA01BF1C106D9BD49C75E06FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft caRepository: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 May 2025 14:01:40 +0000 Certificate not after: Thu 07 May 2026 14:06:40 +0000 Subordinate resources: IP: 157.15.0.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:92:37:8c:29:de:9d:1d:a0:1b:f1:c1:06:d9:bd:49:c7:5e:06:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 8 14:01:40 2025 GMT Not After : May 7 14:06:40 2026 GMT Subject: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:50:1f:56:72:32:ce:33:b2:bb:a0:8b:2f: 53:4d:35:62:6b:f4:64:58:e1:5f:a1:72:71:37:85: 2d:4c:b2:1a:b9:9e:41:da:06:5d:85:36:03:2e:20: 75:ed:f4:a9:5d:82:d8:cf:a3:7a:48:ec:f2:d3:9f: 1c:02:d0:3a:d6:41:59:79:19:ae:60:70:9e:1a:de: 93:86:10:a7:15:dd:14:19:6a:26:aa:d2:41:4b:0b: 3d:b0:dc:20:9f:cb:9d:d6:6d:1a:c9:9a:e8:1f:2d: 91:94:ef:b5:75:f4:8d:22:8e:61:6f:8e:c7:bf:5a: 46:6d:b7:6d:9c:96:db:b3:3e:63:3c:d0:5b:26:5a: 02:8d:fb:24:d1:65:c1:e1:52:e9:63:ff:45:c7:88: f1:c4:66:f2:0b:68:e3:e9:88:fb:09:60:34:6c:a2: 9c:e0:b7:b0:4b:a6:81:96:7e:85:9d:23:91:8e:c6: d9:86:bb:1c:9f:af:e6:f0:11:24:29:5c:90:70:0c: 2d:f5:ca:27:73:2d:10:23:bd:bc:a2:b9:23:fa:5a: b9:52:43:28:14:1c:b8:72:61:4b:5a:a8:d7:b2:e3: 3e:4c:1b:9b:22:c8:53:53:89:7a:d4:a0:ff:50:68: c9:65:94:92:99:4e:9b:dc:c8:09:70:b5:67:bc:4e: 51:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.0.0/23 Signature Algorithm: sha256WithRSAEncryption 91:cd:d1:15:7e:e5:83:d3:09:06:a0:17:61:72:79:79:83:5d: c7:d8:5f:9d:6f:e3:9a:77:a3:7d:22:50:fe:21:2f:5b:36:e4: 4a:9b:b4:ef:a4:c1:a0:13:f6:bb:72:3e:dd:33:a4:0e:f6:07: 71:74:93:c1:2a:7f:b5:7d:4f:61:45:59:4a:95:c7:fc:84:f9: 03:04:a5:10:b8:29:33:1d:36:12:1d:ab:6f:20:b7:b3:9b:ac: f3:55:f4:16:f8:e3:f7:e7:72:ee:79:f8:fa:dc:78:4b:70:d4: 6e:12:92:df:33:56:7b:2f:84:1a:85:8e:db:de:a6:98:47:83: 51:9b:8a:7f:d9:b8:08:ac:5a:d1:1b:3e:fc:60:22:1f:d6:3e: 9d:81:54:c6:e4:9c:2d:3e:32:df:7e:d1:78:39:63:f4:78:e6: 4c:ab:f0:51:c1:68:c4:5a:10:44:d6:a1:be:b1:ac:82:28:d0: 4f:7c:d1:58:be:80:05:56:0e:17:e5:45:3e:05:1b:1d:24:be: ba:ac:79:02:c6:1c:2c:d5:d9:15:ff:61:e1:b3:a2:9c:9b:e1: 6f:ef:28:29:0f:97:83:4a:b1:54:05:2b:98:23:6b:8f:49:bf: 61:eb:5c:95:b7:69:26:75:1b:cc:70:e8:f8:a5:c1:e7:bd:56: 0f:17:39:10 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYJI3jCnenR2gG/HBBtm9ScdeBv8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUwODE0MDE0MFoX DTI2MDUwNzE0MDY0MFowMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUy RDExMTcwQTI5QUMzMkY1NEVGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCpUB9WcjLOM7K7oIsvU001Ymv0ZFjhX6FycTeFLUyyGrmeQdoGXYU2Ay4g de30qV2C2M+jekjs8tOfHALQOtZBWXkZrmBwnhrek4YQpxXdFBlqJqrSQUsLPbDc IJ/LndZtGsma6B8tkZTvtXX0jSKOYW+Ox79aRm23bZyW27M+YzzQWyZaAo37JNFl weFS6WP/RceI8cRm8gto4+mI+wlgNGyinOC3sEumgZZ+hZ0jkY7G2Ya7HJ+v5vAR JClckHAMLfXKJ3MtECO9vKK5I/pauVJDKBQcuHJhS1qo17LjPkwbmyLIU1OJetSg /1BoyWWUkplOm9zICXC1Z7xOUX8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNUmVGauAYZwKvUtERcKKawy9U71MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NjEzN2Fl LTJlZmItNDNjMC1iZGI3LTQzZjVkOTM5Y2YwYy8wL0Q1MjY1NDY2QUUwMTg2NzAy QUY1MkQxMTE3MEEyOUFDMzJGNTRFRjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdDwAwDQYJKoZIhvcNAQELBQADggEBAJHN0RV+5YPTCQagF2FyeXmDXcfYX51v 45p3o30iUP4hL1s25EqbtO+kwaAT9rtyPt0zpA72B3F0k8Eqf7V9T2FFWUqVx/yE +QMEpRC4KTMdNhIdq28gt7ObrPNV9Bb44/fncu55+PrceEtw1G4Skt8zVnsvhBqF jtvepphHg1Gbin/ZuAisWtEbPvxgIh/WPp2BVMbknC0+Mt9+0Xg5Y/R45kyr8FHB aMRaEETWob6xrIIo0E980Vi+gAVWDhflRT4FGx0kvrqseQLGHCzV2RX/YeGzopyb 4W/vKCkPl4NKsVQFK5gja49Jv2HrXJW3aSZ1G8xw6Pilwee9Vg8XORA= -----END CERTIFICATE-----Generated at Thu May 8 23:57:47 2025 by rpki-client