$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer (raw, json) Hash identifier: jNxZJGc8ehtBozfLPrmnwYp2Z6wVVPY8UrVNH47MmWg= Subject key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 45C8F8A686232E2CC32CCBA67F80D8833A91B277 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft caRepository: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Jun 2025 22:23:27 +0000 Certificate not after: Thu 25 Jun 2026 22:28:27 +0000 Subordinate resources: IP: 160.25.242.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c8:f8:a6:86:23:2e:2c:c3:2c:cb:a6:7f:80:d8:83:3a:91:b2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 26 22:23:27 2025 GMT Not After : Jun 25 22:28:27 2026 GMT Subject: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:b7:3a:d6:58:d0:95:56:f4:f4:40:11:35: e0:34:48:a3:9e:aa:75:81:09:67:da:f5:7c:06:4e: 7b:52:7d:04:12:d1:4f:e6:e3:ab:d9:d0:a7:0a:b4: ef:bc:14:12:16:17:b7:e6:6e:ad:d7:fa:88:10:20: 69:70:c4:48:a1:b6:57:cb:e5:6d:6e:ef:10:f7:77: 0e:d4:0d:84:48:0d:2d:3c:03:12:31:b5:65:18:52: 77:b4:05:2c:0f:e7:8f:a2:62:c0:a8:58:f3:96:1e: 0d:27:ba:3b:62:91:b0:92:26:c0:10:39:0c:fb:bc: 49:33:b8:d5:02:75:1c:e5:8e:08:03:c4:37:8e:12: 6f:37:cf:26:14:6d:2c:8f:74:36:62:3f:49:b3:e6: 7a:8a:0b:e7:a2:93:a3:71:36:e4:70:77:98:91:09: 6f:e3:4c:18:ef:77:f3:0d:72:92:49:c1:15:1c:7f: d2:b6:30:dc:3d:6d:e5:ff:1b:27:72:f6:f6:aa:f0: 07:e5:76:0d:a4:5c:f9:eb:a6:69:d9:52:c9:61:dd: 17:da:31:0f:8a:dd:ab:59:5d:07:0c:60:c3:88:a3: 26:3f:91:35:b3:c0:bd:2b:16:64:96:2a:27:c4:b9: cb:7e:d7:0f:84:24:8b:89:3d:8c:ca:03:a1:8f:a4: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.242.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:43:32:05:00:e3:fa:3b:99:18:03:5e:a3:4c:b1:4c:90:dc: 1c:18:81:00:18:7f:c1:14:b8:22:11:9a:86:ec:f1:0d:2d:46: d6:87:86:61:c6:d6:50:c0:24:75:75:86:5d:c1:40:19:17:45: 0e:7b:99:53:8c:08:2f:d3:22:11:dd:ca:17:08:09:0e:12:2a: 33:4d:b6:23:43:de:6a:47:6e:04:9d:0c:54:70:79:11:1b:9d: 95:e6:23:b5:85:e3:7f:61:72:44:cc:82:7d:a4:45:bc:c7:7b: 69:36:a6:e3:07:6c:7c:90:24:d3:e9:11:0f:95:8e:d3:c0:7e: 6e:22:df:ee:a9:d9:21:62:c3:13:76:a3:41:1c:01:5f:be:9e: 7d:ad:9e:35:88:a3:fb:47:16:bc:fd:12:65:df:24:21:f2:ad: 71:05:23:01:5a:81:5f:30:c3:9e:90:78:c7:aa:b8:f8:6e:0a: 1b:31:13:e4:58:95:0f:1d:c6:ab:ee:c1:15:eb:ee:99:83:ca: 0a:1b:1c:46:00:2a:5c:63:cf:3e:bc:35:6a:07:16:1c:57:a5: 3e:96:b3:ef:82:2b:a2:89:bc:9f:5c:02:81:2d:0b:ee:69:04: e0:a2:31:a2:5a:9b:64:0e:8d:04:63:46:4a:d6:87:44:8e:ab: f2:58:58:c2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURcj4poYjLizDLMumf4DYgzqRsncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYyNjIyMjMyN1oX DTI2MDYyNTIyMjgyN1owMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMz MkZENUJBOTRBODUwMTkyRjU0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHDtzrWWNCVVvT0QBE14DRIo56qdYEJZ9r1fAZOe1J9BBLRT+bjq9nQpwq0 77wUEhYXt+Zurdf6iBAgaXDESKG2V8vlbW7vEPd3DtQNhEgNLTwDEjG1ZRhSd7QF LA/nj6JiwKhY85YeDSe6O2KRsJImwBA5DPu8STO41QJ1HOWOCAPEN44SbzfPJhRt LI90NmI/SbPmeooL56KTo3E25HB3mJEJb+NMGO938w1ykknBFRx/0rYw3D1t5f8b J3L29qrwB+V2DaRc+eumadlSyWHdF9oxD4rdq1ldBwxgw4ijJj+RNbPAvSsWZJYq J8S5y37XD4Qki4k9jMoDoY+klpsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOnGkMUem/G1l4My/VupSoUBkvVMMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwNTM4OGY0 LTEwN2ItNDRhOS05ZDhmLTE2MDNmZWNmZGVlOS8wL0U5QzY5MEM1MUU5QkYxQjU5 NzgzMzJGRDVCQTk0QTg1MDE5MkY1NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGfIwDQYJKoZIhvcNAQELBQADggEBAHtDMgUA4/o7mRgDXqNMsUyQ3BwYgQAY f8EUuCIRmobs8Q0tRtaHhmHG1lDAJHV1hl3BQBkXRQ57mVOMCC/TIhHdyhcICQ4S KjNNtiND3mpHbgSdDFRweREbnZXmI7WF439hckTMgn2kRbzHe2k2puMHbHyQJNPp EQ+VjtPAfm4i3+6p2SFiwxN2o0EcAV++nn2tnjWIo/tHFrz9EmXfJCHyrXEFIwFa gV8ww56QeMequPhuChsxE+RYlQ8dxqvuwRXr7pmDygobHEYAKlxjzz68NWoHFhxX pT6Ws++CK6KJvJ9cAoEtC+5pBOCiMaJam2QOjQRjRkrWh0SOq/JYWMI= -----END CERTIFICATE-----Generated at Mon Jun 30 05:28:05 2025 by rpki-client