$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer (raw, json) Hash identifier: 9A3oK0pcavJYq+oRzU1h65Qx0MRSAo3cmJdEyp8xqaA= Subject key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 70A3E33E78E31DD486417B8D4800ADE74D34FC93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft caRepository: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 20:15:54 +0000 Certificate not after: Tue 16 Jun 2026 20:20:54 +0000 Subordinate resources: IP: 160.25.45.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a3:e3:3e:78:e3:1d:d4:86:41:7b:8d:48:00:ad:e7:4d:34:fc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 17 20:15:54 2025 GMT Not After : Jun 16 20:20:54 2026 GMT Subject: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:5a:fa:a4:3e:d9:29:db:a9:28:fa:e1:8e: 94:a4:7d:c9:57:d8:5d:68:d8:a8:ab:55:1e:a5:a1: 0f:f7:68:7d:20:61:62:9b:db:a7:d6:42:a7:3b:28: fb:03:73:3d:b3:b0:89:c3:0a:e4:ec:39:92:10:48: b7:44:19:70:6e:60:6f:8c:35:cb:79:07:5f:ce:30: c6:85:b5:0b:d8:9a:69:45:31:bb:2b:f3:00:e1:0d: b2:31:5c:c5:22:53:c4:09:17:60:fd:79:21:50:b8: 60:b6:9f:8a:c4:3b:94:db:a6:19:a4:60:bf:b6:ae: ef:3b:cb:d4:bb:9c:a7:4f:7d:cb:f6:8d:24:f4:48: 85:38:f4:fd:77:65:bd:de:ea:68:68:51:74:db:bd: ac:2e:30:9e:c7:01:d5:b3:bb:aa:ba:86:ca:1d:f6: 07:96:cc:5f:5f:6b:38:c2:b6:ad:74:43:d8:dd:e6: 29:07:d5:20:69:31:38:84:1f:7c:38:a4:e3:46:74: f7:12:c0:26:35:10:12:4f:23:6f:d8:73:e8:88:d7: 13:3a:f6:68:61:f1:fb:07:6b:65:d3:48:7d:6d:64: e8:ef:93:75:3b:36:7e:66:ad:09:89:74:75:31:43: c4:ac:60:5c:b2:6e:fa:55:0a:64:09:5c:7f:8c:8f: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.45.0/24 Signature Algorithm: sha256WithRSAEncryption 17:c6:f6:48:b8:61:cc:51:89:14:7a:f5:ac:26:6c:4c:dd:d1: 99:88:05:91:6e:59:3d:f4:4c:40:9d:53:bc:67:50:fd:25:67: 9a:ef:e3:7e:af:52:81:fb:f2:cd:60:50:ac:5c:50:2d:3b:d3: c3:ee:89:18:55:d6:6e:f3:5a:75:df:37:0f:12:43:a9:19:4a: fc:c1:42:87:b2:9c:5d:3c:80:62:4d:09:82:52:2d:47:aa:aa: 3a:74:65:bb:20:76:6e:7d:fb:b0:e2:be:19:1e:8e:7c:fe:7a: 29:89:51:b6:46:28:da:2d:70:36:19:94:15:0b:05:6f:09:0a: 28:58:a2:5a:34:57:df:22:1c:bc:bb:00:38:25:4e:f8:ed:78: 09:7e:e6:ea:44:62:36:c4:0a:95:2e:32:4f:f0:0b:6d:bd:a8: 80:4e:a1:ef:5e:0c:c8:83:a2:18:f1:3a:4e:47:ba:4b:a0:a3: d1:79:43:cd:25:40:22:0a:c0:f0:a8:a9:5d:e8:1a:dc:5b:6e: 2b:97:e3:c6:43:ce:3e:ed:36:e3:24:fc:f1:2b:db:ad:d6:77: 6e:27:b1:90:ae:58:2d:f9:26:50:51:74:0e:f4:fd:c3:88:78: 58:3e:5c:23:cf:d1:be:83:29:50:0d:c0:fc:d5:df:4f:12:8f: 00:57:72:4b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcKPjPnjjHdSGQXuNSACt5000/JMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxNzIwMTU1NFoX DTI2MDYxNjIwMjA1NFowMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcx MDVFNEJCMUJCMjM2MDFERDFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4dWvqkPtkp26ko+uGOlKR9yVfYXWjYqKtVHqWhD/dofSBhYpvbp9ZCpzso +wNzPbOwicMK5Ow5khBIt0QZcG5gb4w1y3kHX84wxoW1C9iaaUUxuyvzAOENsjFc xSJTxAkXYP15IVC4YLafisQ7lNumGaRgv7au7zvL1Lucp099y/aNJPRIhTj0/Xdl vd7qaGhRdNu9rC4wnscB1bO7qrqGyh32B5bMX19rOMK2rXRD2N3mKQfVIGkxOIQf fDik40Z09xLAJjUQEk8jb9hz6IjXEzr2aGHx+wdrZdNIfW1k6O+TdTs2fmatCYl0 dTFDxKxgXLJu+lUKZAlcf4yPc2kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO7Bp78tldC6/jcQXkuxuyNgHdHbMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzNjU2MWQ0 LTIzYzgtNGM5Yi04OTBlLTRmMjYzMmU1MmM5Ny8wL0VFQzFBN0JGMkQ5NUQwQkFG RTM3MTA1RTRCQjFCQjIzNjAxREQxREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGS0wDQYJKoZIhvcNAQELBQADggEBABfG9ki4YcxRiRR69awmbEzd0ZmIBZFu WT30TECdU7xnUP0lZ5rv436vUoH78s1gUKxcUC0708PuiRhV1m7zWnXfNw8SQ6kZ SvzBQoeynF08gGJNCYJSLUeqqjp0Zbsgdm59+7Divhkejnz+eimJUbZGKNotcDYZ lBULBW8JCihYolo0V98iHLy7ADglTvjteAl+5upEYjbECpUuMk/wC229qIBOoe9e DMiDohjxOk5Hukugo9F5Q80lQCIKwPCoqV3oGtxbbiuX48ZDzj7tNuMk/PEr263W d24nsZCuWC35JlBRdA70/cOIeFg+XCPP0b6DKVANwPzV308SjwBXcks= -----END CERTIFICATE-----Generated at Sun Jun 29 21:44:06 2025 by rpki-client