$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer (raw, json) Hash identifier: lSo8XWrtKJkADXLRg6i8twtS1qzRUg/CfUxJP68JL4Y= Subject key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C69C1FE69A354F36D85BC86C1DDF0A5D81625D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft caRepository: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Oct 2025 06:03:20 +0000 Certificate not after: Thu 08 Oct 2026 06:08:20 +0000 Subordinate resources: IP: 114.120.0.0/13 IP: 182.0.0.0/12 IP: 202.3.208.0/20 IP: 221.132.192.0/18 IP: 2404:c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:69:c1:fe:69:a3:54:f3:6d:85:bc:86:c1:dd:f0:a5:d8:16:25:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 9 06:03:20 2025 GMT Not After : Oct 8 06:08:20 2026 GMT Subject: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:31:bb:4c:a9:47:a9:52:bf:87:bb:3e:22: ad:c0:d7:1f:c3:a6:aa:3d:87:b2:95:40:3e:30:72: f6:4d:65:54:ce:96:71:2e:d7:6c:bf:b3:f5:59:d5: e0:5e:8c:73:cc:f5:b7:dc:31:17:d2:4c:08:20:6b: fc:15:67:d5:7c:33:7c:d1:85:a6:de:cd:ac:dc:d7: 55:31:68:c7:c5:38:5e:77:05:27:6e:ff:77:8e:b1: a6:c8:c7:2d:4a:63:1c:91:6b:b6:8d:29:38:19:0a: 6c:64:ef:fa:d3:15:73:29:d0:18:4b:ed:6d:d5:d6: 83:74:3e:45:87:1c:d7:a6:c4:21:03:5a:0b:15:13: 8c:ae:12:57:51:ae:1c:c9:5f:74:9f:7f:62:13:fe: 82:60:0f:3d:93:72:bf:42:7d:85:91:83:3e:c3:a7: 1e:04:5c:ae:02:fc:68:fb:9d:2e:a4:0e:30:9e:a6: dc:22:d9:ef:6d:f5:74:ed:65:c2:3a:1c:eb:19:ce: 8e:d9:57:04:18:d5:b9:6e:28:12:c6:6a:48:2f:a2: bc:e7:25:20:25:3a:2b:02:c8:96:6c:75:66:e9:38: 80:ca:2c:3e:94:44:a9:ce:54:00:ae:39:a4:72:82: 6e:0a:25:f6:d3:dd:ce:94:4d:d8:78:03:7a:fc:86: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.120.0.0/13 182.0.0.0/12 202.3.208.0/20 221.132.192.0/18 IPv6: 2404:c0::/32 Signature Algorithm: sha256WithRSAEncryption 40:02:ec:0d:c9:04:1b:75:ce:58:73:25:cf:a9:bd:4b:7d:3a: 5f:02:4e:3d:48:1e:ee:86:9f:b6:37:02:1f:45:6c:42:c0:64: ff:81:88:1b:ea:f8:3b:23:c7:85:96:51:50:28:98:ba:df:c7: 0d:62:70:45:60:e9:19:81:9b:83:b1:d8:d3:02:62:f9:cb:31: 9f:4f:96:b3:64:a6:1e:a4:83:e6:f6:3b:85:5a:06:88:d4:cc: d5:c8:54:d1:12:5b:b3:e6:13:bf:c4:15:5d:07:ff:47:15:5e: d4:4f:52:24:4d:fe:1b:1a:59:1f:79:89:fd:23:99:68:81:c8: ca:73:ce:01:18:5e:e2:1a:f6:c6:38:d8:ef:5e:51:f6:6c:70: 9e:a1:64:7a:45:6f:11:dc:56:3d:d7:20:2e:df:fe:e9:0f:4a: 97:bc:d4:e6:a4:1b:ce:f9:c0:27:ef:4e:ee:dd:53:fc:d1:e1: 1d:64:57:d8:fe:01:4f:63:9b:60:34:dd:27:06:bb:fe:6e:fc: c5:06:e8:f9:40:b0:a7:f6:19:2f:b9:4f:a1:16:17:e6:58:21: 0c:1d:b9:2d:50:7a:a3:90:37:28:bc:da:ad:b1:ed:0d:3c:4a: 11:11:a5:2c:39:0f:59:64:5a:74:71:d6:7a:69:7b:0b:e1:49: 2b:87:98:0b -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUHGnB/mmjVPNthbyGwd3wpdgWJdIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwOTA2MDMyMFoX DTI2MTAwODA2MDgyMFowMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRG NzJBOEM3Qjk3QTE2QjlDOUYzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEMMbtMqUepUr+Huz4ircDXH8Omqj2HspVAPjBy9k1lVM6WcS7XbL+z9VnV 4F6Mc8z1t9wxF9JMCCBr/BVn1XwzfNGFpt7NrNzXVTFox8U4XncFJ27/d46xpsjH LUpjHJFrto0pOBkKbGTv+tMVcynQGEvtbdXWg3Q+RYcc16bEIQNaCxUTjK4SV1Gu HMlfdJ9/YhP+gmAPPZNyv0J9hZGDPsOnHgRcrgL8aPudLqQOMJ6m3CLZ7231dO1l wjoc6xnOjtlXBBjVuW4oEsZqSC+ivOclICU6KwLIlmx1Zuk4gMosPpREqc5UAK45 pHKCbgol9tPdzpRN2HgDevyG3O8CAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGZEK4VjtaWQ7YT3Kox7l6FrnJ86MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRl LWRjN2YtNDU2Mi1hNTFkLWUyZTM4YzM2NzdkMS8wLzY2NDQyQjg1NjNCNUE1OTBF RDg0RjcyQThDN0I5N0ExNkI5QzlGM0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPgYIKwYBBQUHAQcBAf8ELzAtMBwEAgABMBYD AwNyeAMDBLYAAwQEygPQAwQG3YTAMA0EAgACMAcDBQAkBADAMA0GCSqGSIb3DQEB CwUAA4IBAQBAAuwNyQQbdc5YcyXPqb1LfTpfAk49SB7uhp+2NwIfRWxCwGT/gYgb 6vg7I8eFllFQKJi638cNYnBFYOkZgZuDsdjTAmL5yzGfT5azZKYepIPm9juFWgaI 1MzVyFTREluz5hO/xBVdB/9HFV7UT1IkTf4bGlkfeYn9I5logcjKc84BGF7iGvbG ONjvXlH2bHCeoWR6RW8R3FY91yAu3/7pD0qXvNTmpBvO+cAn707u3VP80eEdZFfY /gFPY5tgNN0nBrv+bvzFBuj5QLCn9hkvuU+hFhfmWCEMHbktUHqjkDcovNqtse0N PEoREaUsOQ9ZZFp0cdZ6aXsL4Ukrh5gL -----END CERTIFICATE-----Generated at Mon Oct 20 19:42:25 2025 by rpki-client