$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer (raw, json) Hash identifier: nrnFuUt0GGyWJLMGZEA/sdADfTIaD8Gt8R2uK2ZfXCQ= Subject key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 485DF88ABAFB9FC8F9E61D2F566E0744565425DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft caRepository: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 18:34:57 +0000 Certificate not after: Tue 22 Sep 2026 18:39:57 +0000 Subordinate resources: IP: 2001:df4:6dc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5d:f8:8a:ba:fb:9f:c8:f9:e6:1d:2f:56:6e:07:44:56:54:25:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 23 18:34:57 2025 GMT Not After : Sep 22 18:39:57 2026 GMT Subject: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:8f:9e:65:4d:e7:1b:38:7b:e8:74:93:07: 98:3b:9e:94:13:be:4f:f6:d9:a4:99:99:09:0f:27: 16:39:82:bb:a3:d4:c4:db:d0:3a:64:1f:ad:5d:ef: 1a:3e:5d:4c:6d:99:49:c2:5a:a3:f9:b9:c7:eb:9d: 23:84:dd:72:17:4d:27:b7:83:cb:92:cf:83:1d:e3: cd:c2:c9:d2:ce:eb:a6:99:d3:cf:91:5d:81:fe:d0: d1:6f:1c:74:e7:5c:ee:9d:ea:e8:36:6a:1c:9a:db: f8:2a:9d:48:bc:be:7d:95:55:a8:4e:49:48:11:54: 30:ba:8c:1e:fc:85:12:97:8a:d2:3a:d2:80:fc:bb: 64:90:99:f3:e2:49:08:d0:c9:c9:10:54:2a:89:60: 01:e5:3c:4c:b8:1c:6d:bc:41:74:06:f6:2e:0f:d0: a4:50:a3:1a:d0:01:f8:d4:16:22:a5:cd:a1:8e:d6: 72:f4:46:bc:78:4a:07:4f:fa:58:57:d2:5f:28:95: 47:3a:90:eb:ff:69:bd:6d:60:40:0a:e4:f1:6f:4d: f0:0c:a6:af:ec:87:4c:21:86:74:ee:34:24:6f:85: 63:e7:83:64:ba:34:4f:b9:de:9b:0a:cd:6e:61:55: 2b:a2:e0:ea:ad:a2:d1:f1:b0:e9:2e:06:be:7a:ca: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:6dc0::/48 Signature Algorithm: sha256WithRSAEncryption 27:63:3e:53:3c:f8:6b:d3:72:2b:c2:5f:ec:b2:52:92:01:0f: 9e:7f:dc:9c:56:96:8e:2e:83:4a:75:e1:0a:22:3b:b8:9e:5d: 68:84:ce:82:34:2c:4b:43:ee:83:86:29:e4:33:ef:0e:2d:77: c3:4f:db:9e:c3:f7:d7:a0:c2:47:99:3e:16:9d:4b:51:55:b6: 74:d3:41:2f:34:27:8d:b6:83:de:a7:18:fd:13:a6:a9:b3:08: b0:d5:81:07:b7:5d:4e:a2:c0:f8:7c:7b:35:c4:d1:64:6d:22: be:22:bc:47:9d:40:45:0a:08:49:9a:63:dc:1e:9b:d2:ad:29: 86:15:bd:e7:2a:de:fd:2b:8f:e0:eb:d3:07:f2:95:10:2c:ab: b9:1d:1a:5c:79:ea:17:5e:a0:11:97:53:3f:fd:78:01:1a:3a: b7:6d:5e:c9:78:95:a0:bb:b9:54:84:bf:ff:d5:b5:7e:f8:3a: 1f:ce:9a:63:24:e2:46:83:85:51:15:99:69:30:6b:d4:c9:03: 3c:ef:83:d6:4e:22:82:f6:db:33:f5:bc:5c:62:81:99:a0:1c: 20:d8:41:03:7a:ff:01:3e:15:62:36:23:a8:c8:ac:85:78:01: 38:72:ad:e8:b9:a2:d6:da:41:2f:63:42:0d:bb:a6:30:ec:81: e9:df:5c:d6 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUSF34irr7n8j55h0vVm4HRFZUJd4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMzE4MzQ1N1oX DTI2MDkyMjE4Mzk1N1owMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRB QUMyOEVDNkI1MTFCMzlEQUUzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcQj55lTecbOHvodJMHmDuelBO+T/bZpJmZCQ8nFjmCu6PUxNvQOmQfrV3v Gj5dTG2ZScJao/m5x+udI4TdchdNJ7eDy5LPgx3jzcLJ0s7rppnTz5Fdgf7Q0W8c dOdc7p3q6DZqHJrb+CqdSLy+fZVVqE5JSBFUMLqMHvyFEpeK0jrSgPy7ZJCZ8+JJ CNDJyRBUKolgAeU8TLgcbbxBdAb2Lg/QpFCjGtAB+NQWIqXNoY7WcvRGvHhKB0/6 WFfSXyiVRzqQ6/9pvW1gQArk8W9N8Aymr+yHTCGGdO40JG+FY+eDZLo0T7nemwrN bmFVK6Lg6q2i0fGw6S4GvnrKSbUCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIkg62kGWMATx7Sqwo7GtRGzna4+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMzk2Mzg4 LTJkNmItNDc2ZS05NjNkLTFjYzM4MTM3NGIxYy8xLzg5MjBFQjY5MDY1OEMwMTND N0I0QUFDMjhFQzZCNTExQjM5REFFM0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30bcAwDQYJKoZIhvcNAQELBQADggEBACdjPlM8+GvTcivCX+yyUpIBD55/ 3JxWlo4ug0p14QoiO7ieXWiEzoI0LEtD7oOGKeQz7w4td8NP257D99egwkeZPhad S1FVtnTTQS80J422g96nGP0TpqmzCLDVgQe3XU6iwPh8ezXE0WRtIr4ivEedQEUK CEmaY9wem9KtKYYVvecq3v0rj+Dr0wfylRAsq7kdGlx56hdeoBGXUz/9eAEaOrdt Xsl4laC7uVSEv//VtX74Oh/OmmMk4kaDhVEVmWkwa9TJAzzvg9ZOIoL22zP1vFxi gZmgHCDYQQN6/wE+FWI2I6jIrIV4AThyrei5otbaQS9jQg27pjDsgenfXNY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:56:27 2025 by rpki-client