$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer File: 0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer (raw, json) Hash identifier: A3HzN6OsGRUVeMMCI8kYhJnNKs+SjXu4gx8Y4cTHWlo= Subject key identifier: 00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5A821AB73B55AE31C82F46F6CB2C03E840C84F2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:55 +0000 Certificate not after: Sun 02 May 2027 01:08:55 +0000 Subordinate resources: IP: 160.22.187.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:82:1a:b7:3b:55:ae:31:c8:2f:46:f6:cb:2c:03:e8:40:c8:4f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:03:55 2026 GMT Not After : May 2 01:08:55 2027 GMT Subject: CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:bd:a1:49:16:21:f2:73:8d:b3:f3:2d:4a: 73:e4:0c:cd:13:60:f7:30:09:a8:13:1c:18:e9:ed: 0b:f2:00:0c:14:4b:15:36:c7:05:5b:5a:38:1c:65: 9f:15:50:51:17:96:ca:54:a9:91:67:91:f3:0c:da: 6d:bf:92:94:72:49:de:10:a9:ae:53:e2:88:14:9d: 6c:d1:86:cb:9a:32:ce:20:aa:b4:3e:d9:36:2c:b0: f1:0e:84:e2:98:31:d3:b9:5c:41:24:b0:d6:fa:67: ad:41:1e:43:2b:cf:07:01:5f:90:54:f3:a2:00:85: 62:01:c9:0b:97:d2:9d:cf:b1:d0:b2:a5:cb:67:f4: 28:a6:a7:13:3a:77:c9:99:b6:44:02:76:e9:75:6c: f7:64:ac:65:38:cb:52:22:59:f5:4a:28:11:aa:33: cb:e3:b5:74:4e:47:1f:fc:4d:c9:d9:c4:0e:ab:22: 9c:d5:50:46:fd:ed:c5:91:df:92:b2:ea:ab:e7:b9: c2:84:cd:73:db:a7:fc:ed:ea:3c:49:bc:0c:01:0b: 97:93:0a:eb:cb:6f:f2:05:58:ea:2a:22:63:5a:fa: 03:26:05:cc:39:8b:c0:5a:8c:93:a5:7b:c6:f6:23: c0:3d:12:82:58:50:2c:db:ab:e0:39:6b:a4:f7:a9: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.187.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:c1:3b:b4:09:81:d0:0d:4f:f6:3c:c7:41:1f:d1:2e:0f:fa: 20:21:7f:4d:c4:57:2f:5b:8a:cc:07:00:d4:d8:cc:20:10:d4: 5b:ba:ab:da:ef:64:bd:9b:93:8e:6d:0f:82:d7:6b:da:74:2a: 99:f8:bf:0c:92:48:4f:bc:9a:03:1f:0f:3e:9a:3c:5a:78:05: ac:3c:17:11:fe:dc:6e:ed:fc:00:ce:95:c8:75:00:79:f0:94: 25:11:47:82:d9:99:93:b4:dd:f8:b9:8a:6a:d6:1c:51:0f:46: 02:fe:72:64:51:be:dd:82:92:d5:01:63:f2:4f:22:c3:df:39: 87:a1:20:a5:08:f8:1f:c9:b4:d9:5f:d4:01:ed:f6:b8:84:34: f7:3d:88:fb:77:0b:ce:a4:a7:43:7b:bc:a6:74:0f:ea:44:9a: 58:78:e5:8c:69:27:71:d7:96:50:b7:3b:fb:bc:16:95:c1:99: 13:4a:17:49:5e:15:2b:fe:9a:92:76:29:8e:53:06:d4:57:62: 00:12:9e:64:a1:0f:ba:f3:94:3a:aa:32:44:12:c7:f0:56:89: db:54:51:a9:a9:31:d5:b7:0b:f0:4e:9c:a3:91:0f:0f:d3:45: 74:fd:0a:d4:6b:9e:a2:4c:c1:6b:49:11:08:81:ba:4d:ad:c6: cb:b3:c3:91 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWoIatztVrjHIL0b2yywD6EDITywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDM1NVoX DTI3MDUwMjAxMDg1NVowMzExMC8GA1UEAxMoMDA5MkNDNjgxRjZDNkM0RTc3RjNE NDZFRjBEQjMzOTY3MzJDM0ZFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIkpvaFJFiHyc42z8y1Kc+QMzRNg9zAJqBMcGOntC/IADBRLFTbHBVtaOBxl nxVQUReWylSpkWeR8wzabb+SlHJJ3hCprlPiiBSdbNGGy5oyziCqtD7ZNiyw8Q6E 4pgx07lcQSSw1vpnrUEeQyvPBwFfkFTzogCFYgHJC5fSnc+x0LKly2f0KKanEzp3 yZm2RAJ26XVs92SsZTjLUiJZ9UooEaozy+O1dE5HH/xNydnEDqsinNVQRv3txZHf krLqq+e5woTNc9un/O3qPEm8DAELl5MK68tv8gVY6ioiY1r6AyYFzDmLwFqMk6V7 xvYjwD0SglhQLNur4DlrpPepLtECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFACSzGgfbGxOd/PUbvDbM5ZzLD/iMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkOWY5OGYzLTcyZjAtNDAwNi1iZTk5LWI5YTllOGQ5ZDJiZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZDlmOThm My03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC8wMDkyQ0M2ODFGNkM2QzRF NzdGM0Q0NkVGMERCMzM5NjczMkMzRkUyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBa7MA0GCSqGSIb3DQEBCwUAA4IBAQAcwTu0CYHQDU/2PMdBH9EuD/ogIX9N xFcvW4rMBwDU2MwgENRbuqva72S9m5OObQ+C12vadCqZ+L8MkkhPvJoDHw8+mjxa eAWsPBcR/txu7fwAzpXIdQB58JQlEUeC2ZmTtN34uYpq1hxRD0YC/nJkUb7dgpLV AWPyTyLD3zmHoSClCPgfybTZX9QB7fa4hDT3PYj7dwvOpKdDe7ymdA/qRJpYeOWM aSdx15ZQtzv7vBaVwZkTShdJXhUr/pqSdimOUwbUV2IAEp5koQ+685Q6qjJEEsfw VonbVFGpqTHVtwvwTpyjkQ8P00V0/QrUa56iTMFrSREIgbpNrcbLs8OR -----END CERTIFICATE-----Generated at Tue May 12 22:45:44 2026 by rpki-client