$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer (raw, json) Hash identifier: YK+WvskpoNuOrxxtlDy2Jy0WVv/cpleJw+k8ZKK/CEw= Subject key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2968BC6EA635980FC720D890DCE870C25385DF06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:57 +0000 Certificate not after: Sun 02 May 2027 01:50:57 +0000 Subordinate resources: IP: 160.25.157.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:68:bc:6e:a6:35:98:0f:c7:20:d8:90:dc:e8:70:c2:53:85:df:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:45:57 2026 GMT Not After : May 2 01:50:57 2027 GMT Subject: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:4e:cb:0b:b6:3b:b2:20:a0:8a:9e:c7:e3: 53:8f:f8:9b:23:a2:78:b9:d0:d5:51:09:14:73:6c: fd:91:e0:6a:79:ee:16:d7:1d:2b:ce:1b:b0:38:60: 16:3a:00:1a:e8:a9:28:76:8b:d7:dc:82:d1:17:ce: 6f:c1:8d:3d:5f:9f:7d:32:ed:e3:f0:6e:57:1f:67: 02:5f:cd:1d:77:4b:5f:7d:13:25:74:c5:20:4a:8b: ea:ef:3b:a4:0a:8e:76:86:f6:21:a7:a7:f7:a6:c5: 2d:30:6e:2b:5d:5c:f3:6f:39:b0:2f:dc:c1:e7:51: 38:ed:11:39:13:da:fa:c1:d8:74:e3:d1:74:c5:ae: 4e:0e:14:6a:40:6d:1b:be:b7:b4:ab:7e:d9:8d:04: 75:fe:0b:e7:d4:45:2e:93:f2:05:3f:c5:0b:60:84: 19:4a:6e:51:a0:b3:a4:73:51:4c:bd:35:7d:d4:9c: 2b:ca:48:a9:19:69:dc:b9:f3:f0:76:07:ff:cf:14: bb:71:c8:ce:9b:d0:1f:75:09:dc:89:b9:c5:35:e2: 6a:da:92:cd:59:b6:ac:be:55:62:dd:e0:54:fa:52: 7b:0c:aa:fb:d7:05:b1:1e:3b:06:65:7a:10:3e:b6: 00:7d:7d:2d:10:a7:35:f7:9d:28:c5:de:bd:83:83: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.157.0/24 Signature Algorithm: sha256WithRSAEncryption 51:c0:27:ac:93:78:63:13:5e:04:4f:d2:f6:5c:9b:ab:1b:34: ea:02:19:5d:7c:f3:05:4d:8e:6e:9b:f7:bb:b7:ff:5f:d9:6e: e6:1e:80:49:6b:13:37:7f:41:92:d8:26:aa:98:ae:81:a4:f6: c2:a8:db:54:9d:18:71:22:81:2e:f9:c4:ec:a5:2c:ed:94:62: 70:3b:1b:b9:04:da:7b:df:49:7a:55:9a:cb:30:a6:a2:98:a4: 4b:3f:29:ee:81:fe:ef:1e:00:5e:5b:76:4c:6c:85:9f:7d:89: aa:4e:2b:da:e5:49:1e:e0:ff:1f:ca:3d:ad:ba:00:d0:82:a6: a2:a7:ce:78:09:b7:83:25:30:eb:99:4e:c5:b9:64:ec:82:39: 24:3f:73:c1:e1:c9:54:89:d0:db:8c:b4:b1:78:e5:0c:f8:93: eb:00:e6:21:a9:e6:15:af:dd:82:61:a5:c7:ef:5f:93:ba:c7: 77:ae:23:1f:c8:64:c2:15:7d:a6:36:0f:91:e7:3d:1d:11:2e: d7:7b:b7:98:0c:df:a8:24:ff:ce:c4:70:be:55:85:c4:e0:e0: 13:2d:bd:d9:0c:93:15:36:6d:46:2d:25:4a:6f:0e:8a:d2:1b: 35:f5:7d:30:28:d4:9c:8b:8e:24:79:0e:57:71:55:d5:f6:1f: 97:33:29:07 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKWi8bqY1mA/HINiQ3OhwwlOF3wYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDU1N1oX DTI3MDUwMjAxNTA1N1owMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1 OTM3QjUxN0E0QzFCODFFOEIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJEZTssLtjuyIKCKnsfjU4/4myOieLnQ1VEJFHNs/ZHgannuFtcdK84bsDhg FjoAGuipKHaL19yC0RfOb8GNPV+ffTLt4/BuVx9nAl/NHXdLX30TJXTFIEqL6u87 pAqOdob2Iaen96bFLTBuK11c8285sC/cwedROO0RORPa+sHYdOPRdMWuTg4UakBt G763tKt+2Y0Edf4L59RFLpPyBT/FC2CEGUpuUaCzpHNRTL01fdScK8pIqRlp3Lnz 8HYH/88Uu3HIzpvQH3UJ3Im5xTXiatqSzVm2rL5VYt3gVPpSewyq+9cFsR47BmV6 ED62AH19LRCnNfedKMXevYODKN8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAIEA/bdVvDVxSxZN7UXpMG4HosuMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JlOTU0ZjQyLTk0NTItNDI0Ny05OWE1LTMxYTUzZTU2YTlmOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZTk1NGY0 Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC8wMjA0MDNGNkRENTZGMEQ1 QzUyQzU5MzdCNTE3QTRDMUI4MUU4QjJFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBmdMA0GCSqGSIb3DQEBCwUAA4IBAQBRwCesk3hjE14ET9L2XJurGzTqAhld fPMFTY5um/e7t/9f2W7mHoBJaxM3f0GS2CaqmK6BpPbCqNtUnRhxIoEu+cTspSzt lGJwOxu5BNp730l6VZrLMKaimKRLPynugf7vHgBeW3ZMbIWffYmqTiva5Uke4P8f yj2tugDQgqaip854CbeDJTDrmU7FuWTsgjkkP3PB4clUidDbjLSxeOUM+JPrAOYh qeYVr92CYaXH71+Tusd3riMfyGTCFX2mNg+R5z0dES7Xe7eYDN+oJP/OxHC+VYXE 4OATLb3ZDJMVNm1GLSVKbw6K0hs19X0wKNSci44keQ5XcVXV9h+XMykH -----END CERTIFICATE-----Generated at Tue May 12 22:50:04 2026 by rpki-client