$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer (raw, json) Hash identifier: j/SbiS08wCcbGC4Kjj51IdSX90vJnnOsQPAUjXZ1La4= Subject key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 53133B0DDF3370B18F50CBA8AD048FB77DEA1AD9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:01:30 +0000 Certificate not after: Sun 02 May 2027 02:06:30 +0000 Subordinate resources: IP: 157.66.238.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:13:3b:0d:df:33:70:b1:8f:50:cb:a8:ad:04:8f:b7:7d:ea:1a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:01:30 2026 GMT Not After : May 2 02:06:30 2027 GMT Subject: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:e8:90:22:3d:20:14:08:c3:d6:02:88:3a: 4e:99:21:3b:7c:33:05:3d:d7:b7:fc:42:2f:17:66: 6e:28:f5:ea:80:9d:fb:ce:44:c6:9d:0d:3e:42:2e: 15:4f:f8:c2:11:ad:af:92:7d:d8:95:e0:24:65:d3: 0a:4a:05:94:0f:f8:5b:14:f8:be:04:bb:12:e0:33: 71:d3:d0:b9:c6:c7:5e:a9:8a:3c:8e:3d:af:43:71: c9:5c:c0:2f:9b:0a:0d:b9:d4:83:a6:61:aa:2b:18: 14:8a:60:54:e7:1d:43:f6:7a:73:94:c5:fa:41:d6: a9:53:37:10:ba:2a:81:a9:25:74:f3:48:6b:88:26: 2c:25:44:79:cb:8c:a8:51:0e:ff:a4:84:f3:65:14: e5:62:b5:42:53:90:ac:fc:51:8b:01:5f:c4:7c:01: 90:80:38:c4:57:e0:aa:c8:72:d1:46:5c:29:0f:6e: d3:aa:c2:1a:9b:87:84:cf:71:f6:e8:72:3b:07:04: ed:0d:eb:db:63:04:2d:42:c1:03:92:af:10:99:ae: 47:05:b7:07:29:8b:10:d6:56:68:78:fe:31:e2:00: a5:90:f9:05:b9:32:70:0c:10:a0:65:91:89:8e:fc: 31:13:71:c0:7f:2d:1b:3b:b5:d9:1e:7c:ff:9a:26: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.238.0/23 Signature Algorithm: sha256WithRSAEncryption b0:00:88:85:26:2f:92:be:6d:31:12:f8:f5:db:0c:4a:9f:00: f6:9e:7a:92:f5:20:8c:54:e8:43:20:4c:e2:1b:53:49:0d:fc: b5:bf:0e:8c:84:ef:03:9d:f4:49:7a:d8:19:af:6a:52:c4:23: 58:05:df:aa:5a:ae:54:fa:70:7c:df:e6:56:42:3d:ff:e3:2c: 4a:89:3a:5c:2b:b4:09:20:cb:d5:d9:3f:c3:24:38:d2:0c:63: 15:83:46:bf:83:61:99:85:bd:11:b5:8e:50:0e:0a:d4:3b:a0: 81:77:7b:9e:ff:e2:51:c6:7b:b8:23:d0:55:a3:66:f1:44:de: 31:dc:a3:b3:15:7d:2a:2b:49:9f:14:11:06:ff:f3:b9:6f:ae: be:4f:ab:0e:f6:90:03:b5:2a:5c:be:6f:14:e4:71:7d:dc:f2: 32:0c:33:85:71:c4:dc:cd:59:6b:e7:c8:c5:63:c4:a8:b4:cf: 05:8b:fa:87:82:cb:cf:45:4f:d7:5c:65:81:2f:34:d8:d6:d5: 9c:cc:a4:a3:bb:79:60:01:e3:2e:5a:eb:ce:13:01:28:a3:65: 26:86:df:5e:db:b9:46:f3:a0:33:c7:bc:7a:de:93:30:38:ca: aa:25:24:1a:30:1c:dc:be:77:c6:3f:0c:3d:46:3b:8d:71:4d: 70:35:32:97 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUxM7Dd8zcLGPUMuorQSPt33qGtkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMDEzMFoX DTI3MDUwMjAyMDYzMFowMzExMC8GA1UEAxMoMDgxNTFGRDYyRkExOEM5RUMyRjVC OURCNUQ0QTAzMTFERjUwOTBCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRh6JAiPSAUCMPWAog6TpkhO3wzBT3Xt/xCLxdmbij16oCd+85Exp0NPkIu FU/4whGtr5J92JXgJGXTCkoFlA/4WxT4vgS7EuAzcdPQucbHXqmKPI49r0NxyVzA L5sKDbnUg6ZhqisYFIpgVOcdQ/Z6c5TF+kHWqVM3ELoqgakldPNIa4gmLCVEecuM qFEO/6SE82UU5WK1QlOQrPxRiwFfxHwBkIA4xFfgqshy0UZcKQ9u06rCGpuHhM9x 9uhyOwcE7Q3r22MELULBA5KvEJmuRwW3BymLENZWaHj+MeIApZD5BbkycAwQoGWR iY78MRNxwH8tGzu12R58/5omWpcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAgVH9YvoYyewvW5211KAxHfUJC7MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3ZGQyNTE5LTMwNzgtNDdkMy05ZTg2LTQ4ZmQzYmRlNzZjOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kN2RkMjUx OS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC8wODE1MUZENjJGQTE4QzlF QzJGNUI5REI1RDRBMDMxMURGNTA5MEJCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnULuMA0GCSqGSIb3DQEBCwUAA4IBAQCwAIiFJi+Svm0xEvj12wxKnwD2nnqS 9SCMVOhDIEziG1NJDfy1vw6MhO8DnfRJetgZr2pSxCNYBd+qWq5U+nB83+ZWQj3/ 4yxKiTpcK7QJIMvV2T/DJDjSDGMVg0a/g2GZhb0RtY5QDgrUO6CBd3ue/+JRxnu4 I9BVo2bxRN4x3KOzFX0qK0mfFBEG//O5b66+T6sO9pADtSpcvm8U5HF93PIyDDOF ccTczVlr58jFY8SotM8Fi/qHgsvPRU/XXGWBLzTY1tWczKSju3lgAeMuWuvOEwEo o2Umht9e27lG86Azx7x63pMwOMqqJSQaMBzcvnfGPww9RjuNcU1wNTKX -----END CERTIFICATE-----Generated at Tue May 12 22:10:13 2026 by rpki-client