$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer (raw, json) Hash identifier: wkD1YkOHCFoQSZkUKUrw4VyDBI7YDlyghrMbHygCPE8= Subject key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 518B6FEE5EAB5BE47332A383F2849A58958DD6FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:29:39 +0000 Certificate not after: Sun 02 May 2027 02:34:39 +0000 Subordinate resources: IP: 160.22.90.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8b:6f:ee:5e:ab:5b:e4:73:32:a3:83:f2:84:9a:58:95:8d:d6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:29:39 2026 GMT Not After : May 2 02:34:39 2027 GMT Subject: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:b9:8e:32:39:43:9b:84:a8:62:d6:8d:d4: ff:95:8c:5b:30:8f:25:da:8f:59:39:91:9a:bc:1c: 55:04:4d:b1:9f:2f:d3:d7:2b:7f:05:ae:99:2e:95: e3:ab:2d:8f:b9:23:9e:21:8a:b7:be:98:b4:fa:9a: af:0f:c1:7c:fe:bd:81:7e:c7:1a:de:fc:81:c3:9c: c3:5e:30:ae:e7:98:4b:fe:bc:54:a7:39:a8:6b:c3: a0:3a:fc:a3:5d:ed:0f:01:98:c6:b6:ae:53:55:43: b6:5c:a4:67:d9:9e:3d:cc:62:6f:4f:8f:4d:3a:01: f4:8d:39:19:84:67:77:64:94:31:2f:6d:71:8a:ca: 0d:52:9a:fd:ac:9c:f1:3b:25:df:54:9b:f3:c9:8e: 86:51:e4:9e:fd:6b:c4:d3:a8:d3:15:a6:09:95:df: 5c:5f:61:f5:22:56:3f:6d:7d:5d:50:95:3f:97:c5: d4:00:c6:ce:d6:42:f3:77:92:f9:65:76:25:ce:bf: 50:bd:2e:99:d2:07:9f:1f:81:3c:a9:db:ce:75:80: 44:df:46:5c:8b:4d:62:87:34:de:ee:03:1d:6f:ff: 6d:b7:3b:14:85:9c:78:0f:21:15:9e:69:e3:6f:d8: 52:91:79:d1:7e:a0:86:84:3e:0a:3f:95:2a:d7:55: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.90.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:43:fe:e3:34:54:5c:19:70:17:53:89:9f:69:a0:4a:b5:c3: e7:1f:9b:cd:41:81:b6:d1:01:a9:3a:b5:e6:fe:5a:30:24:b5: 05:87:99:51:fd:f2:93:ab:3f:38:ea:e3:2c:47:cd:33:17:f1: 43:d8:4c:25:ad:e7:2e:35:0c:b2:b1:b8:13:5b:86:eb:89:80: e9:e9:26:a7:97:fc:15:fa:ad:ce:e3:34:13:f0:f2:69:e2:9b: 78:50:8c:fa:7a:80:16:a3:37:52:60:8f:a6:e5:ad:49:fb:fd: 7a:80:1d:1a:7c:7b:4f:73:c5:b5:8a:50:5d:5d:7f:33:b5:20: ab:a7:18:dc:79:f0:5c:4e:cc:2b:f3:b3:ad:14:1e:66:3b:11: c0:23:dd:61:4a:7c:58:9e:ec:6f:cb:5e:3d:14:bf:bb:18:8b: bc:62:b7:64:21:7c:a2:b1:ad:f3:db:75:08:0a:e1:54:2d:ca: b2:da:ae:8a:ef:4f:c0:f6:94:0d:d3:ab:db:f1:53:20:13:1a: e6:8b:3a:b3:11:f4:33:f9:15:b2:94:dc:04:20:cd:11:fa:ee: 49:03:32:4e:4c:46:f2:b3:51:d0:9a:ec:77:7f:a8:85:36:0b: 20:1b:04:fe:85:fd:23:63:2b:66:58:6d:d6:f8:16:01:e8:a9: 2b:fe:ec:73 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUYtv7l6rW+RzMqOD8oSaWJWN1v4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMjkzOVoX DTI3MDUwMjAyMzQzOVowMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3 MUEwNkIyRUFGRkMxOUIzMDBGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANtTuY4yOUObhKhi1o3U/5WMWzCPJdqPWTmRmrwcVQRNsZ8v09crfwWumS6V 46stj7kjniGKt76YtPqarw/BfP69gX7HGt78gcOcw14wrueYS/68VKc5qGvDoDr8 o13tDwGYxrauU1VDtlykZ9mePcxib0+PTToB9I05GYRnd2SUMS9tcYrKDVKa/ayc 8Tsl31Sb88mOhlHknv1rxNOo0xWmCZXfXF9h9SJWP219XVCVP5fF1ADGztZC83eS +WV2Jc6/UL0umdIHnx+BPKnbznWARN9GXItNYoc03u4DHW//bbc7FIWceA8hFZ5p 42/YUpF50X6ghoQ+Cj+VKtdV0nECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjbHLR2kPH2cZpxoGsur/wZswD7MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YxN2Y3OWIwLWI5ZTMtNGMzZC1hMTEzLWI2YzZhMThhZjRkMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMTdmNzli MC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC8wOERCMUNCNDc2OTBGMUY2 NzE5QTcxQTA2QjJFQUZGQzE5QjMwMEZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBZaMA0GCSqGSIb3DQEBCwUAA4IBAQAMQ/7jNFRcGXAXU4mfaaBKtcPnH5vN QYG20QGpOrXm/lowJLUFh5lR/fKTqz846uMsR80zF/FD2EwlrecuNQyysbgTW4br iYDp6Sanl/wV+q3O4zQT8PJp4pt4UIz6eoAWozdSYI+m5a1J+/16gB0afHtPc8W1 ilBdXX8ztSCrpxjcefBcTswr87OtFB5mOxHAI91hSnxYnuxvy149FL+7GIu8Yrdk IXyisa3z23UICuFULcqy2q6K70/A9pQN06vb8VMgExrmizqzEfQz+RWylNwEIM0R +u5JAzJOTEbys1HQmux3f6iFNgsgGwT+hf0jYytmWG3W+BYB6Kkr/uxz -----END CERTIFICATE-----Generated at Tue May 12 22:38:53 2026 by rpki-client