$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer File: 0A81694898CE419119C35D18D0184407C5732E00.cer (raw, json) Hash identifier: UPpQd/KiC7H/wrzJad9p3Wqqd8X9c5E5SLS4PB5r8nQ= Subject key identifier: 0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3624A8E6B04CB755668887C7FD01304537043870 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:21 +0000 Certificate not after: Sun 02 May 2027 01:59:21 +0000 Subordinate resources: IP: 160.22.34.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:24:a8:e6:b0:4c:b7:55:66:88:87:c7:fd:01:30:45:37:04:38:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:54:21 2026 GMT Not After : May 2 01:59:21 2027 GMT Subject: CN=0A81694898CE419119C35D18D0184407C5732E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:23:db:33:ce:d3:9c:dc:cd:28:b9:45:a0:67: 9a:af:99:f4:c1:5c:73:b9:9a:3f:59:c6:fe:76:d9: b6:e5:1e:d8:bc:3a:ee:7e:20:20:4e:d8:2f:dd:9a: 54:fd:88:5d:85:25:71:de:e0:02:5e:1b:11:78:c3: d2:10:32:3c:66:17:6c:ab:90:d2:4b:03:d1:84:a7: e9:59:13:69:32:df:e9:5e:c4:32:ab:bd:f2:72:56: 38:ce:35:c9:5c:dd:10:ba:85:d9:64:64:32:7e:bc: 96:e7:01:f8:ab:5d:c5:f2:b6:52:ca:84:9c:1b:90: 09:cc:69:40:73:5e:f6:02:8d:81:90:b8:63:23:76: ba:6b:b5:fd:2b:3c:26:b3:70:4a:c6:7e:fb:68:dc: e1:c2:a5:11:06:ad:98:87:e8:97:b9:ab:f7:99:1f: d4:59:4b:4f:1c:9f:af:78:80:2e:c8:19:62:1b:44: dc:12:8f:15:6e:12:a7:ea:7f:bd:9a:67:9e:d5:2e: 41:0c:eb:c6:bd:67:76:75:5b:59:d9:c3:fc:05:c4: da:13:3c:11:74:ec:2c:68:eb:79:3b:8f:9b:4a:87: c2:3f:25:9f:eb:c4:48:ac:1e:ed:e6:21:81:ab:26: f7:93:6f:31:4c:54:2a:1f:29:7c:27:f6:83:d9:f5: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.34.0/23 Signature Algorithm: sha256WithRSAEncryption af:8f:be:80:bb:21:5a:66:1a:ad:68:43:fb:e6:6c:d0:dd:55: 23:7e:bd:e3:c4:57:0e:a9:ea:c6:65:ba:a8:58:62:e0:dd:f2: 18:1a:34:41:bf:79:14:66:10:8c:58:4e:dd:1c:f9:b7:46:6a: 83:f0:94:83:3e:b8:5c:25:fc:f1:22:74:a5:c5:1f:f5:fe:50: 5f:1d:db:9b:b4:dd:98:74:e1:e1:3a:43:51:be:7a:79:df:27: bc:3c:92:35:0a:62:5f:ec:ad:54:b8:2d:dc:20:03:d8:e9:a6: 6d:77:0f:ea:9a:4b:90:25:08:90:88:68:c0:65:c7:6f:df:50: 4b:71:50:39:32:16:ec:11:93:df:dc:e0:f0:c5:1d:60:4d:ab: 06:39:46:f1:c1:5c:36:93:04:cd:45:99:0b:42:ce:ac:ff:52: 19:92:bb:ce:89:e6:8f:45:33:72:82:f5:37:18:58:5d:1d:bc: 99:11:2c:1f:44:2f:b6:ec:f6:3a:62:18:87:f9:6f:c6:2d:f2: b7:94:fd:da:ff:6a:f0:4a:d5:e7:5e:a5:3b:f4:93:07:3f:5c: 8f:e7:fc:bd:ad:e7:a9:ac:a7:84:ef:b2:65:fa:79:63:11:5c: 41:f0:8d:f4:9c:b1:4e:5c:9e:5d:d0:30:e5:60:4c:a4:11:d9: 30:a5:03:30 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNiSo5rBMt1VmiIfH/QEwRTcEOHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTQyMVoX DTI3MDUwMjAxNTkyMVowMzExMC8GA1UEAxMoMEE4MTY5NDg5OENFNDE5MTE5QzM1 RDE4RDAxODQ0MDdDNTczMkUwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANsj2zPO05zczSi5RaBnmq+Z9MFcc7maP1nG/nbZtuUe2Lw67n4gIE7YL92a VP2IXYUlcd7gAl4bEXjD0hAyPGYXbKuQ0ksD0YSn6VkTaTLf6V7EMqu98nJWOM41 yVzdELqF2WRkMn68lucB+KtdxfK2UsqEnBuQCcxpQHNe9gKNgZC4YyN2umu1/Ss8 JrNwSsZ++2jc4cKlEQatmIfol7mr95kf1FlLTxyfr3iALsgZYhtE3BKPFW4Sp+p/ vZpnntUuQQzrxr1ndnVbWdnD/AXE2hM8EXTsLGjreTuPm0qHwj8ln+vESKwe7eYh gasm95NvMUxUKh8pfCf2g9n1bs0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAqBaUiYzkGRGcNdGNAYRAfFcy4AMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NiODhhNTEzLWRlYmYtNGQ1Yy05NTFiLWQ5NzU5YTA5MmRlNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYjg4YTUx My1kZWJmLTRkNWMtOTUxYi1kOTc1OWEwOTJkZTcvMC8wQTgxNjk0ODk4Q0U0MTkx MTlDMzVEMThEMDE4NDQwN0M1NzMyRTAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBYiMA0GCSqGSIb3DQEBCwUAA4IBAQCvj76AuyFaZhqtaEP75mzQ3VUjfr3j xFcOqerGZbqoWGLg3fIYGjRBv3kUZhCMWE7dHPm3RmqD8JSDPrhcJfzxInSlxR/1 /lBfHdubtN2YdOHhOkNRvnp53ye8PJI1CmJf7K1UuC3cIAPY6aZtdw/qmkuQJQiQ iGjAZcdv31BLcVA5MhbsEZPf3ODwxR1gTasGOUbxwVw2kwTNRZkLQs6s/1IZkrvO ieaPRTNygvU3GFhdHbyZESwfRC+27PY6YhiH+W/GLfK3lP3a/2rwStXnXqU79JMH P1yP5/y9reeprKeE77Jl+nljEVxB8I30nLFOXJ5d0DDlYEykEdkwpQMw -----END CERTIFICATE-----Generated at Tue May 12 22:32:41 2026 by rpki-client