$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer (raw, json) Hash identifier: XPmow186jf1cvAPoxD5SM6hXEZ2ZyaZYB/YM1G+oKuc= Subject key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3AE788DB55A185E4B8834533111787D6376ED84E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:32 +0000 Certificate not after: Sun 02 May 2027 01:41:32 +0000 Subordinate resources: IP: 160.22.6.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e7:88:db:55:a1:85:e4:b8:83:45:33:11:17:87:d6:37:6e:d8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:36:32 2026 GMT Not After : May 2 01:41:32 2027 GMT Subject: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:96:d3:bb:c5:eb:72:a7:1b:a5:f7:fb:0c: 50:67:55:07:39:8e:7b:43:ee:fd:23:57:06:b2:c6: 20:31:ad:ff:1c:bd:73:a0:3a:15:d5:e2:b0:41:db: ac:b3:73:43:12:cc:dc:e0:b4:f9:3e:8e:cf:99:c1: d6:8d:78:07:01:d1:5d:b9:52:59:50:d5:db:51:50: d4:6d:39:cf:8c:e6:50:66:c0:1e:51:64:92:81:b0: dc:0c:52:5d:6c:7b:a0:38:a5:c2:e2:e1:16:f9:08: 56:68:18:73:83:b7:8c:9a:ba:7e:ea:8d:af:b9:9d: 53:13:30:ca:7b:0a:5e:39:55:04:38:a4:de:c6:d3: ed:4b:04:03:0b:94:f3:e3:91:c1:4f:52:c4:b0:ac: 51:77:05:96:fa:19:4e:34:df:de:e2:90:c2:b3:a1: 26:17:06:b1:00:79:bc:e9:bc:d9:77:b8:d6:0d:a5: 59:6b:54:58:36:93:cc:88:4b:a4:0d:60:db:fe:64: 47:1e:38:4e:10:41:97:2a:c0:1e:ca:08:05:c3:09: b5:96:81:51:2c:66:58:1f:75:15:14:90:97:c8:3a: df:42:06:69:29:ce:0d:a1:bb:49:e4:0d:60:ca:30: d7:dd:58:b3:c3:84:3d:bd:da:dc:ae:69:e2:c3:ce: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.6.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:7b:b1:55:3f:2e:c9:43:2b:d7:bf:40:de:ee:0d:76:3c:db: 87:52:3e:e3:01:c9:3e:52:71:8f:f1:c1:be:b4:fb:c3:0f:83: 56:16:b2:60:01:37:21:96:28:d5:ab:35:76:22:d7:4a:d0:16: a6:e0:f2:51:cd:28:5d:08:f6:b7:9b:ac:45:f4:83:b2:03:5b: 97:16:9e:36:d7:6a:4f:76:f3:ed:5e:63:9e:ac:02:84:8a:37: 86:39:97:bb:66:46:fd:3a:52:7d:51:d6:7a:0a:fb:9c:53:76: b3:49:71:1b:9a:0b:b1:12:55:99:d9:3d:66:b4:1a:19:af:f9: a9:a1:67:87:ab:7c:3c:f8:c2:41:2b:8e:ce:ba:a6:f8:89:1f: 62:02:3c:96:39:eb:fc:00:52:ac:0f:80:90:f6:85:ca:43:31: ab:6b:56:2d:cb:d9:a2:2e:a9:fd:93:c4:cc:2f:ad:ef:75:dd: 52:7c:da:3b:5f:08:9a:8c:51:e4:87:74:80:bd:2f:e5:e6:f6: 0b:7a:6a:0e:9d:f6:b1:15:16:2b:a1:d2:57:b7:f3:37:1a:0c: c7:27:23:de:6e:d3:f0:02:e8:58:75:34:e1:b5:f0:b3:4c:7d: 37:a3:20:92:58:38:ba:0f:09:1a:c9:cb:88:d6:1d:b1:70:0e: 66:e8:a7:77 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOueI21WhheS4g0UzEReH1jdu2E4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzYzMloX DTI3MDUwMjAxNDEzMlowMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5Nzgy MEFFRjE3OTFBQjBGN0FFQzY0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFZltO7xetypxul9/sMUGdVBzmOe0Pu/SNXBrLGIDGt/xy9c6A6FdXisEHb rLNzQxLM3OC0+T6Oz5nB1o14BwHRXblSWVDV21FQ1G05z4zmUGbAHlFkkoGw3AxS XWx7oDilwuLhFvkIVmgYc4O3jJq6fuqNr7mdUxMwynsKXjlVBDik3sbT7UsEAwuU 8+ORwU9SxLCsUXcFlvoZTjTf3uKQwrOhJhcGsQB5vOm82Xe41g2lWWtUWDaTzIhL pA1g2/5kRx44ThBBlyrAHsoIBcMJtZaBUSxmWB91FRSQl8g630IGaSnODaG7SeQN YMow191Ys8OEPb3a3K5p4sPOWkkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAtZp9Bmri3juXggrvF5GrD3rsZPMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FlMTk4ODE2LTVhZjktNDdlZi1iOTg5LTQyZjI3MzE4NDhiZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZTE5ODgx Ni01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC8wQjU5QTdEMDY2QUUyREUz Qjk3ODIwQUVGMTc5MUFCMEY3QUVDNjRGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBYGMA0GCSqGSIb3DQEBCwUAA4IBAQAae7FVPy7JQyvXv0De7g12PNuHUj7j Ack+UnGP8cG+tPvDD4NWFrJgATchlijVqzV2ItdK0Bam4PJRzShdCPa3m6xF9IOy A1uXFp4212pPdvPtXmOerAKEijeGOZe7Zkb9OlJ9UdZ6CvucU3azSXEbmguxElWZ 2T1mtBoZr/mpoWeHq3w8+MJBK47Ouqb4iR9iAjyWOev8AFKsD4CQ9oXKQzGra1Yt y9miLqn9k8TML63vdd1SfNo7XwiajFHkh3SAvS/l5vYLemoOnfaxFRYrodJXt/M3 GgzHJyPebtPwAuhYdTThtfCzTH03oyCSWDi6DwkaycuI1h2xcA5m6Kd3 -----END CERTIFICATE-----Generated at Tue May 12 22:38:47 2026 by rpki-client