$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer File: 15F7970FD3BE97C0407268501363F126D6A3A445.cer (raw, json) Hash identifier: Z2IT7c+OqF/hLWyWhRWnT+avWJFOo52DOZgewiSJ56I= Subject key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 460AE1B79703BF78868AD1A177F6E94B5CBDA73D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:37 +0000 Certificate not after: Sun 02 May 2027 00:26:37 +0000 Subordinate resources: IP: 160.25.248.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0a:e1:b7:97:03:bf:78:86:8a:d1:a1:77:f6:e9:4b:5c:bd:a7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:21:37 2026 GMT Not After : May 2 00:26:37 2027 GMT Subject: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:9a:59:f6:b3:a1:48:05:ea:06:6d:ea:60: 99:b3:00:b3:56:9b:59:6e:47:0d:7c:6c:d7:51:a5: fe:4e:bc:2e:d9:0e:0b:35:70:7d:45:c8:52:1e:b0: c9:2d:a9:a8:96:20:bc:19:ae:ab:9c:1b:3f:f1:01: 09:84:a1:b6:c8:7f:5a:f9:61:70:80:39:c6:b6:f1: c5:33:e9:03:0e:56:4f:f8:ea:d7:eb:24:9c:65:e3: 2e:81:18:a6:bc:88:4e:07:b3:45:4a:67:ae:ec:0a: 93:8d:0a:8a:5a:9d:30:0e:17:f7:cf:55:51:bc:5a: cf:f9:39:34:98:66:e5:e4:c2:f3:fc:67:29:aa:02: e4:92:47:df:8e:c5:5f:5e:f5:34:4a:6d:c7:89:c0: c8:1d:66:48:9b:f7:83:17:99:12:9e:e7:6e:54:58: 12:a6:19:36:f5:5c:f7:ed:fe:2a:a0:73:32:2f:df: 1c:1a:d2:12:25:24:01:29:fb:ae:0c:b8:77:ff:ee: e2:6f:21:f1:7c:5b:f7:07:62:e0:e7:60:e3:88:d2: 3d:26:4e:cf:5a:1d:b7:aa:02:eb:5e:ad:11:56:90: 28:18:21:ca:f2:a0:d9:d0:86:3d:a1:e9:c7:e1:a5: 13:6b:b8:7c:bb:e7:4c:0b:a8:6d:71:9e:e7:84:34: e1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.248.0/24 Signature Algorithm: sha256WithRSAEncryption 55:f5:6a:ef:86:cc:dd:80:57:11:99:8b:37:df:1d:fb:36:02: a7:19:d0:61:8d:8f:2a:44:d9:ae:28:68:26:29:76:3e:8c:df: 7c:91:61:8d:a1:cc:5b:6f:2f:bd:f3:1a:9e:a5:7c:60:f1:fa: d0:cc:12:a8:e1:3b:f1:27:97:ed:fd:ad:34:0b:8f:4e:a6:9d: 98:fa:91:34:b6:3c:17:7c:79:da:4c:ff:b8:cb:36:6e:a0:1d: eb:a4:c5:08:e6:d1:69:f7:7a:7b:d9:34:53:62:3b:75:b5:47: b0:d1:b1:ad:e5:5c:79:34:62:1e:90:f2:35:7d:e3:e8:87:57: 4a:5e:cb:87:b4:81:4b:d0:ec:29:21:25:95:72:72:87:77:13: 6b:c9:e7:dc:4f:0f:1d:cb:11:00:15:18:b0:8e:8e:04:e3:45: bc:22:62:19:90:b7:70:95:fd:d5:5b:34:a1:87:c5:d9:f4:ed: 36:64:77:63:b0:00:39:43:e2:88:9f:7f:93:b8:47:55:42:81: 7e:ed:20:9a:98:9c:07:71:23:6d:15:5e:1a:80:7b:2c:44:34: ae:ce:85:5d:48:f0:a3:7c:c4:64:ca:87:c6:55:7b:4f:06:a2: 0f:c8:55:ec:97:6f:c0:07:e6:b2:c2:42:e1:c0:d8:cd:00:f7: ba:df:c4:88 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURgrht5cDv3iGitGhd/bpS1y9pz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjEzN1oX DTI3MDUwMjAwMjYzN1owMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2 ODUwMTM2M0YxMjZENkEzQTQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZZmln2s6FIBeoGbepgmbMAs1abWW5HDXxs11Gl/k68LtkOCzVwfUXIUh6w yS2pqJYgvBmuq5wbP/EBCYShtsh/WvlhcIA5xrbxxTPpAw5WT/jq1+sknGXjLoEY pryITgezRUpnruwKk40KilqdMA4X989VUbxaz/k5NJhm5eTC8/xnKaoC5JJH347F X171NEptx4nAyB1mSJv3gxeZEp7nblRYEqYZNvVc9+3+KqBzMi/fHBrSEiUkASn7 rgy4d//u4m8h8Xxb9wdi4Odg44jSPSZOz1odt6oC616tEVaQKBghyvKg2dCGPaHp x+GlE2u4fLvnTAuobXGe54Q04VkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBX3lw/TvpfAQHJoUBNj8SbWo6RFMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNlNGM1NzBhLTQ0NzQtNGNiZi1iOGY5LWZmOTc5MTc4MTU0OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZTRjNTcw YS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC8xNUY3OTcwRkQzQkU5N0Mw NDA3MjY4NTAxMzYzRjEyNkQ2QTNBNDQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBn4MA0GCSqGSIb3DQEBCwUAA4IBAQBV9WrvhszdgFcRmYs33x37NgKnGdBh jY8qRNmuKGgmKXY+jN98kWGNocxbby+98xqepXxg8frQzBKo4TvxJ5ft/a00C49O pp2Y+pE0tjwXfHnaTP+4yzZuoB3rpMUI5tFp93p72TRTYjt1tUew0bGt5Vx5NGIe kPI1fePoh1dKXsuHtIFL0OwpISWVcnKHdxNryefcTw8dyxEAFRiwjo4E40W8ImIZ kLdwlf3VWzShh8XZ9O02ZHdjsAA5Q+KIn3+TuEdVQoF+7SCamJwHcSNtFV4agHss RDSuzoVdSPCjfMRkyofGVXtPBqIPyFXsl2/AB+aywkLhwNjNAPe638SI -----END CERTIFICATE-----Generated at Tue May 12 22:03:18 2026 by rpki-client