$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer (raw, json) Hash identifier: dt0f6Jta7O5rje1MtWiXcLfBnbWrUUAI2JSEhypAK1k= Subject key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 467327241F657330B571CC270B5224534C6F2860 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:26:39 +0000 Certificate not after: Sun 02 May 2027 02:31:39 +0000 Subordinate resources: IP: 157.15.172.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:73:27:24:1f:65:73:30:b5:71:cc:27:0b:52:24:53:4c:6f:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:26:39 2026 GMT Not After : May 2 02:31:39 2027 GMT Subject: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:ae:27:d9:c3:7f:63:43:29:84:c6:a6:2d: 5b:da:ca:b0:5b:0f:83:72:71:c8:6c:e7:07:84:cb: 11:3e:96:25:c7:e8:b8:bf:c9:43:f7:ac:79:30:aa: f6:6c:49:95:ef:18:0e:d3:8f:b1:da:88:4f:11:65: b1:22:83:86:ab:2f:bb:96:f7:db:44:ab:08:99:9f: f9:90:62:68:ef:02:04:60:52:9d:4f:3a:e8:b9:cd: 71:55:5f:0a:f9:81:b2:02:0e:d8:be:37:ff:6e:c3: c4:60:7d:60:8d:65:ff:dd:64:9a:ff:0d:47:2d:e4: 81:0a:fd:d4:1a:07:e8:73:1f:b8:16:c1:78:d0:d6: 73:54:93:39:cb:25:ab:af:14:78:54:0e:ef:1b:aa: 24:c6:41:ec:21:e0:0c:69:a0:95:d2:36:e2:ae:d4: ea:ca:1f:75:a2:a5:67:17:4b:45:84:bc:18:e4:7e: 23:54:3e:f6:d4:02:56:27:af:59:1b:da:07:05:ea: a9:b3:f1:72:c9:45:78:98:0a:67:09:9a:b7:fe:56: 5d:07:2a:5b:e1:33:41:1b:01:88:9d:51:a0:de:1a: b8:7d:b7:c3:68:8a:44:01:5d:e1:cc:87:30:a7:e1: 18:5c:ad:1c:8a:d1:eb:19:dd:18:50:ed:e4:41:d2: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.172.0/23 Signature Algorithm: sha256WithRSAEncryption 58:0a:6b:da:e1:6b:75:8d:2c:82:6e:79:1c:78:fe:9a:9e:cd: b1:4b:07:9c:3f:54:96:7c:03:3f:fb:03:e0:3e:8b:43:eb:0b: a6:0d:e1:7a:79:66:bd:b6:67:ec:3f:4c:64:0d:e4:2a:34:9e: f5:1d:7a:39:16:7c:a7:57:53:98:57:98:af:f0:4f:59:50:a4: 39:64:8f:98:9e:4c:43:15:c1:e2:57:5c:31:de:b9:46:80:0e: 3c:5b:ca:6e:ac:67:d2:92:fc:a8:76:6a:41:55:68:a4:fb:9a: 82:a3:f4:f3:f1:fb:d1:5a:44:6e:0d:ae:91:b8:4e:ff:cd:23: d2:37:8f:df:43:a8:28:3f:41:90:bc:26:6b:55:37:b5:39:16: ae:ed:ee:5a:4a:93:49:50:4d:32:9c:13:ed:61:20:04:e5:f7: 73:e6:8a:bf:d4:bc:2a:ef:5a:62:c0:74:56:df:1b:ba:62:70: 59:7d:57:e5:f3:ff:3b:ea:09:5c:cc:89:e8:d8:1d:c5:25:ba: b9:e0:4e:5c:42:88:6e:f4:95:2e:5b:0d:ed:0e:20:39:e1:36: 7d:7c:0c:25:c3:26:85:1e:67:0b:31:d0:68:2d:92:7e:4e:74: 72:5b:8e:02:38:f8:16:d6:a2:0a:63:c6:76:c9:43:61:11:9e: ab:ff:65:c8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURnMnJB9lczC1ccwnC1IkU0xvKGAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMjYzOVoX DTI3MDUwMjAyMzEzOVowMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2 MEY0NURDRjg1QUUyNDVBNEVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI8VrifZw39jQymExqYtW9rKsFsPg3JxyGznB4TLET6WJcfouL/JQ/eseTCq 9mxJle8YDtOPsdqITxFlsSKDhqsvu5b320SrCJmf+ZBiaO8CBGBSnU866LnNcVVf CvmBsgIO2L43/27DxGB9YI1l/91kmv8NRy3kgQr91BoH6HMfuBbBeNDWc1STOcsl q68UeFQO7xuqJMZB7CHgDGmgldI24q7U6sofdaKlZxdLRYS8GOR+I1Q+9tQCViev WRvaBwXqqbPxcslFeJgKZwmat/5WXQcqW+EzQRsBiJ1RoN4auH23w2iKRAFd4cyH MKfhGFytHIrR6xndGFDt5EHSJb0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBif1RSPgt4jbrZg9F3Pha4kWk62MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VkZThjY2I5LTBhNjMtNDlhOS1hYThhLWVkMDE2ZWUzNTFmMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZGU4Y2Ni OS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC8xODlGRDUxNDhGODJERTIz NkVCNjYwRjQ1RENGODVBRTI0NUE0RUI2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ+sMA0GCSqGSIb3DQEBCwUAA4IBAQBYCmva4Wt1jSyCbnkceP6ans2xSwec P1SWfAM/+wPgPotD6wumDeF6eWa9tmfsP0xkDeQqNJ71HXo5FnynV1OYV5iv8E9Z UKQ5ZI+YnkxDFcHiV1wx3rlGgA48W8purGfSkvyodmpBVWik+5qCo/Tz8fvRWkRu Da6RuE7/zSPSN4/fQ6goP0GQvCZrVTe1ORau7e5aSpNJUE0ynBPtYSAE5fdz5oq/ 1Lwq71piwHRW3xu6YnBZfVfl8/876glczIno2B3FJbq54E5cQohu9JUuWw3tDiA5 4TZ9fAwlwyaFHmcLMdBoLZJ+TnRyW44COPgW1qIKY8Z2yUNhEZ6r/2XI -----END CERTIFICATE-----Generated at Tue May 12 22:10:25 2026 by rpki-client