$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer File: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer (raw, json) Hash identifier: DtNrsMWJsoPv1hmpyxzUzDGE3Gvud9vFq+THfCLaD3M= Subject key identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 357A37F8BB7D20515A301059348E9A65FEB3CE86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:07:10 +0000 Certificate not after: Sun 02 May 2027 01:12:10 +0000 Subordinate resources: IP: 160.20.76.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7a:37:f8:bb:7d:20:51:5a:30:10:59:34:8e:9a:65:fe:b3:ce:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:07:10 2026 GMT Not After : May 2 01:12:10 2027 GMT Subject: CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:18:ee:b3:f0:11:03:96:ae:74:8d:c0:71: ed:5f:12:70:35:1c:0f:18:56:56:89:be:be:94:71: 0d:8e:b3:58:73:57:da:61:a9:79:5b:b0:34:d4:59: 2f:d8:ee:0e:45:d1:dd:19:a0:3f:d3:05:6d:d7:fd: eb:e1:94:41:15:1c:88:06:4f:07:36:97:eb:78:0b: 30:f6:07:f2:23:af:19:58:be:33:54:5c:a1:80:c4: b9:23:eb:a4:de:71:56:8b:fb:a3:8f:19:c3:fb:ba: de:81:35:c4:a8:a4:f0:d3:24:7b:22:21:e6:c6:f8: c6:95:29:58:11:5b:66:58:52:09:0e:2c:e5:81:5b: f7:c6:4b:06:f4:f5:33:0e:4d:e1:7e:15:4b:81:5c: 10:19:00:0d:43:c4:0c:67:35:e8:4e:cc:2f:85:0a: 26:99:3b:2d:7f:26:a1:e6:58:20:b9:e2:3a:86:b8: b3:47:06:15:96:51:6c:12:48:d6:df:a7:32:9f:13: 98:56:00:4c:eb:7b:89:48:24:9a:a6:20:ac:62:d9: fa:9c:1c:dd:07:6f:9a:36:53:67:12:44:36:76:22: e7:89:b4:17:4d:03:cc:1c:6d:db:0e:02:bf:d0:38: 83:80:c7:03:7a:7e:1f:30:38:01:76:44:86:1d:bc: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.76.0/23 Signature Algorithm: sha256WithRSAEncryption a1:db:1a:0f:ff:07:8b:0b:ac:50:be:a1:ae:25:de:34:18:81: 4a:b3:f0:7c:a1:c1:90:71:9d:92:c2:c2:84:87:4d:a8:09:29: 27:04:0e:e6:cc:23:ff:94:0d:68:ad:9b:6e:eb:e5:9d:fa:ef: f5:01:ec:40:f1:3a:d9:a5:17:0d:21:2e:b5:ac:82:3f:19:b7: e8:a1:b6:dc:3f:f9:7d:3b:79:ce:bd:60:a3:fd:03:4d:f1:46: d0:b8:28:0b:db:42:2e:c2:b2:58:78:06:82:f5:5f:b8:aa:e7: ea:29:0b:ad:7a:65:d0:6f:b2:16:3b:d2:d8:08:75:0e:81:59: 79:ca:dc:26:37:cc:6c:33:35:05:95:0b:92:ef:e3:04:d3:b6: a0:4e:3e:e8:aa:8c:bc:d3:df:39:f5:a9:49:67:aa:9e:78:fd: 07:30:c0:4a:4f:5a:33:bf:e2:6e:98:2b:00:b1:2e:e1:78:be: 3a:61:f7:9c:50:d7:d3:a4:cb:de:b3:d4:0b:80:19:e8:d1:d4: 81:51:94:ff:33:55:ab:b0:dd:7c:07:d8:44:cf:10:25:4e:31: 62:d2:d3:01:5e:91:96:9b:92:64:49:b7:e8:c2:c3:45:9f:c1: 14:dd:55:11:9c:ca:b7:96:5d:1d:ad:91:84:63:4e:7b:13:e7: 89:73:73:21 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNXo3+Lt9IFFaMBBZNI6aZf6zzoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDcxMFoX DTI3MDUwMjAxMTIxMFowMzExMC8GA1UEAxMoMUEwQkIwRERDNTBBNDgyMjU5NUFF NzE4REY2NDZENjA3MDBBRjYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnUGO6z8BEDlq50jcBx7V8ScDUcDxhWVom+vpRxDY6zWHNX2mGpeVuwNNRZ L9juDkXR3RmgP9MFbdf96+GUQRUciAZPBzaX63gLMPYH8iOvGVi+M1RcoYDEuSPr pN5xVov7o48Zw/u63oE1xKik8NMkeyIh5sb4xpUpWBFbZlhSCQ4s5YFb98ZLBvT1 Mw5N4X4VS4FcEBkADUPEDGc16E7ML4UKJpk7LX8moeZYILniOoa4s0cGFZZRbBJI 1t+nMp8TmFYATOt7iUgkmqYgrGLZ+pwc3QdvmjZTZxJENnYi54m0F00DzBxt2w4C v9A4g4DHA3p+HzA4AXZEhh28bm0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBoLsN3FCkgiWVrnGN9kbWBwCvYfMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgxYzA5YzllLWZlOGEtNDk4OS1iNWJiLWFlNDE5MzM4Zjg3My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MWMwOWM5 ZS1mZThhLTQ5ODktYjViYi1hZTQxOTMzOGY4NzMvMC8xQTBCQjBEREM1MEE0ODIy NTk1QUU3MThERjY0NkQ2MDcwMEFGNjFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBRMMA0GCSqGSIb3DQEBCwUAA4IBAQCh2xoP/weLC6xQvqGuJd40GIFKs/B8 ocGQcZ2SwsKEh02oCSknBA7mzCP/lA1orZtu6+Wd+u/1AexA8TrZpRcNIS61rII/ GbfoobbcP/l9O3nOvWCj/QNN8UbQuCgL20IuwrJYeAaC9V+4qufqKQutemXQb7IW O9LYCHUOgVl5ytwmN8xsMzUFlQuS7+ME07agTj7oqoy809859alJZ6qeeP0HMMBK T1ozv+JumCsAsS7heL46YfecUNfTpMves9QLgBno0dSBUZT/M1WrsN18B9hEzxAl TjFi0tMBXpGWm5JkSbfowsNFn8EU3VURnMq3ll0drZGEY057E+eJc3Mh -----END CERTIFICATE-----Generated at Tue May 12 22:39:15 2026 by rpki-client