$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer File: 1A3FAE72210F536C22392A8609A526D7557AD82C.cer (raw, json) Hash identifier: Oif8fVDbH19jKE8WnA1fKIV6nJe4MT/PxG31useO9Jk= Subject key identifier: 1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5A296669F9B2785E1076C06A571E1C9C6FFD7766 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:49 +0000 Certificate not after: Sun 02 May 2027 01:52:49 +0000 Subordinate resources: IP: 157.66.123.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:29:66:69:f9:b2:78:5e:10:76:c0:6a:57:1e:1c:9c:6f:fd:77:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:47:49 2026 GMT Not After : May 2 01:52:49 2027 GMT Subject: CN=1A3FAE72210F536C22392A8609A526D7557AD82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:5c:45:52:69:58:40:ef:a4:28:d5:a3:3b: cd:cb:f1:17:f9:80:ca:46:8c:50:f4:28:3c:53:42: 07:b2:81:38:2f:5a:82:46:b3:33:53:6e:58:dd:87: 75:0f:99:aa:e1:14:79:d5:8c:e0:31:07:2e:70:60: bf:04:2e:6c:98:40:2d:61:b1:5e:4d:81:36:c0:98: 31:58:da:33:39:d8:bf:13:2e:19:cd:57:99:1d:fa: 96:f2:d0:7d:e0:69:86:0d:ff:e8:3a:37:97:b9:26: 3d:7a:d0:79:ff:ee:0e:24:f1:63:14:b9:e0:c5:3d: 9f:cb:7b:2c:12:bf:94:b4:61:b5:3a:f9:16:86:ed: 48:12:73:61:e1:53:f3:2c:4e:ed:4e:cf:b7:1c:f8: 47:d4:dd:68:22:13:f3:18:b1:f1:45:c7:a0:e4:bc: 3c:50:23:ae:20:4b:df:61:33:73:27:5f:58:8d:df: 5d:bf:b6:ac:f8:bf:af:97:bd:55:17:6d:b6:b3:57: 67:6e:bb:9f:13:0b:b1:03:a1:2c:de:f7:e5:8c:37: 4b:b9:88:c6:c1:bc:fb:8f:f2:d0:06:c9:e7:75:b0: 27:6e:94:aa:0a:31:e2:07:3c:76:ca:fb:1c:d7:5c: b8:d6:d2:d6:2b:88:ba:c6:94:d8:df:60:c6:3f:bc: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.123.0/24 Signature Algorithm: sha256WithRSAEncryption 00:7a:e1:5a:00:a6:9b:2d:06:63:79:df:91:7e:b5:45:a1:99: 02:86:a7:28:ee:21:69:85:21:d6:ed:bd:cd:bb:12:3c:3d:44: 3d:30:02:6a:ad:9a:75:fa:6e:e0:83:69:10:58:68:d7:a8:cc: 13:f3:3f:cd:10:44:65:82:36:5d:0f:17:a6:a1:ad:83:64:71: 8a:37:bc:65:99:6d:3d:32:e2:fc:ed:75:4c:00:78:87:85:25: 6a:ce:ed:f5:a3:ae:f7:f3:04:2d:78:e8:f6:aa:5d:25:00:42: b1:14:7f:2e:bc:c7:d1:a6:7a:a6:f8:d4:e8:ed:52:fb:72:2c: 43:6e:d7:f1:02:31:c4:78:6d:d7:1e:88:ee:30:65:2a:cb:c5: 4e:5a:52:93:1c:c6:39:49:12:82:21:36:be:90:c7:4c:cb:9d: 9a:61:27:6e:86:08:fe:81:58:44:6d:76:9b:43:5a:8a:8e:74: c6:f4:1c:c5:7c:da:dc:56:1b:31:82:98:6a:22:79:83:3f:82: 3c:ac:e5:d0:5e:6e:fa:60:09:e8:d2:d1:63:8b:47:fa:6c:50: 60:e8:f7:27:69:f4:04:27:7f:3d:2d:36:57:82:89:da:d1:4e: 15:53:80:70:a9:16:d5:fd:30:af:00:fd:23:3b:77:a6:f3:85: 79:d9:4c:a7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWilmafmyeF4QdsBqVx4cnG/9d2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDc0OVoX DTI3MDUwMjAxNTI0OVowMzExMC8GA1UEAxMoMUEzRkFFNzIyMTBGNTM2QzIyMzky QTg2MDlBNTI2RDc1NTdBRDgyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2EXEVSaVhA76Qo1aM7zcvxF/mAykaMUPQoPFNCB7KBOC9agkazM1NuWN2H dQ+ZquEUedWM4DEHLnBgvwQubJhALWGxXk2BNsCYMVjaMznYvxMuGc1XmR36lvLQ feBphg3/6Do3l7kmPXrQef/uDiTxYxS54MU9n8t7LBK/lLRhtTr5FobtSBJzYeFT 8yxO7U7Ptxz4R9TdaCIT8xix8UXHoOS8PFAjriBL32EzcydfWI3fXb+2rPi/r5e9 VRdttrNXZ267nxMLsQOhLN735Yw3S7mIxsG8+4/y0AbJ53WwJ26Uqgox4gc8dsr7 HNdcuNbS1iuIusaU2N9gxj+8N4cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBo/rnIhD1NsIjkqhgmlJtdVetgsMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MxYjA4ODQ1LWRmODItNDRjMi05NzZkLTZkNzRiODExNjZmNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMWIwODg0 NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8xQTNGQUU3MjIxMEY1MzZD MjIzOTJBODYwOUE1MjZENzU1N0FEODJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnUJ7MA0GCSqGSIb3DQEBCwUAA4IBAQAAeuFaAKabLQZjed+RfrVFoZkChqco 7iFphSHW7b3NuxI8PUQ9MAJqrZp1+m7gg2kQWGjXqMwT8z/NEERlgjZdDxemoa2D ZHGKN7xlmW09MuL87XVMAHiHhSVqzu31o6738wQteOj2ql0lAEKxFH8uvMfRpnqm +NTo7VL7cixDbtfxAjHEeG3XHojuMGUqy8VOWlKTHMY5SRKCITa+kMdMy52aYSdu hgj+gVhEbXabQ1qKjnTG9BzFfNrcVhsxgphqInmDP4I8rOXQXm76YAno0tFji0f6 bFBg6PcnafQEJ389LTZXgona0U4VU4BwqRbV/TCvAP0jO3em84V52Uyn -----END CERTIFICATE-----Generated at Tue May 12 22:33:03 2026 by rpki-client