$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer (raw, json) Hash identifier: kZIFL1GvvpeYTH3DHDjqFw9Icw3UriVz/4EeTtlcSEs= Subject key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 54C8E66BC193E1A5E152CC8EC84F4E897C3853AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:45 +0000 Certificate not after: Sun 02 May 2027 02:00:45 +0000 Subordinate resources: IP: 160.22.217.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c8:e6:6b:c1:93:e1:a5:e1:52:cc:8e:c8:4f:4e:89:7c:38:53:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:55:45 2026 GMT Not After : May 2 02:00:45 2027 GMT Subject: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:a9:a8:40:28:ee:fa:a9:d6:2e:cc:02:25: 0a:2f:39:f7:9c:09:77:a1:e5:2d:d3:61:bd:5d:1b: 1b:ca:98:67:0c:aa:59:b6:93:3e:ee:20:bc:40:5c: b5:57:4d:42:5e:97:e9:df:e3:d2:75:d2:10:a3:35: 31:01:ec:da:ef:07:ba:be:54:81:33:19:3a:40:46: 24:5a:1d:14:db:e5:76:28:c6:ae:d4:74:e2:85:4a: 57:9a:67:83:bd:f8:ed:ed:fd:4c:5a:8b:d4:f6:9b: 9a:9d:13:55:6d:80:b2:11:c7:1b:70:c1:eb:cc:2d: c3:ba:45:87:a7:df:17:bf:e8:98:36:66:0b:2d:bd: 29:4d:bc:df:6a:39:8c:a4:30:50:23:8c:45:e9:88: 27:b3:c7:bc:22:28:ef:11:e2:04:06:cd:e9:1c:dd: e7:af:f8:4e:56:ca:4d:e1:48:09:d5:0d:ca:77:50: 8f:7f:1c:c9:37:01:40:f1:3d:90:7c:45:f2:be:1d: 5d:d3:b5:56:48:4f:c9:35:c5:45:8b:8f:c5:c3:07: f5:8d:30:99:8c:a6:29:b6:a8:d6:9c:fa:64:eb:73: 99:ae:62:b4:dd:e4:e8:ce:cd:b7:a0:86:ee:b3:b8: 63:d1:49:9e:1c:80:bc:69:ee:6b:e5:21:81:fd:1c: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.217.0/24 Signature Algorithm: sha256WithRSAEncryption 25:52:57:8c:25:33:ba:21:7b:d2:06:44:a9:11:c7:52:29:65: 37:d4:65:08:40:c2:72:37:fb:a7:d1:92:6f:f9:5f:2f:3f:96: e5:56:16:07:4e:2d:de:52:73:52:88:4c:d8:1b:44:36:31:c2: c9:49:f4:64:ed:1a:a5:c4:ac:38:0f:1a:ca:f9:75:d8:60:0f: a7:b3:0d:3c:b8:8e:f2:65:04:60:4c:fd:81:8c:08:52:ec:6a: 7a:01:03:b5:7a:13:62:6d:e3:d7:e9:45:94:df:a7:dd:63:75: 26:b4:df:a6:0e:72:b2:fe:4b:5c:e1:3f:3d:1c:81:c8:cf:02: 4b:4d:ed:de:b1:a8:76:2a:99:0c:1b:72:ee:50:68:a3:60:43: 8d:bd:a3:d9:d1:ef:38:54:14:f7:67:10:24:76:67:39:ca:6b: 99:69:76:51:0a:89:4e:6e:65:e9:55:55:46:19:d6:3a:81:fa: f7:27:e2:a5:2c:b4:0a:c6:94:46:4c:c0:a0:59:45:78:37:d3: b6:9b:5d:ea:cd:77:ae:b5:f6:d5:1f:b0:22:76:16:d3:70:36: 39:af:48:b3:8a:69:55:12:a8:91:0e:6b:d4:2d:3c:4f:e3:0e: b0:79:4f:8d:f4:46:7b:92:22:7a:83:b7:e8:4e:28:c6:9e:39: 26:72:9f:cf -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVMjma8GT4aXhUsyOyE9OiXw4U6wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTU0NVoX DTI3MDUwMjAyMDA0NVowMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIy ODU0RjdBNDk3ODhEOEZDRTI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBxqahAKO76qdYuzAIlCi8595wJd6HlLdNhvV0bG8qYZwyqWbaTPu4gvEBc tVdNQl6X6d/j0nXSEKM1MQHs2u8Hur5UgTMZOkBGJFodFNvldijGrtR04oVKV5pn g7347e39TFqL1Pabmp0TVW2AshHHG3DB68wtw7pFh6ffF7/omDZmCy29KU2832o5 jKQwUCOMRemIJ7PHvCIo7xHiBAbN6Rzd56/4TlbKTeFICdUNyndQj38cyTcBQPE9 kHxF8r4dXdO1VkhPyTXFRYuPxcMH9Y0wmYymKbao1pz6ZOtzma5itN3k6M7Nt6CG 7rO4Y9FJnhyAvGnua+Uhgf0chaMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBtqa3+be6zO+KIoVPekl4jY/OJ0MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NlN2Q3MzhlLTJjYzctNGJkMi1iYjI4LTkxNDJlMWJhYTBiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZTdkNzM4 ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC8xQjZBNkI3RjlCN0JBQ0NF RjhBMjI4NTRGN0E0OTc4OEQ4RkNFMjc0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBbZMA0GCSqGSIb3DQEBCwUAA4IBAQAlUleMJTO6IXvSBkSpEcdSKWU31GUI QMJyN/un0ZJv+V8vP5blVhYHTi3eUnNSiEzYG0Q2McLJSfRk7RqlxKw4DxrK+XXY YA+nsw08uI7yZQRgTP2BjAhS7Gp6AQO1ehNibePX6UWU36fdY3UmtN+mDnKy/ktc 4T89HIHIzwJLTe3esah2KpkMG3LuUGijYEONvaPZ0e84VBT3ZxAkdmc5ymuZaXZR ColObmXpVVVGGdY6gfr3J+KlLLQKxpRGTMCgWUV4N9O2m13qzXeutfbVH7AidhbT cDY5r0izimlVEqiRDmvULTxP4w6weU+N9EZ7kiJ6g7foTijGnjkmcp/P -----END CERTIFICATE-----Generated at Tue May 12 22:02:55 2026 by rpki-client