$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer (raw, json) Hash identifier: DeP+D2NvadkJ5vWAnbMYfGEOsti8HhV9kuhizZmZ5gc= Subject key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 16658BA7E94615C665946B90FCA20529CEF78B28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:25:45 +0000 Certificate not after: Sun 02 May 2027 02:30:45 +0000 Subordinate resources: IP: 157.10.90.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:65:8b:a7:e9:46:15:c6:65:94:6b:90:fc:a2:05:29:ce:f7:8b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:25:45 2026 GMT Not After : May 2 02:30:45 2027 GMT Subject: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:c6:9b:56:9c:d2:f6:25:55:1b:35:20:b0: e7:ac:bc:62:98:a0:f8:b2:49:51:d3:88:0c:bc:52: 01:35:21:37:82:82:e9:97:32:a6:dd:93:c8:85:39: 60:32:46:4d:4a:1b:5f:2f:8e:19:2e:d5:f2:84:a1: ff:a7:2a:e2:ef:e5:ac:31:b0:83:39:62:60:64:78: 2d:03:09:0a:11:79:81:9a:08:e9:f7:cf:f3:a9:ed: dc:39:5a:e4:c2:de:e8:c5:c3:44:29:82:62:29:08: c3:2c:73:46:d5:35:bb:f0:38:60:82:8b:43:77:c9: 50:d7:e1:f2:8f:93:48:eb:9b:17:22:23:9a:a7:1f: 63:1b:3c:33:86:38:19:b2:1b:0d:f9:26:54:16:07: 7f:ed:b4:1b:0a:ee:b0:f2:5c:74:a3:a0:98:42:8b: b5:71:0f:e9:6f:74:62:8e:c0:7a:13:c4:26:b1:44: f9:42:12:27:83:59:f3:40:84:cd:09:ff:ac:e4:2a: cc:28:80:f2:20:69:2e:e5:79:c3:03:ef:ca:df:f3: 74:2d:28:34:4d:7f:c6:bd:1e:3d:15:8f:9a:4b:7b: 63:71:c6:90:55:f6:70:d9:5f:f1:85:c3:48:a8:2d: 5e:a0:2c:fb:3f:ad:a9:b7:6a:a2:cf:c1:d7:47:11: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.90.0/23 Signature Algorithm: sha256WithRSAEncryption 95:2c:b5:25:83:2c:d2:22:a3:e9:24:13:bd:d0:13:89:f1:bd: c9:3f:5f:0e:ea:c5:d0:6f:0e:41:dd:c3:5b:68:6d:6f:50:e1: 59:ab:38:98:ca:69:fc:37:d0:70:87:8c:89:a4:37:20:36:8c: e9:95:9b:d8:db:1c:25:8f:ef:f6:2e:64:ef:d6:bb:fa:d6:01: b8:03:b3:d0:ef:ce:c5:50:bf:f8:f1:d7:ca:87:32:ab:f4:11: 3e:1c:f7:01:c1:ce:ee:d0:6a:ea:a7:85:56:8e:78:14:61:11: d7:93:66:77:9a:52:73:a6:d0:e8:c6:92:21:7e:0b:65:4f:f3: 33:a9:05:b0:cd:67:4e:d7:02:dd:47:b5:7c:96:a2:0f:05:e8: 09:55:f5:8a:69:88:ba:e1:45:94:13:1e:e5:66:05:13:9e:c0: ab:3e:f2:29:d4:81:29:70:e6:b7:f3:18:f1:84:29:3f:2b:60: f9:20:25:5e:e1:f8:62:39:d6:45:f6:ad:72:3c:1a:76:41:12: 89:63:60:95:64:28:30:69:8c:95:19:50:f4:0a:fc:cb:48:41: 9e:1a:88:33:29:89:4f:27:53:7e:52:08:b9:d0:10:25:57:bb: bf:ba:e7:81:81:b1:64:02:fb:96:e3:1f:28:e0:10:ec:24:e8: f5:15:c9:d9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFmWLp+lGFcZllGuQ/KIFKc73iygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMjU0NVoX DTI3MDUwMjAyMzA0NVowMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1 Q0QxNzBDMkI1MUE4N0I4RjZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI6CxptWnNL2JVUbNSCw56y8Ypig+LJJUdOIDLxSATUhN4KC6Zcypt2TyIU5 YDJGTUobXy+OGS7V8oSh/6cq4u/lrDGwgzliYGR4LQMJChF5gZoI6ffP86nt3Dla 5MLe6MXDRCmCYikIwyxzRtU1u/A4YIKLQ3fJUNfh8o+TSOubFyIjmqcfYxs8M4Y4 GbIbDfkmVBYHf+20GwrusPJcdKOgmEKLtXEP6W90Yo7AehPEJrFE+UISJ4NZ80CE zQn/rOQqzCiA8iBpLuV5wwPvyt/zdC0oNE1/xr0ePRWPmkt7Y3HGkFX2cNlf8YXD SKgtXqAs+z+tqbdqos/B10cRd7kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBuenyNTPUEJnQxc0XDCtRqHuPbBMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VjZjNmOGM4LTA0MDYtNGIzOC1hN2E4LWRjYjE1ZTQxZjJiNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lY2YzZjhj OC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC8xQjlFOUYyMzUzM0Q0MTA5 OUQwQzVDRDE3MEMyQjUxQTg3QjhGNkMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQpaMA0GCSqGSIb3DQEBCwUAA4IBAQCVLLUlgyzSIqPpJBO90BOJ8b3JP18O 6sXQbw5B3cNbaG1vUOFZqziYymn8N9Bwh4yJpDcgNozplZvY2xwlj+/2LmTv1rv6 1gG4A7PQ787FUL/48dfKhzKr9BE+HPcBwc7u0Grqp4VWjngUYRHXk2Z3mlJzptDo xpIhfgtlT/MzqQWwzWdO1wLdR7V8lqIPBegJVfWKaYi64UWUEx7lZgUTnsCrPvIp 1IEpcOa38xjxhCk/K2D5ICVe4fhiOdZF9q1yPBp2QRKJY2CVZCgwaYyVGVD0CvzL SEGeGogzKYlPJ1N+Ugi50BAlV7u/uueBgbFkAvuW4x8o4BDsJOj1FcnZ -----END CERTIFICATE-----Generated at Tue May 12 22:16:26 2026 by rpki-client