$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer (raw, json) Hash identifier: /trBnxBVYxL4yzgBSGGXc+VFboyLdAwapZihdyjzK6k= Subject key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 33338396E18C4367D840451F93A1ADDCE0F19700 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:16:08 +0000 Certificate not after: Sun 02 May 2027 01:21:08 +0000 Subordinate resources: IP: 160.22.36.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:33:83:96:e1:8c:43:67:d8:40:45:1f:93:a1:ad:dc:e0:f1:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:16:08 2026 GMT Not After : May 2 01:21:08 2027 GMT Subject: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:37:b1:21:4f:67:34:5b:ff:3f:3e:d5:8f: 8e:07:fd:7b:68:9e:3b:21:e3:e6:bc:84:d0:6f:fe: 4d:45:37:9c:66:45:22:9e:38:ab:d3:2f:f3:47:99: 52:4e:cf:55:4f:47:a6:49:6a:81:c5:1e:aa:5a:52: 32:91:c3:d6:d2:dc:ee:9d:60:0b:59:f4:f5:8f:f2: ff:50:b8:37:3f:9c:2b:55:8a:5e:ad:fb:37:d7:58: 5c:7e:66:69:6f:29:85:25:b0:c9:c4:39:00:da:f9: 76:88:9a:97:94:74:a9:dc:51:4b:39:33:d3:b7:ef: 49:85:48:1e:4f:dc:2f:45:20:07:fc:59:ef:77:6c: 8f:c8:22:69:24:0e:7b:4a:8f:81:cd:d8:f8:f6:66: 92:1b:0d:54:e6:09:c6:2b:6c:40:62:7a:39:9a:1e: ba:d7:f4:00:3d:1d:26:e2:80:75:a5:ec:6e:e8:9a: b6:35:7f:86:b5:16:72:5f:c6:60:ac:a0:f8:b7:d9: 0b:c6:13:08:fa:13:36:22:46:65:01:77:ac:7e:d7: 03:0c:3b:7b:98:5b:21:ca:2a:16:a9:8a:00:1c:3e: a7:d1:14:d6:01:86:df:df:da:98:fa:5e:37:79:c9: 59:b5:38:17:bd:14:23:f9:35:c6:31:4f:ef:41:0f: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.36.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:a1:f3:b7:49:99:b3:67:cc:92:b1:e8:0c:e8:08:a5:cb:b0: c2:cd:9e:53:b2:ed:7c:19:6c:d4:31:75:26:06:f4:b3:15:9b: 0b:ab:5f:d2:91:b0:ab:9f:00:a4:00:be:ec:04:27:12:e0:59: eb:4e:93:ed:a0:2a:5e:5c:13:86:e9:d6:ff:91:f8:c6:5e:d4: 9a:f8:b2:3c:29:95:54:75:ed:4a:bc:d9:b8:cf:1b:c7:60:c5: 1d:4f:cb:94:ab:58:50:f4:30:d2:97:6f:b2:eb:6a:28:73:69: 31:74:0f:26:b1:69:c6:d8:95:c4:62:38:49:d3:3d:80:1d:27: 34:ec:55:2c:1f:a4:87:e7:79:d0:14:cf:44:af:d8:73:88:6e: 24:54:e6:4e:80:ee:15:b0:f4:c7:c6:85:07:83:95:69:2b:16: 42:b2:e0:14:c9:0c:07:49:10:d8:82:1c:a1:89:04:43:75:e5: 0d:14:c9:40:88:6f:8f:95:de:64:65:fa:2b:2f:17:d6:5b:7a: ab:b8:aa:09:80:ce:94:74:c8:ac:e4:a6:f7:21:ac:40:3d:9f: c5:98:3e:2f:9d:04:8b:73:af:13:f0:2c:2e:4c:8e:e1:af:4b: dd:8f:fb:69:59:7b:ca:3f:ad:16:a7:ef:1e:97:ae:9f:0c:2c: 78:a3:22:4b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMzODluGMQ2fYQEUfk6Gt3ODxlwAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMTYwOFoX DTI3MDUwMjAxMjEwOFowMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1 MzZDQTk0Q0YwNzBGRjE3N0Q5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGlN7EhT2c0W/8/PtWPjgf9e2ieOyHj5ryE0G/+TUU3nGZFIp44q9Mv80eZ Uk7PVU9HpklqgcUeqlpSMpHD1tLc7p1gC1n09Y/y/1C4Nz+cK1WKXq37N9dYXH5m aW8phSWwycQ5ANr5doial5R0qdxRSzkz07fvSYVIHk/cL0UgB/xZ73dsj8giaSQO e0qPgc3Y+PZmkhsNVOYJxitsQGJ6OZoeutf0AD0dJuKAdaXsbuiatjV/hrUWcl/G YKyg+LfZC8YTCPoTNiJGZQF3rH7XAww7e5hbIcoqFqmKABw+p9EU1gGG39/amPpe N3nJWbU4F70UI/k1xjFP70EPjxECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBxcOq99XP44zq5TbKlM8HD/F32XMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhmNTgyZjJiLTg2MjUtNGYzOC1iMjZlLTQyZmJkM2MyMWNmMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ZjU4MmYy Yi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC8xQzVDM0FBRjdENUNGRTM4 Q0VBRTUzNkNBOTRDRjA3MEZGMTc3RDk3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBYkMA0GCSqGSIb3DQEBCwUAA4IBAQAeofO3SZmzZ8ySsegM6Aily7DCzZ5T su18GWzUMXUmBvSzFZsLq1/SkbCrnwCkAL7sBCcS4FnrTpPtoCpeXBOG6db/kfjG XtSa+LI8KZVUde1KvNm4zxvHYMUdT8uUq1hQ9DDSl2+y62ooc2kxdA8msWnG2JXE YjhJ0z2AHSc07FUsH6SH53nQFM9Er9hziG4kVOZOgO4VsPTHxoUHg5VpKxZCsuAU yQwHSRDYghyhiQRDdeUNFMlAiG+Pld5kZforLxfWW3qruKoJgM6UdMis5Kb3IaxA PZ/FmD4vnQSLc68T8CwuTI7hr0vdj/tpWXvKP60Wp+8el66fDCx4oyJL -----END CERTIFICATE-----Generated at Tue May 12 22:46:02 2026 by rpki-client