$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer (raw, json) Hash identifier: vFG+S37yqtiwHx0YX3KbvIo4r0yFVvISxsdr8fgXrUk= Subject key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5CC80939B60059827E11469D2B3AA9D07281FD88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:40 +0000 Certificate not after: Sun 02 May 2027 00:28:40 +0000 Subordinate resources: IP: 160.20.138.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c8:09:39:b6:00:59:82:7e:11:46:9d:2b:3a:a9:d0:72:81:fd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:23:40 2026 GMT Not After : May 2 00:28:40 2027 GMT Subject: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:89:25:56:31:b1:e3:3c:eb:46:a8:11:5b: 4e:97:0d:df:07:14:7d:45:b4:b6:6d:5e:3a:fa:db: 6e:5b:05:fa:44:64:8f:fc:a2:55:c4:14:f3:7e:3c: 92:23:cd:03:ff:1e:02:3b:cc:e2:84:0c:e1:8c:11: 8b:43:1c:ea:35:f1:39:d2:62:c3:29:3f:3f:27:6c: ea:83:90:8a:4c:73:c2:66:36:41:a6:03:b3:63:86: 6d:76:c1:6c:dc:62:f6:65:f4:5e:6b:26:fb:09:51: ca:bd:92:2e:7f:97:bf:d6:6a:f7:ba:83:91:81:a0: 4c:37:c7:24:9f:dd:91:b8:eb:6e:f5:31:54:cd:38: 7c:d6:87:36:bd:76:43:f6:64:1a:e0:1a:cb:48:71: 0c:3e:7f:21:87:b2:15:58:32:fa:49:9a:fd:6a:5f: 15:ec:76:67:3e:d3:3b:7d:81:cd:7e:be:73:9b:1c: aa:3d:31:b7:8b:78:2b:e0:27:7f:78:0d:13:44:78: d3:f7:b4:98:3b:2a:68:aa:d0:0b:e1:69:9c:01:85: a0:0f:0d:0c:cf:ae:5a:4b:5e:e2:fa:22:15:5b:6b: fc:1f:8f:41:56:60:f1:0d:a0:e9:98:c7:9d:63:22: 2a:fc:5e:e2:e9:56:22:c3:bb:85:25:7f:c7:a9:e6: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.138.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:66:61:8a:fc:72:9d:42:67:47:a8:af:59:01:2a:e5:3b:4c: 55:f4:db:25:8e:01:4e:0c:07:c4:9f:7d:7a:bd:74:60:44:5f: 3f:73:ed:01:a3:06:f3:85:54:52:68:98:22:f8:ce:2e:c2:46: ee:3b:45:00:bb:2c:fe:2e:ea:db:9a:f0:67:24:76:db:78:fa: 1a:37:3d:bb:f1:0d:6d:4e:98:fa:9b:44:83:5c:15:d3:72:42: 54:f5:48:2c:a6:87:99:62:c6:e3:71:ed:32:a7:3f:b7:18:7c: 2e:9c:cb:d9:f6:d0:8f:f1:cc:15:80:f7:da:c8:76:07:f3:7b: 7b:8a:f2:5b:15:40:cc:ef:cb:22:af:7f:a1:a5:98:62:eb:88: 8b:53:a6:e7:41:40:d8:d1:f0:94:7d:98:27:db:04:e8:9c:87: fc:25:c5:bb:71:1a:31:a2:b3:78:ac:c5:97:c5:90:38:e5:53: de:8e:ec:d1:91:1c:48:e5:61:71:65:9e:ef:a3:09:3c:e5:07: 36:28:05:ad:5a:93:65:a5:51:56:06:0a:e8:94:bd:f2:85:a3: 8a:5e:93:15:78:3f:95:bb:8e:10:64:7d:01:81:5d:1c:75:cf: a2:15:52:c3:29:83:96:f4:80:be:07:4f:c1:1c:09:0a:23:eb: 52:5c:be:bb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXMgJObYAWYJ+EUadKzqp0HKB/YgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjM0MFoX DTI3MDUwMjAwMjg0MFowMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0Yz OEFFMjkxNUU0RTVEQzQyMTIzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2iiSVWMbHjPOtGqBFbTpcN3wcUfUW0tm1eOvrbblsF+kRkj/yiVcQU8348 kiPNA/8eAjvM4oQM4YwRi0Mc6jXxOdJiwyk/Pyds6oOQikxzwmY2QaYDs2OGbXbB bNxi9mX0Xmsm+wlRyr2SLn+Xv9Zq97qDkYGgTDfHJJ/dkbjrbvUxVM04fNaHNr12 Q/ZkGuAay0hxDD5/IYeyFVgy+kma/WpfFex2Zz7TO32BzX6+c5scqj0xt4t4K+An f3gNE0R40/e0mDsqaKrQC+FpnAGFoA8NDM+uWkte4voiFVtr/B+PQVZg8Q2g6ZjH nWMiKvxe4ulWIsO7hSV/x6nmQ78CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB0KaCAudixCDH84rikV5OXcQhI9MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQyMTBlYzBmLTA0MjAtNDAyZi05NWZlLTdiMzNlNTExMmJjMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MjEwZWMw Zi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC8xRDBBNjgyMDJFNzYyQzQy MEM3RjM4QUUyOTE1RTRFNURDNDIxMjNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBSKMA0GCSqGSIb3DQEBCwUAA4IBAQAcZmGK/HKdQmdHqK9ZASrlO0xV9Nsl jgFODAfEn316vXRgRF8/c+0BowbzhVRSaJgi+M4uwkbuO0UAuyz+LurbmvBnJHbb ePoaNz278Q1tTpj6m0SDXBXTckJU9UgspoeZYsbjce0ypz+3GHwunMvZ9tCP8cwV gPfayHYH83t7ivJbFUDM78sir3+hpZhi64iLU6bnQUDY0fCUfZgn2wTonIf8JcW7 cRoxorN4rMWXxZA45VPejuzRkRxI5WFxZZ7vowk85Qc2KAWtWpNlpVFWBgrolL3y haOKXpMVeD+Vu44QZH0BgV0cdc+iFVLDKYOW9IC+B0/BHAkKI+tSXL67 -----END CERTIFICATE-----Generated at Tue May 12 22:33:18 2026 by rpki-client