$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer (raw, json) Hash identifier: 7Ese/1usxEXys3Y0+LZkoFnV4zfrITW2wzsHZ/MYWvQ= Subject key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 20B25C6048499C5B06105DD992672C4E106E5387 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:12:52 +0000 Certificate not after: Sun 02 May 2027 00:17:52 +0000 Subordinate resources: IP: 157.20.193.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b2:5c:60:48:49:9c:5b:06:10:5d:d9:92:67:2c:4e:10:6e:53:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:12:52 2026 GMT Not After : May 2 00:17:52 2027 GMT Subject: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:d8:56:e1:aa:8e:17:6a:7b:c1:9d:0a:68: b3:e0:6a:2e:61:81:ab:ed:33:82:9e:40:ba:5b:6a: 51:b5:4a:4a:10:2b:6b:d1:6e:e0:aa:83:56:1d:cb: 7f:e9:54:03:18:c7:f6:91:3e:fc:cc:22:fa:ea:5a: 36:32:88:2c:18:eb:a8:6f:b7:e6:cb:85:dd:0b:47: 89:48:1c:2c:22:04:5f:6d:40:7e:02:06:34:6a:28: 2c:33:11:13:5c:f7:63:cf:75:89:50:ef:26:04:64: e5:f8:1b:20:20:cb:95:58:2d:27:4b:ef:f3:98:92: 81:da:61:22:56:d2:4f:7a:40:af:9c:a4:4e:a1:d3: 77:a5:27:2e:f6:5a:b4:e6:e2:96:bc:b7:ab:e5:77: 8f:be:19:95:fa:b6:9c:ac:9a:e8:2b:49:c4:75:46: 60:42:a6:77:5a:8d:4c:bf:9f:99:f7:92:ce:85:52: 69:60:e2:4d:7b:de:44:64:ee:0c:19:b9:67:a2:e6: 95:f8:bf:51:42:9b:4e:99:c2:ed:47:35:1d:5a:53: 71:cb:77:15:ec:29:23:c4:9e:bd:b8:af:48:3a:68: 2a:8f:27:59:17:b8:9a:45:9d:67:eb:0e:a8:c8:0a: b2:16:64:e4:b6:cb:a8:56:9b:f9:0d:c8:98:32:be: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.193.0/24 Signature Algorithm: sha256WithRSAEncryption 47:b6:0d:4c:f4:57:1c:8f:bc:b3:98:fb:26:49:3d:ff:81:c7: 69:f4:86:d9:d8:19:95:18:da:e6:a5:8d:b8:4c:52:52:39:07: 89:72:93:a8:f4:8d:8f:95:b4:0c:12:50:a8:a7:53:4a:4b:e7: 62:00:d7:99:29:cc:18:43:5d:ac:f5:69:85:70:2c:76:4f:58: d8:ab:36:60:48:7d:a3:a4:35:bf:03:dd:60:f1:32:8e:b5:58: c8:89:f0:22:f3:7f:12:a9:6d:5f:22:5c:b5:22:98:bb:39:2a: 45:25:c6:58:85:21:88:2c:8e:15:43:c1:f5:cf:e4:16:42:c3: fa:22:38:5c:cd:6d:c7:85:cb:85:2c:cb:a4:e2:3b:57:eb:a8: 8d:0c:9e:20:25:32:7a:ad:18:64:37:d3:da:4a:6c:07:1a:45: f0:0b:3d:d2:97:c6:d7:4e:9e:1d:34:b9:b3:4a:ee:b1:ab:45: a7:9b:0a:a6:d5:64:9d:05:04:7b:a1:2b:6b:89:b9:bf:8b:b4: 27:11:16:91:fd:ee:90:1d:1e:57:53:c2:67:80:78:f3:59:57: e2:3a:a9:6f:17:29:07:d8:31:34:64:4b:6f:60:b1:50:40:a1: e7:a0:38:b0:1d:78:c1:c7:20:48:c1:24:73:b5:d6:b5:05:7e: f3:fd:56:42 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUILJcYEhJnFsGEF3ZkmcsThBuU4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMTI1MloX DTI3MDUwMjAwMTc1MlowMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0Qw MzEzNTE0MkQxNzY4M0EyNEU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6r2Fbhqo4XanvBnQpos+BqLmGBq+0zgp5AultqUbVKShAra9Fu4KqDVh3L f+lUAxjH9pE+/Mwi+upaNjKILBjrqG+35suF3QtHiUgcLCIEX21AfgIGNGooLDMR E1z3Y891iVDvJgRk5fgbICDLlVgtJ0vv85iSgdphIlbST3pAr5ykTqHTd6UnLvZa tObilry3q+V3j74Zlfq2nKya6CtJxHVGYEKmd1qNTL+fmfeSzoVSaWDiTXveRGTu DBm5Z6Lmlfi/UUKbTpnC7Uc1HVpTcct3FewpI8SevbivSDpoKo8nWRe4mkWdZ+sO qMgKshZk5LbLqFab+Q3ImDK+bGkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB0snkTk5eIuiM0DE1FC0XaDok59MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMyODgwZGRiLTNkOTQtNGUzNC05MmRjLTRkNDUzOGI5MDVhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMjg4MGRk Yi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC8xRDJDOUU0NEU0RTVFMjJF ODhDRDAzMTM1MTQyRDE3NjgzQTI0RTdELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnRTBMA0GCSqGSIb3DQEBCwUAA4IBAQBHtg1M9Fccj7yzmPsmST3/gcdp9IbZ 2BmVGNrmpY24TFJSOQeJcpOo9I2PlbQMElCop1NKS+diANeZKcwYQ12s9WmFcCx2 T1jYqzZgSH2jpDW/A91g8TKOtVjIifAi838SqW1fIly1Ipi7OSpFJcZYhSGILI4V Q8H1z+QWQsP6IjhczW3HhcuFLMuk4jtX66iNDJ4gJTJ6rRhkN9PaSmwHGkXwCz3S l8bXTp4dNLmzSu6xq0Wnmwqm1WSdBQR7oStribm/i7QnERaR/e6QHR5XU8JngHjz WVfiOqlvFykH2DE0ZEtvYLFQQKHnoDiwHXjBxyBIwSRztda1BX7z/VZC -----END CERTIFICATE-----Generated at Wed May 13 00:44:35 2026 by rpki-client