$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer File: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer (raw, json) Hash identifier: WN0bBS5yM/f0JWSMH40K8QWWzJRKqeFYfSAtURdI+xQ= Subject key identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2E79775E5332AD64ABFD8AF95DA7159FE0DD8277 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:05 +0000 Certificate not after: Sun 02 May 2027 00:39:05 +0000 Subordinate resources: IP: 157.66.246.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:79:77:5e:53:32:ad:64:ab:fd:8a:f9:5d:a7:15:9f:e0:dd:82:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:34:05 2026 GMT Not After : May 2 00:39:05 2027 GMT Subject: CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:46:57:75:c6:c5:6f:d0:1e:dc:51:02:82: 1e:97:d1:d7:86:ee:ce:aa:3d:4a:96:ba:a5:bf:ad: 88:30:ec:72:9a:d1:1b:d4:d0:65:a8:de:71:b8:b9: d5:d1:12:b7:10:ba:6f:d3:67:f7:dd:63:4d:ab:01: 02:db:4a:fe:8b:7c:30:30:a4:3d:6c:86:7e:a2:24: c6:20:43:35:84:c8:a6:dc:70:7e:0a:a0:eb:eb:7f: 41:28:25:7a:6c:89:75:c7:53:47:b8:e6:02:5d:0f: 78:b6:7e:0c:86:10:89:85:41:f5:4b:5e:4a:5c:d3: a0:37:ee:d9:86:61:60:d7:32:10:74:d5:89:00:cd: 5d:87:d8:f0:3a:8c:5a:4e:0f:07:dd:74:fa:95:d9: 7c:b5:76:50:f0:b7:2a:89:60:56:e1:81:4f:37:14: b9:44:34:a4:17:a9:08:7d:9b:f5:2d:90:71:3a:fe: 16:26:64:72:f0:70:a4:9c:86:68:93:67:d0:7d:de: 33:f5:c7:bf:73:63:b6:a9:cb:6a:0c:34:c3:3a:e1: 21:bd:54:75:ae:62:6c:94:cc:3e:c8:6f:80:24:e2: 46:4d:92:40:fc:cd:a9:8a:c6:ab:d7:75:02:99:26: c1:ee:9f:7a:bb:fb:93:89:33:bb:50:cf:5e:a4:fc: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.246.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:be:e9:7b:ae:c5:c2:bc:f3:4a:72:89:a1:1f:54:dc:31:d0: a5:93:bc:60:52:63:03:d5:6f:f1:5c:2a:8e:4a:45:46:b3:d7: 17:75:f8:aa:43:e1:15:a7:de:fc:80:66:c5:ff:82:93:16:ae: 85:33:be:05:e1:60:5f:43:95:94:42:2c:b9:f3:d5:2d:29:10: c0:2b:a2:10:80:d5:62:26:cf:b1:93:b0:20:f5:71:66:b4:31: d7:ce:fe:23:81:ac:50:b0:9d:51:09:13:ae:a3:9b:01:ed:b9: e4:41:b2:a9:82:45:c1:23:95:3a:ad:52:5d:aa:b2:26:1f:b8: cc:63:9c:58:66:21:a4:cb:ee:06:97:29:e7:bd:de:64:ed:75: 28:11:99:85:80:16:39:55:3c:c7:59:74:1a:10:66:f0:0d:bc: ed:05:60:9e:34:e9:b2:8f:3f:c0:ea:3d:39:bc:ec:13:2f:04: 3d:ca:58:ff:c2:b5:1f:9b:95:d4:f7:3d:6f:36:79:ac:6b:6b: 32:f1:e1:7b:ff:8d:53:37:d8:8a:c1:7d:a7:87:d2:2c:8c:6c: 51:3c:4b:be:f5:31:35:a3:34:02:18:cf:eb:cb:fe:3c:12:7e: b5:04:ce:ff:f7:e9:d8:8b:23:48:a2:74:a9:f8:d9:ef:e4:a4: 92:ab:92:21 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULnl3XlMyrWSr/Yr5XacVn+DdgncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMzQwNVoX DTI3MDUwMjAwMzkwNVowMzExMC8GA1UEAxMoMUUxQUMxQzlCM0U2N0Y4Mzk1Mzk1 NDIzREEyRUIyNkU4RTY5MUZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZIRld1xsVv0B7cUQKCHpfR14buzqo9Spa6pb+tiDDscprRG9TQZajecbi5 1dEStxC6b9Nn991jTasBAttK/ot8MDCkPWyGfqIkxiBDNYTIptxwfgqg6+t/QSgl emyJdcdTR7jmAl0PeLZ+DIYQiYVB9UteSlzToDfu2YZhYNcyEHTViQDNXYfY8DqM Wk4PB910+pXZfLV2UPC3KolgVuGBTzcUuUQ0pBepCH2b9S2QcTr+FiZkcvBwpJyG aJNn0H3eM/XHv3NjtqnLagw0wzrhIb1Uda5ibJTMPshvgCTiRk2SQPzNqYrGq9d1 Apkmwe6ferv7k4kzu1DPXqT8LSkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB4awcmz5n+DlTlUI9ousm6OaR/BMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUyNzJlNTI3LTcyNWItNDllMy04NzQzLWM3NTNkZDMzNzllMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MjcyZTUy Ny03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRTFBQzFDOUIzRTY3Rjgz OTUzOTU0MjNEQTJFQjI2RThFNjkxRkMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUL2MA0GCSqGSIb3DQEBCwUAA4IBAQANvul7rsXCvPNKcomhH1TcMdClk7xg UmMD1W/xXCqOSkVGs9cXdfiqQ+EVp978gGbF/4KTFq6FM74F4WBfQ5WUQiy589Ut KRDAK6IQgNViJs+xk7Ag9XFmtDHXzv4jgaxQsJ1RCROuo5sB7bnkQbKpgkXBI5U6 rVJdqrImH7jMY5xYZiGky+4Glynnvd5k7XUoEZmFgBY5VTzHWXQaEGbwDbztBWCe NOmyjz/A6j05vOwTLwQ9ylj/wrUfm5XU9z1vNnmsa2sy8eF7/41TN9iKwX2nh9Is jGxRPEu+9TE1ozQCGM/ry/48En61BM7/9+nYiyNIonSp+Nnv5KSSq5Ih -----END CERTIFICATE-----Generated at Tue May 12 22:03:56 2026 by rpki-client