$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer (raw, json) Hash identifier: LQMKYMRnreOP1eaMF7IN7MIokOAbRVNpAIVMEwWIvv0= Subject key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 051CEE825E302840FE165AB1182A68006D75A974 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:03 +0000 Certificate not after: Sun 02 May 2027 00:36:03 +0000 Subordinate resources: IP: 160.19.84.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1c:ee:82:5e:30:28:40:fe:16:5a:b1:18:2a:68:00:6d:75:a9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:31:03 2026 GMT Not After : May 2 00:36:03 2027 GMT Subject: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:ac:9b:cc:1e:e1:25:df:af:8b:07:b5:a1: 28:1b:d7:c6:74:06:4e:aa:ee:43:82:b1:68:5b:af: 81:2c:7b:3e:50:9f:73:79:7c:47:d8:be:d4:bc:e1: a6:76:cc:6e:57:98:ad:16:12:33:6b:e4:8c:cf:1a: d4:11:b9:fd:d5:c1:c7:72:51:c1:0d:c7:93:72:35: 32:ad:3d:dd:d2:bc:37:43:5c:58:30:21:3a:6d:97: 6b:e3:91:7c:cc:1a:72:79:5d:50:8f:58:d9:84:3f: 02:b7:a7:7f:81:32:8e:5a:9f:9e:26:94:61:6a:94: d3:cf:fb:1f:c9:33:ef:10:ed:4b:6c:a8:49:9e:fe: ed:a1:7a:a8:29:45:a1:bf:b0:17:04:21:1f:96:84: e7:1c:e9:a0:50:61:af:f4:72:e0:a6:0b:89:e8:b4: c6:1a:a1:89:a2:e7:4c:d1:a3:ce:a3:4d:28:d0:31: 74:f9:2b:ec:85:ac:83:b8:9f:ba:b7:3b:c6:b0:f9: 53:44:85:b9:49:8e:e0:1e:3f:e4:1c:89:07:c4:23: 72:c2:26:e5:81:73:87:04:93:7d:4e:f0:ea:9d:27: 21:e6:5a:9f:7d:ac:94:06:8d:22:ce:5b:e3:cf:f6: ae:bb:48:c4:31:6c:5c:01:76:cc:d2:c7:ed:31:85: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/23 Signature Algorithm: sha256WithRSAEncryption 58:64:f4:77:a3:9d:c6:e1:7f:f6:d0:30:76:3a:4b:02:92:64: cf:b2:2c:a5:6c:98:c6:77:d0:9d:97:05:d9:e1:8d:ac:39:a0: 5b:6d:4d:0b:be:4f:74:00:17:7e:87:9c:98:67:92:e9:d8:0f: 92:f3:ff:6c:61:2e:f4:4b:a7:3b:af:ee:df:cb:8b:61:8e:94: 4a:2e:52:f0:4b:03:82:f8:b0:cf:de:c7:ea:54:79:a9:60:95: 10:44:c6:70:b0:1a:fb:f8:8f:bf:fc:c0:cb:06:9d:ca:8d:ca: ef:3e:f9:41:0c:b4:6b:47:7c:ff:3f:e8:1a:54:74:54:12:08: 90:23:69:66:83:fb:8f:ed:f7:f9:1d:73:c1:69:43:8b:41:4d: 73:87:70:cb:ab:1a:ae:45:c3:b5:ff:14:66:1e:27:8e:98:0a: 78:8f:e5:51:33:93:f6:01:33:7c:e3:06:20:38:52:a5:56:05: 58:68:cb:c8:62:92:7a:94:29:e5:df:77:32:58:ba:34:89:77: 3e:e8:58:43:d3:93:d9:09:be:e3:6c:bc:02:43:f8:bd:fb:07: 2c:0c:52:b4:58:70:88:f0:1e:1e:43:e8:43:44:be:22:85:01: 46:91:37:bc:4b:b8:ef:76:77:9f:04:69:ba:51:b0:17:11:a5: 8c:fd:7f:8b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBRzugl4wKED+FlqxGCpoAG11qXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMzEwM1oX DTI3MDUwMjAwMzYwM1owMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUw NkQyMEQyM0Q5NUVCQUZDMTFEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxbrJvMHuEl36+LB7WhKBvXxnQGTqruQ4KxaFuvgSx7PlCfc3l8R9i+1Lzh pnbMbleYrRYSM2vkjM8a1BG5/dXBx3JRwQ3Hk3I1Mq093dK8N0NcWDAhOm2Xa+OR fMwacnldUI9Y2YQ/Arenf4EyjlqfniaUYWqU08/7H8kz7xDtS2yoSZ7+7aF6qClF ob+wFwQhH5aE5xzpoFBhr/Ry4KYLiei0xhqhiaLnTNGjzqNNKNAxdPkr7IWsg7if urc7xrD5U0SFuUmO4B4/5ByJB8QjcsIm5YFzhwSTfU7w6p0nIeZan32slAaNIs5b 48/2rrtIxDFsXAF2zNLH7TGFKMMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCC3WXGgMQXMd64G0g0j2V66/BHSMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRlMzc0ZDQ4LTVhNzAtNGM3Zi1iZGZkLWQ4MDUyZWJhZjBhYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZTM3NGQ0 OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC8yMEI3NTk3MUEwMzEwNUND NzdBRTA2RDIwRDIzRDk1RUJBRkMxMUQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBNUMA0GCSqGSIb3DQEBCwUAA4IBAQBYZPR3o53G4X/20DB2OksCkmTPsiyl bJjGd9CdlwXZ4Y2sOaBbbU0Lvk90ABd+h5yYZ5Lp2A+S8/9sYS70S6c7r+7fy4th jpRKLlLwSwOC+LDP3sfqVHmpYJUQRMZwsBr7+I+//MDLBp3KjcrvPvlBDLRrR3z/ P+gaVHRUEgiQI2lmg/uP7ff5HXPBaUOLQU1zh3DLqxquRcO1/xRmHieOmAp4j+VR M5P2ATN84wYgOFKlVgVYaMvIYpJ6lCnl33cyWLo0iXc+6FhD05PZCb7jbLwCQ/i9 +wcsDFK0WHCI8B4eQ+hDRL4ihQFGkTe8S7jvdnefBGm6UbAXEaWM/X+L -----END CERTIFICATE-----Generated at Tue May 12 22:47:18 2026 by rpki-client