$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer (raw, json) Hash identifier: Yc7Be50BrEcrmZKDU4KxbSYQwDz0DsoPuz4MpwgeG1c= Subject key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 79F000445271CD2CC0B959A6D62258FDAE14EA8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:49:22 +0000 Certificate not after: Sun 02 May 2027 01:54:22 +0000 Subordinate resources: IP: 160.25.157.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f0:00:44:52:71:cd:2c:c0:b9:59:a6:d6:22:58:fd:ae:14:ea:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:49:22 2026 GMT Not After : May 2 01:54:22 2027 GMT Subject: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:be:fd:dc:f6:48:3d:7e:88:20:38:33:ce: 12:16:4c:97:35:29:59:1a:84:c4:13:05:3d:0b:78: 91:00:12:f6:e7:46:13:96:7f:45:1f:91:a5:22:42: 62:ed:bd:ea:52:b4:35:db:19:35:83:fe:1e:aa:39: 8b:5a:ac:ab:8b:05:58:47:1a:d7:ba:80:6b:39:3d: 05:78:5a:b0:30:05:98:36:8d:ef:ea:1f:f5:93:3f: d3:f3:5c:3b:87:bc:92:ad:c4:9a:96:cd:21:a8:e9: a1:1d:9e:d8:e7:b4:2f:d5:94:a7:53:b1:41:e7:40: c0:66:8b:e7:c8:34:4f:3e:fb:4e:bb:96:7a:44:4c: 0c:e0:36:3e:be:f3:67:2a:64:79:61:5c:f9:e7:c6: c6:94:fe:03:b0:1f:15:c8:d4:d1:6a:a3:40:90:3a: 20:c1:25:9c:b1:12:4d:ba:1a:17:73:60:48:1b:61: 13:4c:8d:2a:c6:88:79:ef:52:9c:61:62:54:ad:90: 84:7b:23:f4:b9:37:94:11:9a:74:a6:ea:f2:d8:69: e7:18:06:34:f5:13:ee:a8:de:1b:89:b1:c9:80:1a: 99:79:71:dd:76:dc:ff:91:77:03:b6:d5:46:75:4b: 55:13:c6:41:e7:f6:d6:52:d3:f9:e6:ed:53:c8:e4: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.157.0/24 Signature Algorithm: sha256WithRSAEncryption 73:5e:93:7a:d4:cd:d2:e8:d4:51:2a:51:75:e5:38:12:85:f8: b3:00:e5:88:0d:6b:0d:93:59:12:77:d9:0b:3e:85:25:ff:15: a9:2c:ed:b4:95:3c:4a:e1:a8:ef:ed:44:ee:b2:ae:8e:41:fc: 54:bc:ff:0c:53:5b:99:22:77:17:6c:27:ba:a3:65:b2:87:7e: 97:e4:01:f1:ae:f2:99:f2:ed:44:ed:02:c9:d2:e0:83:59:e0: b7:9a:0b:64:3f:75:29:d0:f9:1f:1b:69:6e:ee:a9:88:1f:4f: 59:3f:49:cc:7e:2e:a3:d3:4d:93:b2:5f:33:3c:dc:cc:e7:bb: 13:36:b2:73:b0:de:f9:ef:4d:73:05:28:73:0a:ec:78:d1:3e: a5:2b:95:cb:d1:44:53:cd:ba:b9:18:63:20:f4:dd:0e:d4:89: 5f:0d:e3:90:f6:be:c7:05:67:78:12:9d:3d:33:de:1d:d2:ed: 3c:41:2d:0e:8c:a1:99:f0:62:5f:b0:3d:da:66:b0:1f:98:e8: fc:c1:d8:3e:58:78:dc:8f:76:f7:99:2a:8f:ff:86:74:5a:f5: 5d:f6:84:c1:54:e0:34:10:67:ff:97:de:36:3d:32:1a:b3:11: 41:11:22:3b:2c:d5:86:e7:9a:b3:ce:8b:57:80:b4:e8:91:f6: c9:2c:7f:3c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUefAARFJxzSzAuVmm1iJY/a4U6oowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDkyMloX DTI3MDUwMjAxNTQyMlowMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4 REYzN0FFNTU1RTlFQkE0RUY3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9Qvv3c9kg9foggODPOEhZMlzUpWRqExBMFPQt4kQAS9udGE5Z/RR+RpSJC Yu296lK0NdsZNYP+Hqo5i1qsq4sFWEca17qAazk9BXhasDAFmDaN7+of9ZM/0/Nc O4e8kq3EmpbNIajpoR2e2Oe0L9WUp1OxQedAwGaL58g0Tz77TruWekRMDOA2Pr7z ZypkeWFc+efGxpT+A7AfFcjU0WqjQJA6IMElnLESTboaF3NgSBthE0yNKsaIee9S nGFiVK2QhHsj9Lk3lBGadKbq8thp5xgGNPUT7qjeG4mxyYAamXlx3Xbc/5F3A7bV RnVLVRPGQef21lLT+ebtU8jkNc8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCN+pPtyO3KFaveN83rlVenrpO95MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzYTlkNzg4LWJjZjctNDZmMC04YjViLTBkN2QxZmNiNmRhMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jM2E5ZDc4 OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8yMzdFQTRGQjcyM0I3Mjg1 NkFGNzhERjM3QUU1NTVFOUVCQTRFRjc5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBmdMA0GCSqGSIb3DQEBCwUAA4IBAQBzXpN61M3S6NRRKlF15TgShfizAOWI DWsNk1kSd9kLPoUl/xWpLO20lTxK4ajv7UTusq6OQfxUvP8MU1uZIncXbCe6o2Wy h36X5AHxrvKZ8u1E7QLJ0uCDWeC3mgtkP3Up0PkfG2lu7qmIH09ZP0nMfi6j002T sl8zPNzM57sTNrJzsN75701zBShzCux40T6lK5XL0URTzbq5GGMg9N0O1IlfDeOQ 9r7HBWd4Ep09M94d0u08QS0OjKGZ8GJfsD3aZrAfmOj8wdg+WHjcj3b3mSqP/4Z0 WvVd9oTBVOA0EGf/l942PTIasxFBESI7LNWG55qzzotXgLTokfbJLH88 -----END CERTIFICATE-----Generated at Tue May 12 22:47:32 2026 by rpki-client