$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer (raw, json) Hash identifier: HM+U1qtgHy3G6Iv05ltwcAMfye25X2chJdsuqvlbg6Y= Subject key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5C89ADAEB7D9A5D67C5D4C787D81809036B4FE72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:20:40 +0000 Certificate not after: Sun 02 May 2027 02:25:40 +0000 Subordinate resources: IP: 157.20.132.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:89:ad:ae:b7:d9:a5:d6:7c:5d:4c:78:7d:81:80:90:36:b4:fe:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:20:40 2026 GMT Not After : May 2 02:25:40 2027 GMT Subject: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:51:2c:41:77:47:6c:16:31:ba:79:96:4c:c7: 12:fb:6d:88:19:8b:ff:82:95:1a:bb:bd:3e:f2:f1: 91:8c:1d:55:88:24:ab:3a:96:02:7c:0c:9f:0e:00: 0e:79:6c:dd:e9:fb:ba:aa:7d:9b:b3:d4:7b:05:1b: af:8c:c3:6e:70:c3:ba:98:63:da:c3:17:89:c3:36: a8:c3:05:fb:0f:80:06:07:51:c6:44:55:b5:1a:79: 2c:e5:a2:ea:ff:62:4c:b0:4a:4b:74:3b:70:20:0f: e6:dc:57:ee:91:d3:96:24:db:48:fd:3a:a1:15:11: 7e:57:b8:b0:43:47:75:e0:05:c0:17:7a:00:02:a8: f5:22:c8:28:fb:8f:f8:d6:85:ac:41:fe:ae:61:eb: a2:77:f9:ee:cb:4f:64:7f:bc:65:ae:8d:b4:f3:3b: 98:de:d3:d5:54:1e:e6:da:4c:5b:31:73:e5:08:b6: 03:99:29:1d:72:7e:be:1f:b8:ef:45:31:2c:94:ee: 9c:6c:6a:b4:e7:03:a7:87:b0:f8:60:0e:26:de:d3: b3:4a:f5:30:f8:40:88:ff:df:a3:7d:96:8f:56:d0: 3a:95:0c:84:94:8d:d0:5e:31:31:27:36:cf:ee:a6: 51:65:60:98:ab:08:93:5f:22:a1:06:b8:a2:33:d2: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.132.0/23 Signature Algorithm: sha256WithRSAEncryption ac:fc:00:00:94:df:0a:e1:ed:ba:e1:22:73:25:1a:37:14:21: 8c:e1:ac:98:2e:8e:56:1d:44:ec:39:40:46:b1:d6:ed:a8:ba: 07:41:fa:09:bf:31:f4:79:a5:79:d2:fc:f7:04:f9:97:2f:90: f2:4a:56:05:1e:d3:c2:18:f9:64:83:1f:ed:ca:10:8a:a1:9b: 87:9d:13:a0:23:4b:9a:9b:60:d6:c1:c8:17:11:1a:59:cb:9c: 1d:03:c5:9d:8e:5f:05:03:c6:7a:18:cd:23:16:0c:c3:d6:89: 0a:a0:f9:6b:f0:5d:c2:4b:24:04:e5:93:8d:d4:be:c7:39:5a: 85:7e:cc:f7:1c:a1:ce:67:9d:b8:f8:4e:02:a6:c5:86:06:d9: a8:55:11:ae:98:95:f9:92:b6:6b:e2:5b:1f:65:ba:3f:fc:95: b4:41:b2:42:d2:93:af:07:3d:5a:9c:26:10:f9:61:be:6d:60: 18:cd:6b:f6:91:9c:fb:41:d2:dc:e6:8d:68:6b:e8:c6:bc:64: 57:10:b8:c5:28:45:f7:0b:7f:2a:8b:8e:fc:75:ed:7e:bb:f2: 7d:6f:ba:6c:0d:17:81:71:28:5a:58:af:95:c0:4f:77:8d:aa: af:75:90:6a:f1:e7:64:c1:93:7d:a8:32:2e:e6:eb:42:34:43: 6f:30:ff:8c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXImtrrfZpdZ8XUx4fYGAkDa0/nIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMjA0MFoX DTI3MDUwMjAyMjU0MFowMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIz NEJDN0IyRkYzOTA3NEY3MUEzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJRLEF3R2wWMbp5lkzHEvttiBmL/4KVGru9PvLxkYwdVYgkqzqWAnwMnw4A Dnls3en7uqp9m7PUewUbr4zDbnDDuphj2sMXicM2qMMF+w+ABgdRxkRVtRp5LOWi 6v9iTLBKS3Q7cCAP5txX7pHTliTbSP06oRURfle4sENHdeAFwBd6AAKo9SLIKPuP +NaFrEH+rmHronf57stPZH+8Za6NtPM7mN7T1VQe5tpMWzFz5Qi2A5kpHXJ+vh+4 70UxLJTunGxqtOcDp4ew+GAOJt7Ts0r1MPhAiP/fo32Wj1bQOpUMhJSN0F4xMSc2 z+6mUWVgmKsIk18ioQa4ojPSPpsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCQohAbqEJisLSI0vHsv85B09xo8MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U5YzE1Yjc4LTIwNzEtNDRkMS05YTFkLWFkNmViMDlmYWUwOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lOWMxNWI3 OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC8yNDI4ODQwNkVBMTA5OEFD MkQyMjM0QkM3QjJGRjM5MDc0RjcxQTNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRSEMA0GCSqGSIb3DQEBCwUAA4IBAQCs/AAAlN8K4e264SJzJRo3FCGM4ayY Lo5WHUTsOUBGsdbtqLoHQfoJvzH0eaV50vz3BPmXL5DySlYFHtPCGPlkgx/tyhCK oZuHnROgI0uam2DWwcgXERpZy5wdA8Wdjl8FA8Z6GM0jFgzD1okKoPlr8F3CSyQE 5ZON1L7HOVqFfsz3HKHOZ524+E4CpsWGBtmoVRGumJX5krZr4lsfZbo//JW0QbJC 0pOvBz1anCYQ+WG+bWAYzWv2kZz7QdLc5o1oa+jGvGRXELjFKEX3C38qi478de1+ u/J9b7psDReBcShaWK+VwE93jaqvdZBq8edkwZN9qDIu5utCNENvMP+M -----END CERTIFICATE-----Generated at Tue May 12 22:10:46 2026 by rpki-client