$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer File: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer (raw, json) Hash identifier: VIAInCTg1pZ0uNdSUbO1yZFfOMI6qohrn3LXXVxz6Dc= Subject key identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4EAA6465C2ACD0E254B8DC3C7DFC7ADEB7C09C3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:23 +0000 Certificate not after: Sun 02 May 2027 01:32:23 +0000 Subordinate resources: IP: 157.15.216.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:aa:64:65:c2:ac:d0:e2:54:b8:dc:3c:7d:fc:7a:de:b7:c0:9c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:27:23 2026 GMT Not After : May 2 01:32:23 2027 GMT Subject: CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:c9:ed:18:e8:4b:37:c7:88:00:5d:76:8a: 15:79:e7:06:d0:26:94:ca:f4:73:ea:53:d8:6d:12: 91:5a:65:15:26:be:9e:d6:72:b6:43:0e:94:b8:95: da:3b:e9:3c:68:91:77:b4:c6:20:77:95:ed:af:84: 61:fe:1f:a2:47:26:62:10:1e:1a:d1:1a:f8:26:73: 84:a0:d3:04:e8:a8:6d:3b:96:2b:d6:c2:bb:29:23: 6a:b9:cb:c1:b8:f6:90:f5:88:cc:69:ec:19:31:cc: b3:e3:4b:56:d4:77:39:93:42:fb:c9:cf:85:31:65: 07:8e:ad:02:53:d7:06:ea:9c:de:a2:80:52:dd:b1: 2a:ba:f7:a0:3a:5b:12:b3:cc:1c:1c:18:5a:ad:98: 12:75:e4:70:fe:13:b8:7a:36:35:75:07:e7:01:dd: 24:36:53:4e:d2:64:92:51:97:ab:83:ba:b8:6c:67: d9:c1:53:d7:ca:aa:a5:37:ea:2e:33:12:94:ab:7d: d5:4b:aa:a9:bd:0d:4e:25:fe:a1:63:08:49:fa:a3: 04:af:bf:93:12:57:ae:a0:da:3c:a2:76:3d:c5:71: 96:9f:8b:6b:b4:f6:0f:75:41:1f:a5:45:94:f1:bd: 9e:52:31:3b:22:a0:b3:84:1e:c3:36:b4:01:d6:60: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.216.0/23 Signature Algorithm: sha256WithRSAEncryption 74:f3:6c:d2:1c:2c:ec:0c:a4:e1:fe:fb:de:e3:29:7a:a1:9f: 09:41:1a:ab:9c:50:9a:17:06:35:c9:4c:8b:6a:03:52:9f:96: ca:1a:2f:12:15:c1:45:3e:38:74:a8:ff:bf:17:b1:52:c8:df: 64:14:fc:55:73:3b:32:9d:d4:f1:97:0e:70:c8:f4:9f:24:c0: 01:e8:48:c6:d9:22:9a:e0:95:35:dc:59:ac:52:47:00:ca:0c: 7e:53:44:0d:44:9f:91:0d:66:e1:57:b3:d6:5f:ac:6d:1a:de: 4e:6d:ad:9d:86:d1:0a:36:82:cc:40:b7:4f:67:9a:cd:58:e2: 9c:c1:76:9f:ac:3a:96:00:c5:56:8c:c7:f9:06:32:a5:d2:82: d0:b0:02:39:53:24:ed:fb:b8:ed:ae:40:cf:19:bd:4f:4e:e0: 61:24:69:29:6d:a9:cc:53:a6:d6:87:86:5a:90:f2:a5:04:69: 89:86:8c:4d:4f:51:5c:d4:f3:62:7a:03:16:29:04:a8:c1:a1: 5e:b7:78:74:2d:8e:33:eb:27:9f:98:d4:8f:64:2c:1e:9f:6c: 28:8e:73:ad:49:24:05:1e:56:cb:70:de:23:10:29:cf:75:1f: ca:b8:3d:68:18:ac:46:31:d9:59:ea:14:84:be:54:90:b7:83: 23:d7:e0:e5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTqpkZcKs0OJUuNw8ffx63rfAnDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjcyM1oX DTI3MDUwMjAxMzIyM1owMzExMC8GA1UEAxMoMjY3RTlBNjZGN0E3Qzc4RjdDQzdD MDQ5ODZENjFCODdERUJGNTEyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM77ye0Y6Es3x4gAXXaKFXnnBtAmlMr0c+pT2G0SkVplFSa+ntZytkMOlLiV 2jvpPGiRd7TGIHeV7a+EYf4fokcmYhAeGtEa+CZzhKDTBOiobTuWK9bCuykjarnL wbj2kPWIzGnsGTHMs+NLVtR3OZNC+8nPhTFlB46tAlPXBuqc3qKAUt2xKrr3oDpb ErPMHBwYWq2YEnXkcP4TuHo2NXUH5wHdJDZTTtJkklGXq4O6uGxn2cFT18qqpTfq LjMSlKt91Uuqqb0NTiX+oWMISfqjBK+/kxJXrqDaPKJ2PcVxlp+La7T2D3VBH6VF lPG9nlIxOyKgs4Qewza0AdZgwBkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCZ+mmb3p8ePfMfASYbWG4fev1EjMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EwZjdjNzkwLTc2YjUtNDk2Ny1iNmZmLTEyZGM3NTZiYmY3ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMGY3Yzc5 MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8yNjdFOUE2NkY3QTdDNzhG N0NDN0MwNDk4NkQ2MUI4N0RFQkY1MTIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ/YMA0GCSqGSIb3DQEBCwUAA4IBAQB082zSHCzsDKTh/vve4yl6oZ8JQRqr nFCaFwY1yUyLagNSn5bKGi8SFcFFPjh0qP+/F7FSyN9kFPxVczsyndTxlw5wyPSf JMAB6EjG2SKa4JU13FmsUkcAygx+U0QNRJ+RDWbhV7PWX6xtGt5Oba2dhtEKNoLM QLdPZ5rNWOKcwXafrDqWAMVWjMf5BjKl0oLQsAI5UyTt+7jtrkDPGb1PTuBhJGkp banMU6bWh4ZakPKlBGmJhoxNT1Fc1PNiegMWKQSowaFet3h0LY4z6yefmNSPZCwe n2wojnOtSSQFHlbLcN4jECnPdR/KuD1oGKxGMdlZ6hSEvlSQt4Mj1+Dl -----END CERTIFICATE-----Generated at Tue May 12 22:16:17 2026 by rpki-client