$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer File: 295FB7ECBA6239B644592BD0426F101D644A0F61.cer (raw, json) Hash identifier: PdyDXgVgFWEuv94kNnbydrmD1rHDoJq2WR4P2D0+5S4= Subject key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 738D4E3AD3E5D4928495D543CA985F44BA6B2E9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:47:54 +0000 Certificate not after: Sat 01 May 2027 23:52:54 +0000 Subordinate resources: IP: 157.66.192.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8d:4e:3a:d3:e5:d4:92:84:95:d5:43:ca:98:5f:44:ba:6b:2e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:47:54 2026 GMT Not After : May 1 23:52:54 2027 GMT Subject: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:c5:67:6f:b0:fb:1a:04:6a:95:9e:16:55: 0c:4e:a5:a6:e9:29:55:d5:4f:74:76:f9:e5:17:2e: f4:6d:12:88:61:28:1e:24:59:29:3a:d8:f9:c1:25: f0:ce:23:40:54:dd:2e:28:c2:18:19:3c:0d:43:22: 27:ce:ae:d3:76:21:74:73:60:6d:d8:a6:82:7c:40: 41:a0:fd:21:b6:6c:f8:f5:15:76:63:f5:79:02:3f: 3e:5e:b1:99:05:ff:32:2c:b7:b3:d3:a2:b2:8e:3f: 7b:84:4e:ca:1d:e0:05:e6:6e:d0:05:fa:74:51:ad: 40:8f:29:a7:29:0b:e6:8d:8b:4c:b3:49:17:0a:99: c9:b4:14:9e:4b:dd:43:91:a8:b1:bb:94:a0:2b:f2: 52:89:f6:97:29:5e:a5:3d:3a:8f:51:4f:7a:ea:b1: 2d:77:a9:d7:d0:eb:89:6a:10:c9:24:ca:3e:79:76: 49:01:d7:a6:0d:37:14:03:b0:9f:3b:37:ba:0b:25: 0c:d6:a4:0a:cf:e0:3f:85:6f:15:77:81:59:39:0f: ab:d4:ad:e4:62:f2:31:e6:9f:68:f2:67:72:ae:2a: 51:fa:09:57:99:7c:60:c7:43:52:36:d3:e2:03:86: aa:00:a5:1e:68:20:10:ef:2c:9c:ca:39:6b:e5:7e: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.192.0/23 Signature Algorithm: sha256WithRSAEncryption 22:b3:7c:f8:16:e7:22:9e:d7:99:5f:bf:30:bf:1e:ee:53:cd: 41:5e:3f:dd:1f:8e:17:cd:ff:ed:b9:13:a7:ab:c7:8c:e8:c6: e7:15:0d:c0:16:d2:b8:30:17:f5:ba:46:a4:ba:ac:25:4c:0b: 05:ce:e2:66:c3:c9:b8:b2:38:47:e1:51:05:7e:b4:68:3a:1f: 29:71:89:22:6e:15:fb:8c:f3:86:8b:d6:18:df:68:dd:d8:ac: 17:cf:c1:97:90:5a:af:56:74:2c:36:fe:7c:59:1c:b0:e0:e1: 78:38:1a:ef:8b:08:8a:cb:81:0e:3b:c3:55:7f:ec:f2:c0:3f: 93:8a:92:3f:c0:de:83:b9:13:87:e3:27:74:aa:a9:72:9f:94: 73:06:53:e9:d8:de:cd:7e:d3:36:bd:a9:32:8f:78:39:e6:45: 20:d4:b0:ba:69:bc:d3:7a:6f:4c:48:b1:00:81:f1:e6:23:0f: f9:12:6c:a6:f0:d8:b7:79:80:e5:e5:ea:fc:65:53:2a:b1:67: e9:84:72:4f:b3:be:4d:dd:c2:f6:49:d1:68:ac:04:1e:a9:fe: 46:6a:d8:60:be:04:93:e2:bc:58:02:28:ae:57:9c:e7:4e:83: 31:46:02:bd:c1:54:91:91:b6:f2:a7:22:d1:06:05:8c:34:07: 89:09:a9:78 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUc41OOtPl1JKEldVDyphfRLprLp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNDc1NFoX DTI3MDUwMTIzNTI1NFowMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTky QkQwNDI2RjEwMUQ2NDRBMEY2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7axWdvsPsaBGqVnhZVDE6lpukpVdVPdHb55Rcu9G0SiGEoHiRZKTrY+cEl 8M4jQFTdLijCGBk8DUMiJ86u03YhdHNgbdimgnxAQaD9IbZs+PUVdmP1eQI/Pl6x mQX/Miy3s9Oiso4/e4ROyh3gBeZu0AX6dFGtQI8ppykL5o2LTLNJFwqZybQUnkvd Q5GosbuUoCvyUon2lylepT06j1FPeuqxLXep19DriWoQySTKPnl2SQHXpg03FAOw nzs3ugslDNakCs/gP4VvFXeBWTkPq9St5GLyMeafaPJncq4qUfoJV5l8YMdDUjbT 4gOGqgClHmggEO8snMo5a+V+t7UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClft+y6Yjm2RFkr0EJvEB1kSg9hMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBkZTJkMDkwLTQ3NjYtNDc1Yy05Y2VmLTdiZWI1ODVjZjI0MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZGUyZDA5 MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC8yOTVGQjdFQ0JBNjIzOUI2 NDQ1OTJCRDA0MjZGMTAxRDY0NEEwRjYxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnULAMA0GCSqGSIb3DQEBCwUAA4IBAQAis3z4FucinteZX78wvx7uU81BXj/d H44Xzf/tuROnq8eM6MbnFQ3AFtK4MBf1ukakuqwlTAsFzuJmw8m4sjhH4VEFfrRo Oh8pcYkibhX7jPOGi9YY32jd2KwXz8GXkFqvVnQsNv58WRyw4OF4OBrviwiKy4EO O8NVf+zywD+TipI/wN6DuROH4yd0qqlyn5RzBlPp2N7NftM2vakyj3g55kUg1LC6 abzTem9MSLEAgfHmIw/5Emym8Ni3eYDl5er8ZVMqsWfphHJPs75N3cL2SdForAQe qf5GathgvgST4rxYAiiuV5znToMxRgK9wVSRkbbypyLRBgWMNAeJCal4 -----END CERTIFICATE-----Generated at Tue May 12 22:45:36 2026 by rpki-client