$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer File: 2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer (raw, json) Hash identifier: BO/Rlrp3ZtD19aQ6J93esmzg2xbd8D5l7MTXP7XHh0s= Subject key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 723F8E7B799D48B5DBE2AEC27074BBFFC92262 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:58:50 +0000 Certificate not after: Sun 02 May 2027 00:03:50 +0000 Subordinate resources: IP: 157.15.82.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3f:8e:7b:79:9d:48:b5:db:e2:ae:c2:70:74:bb:ff:c9:22:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:58:50 2026 GMT Not After : May 2 00:03:50 2027 GMT Subject: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:56:75:0d:f5:60:a9:24:e3:ca:c4:1c:76:7f: c5:78:14:d4:ab:2c:6e:81:cf:7c:ca:bb:09:e0:9e: 25:b8:9a:ba:87:f0:ca:27:0b:5f:d2:f3:fd:47:9b: b3:5e:01:70:5e:4d:33:cf:01:c1:95:cb:9c:cb:69: 56:a7:2a:f5:d8:39:42:3f:70:94:bf:82:75:29:86: c0:23:ec:de:82:51:9c:57:62:67:35:01:c7:58:60: 5f:a6:25:6b:7c:f5:ca:0e:c1:5c:b4:1c:91:41:6d: b1:c7:85:c2:31:a8:bb:8a:9f:09:2b:21:e9:9e:69: 3d:14:f3:0a:ba:7e:44:b4:69:b2:65:b3:f0:1d:52: 53:5d:3d:02:cb:56:a3:1e:e6:98:bb:ae:27:63:73: 5b:7d:1e:4a:93:8e:a5:75:ef:fd:cc:1c:d6:c2:2a: 41:08:f2:39:d4:ad:ee:23:e6:2f:23:93:7d:1d:8c: c3:39:92:f9:4e:2d:98:e3:41:4e:a3:15:28:16:20: 32:1c:68:fd:11:21:72:10:f3:ce:b5:1d:3f:db:ac: 4a:9b:5b:92:7a:69:90:60:40:a9:f9:45:af:e5:2d: 4c:b5:1b:5f:82:b2:92:00:de:26:63:d4:0c:88:1b: d7:32:75:0e:26:c1:7a:25:c8:84:4e:5c:2f:dc:d2: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.82.0/23 Signature Algorithm: sha256WithRSAEncryption 20:8b:7a:33:29:54:aa:cb:28:d1:34:5a:f3:27:6d:31:15:b2: 8e:21:77:c0:a2:f5:49:ae:d0:a9:18:c8:a5:9f:46:8a:de:fd: 81:f9:f4:28:63:72:da:15:10:db:ff:9e:7b:ac:9f:58:80:61: 3d:8d:db:9f:fd:5c:d3:a2:71:cf:f6:fc:ee:36:28:55:71:8a: 70:ce:50:22:0a:14:fa:a3:6b:f0:79:71:fd:ab:b4:c1:e7:0a: c4:08:18:ed:95:a0:db:4d:a2:82:16:37:f2:07:76:8e:08:a6: 01:8b:d6:4b:1a:22:d4:68:76:94:40:79:a2:21:d9:18:f2:40: 16:1b:f5:cd:53:10:6d:d1:9c:b3:4b:ee:60:ed:68:22:4e:dd: ba:e8:52:80:77:4c:06:ce:1e:95:c2:3c:05:61:13:c2:25:77: 97:de:5d:bd:43:50:24:15:d2:e7:a0:66:be:f8:72:40:e7:cc: 64:88:62:de:39:7d:f7:12:a0:e0:42:e2:20:09:bf:1b:22:fc: 91:13:a9:2d:54:f8:bf:7f:41:e1:c8:8d:84:4f:16:57:f9:74: 75:d7:e6:c6:84:77:dd:1d:82:eb:93:95:63:d8:e0:ba:23:85: be:8f:c2:1e:ff:eb:6c:3e:de:81:4e:7b:60:8a:85:57:2d:99: 62:36:33:aa -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgITcj+Oe3mdSLXb4q7CcHS7/8kiYjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDdERjQzNDk1MzQ0 NDFBRjExQTY1REREMzU4OEY3NERDNTlDMkQzNjIwHhcNMjYwNTAyMjM1ODUwWhcN MjcwNTAyMDAwMzUwWjAzMTEwLwYDVQQDEygyQUUxNDMzQkI4MkYyNzcxNkRGNTI2 REFEQ0NDNEMyQjM3NTg5Q0E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VZ1DfVgqSTjysQcdn/FeBTUqyxugc98yrsJ4J4luJq6h/DKJwtf0vP9R5uz XgFwXk0zzwHBlcucy2lWpyr12DlCP3CUv4J1KYbAI+zeglGcV2JnNQHHWGBfpiVr fPXKDsFctByRQW2xx4XCMai7ip8JKyHpnmk9FPMKun5EtGmyZbPwHVJTXT0Cy1aj HuaYu64nY3NbfR5Kk46lde/9zBzWwipBCPI51K3uI+YvI5N9HYzDOZL5Ti2Y40FO oxUoFiAyHGj9ESFyEPPOtR0/26xKm1uSemmQYECp+UWv5S1MtRtfgrKSAN4mY9QM iBvXMnUOJsF6JciETlwv3NJl8wIDAQABo4ICuTCCArUwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUKuFDO7gvJ3Ft9Sba3MxMKzdYnKUwHwYDVR0jBBgwFoAUffQ0 lTREGvEaZd3TWI903FnC02IwDgYDVR0PAQH/BAQDAgEGMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wLzdE RjQzNDk1MzQ0NDFBRjExQTY1REREMzU4OEY3NERDNTlDMkQzNjIuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL2ZmUTBs VFJFR3ZFYVpkM1RXSTkwM0ZuQzAySS5jZXIwggEsBggrBgEFBQcBCwSCAR4wggEa MFUGCCsGAQUFBzAFhklyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwMTFhMWMtYTBhZC00ZDkzLTg2YWYtM2YwYWFkZDk2ODRmLzAvMIGBBggrBgEF BQcwCoZ1cnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkMDExYTFj LWEwYWQtNGQ5My04NmFmLTNmMGFhZGQ5Njg0Zi8wLzJBRTE0MzNCQjgyRjI3NzE2 REY1MjZEQURDQ0M0QzJCMzc1ODlDQTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3Jwa2ktcnJkcC5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdD1IwDQYJKoZIhvcNAQELBQADggEBACCLejMpVKrLKNE0WvMnbTEVso4hd8Ci 9Umu0KkYyKWfRore/YH59ChjctoVENv/nnusn1iAYT2N25/9XNOicc/2/O42KFVx inDOUCIKFPqja/B5cf2rtMHnCsQIGO2VoNtNooIWN/IHdo4IpgGL1ksaItRodpRA eaIh2RjyQBYb9c1TEG3RnLNL7mDtaCJO3broUoB3TAbOHpXCPAVhE8Ild5feXb1D UCQV0uegZr74ckDnzGSIYt45ffcSoOBC4iAJvxsi/JETqS1U+L9/QeHIjYRPFlf5 dHXX5saEd90dguuTlWPY4Lojhb6Pwh7/62w+3oFOe2CKhVctmWI2M6o= -----END CERTIFICATE-----Generated at Tue May 12 22:04:00 2026 by rpki-client