$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer (raw, json) Hash identifier: XOOVzs5142Njvxc6a6WOCRZgVqxpmdqJvJXPZHFDI10= Subject key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 60D90768BF18BDA64380E9B1839C7C55F14B79BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:13:46 +0000 Certificate not after: Sun 02 May 2027 02:18:46 +0000 Subordinate resources: IP: 160.25.176.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d9:07:68:bf:18:bd:a6:43:80:e9:b1:83:9c:7c:55:f1:4b:79:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:13:46 2026 GMT Not After : May 2 02:18:46 2027 GMT Subject: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:12:24:2a:62:31:94:15:09:56:f2:16:50: 27:c3:0a:f2:04:78:07:a1:6c:7f:f1:e3:d8:92:d1: b4:51:ca:99:b4:e4:63:d5:67:d8:16:ba:a7:2f:a5: 0b:a3:e9:06:c8:10:01:69:e0:35:ab:71:cd:7d:86: e6:89:3b:a8:ac:1b:5c:ca:9b:a4:b0:fd:1e:2b:28: 7e:19:ed:cf:92:38:2e:b0:d3:08:fb:f8:bd:36:80: 69:55:71:a3:11:5a:79:c7:77:07:fc:ca:92:4b:a0: 89:6b:16:87:87:00:cc:8e:e5:41:34:ec:a9:b9:10: fa:3f:db:b8:14:dd:45:02:dc:e9:90:cb:40:0f:3b: 5e:92:e3:c0:f5:33:d0:a3:11:de:6a:a9:df:a2:16: 9d:58:91:99:f1:4a:9f:72:5e:1d:1a:53:88:ce:74: 75:ad:f6:a6:5c:a3:f7:b5:5b:8a:6b:a2:07:af:d0: 98:e7:77:c6:9c:12:89:fc:d4:8c:08:c5:87:45:b8: e9:bd:94:ce:f2:96:20:5a:1c:2f:0a:c2:b0:c4:28: 7c:2c:ee:d1:1d:55:c2:14:df:93:77:02:90:b6:e3: b9:31:72:26:41:f1:c9:25:1d:78:21:23:d8:6d:01: 1b:73:16:8e:fd:d4:46:19:df:39:3c:69:0a:c9:08: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.176.0/23 Signature Algorithm: sha256WithRSAEncryption 32:9e:cd:09:b0:54:dd:68:db:f8:6c:ce:6a:66:b4:0d:ed:c0: c0:1e:1c:37:49:21:09:95:95:0e:85:82:81:f8:98:6d:89:10: 29:0c:ea:17:4a:0e:02:09:cf:fc:ca:43:43:7c:84:88:70:51: 6e:f6:83:07:b8:aa:e4:7d:9c:52:55:d6:4b:0c:f0:94:33:a4: 69:00:dd:45:4d:1a:22:ad:13:67:c4:cf:48:67:ac:99:51:94: c5:58:55:ba:b3:0a:ce:db:69:ea:14:c8:0b:ea:75:48:ef:04: d6:ef:3d:21:15:47:bc:7b:56:be:9b:11:dd:9e:bb:db:e5:2b: 0d:9a:b1:92:83:98:12:f7:ab:ee:9f:20:15:72:3c:4f:7d:a8: aa:df:03:c1:c9:aa:ba:a5:46:e1:fc:52:de:5f:7c:d0:54:4d: c1:25:cd:45:15:5d:ca:9a:88:86:04:45:72:f4:03:b2:ee:38: 7b:ad:42:8c:1d:31:4c:70:53:76:f5:77:01:ba:13:37:15:cb: 2d:64:9c:a9:86:2a:73:8b:23:eb:b7:c1:46:ad:c8:1b:df:76: db:31:3c:f2:6f:bc:42:05:85:9c:16:80:31:77:1e:57:3f:51: ff:93:ee:86:a3:14:4e:0e:7c:b2:7c:4e:5e:f1:57:54:0c:82: 7b:5d:9b:64 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYNkHaL8YvaZDgOmxg5x8VfFLebswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMTM0NloX DTI3MDUwMjAyMTg0NlowMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1 MkU0RTQ5MEFBOUI1M0M5NTQyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5TEiQqYjGUFQlW8hZQJ8MK8gR4B6Fsf/Hj2JLRtFHKmbTkY9Vn2Ba6py+l C6PpBsgQAWngNatxzX2G5ok7qKwbXMqbpLD9Hisofhntz5I4LrDTCPv4vTaAaVVx oxFaecd3B/zKkkugiWsWh4cAzI7lQTTsqbkQ+j/buBTdRQLc6ZDLQA87XpLjwPUz 0KMR3mqp36IWnViRmfFKn3JeHRpTiM50da32plyj97VbimuiB6/QmOd3xpwSifzU jAjFh0W46b2UzvKWIFocLwrCsMQofCzu0R1VwhTfk3cCkLbjuTFyJkHxySUdeCEj 2G0BG3MWjv3URhnfOTxpCskIYQECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDATavDrL/qfFOBS5OSQqptTyVQsMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UzOGY5YjZiLTAyN2EtNGJlNi1hYjAyLTI4ZDU1MWMzOTgxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMzhmOWI2 Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC8zMDEzNkFGMEVCMkZGQTlG MTRFMDUyRTRFNDkwQUE5QjUzQzk1NDJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBmwMA0GCSqGSIb3DQEBCwUAA4IBAQAyns0JsFTdaNv4bM5qZrQN7cDAHhw3 SSEJlZUOhYKB+JhtiRApDOoXSg4CCc/8ykNDfISIcFFu9oMHuKrkfZxSVdZLDPCU M6RpAN1FTRoirRNnxM9IZ6yZUZTFWFW6swrO22nqFMgL6nVI7wTW7z0hFUe8e1a+ mxHdnrvb5SsNmrGSg5gS96vunyAVcjxPfaiq3wPByaq6pUbh/FLeX3zQVE3BJc1F FV3KmoiGBEVy9AOy7jh7rUKMHTFMcFN29XcBuhM3FcstZJyphipziyPrt8FGrcgb 33bbMTzyb7xCBYWcFoAxdx5XP1H/k+6GoxRODnyyfE5e8VdUDIJ7XZtk -----END CERTIFICATE-----Generated at Tue May 12 22:47:48 2026 by rpki-client