$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer (raw, json) Hash identifier: rJcMDSEBIufdDgNzM2Qt0BuM/QLTC8dyfN2xO+KUT9c= Subject key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 60AE8AF5FB274601AAA0DFFAFDD364A9DCD28615 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:17:05 +0000 Certificate not after: Sun 02 May 2027 01:22:05 +0000 Subordinate resources: IP: 160.22.250.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ae:8a:f5:fb:27:46:01:aa:a0:df:fa:fd:d3:64:a9:dc:d2:86:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:17:05 2026 GMT Not After : May 2 01:22:05 2027 GMT Subject: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:92:07:be:8f:2d:9b:bb:77:e3:37:8e:39: 12:58:ad:48:f1:f3:7d:aa:da:88:ea:68:80:ba:79: b9:45:04:f1:46:be:ac:56:1e:d8:d9:1f:3c:69:63: 03:81:9e:e5:b7:46:28:28:32:ff:28:c7:53:01:50: 62:62:26:07:f3:2f:f3:e0:7b:69:8f:46:a9:0d:8b: 8a:0e:0b:18:14:b4:08:0c:cd:06:d1:96:87:a8:27: 05:33:16:bc:be:a2:0d:52:f3:3a:08:c7:59:6f:c2: be:57:4d:aa:f3:f3:f0:81:2a:c7:b5:94:65:d8:d0: 3b:36:45:ee:4d:60:02:1e:47:ee:68:0c:ac:06:13: 83:8f:b4:37:47:64:23:eb:f0:89:29:d0:e6:8c:25: 1c:7e:e4:6f:1c:a9:0d:12:a3:46:15:f3:04:f4:3d: f8:6a:25:fa:71:1f:b5:f6:a3:a8:69:ae:c3:5e:81: 5b:75:b1:a2:fc:dd:27:1c:0b:e4:fb:df:e7:26:4a: ea:79:7d:d4:49:59:36:7a:d4:dd:36:bb:82:50:54: 06:af:d0:30:dd:72:12:49:39:bd:6a:77:ab:6a:ad: cb:4e:13:61:1a:62:1b:c0:2b:de:30:dd:ae:1b:58: e2:41:1e:e0:8e:05:ba:8c:f3:8e:87:84:e6:04:28: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.250.0/23 Signature Algorithm: sha256WithRSAEncryption ad:af:91:d5:70:37:5e:8f:cf:f4:06:48:26:1b:e0:6b:00:7d: 07:65:f0:f1:ce:fe:1f:d7:e4:a1:e3:a4:7d:8e:4e:37:3f:32: 7d:c4:d6:f3:b1:a0:c3:99:63:c9:8c:26:51:b0:1d:06:57:4c: 9e:90:72:0c:a3:81:60:94:7d:b1:62:17:c1:02:df:8f:f3:e9: 67:d2:19:3f:36:7e:ae:a9:59:ef:12:32:c3:80:11:22:d8:7b: cd:fb:0b:45:a7:a5:5c:38:1f:79:90:d1:4a:20:c6:42:de:0d: ed:58:af:78:42:dd:f2:1b:95:85:15:c3:11:b2:e7:92:4d:f5: bb:4b:ab:3e:8d:d2:72:bb:af:10:ef:1d:35:78:09:33:bf:d3: 97:1f:dd:d1:1e:62:86:32:1f:05:12:24:f1:f3:57:6e:fe:87: 86:ed:84:af:f9:c3:c6:fa:7c:42:06:ff:d8:d2:5a:91:2e:d3: 9b:db:8c:06:40:5a:56:b0:f3:97:87:c4:6f:16:40:49:dd:c0: 8e:88:48:5b:29:1a:d0:c6:1d:c6:13:5e:57:21:fb:38:ca:3c: 53:91:2e:60:0b:aa:e0:31:ac:8e:e5:1d:fc:d6:1b:51:b6:d2: 47:27:a6:e0:e1:f4:0f:7c:9b:d0:4b:81:7f:72:9c:47:bf:52: 9d:93:3c:e0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYK6K9fsnRgGqoN/6/dNkqdzShhUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMTcwNVoX DTI3MDUwMjAxMjIwNVowMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4 Q0ZEMzczRTU1OEUxMjczMDUzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsOkge+jy2bu3fjN445ElitSPHzfaraiOpogLp5uUUE8Ua+rFYe2NkfPGlj A4Ge5bdGKCgy/yjHUwFQYmImB/Mv8+B7aY9GqQ2Lig4LGBS0CAzNBtGWh6gnBTMW vL6iDVLzOgjHWW/CvldNqvPz8IEqx7WUZdjQOzZF7k1gAh5H7mgMrAYTg4+0N0dk I+vwiSnQ5owlHH7kbxypDRKjRhXzBPQ9+Gol+nEftfajqGmuw16BW3WxovzdJxwL 5Pvf5yZK6nl91ElZNnrU3Ta7glBUBq/QMN1yEkk5vWp3q2qty04TYRpiG8Ar3jDd rhtY4kEe4I4FuozzjoeE5gQoNM8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDo6rIerQ3hzDDyM/Tc+VY4ScwU8MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkwOGFiMTU3LWQ4MjctNDlhOC1iYjg2LTI4YmUxMzFjM2QyNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MDhhYjE1 Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC8zQTNBQUM4N0FCNDM3ODcz MEMzQzhDRkQzNzNFNTU4RTEyNzMwNTNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBb6MA0GCSqGSIb3DQEBCwUAA4IBAQCtr5HVcDdej8/0BkgmG+BrAH0HZfDx zv4f1+Sh46R9jk43PzJ9xNbzsaDDmWPJjCZRsB0GV0yekHIMo4FglH2xYhfBAt+P 8+ln0hk/Nn6uqVnvEjLDgBEi2HvN+wtFp6VcOB95kNFKIMZC3g3tWK94Qt3yG5WF FcMRsueSTfW7S6s+jdJyu68Q7x01eAkzv9OXH93RHmKGMh8FEiTx81du/oeG7YSv +cPG+nxCBv/Y0lqRLtOb24wGQFpWsPOXh8RvFkBJ3cCOiEhbKRrQxh3GE15XIfs4 yjxTkS5gC6rgMayO5R381htRttJHJ6bg4fQPfJvQS4F/cpxHv1Kdkzzg -----END CERTIFICATE-----Generated at Tue May 12 22:03:04 2026 by rpki-client