$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer (raw, json) Hash identifier: D4d2RngH5qd63Ds/eim2VNVZ7zOKmeVqQX88Vv9v0lc= Subject key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 44390F17FDE9499396B906C3C32CA4900B7E8D35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:03:12 +0000 Certificate not after: Sun 02 May 2027 00:08:12 +0000 Subordinate resources: IP: 160.25.45.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:39:0f:17:fd:e9:49:93:96:b9:06:c3:c3:2c:a4:90:0b:7e:8d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:03:12 2026 GMT Not After : May 2 00:08:12 2027 GMT Subject: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:92:bf:4a:28:2e:38:7e:07:35:b6:eb:b5: ca:94:40:70:06:aa:ab:a9:b2:0b:a8:70:dc:6e:60: 0b:9f:c6:e0:34:8b:90:3e:01:d1:7b:c3:24:69:87: 19:c9:6f:b1:a4:80:bd:0f:38:42:8e:68:52:27:58: 7b:f4:7b:70:93:5c:0a:d9:01:dc:ad:7f:37:ec:14: 62:c7:9c:76:df:24:cd:ca:a7:31:d5:51:bc:e2:a9: b9:be:b5:5a:e3:36:82:07:21:a7:5f:be:de:8c:b0: 03:ad:85:e1:ed:22:39:9e:1f:c7:e8:88:07:af:5d: d7:1b:12:7b:82:a3:cf:82:85:ff:16:a0:51:25:c8: ab:65:25:b0:d5:cf:8b:44:56:52:31:29:73:e4:40: a6:dc:2b:a5:44:27:21:6f:d8:58:f0:9b:77:04:79: b5:d6:ea:c6:9c:1f:81:2b:1c:b3:67:e2:d0:8e:fa: 15:9b:02:c5:4c:dc:df:fd:60:84:85:9f:d2:f2:ef: 64:07:dd:99:c4:de:fc:25:d9:ff:01:ce:ac:07:80: 43:9a:39:c0:51:81:5a:c7:6b:90:e8:9d:dd:4e:1c: 58:bd:10:c1:a5:ea:b0:76:d5:58:23:4e:14:6b:9b: 0e:ed:e4:bf:55:65:f7:fe:0c:6d:26:bc:7a:0a:ac: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.45.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:8e:06:9b:08:83:fb:41:a5:1a:8d:e2:6b:f5:3f:b0:ec:b9: cc:a7:ac:3c:70:95:ec:b9:a9:49:78:8a:ae:27:4b:d9:c5:59: a4:1e:3a:3d:c5:45:15:bb:e5:86:5d:f8:4a:cc:38:f0:5f:5d: 7b:32:07:3f:55:3e:e4:7e:d9:e3:4c:d3:e8:07:7b:42:7f:e1: ac:29:f6:64:0b:18:ee:48:6d:09:ef:b1:a9:14:8a:95:ee:89: a7:cf:33:c9:de:f2:1c:8c:ce:d2:bb:a7:36:55:92:0a:6e:e7: 7c:05:f9:a6:f3:41:72:79:1a:c4:77:b4:ab:98:47:5f:59:1f: 18:3e:c0:fb:ee:b5:76:b0:7e:9f:be:4b:a8:d9:80:76:10:0f: f2:cc:47:42:95:76:7a:de:de:b1:e5:fc:dc:8a:86:22:be:91: 56:f5:d2:e2:19:2a:16:29:64:4e:f3:bc:c5:fc:4e:9c:c8:e4: 12:4a:85:2d:82:b1:b9:e6:b2:28:93:99:ef:4d:fe:d6:9f:25: 70:27:77:cf:aa:9b:2e:2b:f6:24:c3:d9:1c:f8:c6:2d:cc:46: d0:ae:7b:7b:8d:6a:e0:ac:8a:39:45:03:b8:66:7a:fb:51:bc: fe:78:32:e7:4d:d1:25:a6:11:8e:f2:01:b7:37:4b:70:0e:67: c7:b8:81:0c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURDkPF/3pSZOWuQbDwyykkAt+jTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDMxMloX DTI3MDUwMjAwMDgxMlowMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1 OTc3Qjc4RjVGOUYxQzdGNjUxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi/kr9KKC44fgc1tuu1ypRAcAaqq6myC6hw3G5gC5/G4DSLkD4B0XvDJGmH GclvsaSAvQ84Qo5oUidYe/R7cJNcCtkB3K1/N+wUYsecdt8kzcqnMdVRvOKpub61 WuM2ggchp1++3oywA62F4e0iOZ4fx+iIB69d1xsSe4Kjz4KF/xagUSXIq2UlsNXP i0RWUjEpc+RAptwrpUQnIW/YWPCbdwR5tdbqxpwfgSscs2fi0I76FZsCxUzc3/1g hIWf0vLvZAfdmcTe/CXZ/wHOrAeAQ5o5wFGBWsdrkOid3U4cWL0QwaXqsHbVWCNO FGubDu3kv1Vl9/4MbSa8egqsmRUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD8aLR1LRTYwKlBZd7ePX58cf2UeMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIzNjU2MWQ0LTIzYzgtNGM5Yi04OTBlLTRmMjYzMmU1MmM5Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMzY1NjFk NC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC8zRjFBMkQxRDRCNDUzNjMw MkE1MDU5NzdCNzhGNUY5RjFDN0Y2NTFFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBktMA0GCSqGSIb3DQEBCwUAA4IBAQAsjgabCIP7QaUajeJr9T+w7LnMp6w8 cJXsualJeIquJ0vZxVmkHjo9xUUVu+WGXfhKzDjwX117Mgc/VT7kftnjTNPoB3tC f+GsKfZkCxjuSG0J77GpFIqV7omnzzPJ3vIcjM7Su6c2VZIKbud8Bfmm80FyeRrE d7SrmEdfWR8YPsD77rV2sH6fvkuo2YB2EA/yzEdClXZ63t6x5fzcioYivpFW9dLi GSoWKWRO87zF/E6cyOQSSoUtgrG55rIok5nvTf7WnyVwJ3fPqpsuK/Ykw9kc+MYt zEbQrnt7jWrgrIo5RQO4Znr7Ubz+eDLnTdElphGO8gG3N0twDmfHuIEM -----END CERTIFICATE-----Generated at Tue May 12 22:47:34 2026 by rpki-client