$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer (raw, json) Hash identifier: 8m7uTsV5a5LvfMXoOt3O5Qi14YRhks+aB6RmCfcG/40= Subject key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2290142C2B0DFD054DCDECFAF4AB6F0CB65A6C17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:01 +0000 Certificate not after: Sun 02 May 2027 01:25:01 +0000 Subordinate resources: IP: 160.191.180.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:90:14:2c:2b:0d:fd:05:4d:cd:ec:fa:f4:ab:6f:0c:b6:5a:6c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:20:01 2026 GMT Not After : May 2 01:25:01 2027 GMT Subject: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:d0:ad:f4:9b:6d:7e:20:3d:4b:0c:57:a2: b2:aa:35:c2:80:2a:f1:09:70:37:d5:46:c8:e5:6d: 43:73:c8:6d:7b:a9:32:9c:79:38:05:ce:aa:2d:a8: ec:2c:f9:59:c8:5e:9f:d3:ad:fb:13:3c:c9:db:fc: 8d:09:f8:93:83:a2:4b:cc:cc:e0:00:d5:9b:5b:e7: c9:ac:ac:8d:a9:dc:9f:af:68:7c:06:c8:63:ef:a0: b9:2b:ae:d4:c1:17:5a:4f:ee:d7:07:9f:2a:56:e5: d6:8d:0c:4e:ff:94:bb:32:6a:b4:1e:8e:b8:30:30: b7:e6:d1:5d:3c:45:56:d0:2e:07:d1:06:88:85:7c: 6b:01:e4:8a:c7:7c:5e:5f:8f:2e:73:0e:f5:4c:2c: 0c:72:cb:90:93:72:03:10:0c:3e:0e:c5:15:95:32: fc:b4:9c:85:ee:f5:9e:89:cd:88:ad:d8:8f:6d:0a: 7d:ce:31:4a:e9:46:7b:4a:78:87:e1:9b:24:55:9d: 4a:e4:b8:e4:21:33:a8:d3:6e:7d:d0:8c:9b:bc:ea: 58:97:1f:f5:d6:28:1b:83:c0:e1:30:81:fd:3f:3a: 8f:41:22:b5:12:22:3c:1d:4d:42:1c:01:a1:1a:07: bf:24:b5:4e:ef:52:fb:a8:53:90:00:01:2e:93:25: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.180.0/23 Signature Algorithm: sha256WithRSAEncryption 30:83:50:01:84:92:cf:4e:b4:b7:9f:3a:db:ee:84:91:b2:9a: 98:02:15:bc:37:c0:8f:32:e5:be:c2:29:2a:20:06:f3:56:a4: 3c:f6:a7:01:8e:e4:9a:d4:07:a3:01:3b:71:1f:d1:da:8a:43: 92:36:9d:e7:4a:10:e1:4e:85:53:e1:40:88:72:f8:17:a5:4b: 98:f7:55:78:20:63:1c:6c:95:4d:9f:d7:7b:02:33:60:a0:4e: 92:3f:87:3a:f8:49:66:d4:ce:d8:cf:49:95:ec:33:d7:42:3b: 44:2e:2a:6c:63:40:91:a7:36:c8:fd:23:5a:1f:01:3f:02:18: 0d:ec:d3:99:96:8e:4d:29:01:40:87:2c:19:82:08:9e:bf:d7: 91:99:7b:f2:c7:a8:fd:9a:56:0c:50:ee:a9:89:b2:2d:53:80: 2f:f4:09:f3:5f:c0:e9:c9:1e:47:c3:58:c7:f1:34:e3:f2:9c: 2b:fc:de:ce:80:09:87:54:72:77:e3:44:20:9f:1d:87:73:0b: 7a:98:3c:0f:a1:cf:a9:a3:3c:c7:68:40:2f:84:6e:da:8d:52: 23:d4:dc:5d:13:51:0d:9e:30:e9:da:28:60:47:dc:9c:29:cc: e7:c8:e5:dc:a9:8f:22:97:12:74:94:de:e2:ba:28:c3:44:f0: b4:44:6f:b6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIpAULCsN/QVNzez69KtvDLZabBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjAwMVoX DTI3MDUwMjAxMjUwMVowMzExMC8GA1UEAxMoNDQ5ODU4QzZDMzVGOEY5QzhDQUE3 NUEwNjU2ODZGNzMyRjZGNEYzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO3H0K30m21+ID1LDFeisqo1woAq8QlwN9VGyOVtQ3PIbXupMpx5OAXOqi2o 7Cz5Wchen9Ot+xM8ydv8jQn4k4OiS8zM4ADVm1vnyaysjancn69ofAbIY++guSuu 1MEXWk/u1wefKlbl1o0MTv+UuzJqtB6OuDAwt+bRXTxFVtAuB9EGiIV8awHkisd8 Xl+PLnMO9UwsDHLLkJNyAxAMPg7FFZUy/LSche71nonNiK3Yj20Kfc4xSulGe0p4 h+GbJFWdSuS45CEzqNNufdCMm7zqWJcf9dYoG4PA4TCB/T86j0EitRIiPB1NQhwB oRoHvyS1Tu9S+6hTkAABLpMlMQkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFESYWMbDX4+cjKp1oGVob3Mvb087MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk1OTYxMmEyLTQ0MzMtNDJiOS04ZjRmLWI4NDc3NzZhY2FmZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NTk2MTJh Mi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC80NDk4NThDNkMzNUY4RjlD OENBQTc1QTA2NTY4NkY3MzJGNkY0RjNCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoL+0MA0GCSqGSIb3DQEBCwUAA4IBAQAwg1ABhJLPTrS3nzrb7oSRspqYAhW8 N8CPMuW+wikqIAbzVqQ89qcBjuSa1AejATtxH9HaikOSNp3nShDhToVT4UCIcvgX pUuY91V4IGMcbJVNn9d7AjNgoE6SP4c6+Elm1M7Yz0mV7DPXQjtELipsY0CRpzbI /SNaHwE/AhgN7NOZlo5NKQFAhywZggiev9eRmXvyx6j9mlYMUO6pibItU4Av9Anz X8DpyR5Hw1jH8TTj8pwr/N7OgAmHVHJ340Qgnx2Hcwt6mDwPoc+pozzHaEAvhG7a jVIj1NxdE1ENnjDp2ihgR9ycKcznyOXcqY8ilxJ0lN7iuijDRPC0RG+2 -----END CERTIFICATE-----Generated at Tue May 12 22:52:37 2026 by rpki-client