$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer File: 4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer (raw, json) Hash identifier: q5L1fQQtrZwFrmICu+EOA3jYAIREV+8R8zqqxUbKGC8= Subject key identifier: 4A:BE:5E:2C:04:73:48:84:D2:DB:57:7A:34:C0:A9:99:FB:B3:26:9C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1A00E0AE10846727D6FF187EB415028DC50DEF86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:40:30 +0000 Certificate not after: Sun 02 May 2027 02:45:30 +0000 Subordinate resources: IP: 157.10.254.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:00:e0:ae:10:84:67:27:d6:ff:18:7e:b4:15:02:8d:c5:0d:ef:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:40:30 2026 GMT Not After : May 2 02:45:30 2027 GMT Subject: CN=4ABE5E2C04734884D2DB577A34C0A999FBB3269C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:d5:55:99:42:d6:f9:ec:95:9d:f5:9d:83: 38:6a:59:19:70:35:41:1c:89:27:0c:6b:2a:73:4c: 94:4c:8a:13:67:98:f2:e9:68:9a:36:df:a3:ef:a7: 7a:fe:07:f2:bb:88:2f:79:8d:6e:be:08:cd:49:91: e8:8b:6f:32:a2:79:81:ec:77:37:11:af:7f:69:50: cc:42:45:29:cd:48:2d:84:4a:d0:bd:f2:63:9d:07: ba:9b:b9:71:3e:99:c9:e2:08:5f:16:d9:2f:cc:dc: 81:01:81:d8:29:1d:d4:fb:a0:8a:7b:7d:b4:66:df: 33:68:11:d0:a0:76:cc:62:9f:91:c8:ee:ff:fa:27: 96:d0:84:90:ae:37:3a:47:78:fd:a9:4c:6e:0e:d4: 9e:73:3c:b7:78:6e:7f:28:fb:1a:b1:56:fa:6d:26: a1:69:f2:a9:53:ad:fa:e3:f1:45:68:ea:d5:ef:12: 13:f9:f6:3a:46:9f:22:26:5d:76:6c:dc:3f:02:26: ae:cb:8c:00:98:73:f0:2d:b5:5d:8f:b3:0b:c2:ee: 6c:2b:f1:cb:f6:c2:be:15:2a:09:f5:c6:9a:04:0f: 85:06:c7:b4:dd:53:c3:b5:f1:bb:d8:5f:3c:00:b7: b8:d6:75:50:c8:e1:37:68:9f:21:2b:09:ed:9f:e2: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:BE:5E:2C:04:73:48:84:D2:DB:57:7A:34:C0:A9:99:FB:B3:26:9C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.254.0/23 Signature Algorithm: sha256WithRSAEncryption 71:e5:39:e4:62:92:e2:21:c0:17:a6:8d:9e:fe:aa:07:78:54: b3:20:75:2f:6e:9c:c2:2e:a6:35:6e:32:5d:54:75:fe:04:12: a8:b8:14:fa:29:c4:1c:a7:f0:73:b5:1b:f0:0d:9c:50:34:53: 22:a5:8c:8f:0b:68:d8:0e:21:d8:36:41:f4:fe:68:3d:f9:42: 38:3d:2b:f9:50:04:48:09:4f:b5:e5:6e:c3:e2:ce:88:b7:8c: fd:9a:32:13:9f:e9:60:23:37:81:da:7f:5f:84:e2:b9:60:b0: e9:1c:d7:b7:f1:3b:34:62:73:e1:30:82:67:1e:c8:7e:1e:e2: ff:97:62:bf:ff:7a:3c:fd:ea:d5:07:0c:97:11:85:be:72:53: 63:a3:95:96:c9:03:c1:f0:fb:86:ae:3c:6a:53:9d:e9:a9:bb: b8:3a:0b:22:cd:92:38:e2:ea:81:69:37:8b:88:f2:57:c9:25: 80:fa:fb:08:87:32:3c:c6:a9:46:a6:4b:e6:17:94:30:48:05: f6:26:70:55:ed:ba:5c:82:24:65:da:b3:e2:f9:d6:f0:83:78: 8c:35:2b:a3:cb:15:fe:9b:5b:1a:06:29:cf:f6:6f:e7:0e:bf: 80:c6:30:45:15:bf:a1:96:cd:f9:da:71:a7:18:ba:2a:3b:c3: e7:93:51:28 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGgDgrhCEZyfW/xh+tBUCjcUN74YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyNDAzMFoX DTI3MDUwMjAyNDUzMFowMzExMC8GA1UEAxMoNEFCRTVFMkMwNDczNDg4NEQyREI1 NzdBMzRDMEE5OTlGQkIzMjY5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTY1VWZQtb57JWd9Z2DOGpZGXA1QRyJJwxrKnNMlEyKE2eY8ulomjbfo++n ev4H8ruIL3mNbr4IzUmR6ItvMqJ5gex3NxGvf2lQzEJFKc1ILYRK0L3yY50Hupu5 cT6ZyeIIXxbZL8zcgQGB2Ckd1Pugint9tGbfM2gR0KB2zGKfkcju//onltCEkK43 Okd4/alMbg7UnnM8t3hufyj7GrFW+m0moWnyqVOt+uPxRWjq1e8SE/n2OkafIiZd dmzcPwImrsuMAJhz8C21XY+zC8LubCvxy/bCvhUqCfXGmgQPhQbHtN1Tw7Xxu9hf PAC3uNZ1UMjhN2ifISsJ7Z/idn8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEq+XiwEc0iE0ttXejTAqZn7syacMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y4ODRjOTM1LTNlMzMtNDQ1Ni1hY2E3LTI0ZjMzYTE3YTFhNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mODg0Yzkz NS0zZTMzLTQ0NTYtYWNhNy0yNGYzM2ExN2ExYTQvMC80QUJFNUUyQzA0NzM0ODg0 RDJEQjU3N0EzNEMwQTk5OUZCQjMyNjlDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQr+MA0GCSqGSIb3DQEBCwUAA4IBAQBx5TnkYpLiIcAXpo2e/qoHeFSzIHUv bpzCLqY1bjJdVHX+BBKouBT6KcQcp/BztRvwDZxQNFMipYyPC2jYDiHYNkH0/mg9 +UI4PSv5UARICU+15W7D4s6It4z9mjITn+lgIzeB2n9fhOK5YLDpHNe38Ts0YnPh MIJnHsh+HuL/l2K//3o8/erVBwyXEYW+clNjo5WWyQPB8PuGrjxqU53pqbu4Ogsi zZI44uqBaTeLiPJXySWA+vsIhzI8xqlGpkvmF5QwSAX2JnBV7bpcgiRl2rPi+dbw g3iMNSujyxX+m1saBinP9m/nDr+AxjBFFb+hls352nGnGLoqO8Pnk1Eo -----END CERTIFICATE-----Generated at Tue May 12 22:38:52 2026 by rpki-client