$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer (raw, json) Hash identifier: 3L5If8y+eq4skrpyp/0i6RumBzyRqS3j5/5LoZtUq0o= Subject key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 46B3BE0B88619494975DCEA8EB08D9987D7920CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:19:30 +0000 Certificate not after: Sun 02 May 2027 02:24:30 +0000 Subordinate resources: IP: 157.20.233.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b3:be:0b:88:61:94:94:97:5d:ce:a8:eb:08:d9:98:7d:79:20:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:19:30 2026 GMT Not After : May 2 02:24:30 2027 GMT Subject: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:f9:d7:2b:c3:b3:27:92:d6:57:39:1e:d9: 83:c3:fb:69:40:ff:37:53:5c:6c:6d:1b:d9:1d:b7: f8:76:c7:85:ad:7d:cc:f5:e7:89:8e:2e:cf:26:3d: 77:83:67:58:3f:33:00:86:82:83:26:09:06:5f:3c: 9e:a7:71:b9:6e:5b:01:09:e2:ca:db:cf:81:86:85: cc:c3:23:37:33:8e:88:0b:1a:4f:c6:30:e5:93:1b: b2:40:16:3b:ae:02:eb:09:77:ed:62:e5:06:8f:fa: 85:46:e6:41:46:8d:44:04:13:2d:d2:0e:4c:3e:84: 46:bd:44:35:08:f4:7b:08:12:58:f2:87:99:74:84: 2a:83:f3:72:75:1e:99:f3:8a:c2:39:bd:20:9f:b9: 6e:59:18:ae:63:55:7d:dd:9e:6c:db:2b:98:b9:80: bb:bd:67:a3:44:72:e4:69:97:52:e0:f7:a9:dd:20: 1a:1b:cf:b1:73:86:cd:2e:67:fb:c1:a4:dd:3a:72: de:1d:6d:07:11:11:76:f7:e1:af:60:f4:03:d7:42: 68:99:a3:ac:19:9c:32:6b:8a:1b:f2:a1:87:ea:b5: ef:78:5d:64:43:bb:f5:39:33:5e:46:64:f2:93:a4: ea:a1:31:e9:24:11:1a:3c:a2:36:d4:d0:55:56:06: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.233.0/24 Signature Algorithm: sha256WithRSAEncryption 35:70:d9:0b:e7:2e:01:da:23:87:0e:64:d7:43:41:ea:91:8e: 46:04:c7:b5:33:82:02:d0:81:06:ff:42:e5:94:89:c0:76:99: 8f:30:b7:c0:ba:2d:c5:e2:c2:0d:3f:45:04:b0:d4:ae:6e:3a: 5f:b3:51:19:d3:2e:5c:44:53:02:1b:d7:5f:2c:df:4b:fb:50: c2:2b:b4:11:f5:f4:73:22:48:b7:5a:5a:a5:17:2d:7c:d3:49: e8:95:2a:d0:f6:27:6e:48:0b:6a:51:27:75:25:c4:05:fc:d2: cd:78:6d:52:fc:58:87:4c:8c:cd:7a:ae:65:83:3a:e9:ec:b8: 4b:45:aa:89:18:9d:b6:e5:ce:ba:0e:de:78:d7:72:f7:d4:55: ee:ff:be:d0:cf:7a:2d:ac:d8:58:68:cf:5e:e0:79:07:0c:ce: cc:f4:3b:5e:39:ec:72:eb:54:ca:78:90:eb:21:15:d8:d5:a7: 00:ec:f1:ba:44:cb:65:7f:e5:30:93:cf:cf:fb:65:b3:6d:2e: 2d:31:be:da:d4:c9:76:e9:46:ec:97:76:69:d6:92:8d:4d:21: 74:3b:ef:84:77:2a:aa:0d:e7:f6:51:c0:e8:16:33:f8:3c:d9: fc:dd:4d:df:ee:21:23:e1:26:01:4e:46:54:e2:3b:50:b1:a8: 2a:b3:7d:a3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURrO+C4hhlJSXXc6o6wjZmH15IM8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMTkzMFoX DTI3MDUwMjAyMjQzMFowMzExMC8GA1UEAxMoNEFFMTU4MUVDN0RGRTY1RjVFOTlB QTYxMzQ3NUQ4NTQyODA4QzQ2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZQ+dcrw7MnktZXOR7Zg8P7aUD/N1NcbG0b2R23+HbHha19zPXniY4uzyY9 d4NnWD8zAIaCgyYJBl88nqdxuW5bAQniytvPgYaFzMMjNzOOiAsaT8Yw5ZMbskAW O64C6wl37WLlBo/6hUbmQUaNRAQTLdIOTD6ERr1ENQj0ewgSWPKHmXSEKoPzcnUe mfOKwjm9IJ+5blkYrmNVfd2ebNsrmLmAu71no0Ry5GmXUuD3qd0gGhvPsXOGzS5n +8Gk3Tpy3h1tBxERdvfhr2D0A9dCaJmjrBmcMmuKG/Khh+q173hdZEO79TkzXkZk 8pOk6qEx6SQRGjyiNtTQVVYG85ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFErhWB7H3+ZfXpmqYTR12FQoCMRqMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U4Y2VkMThkLWE3Y2MtNGI0NC1hZjRhLTg1ZjMwNGY5ZWI2Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lOGNlZDE4 ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC80QUUxNTgxRUM3REZFNjVG NUU5OUFBNjEzNDc1RDg1NDI4MDhDNDZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnRTpMA0GCSqGSIb3DQEBCwUAA4IBAQA1cNkL5y4B2iOHDmTXQ0HqkY5GBMe1 M4IC0IEG/0LllInAdpmPMLfAui3F4sINP0UEsNSubjpfs1EZ0y5cRFMCG9dfLN9L +1DCK7QR9fRzIki3WlqlFy1800nolSrQ9iduSAtqUSd1JcQF/NLNeG1S/FiHTIzN eq5lgzrp7LhLRaqJGJ225c66Dt5413L31FXu/77Qz3otrNhYaM9e4HkHDM7M9Dte Oexy61TKeJDrIRXY1acA7PG6RMtlf+Uwk8/P+2WzbS4tMb7a1Ml26Ubsl3Zp1pKN TSF0O++EdyqqDef2UcDoFjP4PNn83U3f7iEj4SYBTkZU4jtQsagqs32j -----END CERTIFICATE-----Generated at Tue May 12 22:04:12 2026 by rpki-client