$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer (raw, json) Hash identifier: +6Bz1oTREt9W3HIWN/sPdyRDFMOYLRsqHJSRTC3Eog0= Subject key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 34EAF15A31AE056841853F015D515460B1D935D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:57:37 +0000 Certificate not after: Sun 02 May 2027 02:02:37 +0000 Subordinate resources: IP: 157.20.158.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ea:f1:5a:31:ae:05:68:41:85:3f:01:5d:51:54:60:b1:d9:35:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:57:37 2026 GMT Not After : May 2 02:02:37 2027 GMT Subject: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:d0:47:68:1b:00:84:aa:2f:80:44:9b:43: e8:b9:06:30:38:6d:f5:06:fc:dd:d0:50:55:3b:11: f9:9e:1a:b4:28:8e:08:41:a4:73:df:89:4b:ca:04: c5:92:09:cf:fe:1f:28:08:af:af:06:c1:1e:94:68: 7c:57:70:92:f0:35:cb:89:c9:ea:88:5d:b2:25:88: 72:b7:78:17:25:19:80:be:2c:9f:3d:3f:1c:c5:7f: 4d:f5:7f:bd:b3:9c:8f:51:61:2d:d0:e3:2d:d9:aa: 19:eb:9e:04:ac:25:8d:96:f7:77:e3:fe:cb:5e:d6: 61:39:33:3c:7e:42:2d:26:26:af:26:04:2e:df:fe: 20:37:47:0c:7e:1a:e9:15:80:1f:ee:1f:7a:ce:2c: 82:e2:4c:63:87:2f:df:42:ae:38:b8:d3:4b:0d:b2: 41:58:5b:0a:7f:a8:d7:5d:de:4e:dd:c4:0a:b2:82: fb:d0:58:0b:54:ae:de:f6:dc:fd:b7:04:cc:4e:4f: c5:64:57:49:c0:67:b6:a6:a0:bc:7d:4a:74:f2:62: 4d:3e:2f:75:01:70:ed:12:e2:11:ff:97:3b:3e:06: 82:73:87:f1:11:99:00:70:ff:d3:24:6a:19:0f:f0: 53:a3:65:44:53:c7:5f:0f:fe:07:77:d5:75:4f:db: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.158.0/23 Signature Algorithm: sha256WithRSAEncryption 71:8f:93:e0:aa:cd:f6:1c:3d:ff:7d:58:d4:35:19:2c:8b:79: f7:d9:10:0c:9e:3e:ac:6f:19:b1:0c:73:dd:b9:de:04:e7:6e: 50:ad:b5:6b:5d:72:94:d1:8e:69:1e:ea:63:26:a5:66:39:07: b1:2c:3d:ac:23:36:05:d8:4c:ba:e8:59:47:46:10:2b:bc:27: ed:38:65:01:4a:7e:78:69:ef:41:f0:93:e0:3d:1f:2e:b3:7d: 10:47:93:36:0f:35:28:4c:78:2d:ce:1f:6a:4f:2d:4f:0c:6d: a2:54:82:01:6c:40:c0:84:e3:95:64:77:c4:4c:46:70:d8:98: 52:fb:fe:73:1a:7b:76:4d:cf:df:cf:60:85:22:71:7a:c3:18: 2f:f3:52:8c:e0:46:ea:12:43:97:a6:1d:b6:97:50:33:df:84: 63:2c:f8:4a:51:13:24:f5:7e:2b:96:cd:29:44:c9:ec:9b:94: ed:9f:61:96:47:88:1c:50:8a:ef:07:e8:e8:27:88:02:fe:5b: 44:2c:00:37:de:6f:43:19:d3:bc:4e:3d:71:6c:42:1f:96:ec: 6c:a5:e7:4c:cd:31:f1:6e:76:74:10:59:87:ad:75:cf:0b:6c: 8e:6c:ab:ed:b6:f5:2c:40:10:a7:1c:2b:19:75:7f:9c:86:f1: 1d:9a:51:52 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNOrxWjGuBWhBhT8BXVFUYLHZNdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTczN1oX DTI3MDUwMjAyMDIzN1owMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3 QTdGRTVCNzI0MjQyNjA2OUMyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdm0EdoGwCEqi+ARJtD6LkGMDht9Qb83dBQVTsR+Z4atCiOCEGkc9+JS8oE xZIJz/4fKAivrwbBHpRofFdwkvA1y4nJ6ohdsiWIcrd4FyUZgL4snz0/HMV/TfV/ vbOcj1FhLdDjLdmqGeueBKwljZb3d+P+y17WYTkzPH5CLSYmryYELt/+IDdHDH4a 6RWAH+4fes4sguJMY4cv30KuOLjTSw2yQVhbCn+o113eTt3ECrKC+9BYC1Su3vbc /bcEzE5PxWRXScBntqagvH1KdPJiTT4vdQFw7RLiEf+XOz4GgnOH8RGZAHD/0yRq GQ/wU6NlRFPHXw/+B3fVdU/bbpUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEr3pcb1TF/b2JV6f+W3JCQmBpwrMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QxNTlhMzYyLTk1MGMtNDVjMi1hZWNjLTgyYjIxNGJjZTQ3NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMTU5YTM2 Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC80QUY3QTVDNkY1NEM1RkRC RDg5NTdBN0ZFNUI3MjQyNDI2MDY5QzJCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRSeMA0GCSqGSIb3DQEBCwUAA4IBAQBxj5Pgqs32HD3/fVjUNRksi3n32RAM nj6sbxmxDHPdud4E525QrbVrXXKU0Y5pHupjJqVmOQexLD2sIzYF2Ey66FlHRhAr vCftOGUBSn54ae9B8JPgPR8us30QR5M2DzUoTHgtzh9qTy1PDG2iVIIBbEDAhOOV ZHfETEZw2JhS+/5zGnt2Tc/fz2CFInF6wxgv81KM4EbqEkOXph22l1Az34RjLPhK URMk9X4rls0pRMnsm5Ttn2GWR4gcUIrvB+joJ4gC/ltELAA33m9DGdO8Tj1xbEIf luxspedMzTHxbnZ0EFmHrXXPC2yObKvttvUsQBCnHCsZdX+chvEdmlFS -----END CERTIFICATE-----Generated at Tue May 12 22:46:10 2026 by rpki-client