$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer File: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer (raw, json) Hash identifier: HJcg0qaxOlHMuE2lnHp81uUzKA4M53Qk2XnAn00npxQ= Subject key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 43E552D665B59114BEC1D06E5AC4B8A0F4D19F9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:01:56 +0000 Certificate not after: Sun 02 May 2027 02:06:56 +0000 Subordinate resources: IP: 160.20.220.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e5:52:d6:65:b5:91:14:be:c1:d0:6e:5a:c4:b8:a0:f4:d1:9f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:01:56 2026 GMT Not After : May 2 02:06:56 2027 GMT Subject: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:e8:db:0a:7d:b2:55:39:3e:fb:c8:a3:ee: 0c:ce:bc:a6:f1:c5:9d:d6:97:cf:1c:66:5f:54:0e: 0b:d0:2c:6c:f7:62:26:06:37:7d:35:e2:e7:8d:19: b4:ac:96:30:23:da:b9:dc:59:a7:34:f0:95:2a:42: 72:83:5f:75:e8:a9:2b:ed:35:48:fe:1b:07:17:34: a6:cd:61:11:35:0f:d8:4a:6e:7f:8d:6e:70:fd:78: bd:36:b0:b0:1f:38:be:a9:38:44:5c:79:c3:1a:04: 01:6a:f9:09:7d:e6:ee:89:b3:24:02:2b:14:f9:1e: 38:38:fa:b0:53:54:80:ec:05:10:fe:49:63:75:a6: c3:fe:e8:0a:c8:5b:73:c0:9d:a6:e8:7a:fc:c1:38: 06:bb:4b:9f:f2:bc:5b:37:49:04:3d:fb:ae:4b:b0: 7a:1e:88:2c:57:0d:3e:2d:4d:37:f2:b0:0a:b4:33: a9:6a:3c:56:0b:91:60:f2:72:7b:d2:cc:9e:6c:b7: de:9f:88:2b:70:19:b9:5d:c3:76:f3:4a:8d:fc:78: f3:8e:9d:0e:83:d7:c2:20:bb:8b:75:ee:3a:6c:b3: 60:8a:7f:f6:16:3c:6f:37:f1:bd:12:83:14:fb:3e: 7f:34:8e:6e:1b:30:b7:59:92:e6:c9:f1:25:f8:e7: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.220.0/24 Signature Algorithm: sha256WithRSAEncryption 85:cc:22:0c:e5:d5:5c:54:07:99:98:22:c3:4e:e2:a8:c1:6d: 11:cd:b4:37:4f:63:86:c2:ed:85:66:6c:42:a7:be:ca:45:a6: 68:79:d7:a0:d5:6a:a7:eb:52:77:03:e5:4a:80:80:74:4e:9c: 9a:b1:fc:88:02:25:3b:bb:65:e3:4d:6b:2f:1e:4e:fd:84:91: 04:23:e1:f5:9b:9b:12:7e:23:29:0d:8f:1a:22:81:35:0a:f5: 35:98:fb:db:09:2e:d3:eb:83:b0:87:10:20:83:55:2c:7c:f3: fd:37:b0:46:8c:89:c9:d1:59:81:bb:ce:49:cd:10:c2:fd:c8: 86:b3:f8:7f:d6:d8:ef:c1:1f:02:b2:d6:dc:a2:6b:c7:aa:7a: 5e:bd:f1:ff:9c:d8:df:30:13:8f:8d:55:e6:d1:18:05:a9:89: ae:9f:2d:cc:3f:14:6a:0c:ae:90:73:1b:dd:ca:9d:a1:8a:74: a6:29:b0:dc:cd:01:3e:7d:18:93:17:79:cb:6f:fa:5a:8c:de: 31:1e:6a:e4:55:db:17:58:34:8e:cc:bc:39:3f:ea:4e:05:4e: 00:37:6e:f5:4a:bf:d4:87:ae:2b:92:eb:59:51:17:b7:98:6f: 3c:0d:84:9c:77:4d:a9:29:f0:c4:7c:04:75:b5:21:1f:9a:57: 13:02:7b:7a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQ+VS1mW1kRS+wdBuWsS4oPTRn5wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMDE1NloX DTI3MDUwMjAyMDY1NlowMzExMC8GA1UEAxMoNEIxRUFCQTc2NDYwREJFNjA0NkI4 NTdCNTdGREZCNTI4QzJEQTA5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3Y6NsKfbJVOT77yKPuDM68pvHFndaXzxxmX1QOC9AsbPdiJgY3fTXi540Z tKyWMCPaudxZpzTwlSpCcoNfdeipK+01SP4bBxc0ps1hETUP2Epuf41ucP14vTaw sB84vqk4RFx5wxoEAWr5CX3m7omzJAIrFPkeODj6sFNUgOwFEP5JY3Wmw/7oCshb c8Cdpuh6/ME4BrtLn/K8WzdJBD37rkuweh6ILFcNPi1NN/KwCrQzqWo8VguRYPJy e9LMnmy33p+IK3AZuV3DdvNKjfx4846dDoPXwiC7i3XuOmyzYIp/9hY8bzfxvRKD FPs+fzSObhswt1mS5snxJfjnKCcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEseq6dkYNvmBGuFe1f9+1KMLaCfMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q4ODU3NWM4LTU0ZmUtNDgwMS1hN2IxLTUxN2QwZTZiOGI3My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kODg1NzVj OC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC80QjFFQUJBNzY0NjBEQkU2 MDQ2Qjg1N0I1N0ZERkI1MjhDMkRBMDlGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBTcMA0GCSqGSIb3DQEBCwUAA4IBAQCFzCIM5dVcVAeZmCLDTuKowW0RzbQ3 T2OGwu2FZmxCp77KRaZoedeg1Wqn61J3A+VKgIB0TpyasfyIAiU7u2XjTWsvHk79 hJEEI+H1m5sSfiMpDY8aIoE1CvU1mPvbCS7T64OwhxAgg1UsfPP9N7BGjInJ0VmB u85JzRDC/ciGs/h/1tjvwR8CstbcomvHqnpevfH/nNjfMBOPjVXm0RgFqYmuny3M PxRqDK6Qcxvdyp2hinSmKbDczQE+fRiTF3nLb/pajN4xHmrkVdsXWDSOzLw5P+pO BU4AN271Sr/Uh64rkutZURe3mG88DYScd02pKfDEfAR1tSEfmlcTAnt6 -----END CERTIFICATE-----Generated at Tue May 12 22:10:14 2026 by rpki-client