$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer File: 511F1AA1B492F6794EF165F62B075919F2B16E44.cer (raw, json) Hash identifier: JokfWqYv2nl3XRuv6BCQWiUk+0Tv/ozVLS3gLfP0mNo= Subject key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5658040AA6FF50E69920FC8B23E2B3E36B3B2921 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:47 +0000 Certificate not after: Sun 02 May 2027 01:23:47 +0000 Subordinate resources: IP: 160.20.124.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:58:04:0a:a6:ff:50:e6:99:20:fc:8b:23:e2:b3:e3:6b:3b:29:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:18:47 2026 GMT Not After : May 2 01:23:47 2027 GMT Subject: CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:bf:94:8c:d2:90:0a:f7:c9:86:c8:e8:f5: dd:ed:54:ae:c5:70:00:77:0d:de:3b:4e:25:47:8f: aa:b9:34:e8:d5:f8:6e:c1:ed:23:c3:03:ee:d2:6a: ba:81:8d:71:21:ac:e5:a5:2a:1a:9d:92:74:23:24: 48:d4:64:a5:b1:8a:18:01:f4:d3:8f:09:c5:79:0f: d2:f2:38:11:a7:a0:db:fb:bf:36:ad:6a:19:5a:e8: bb:87:fb:3b:2e:e0:b2:14:08:70:15:14:6b:af:d5: 2b:8c:d3:29:63:e2:91:ea:69:4a:f1:dd:b3:ee:0a: 7f:cf:2f:35:43:49:29:93:aa:26:f9:a8:49:9f:79: d9:7a:3e:32:e2:b3:a2:ff:84:40:84:b3:07:f0:3a: 31:25:88:b7:24:97:33:c4:e0:49:c7:eb:67:5e:9f: 1a:46:1c:d7:95:d2:a7:8b:87:52:14:f0:d9:57:d9: 6a:73:4f:0f:3f:d8:49:e2:bc:88:42:cf:ca:0d:86: d9:2e:08:2d:d8:8d:24:8b:05:e3:e4:79:b1:89:3b: c9:a7:1b:ac:15:8f:19:f7:c2:ad:27:42:0f:e8:f2: 48:0a:e0:bf:20:f1:b0:05:15:72:99:ca:c6:2e:4f: 06:3f:c1:3e:10:bd:51:25:85:76:5f:eb:8a:1c:c1: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.124.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:9b:c2:dc:59:32:7f:02:02:eb:72:ba:21:dd:ad:58:40:1a: 23:ef:64:2d:dd:cd:4a:fc:79:c5:50:ec:c8:63:ab:96:45:db: 93:03:06:3f:29:e5:f0:e1:82:f1:79:c6:71:e4:67:92:f0:fc: 27:50:d3:c9:51:21:d1:e9:65:be:ff:09:bf:9c:a5:51:f3:19: 48:70:e2:91:ab:0b:37:92:53:cd:df:dd:00:c1:d9:71:ba:e6: bf:77:00:29:5a:83:5a:55:58:c1:c9:b0:96:c9:73:e7:dc:a6: 3d:8c:73:24:3a:ed:5a:fc:78:9a:80:8d:d2:79:ea:a1:88:e9: f1:dc:e7:bc:d9:5f:d0:77:a1:f4:f3:c6:0b:46:ee:90:fc:e2: 53:ba:eb:34:5e:18:cc:2c:33:cd:f9:5e:92:d9:5a:8c:e1:41: 2a:2c:6f:b3:b5:31:fc:ea:0e:9b:9c:f8:c1:26:64:64:bb:6c: 42:55:1a:b1:32:3d:f2:c3:26:9b:fb:52:fb:72:92:c8:4b:61: b4:3d:c2:96:71:5e:b8:00:03:87:ce:a6:e2:f0:f5:c6:b7:a3: f8:1c:06:48:e3:f0:71:9b:fc:7d:4c:ef:73:67:fc:7e:93:fd: 3a:0a:16:6e:8b:65:46:55:a7:03:54:51:27:c7:e7:e9:fd:d3: 7b:47:a2:68 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVlgECqb/UOaZIPyLI+Kz42s7KSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMTg0N1oX DTI3MDUwMjAxMjM0N1owMzExMC8GA1UEAxMoNTExRjFBQTFCNDkyRjY3OTRFRjE2 NUY2MkIwNzU5MTlGMkIxNkU0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdiv5SM0pAK98mGyOj13e1UrsVwAHcN3jtOJUePqrk06NX4bsHtI8MD7tJq uoGNcSGs5aUqGp2SdCMkSNRkpbGKGAH0048JxXkP0vI4Eaeg2/u/Nq1qGVrou4f7 Oy7gshQIcBUUa6/VK4zTKWPikeppSvHds+4Kf88vNUNJKZOqJvmoSZ952Xo+MuKz ov+EQISzB/A6MSWItySXM8TgScfrZ16fGkYc15XSp4uHUhTw2VfZanNPDz/YSeK8 iELPyg2G2S4ILdiNJIsF4+R5sYk7yacbrBWPGffCrSdCD+jySArgvyDxsAUVcpnK xi5PBj/BPhC9USWFdl/rihzBU28CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFEfGqG0kvZ5TvFl9isHWRnysW5EMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkzNTc5MjFkLWVlMTgtNDM1Yy04YjZlLWViYTIyNDFiODNhYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MzU3OTIx ZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC81MTFGMUFBMUI0OTJGNjc5 NEVGMTY1RjYyQjA3NTkxOUYyQjE2RTQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBR8MA0GCSqGSIb3DQEBCwUAA4IBAQAfm8LcWTJ/AgLrcroh3a1YQBoj72Qt 3c1K/HnFUOzIY6uWRduTAwY/KeXw4YLxecZx5GeS8PwnUNPJUSHR6WW+/wm/nKVR 8xlIcOKRqws3klPN390Awdlxuua/dwApWoNaVVjBybCWyXPn3KY9jHMkOu1a/Hia gI3SeeqhiOnx3Oe82V/Qd6H088YLRu6Q/OJTuus0XhjMLDPN+V6S2VqM4UEqLG+z tTH86g6bnPjBJmRku2xCVRqxMj3ywyab+1L7cpLIS2G0PcKWcV64AAOHzqbi8PXG t6P4HAZI4/Bxm/x9TO9zZ/x+k/06ChZui2VGVacDVFEnx+fp/dN7R6Jo -----END CERTIFICATE-----Generated at Tue May 12 22:02:59 2026 by rpki-client