$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer File: 57E460937137B652DFB7C6EB8A5BA887C395741C.cer (raw, json) Hash identifier: Nup+IMmSl3Ly/l0scUo2eUKH+iqlHpKc1IhV7qIwyD0= Subject key identifier: 57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6B103EA79012C4F0604C64C9CF5957F9F541B648 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:33 +0000 Certificate not after: Sun 02 May 2027 01:45:33 +0000 Subordinate resources: IP: 157.15.0.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:10:3e:a7:90:12:c4:f0:60:4c:64:c9:cf:59:57:f9:f5:41:b6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:40:33 2026 GMT Not After : May 2 01:45:33 2027 GMT Subject: CN=57E460937137B652DFB7C6EB8A5BA887C395741C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:b2:a9:37:4a:1c:02:ac:3e:7e:49:5b:17: 65:1c:ad:d0:de:bc:0c:fa:8a:85:e4:57:4d:2d:49: 39:e6:6b:27:a3:4c:c0:22:ea:b5:78:bc:95:8a:ed: da:97:ca:af:3f:b8:32:41:85:ce:97:26:3d:f5:fb: 33:75:da:a2:95:56:8b:a4:67:66:b5:17:43:0a:5c: e8:ae:09:33:79:15:87:d2:30:21:17:ad:6f:a9:bb: 40:16:98:94:8f:4c:e2:3f:86:76:f1:31:22:22:b0: 94:1e:3f:61:3d:df:39:6e:b7:d3:ee:0a:49:6f:77: 0c:2d:f0:44:68:ee:5c:1d:a1:e4:84:4d:06:da:38: 12:cd:dd:0b:e4:75:2f:8d:14:ff:be:4c:1d:de:b6: d0:1c:05:d1:78:9e:3f:5e:d6:43:93:19:43:dd:2a: f6:f1:45:9d:3a:ee:1b:aa:fb:de:4d:c0:1b:a3:73: 4c:61:77:4a:6e:95:e6:ed:44:d0:a4:8f:f0:1b:80: 83:ad:00:84:74:81:ee:a7:a5:ac:b8:31:4c:af:d6: b5:f5:68:87:7f:05:a9:ce:7f:cb:49:f8:9a:bd:49: f2:cc:ec:b3:18:65:09:2d:1d:cc:71:ee:38:43:07: 08:25:ea:6c:b1:2f:22:3b:ad:9e:bb:6d:d1:f9:9c: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.0.0/23 Signature Algorithm: sha256WithRSAEncryption 48:74:18:f8:e5:c3:5d:53:25:f3:c6:b2:ac:a6:a7:46:80:fa: 88:6e:ed:14:63:95:dc:3f:36:93:62:f9:06:84:9a:eb:b3:f9: b2:57:38:ef:0f:94:a7:a5:6d:d9:08:a5:2e:e9:a6:9b:d7:8a: 96:57:8f:17:f3:14:ab:cd:6e:04:3c:f8:76:2e:92:f5:84:7b: 2d:ce:f0:bc:ef:f8:06:e2:19:88:97:f9:91:2a:eb:63:30:a1: 6c:c7:31:43:6d:91:2f:9a:03:db:13:f9:ef:df:1e:c2:5e:fe: 91:69:0b:10:5f:b9:cd:6d:5b:45:dc:3e:2c:38:4a:f1:3a:02: 2b:29:76:e8:6a:28:aa:07:27:bf:3e:6d:af:7b:90:4e:ad:a8: 83:f7:8d:1c:5c:7a:bf:74:f4:46:ba:50:90:2b:47:f9:57:69: db:99:9a:4d:6e:30:eb:be:a3:18:c8:56:cd:79:3f:be:0a:a2: c2:df:15:33:98:6d:57:c3:c0:2e:57:ec:88:4c:cc:5b:99:0b: 0c:77:1b:f4:1a:93:c8:bf:a9:e3:da:ff:e2:ec:90:cb:26:4c: 03:e3:af:fc:d8:d0:88:21:41:7b:0f:cd:87:02:7d:70:da:dd: be:e9:46:88:ba:72:95:7e:3e:0f:5b:21:0f:d9:bc:cb:e3:66: 7e:c2:8e:1c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaxA+p5ASxPBgTGTJz1lX+fVBtkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDAzM1oX DTI3MDUwMjAxNDUzM1owMzExMC8GA1UEAxMoNTdFNDYwOTM3MTM3QjY1MkRGQjdD NkVCOEE1QkE4ODdDMzk1NzQxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfEsqk3ShwCrD5+SVsXZRyt0N68DPqKheRXTS1JOeZrJ6NMwCLqtXi8lYrt 2pfKrz+4MkGFzpcmPfX7M3XaopVWi6RnZrUXQwpc6K4JM3kVh9IwIRetb6m7QBaY lI9M4j+GdvExIiKwlB4/YT3fOW630+4KSW93DC3wRGjuXB2h5IRNBto4Es3dC+R1 L40U/75MHd620BwF0XieP17WQ5MZQ90q9vFFnTruG6r73k3AG6NzTGF3Sm6V5u1E 0KSP8BuAg60AhHSB7qelrLgxTK/WtfVoh38Fqc5/y0n4mr1J8szssxhlCS0dzHHu OEMHCCXqbLEvIjutnrtt0fmcirECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFfkYJNxN7ZS37fG64pbqIfDlXQcMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I0NjEzN2FlLTJlZmItNDNjMC1iZGI3LTQzZjVkOTM5Y2YwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNDYxMzdh ZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC81N0U0NjA5MzcxMzdCNjUy REZCN0M2RUI4QTVCQTg4N0MzOTU3NDFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ8AMA0GCSqGSIb3DQEBCwUAA4IBAQBIdBj45cNdUyXzxrKspqdGgPqIbu0U Y5XcPzaTYvkGhJrrs/myVzjvD5SnpW3ZCKUu6aab14qWV48X8xSrzW4EPPh2LpL1 hHstzvC87/gG4hmIl/mRKutjMKFsxzFDbZEvmgPbE/nv3x7CXv6RaQsQX7nNbVtF 3D4sOErxOgIrKXboaiiqBye/Pm2ve5BOraiD940cXHq/dPRGulCQK0f5V2nbmZpN bjDrvqMYyFbNeT++CqLC3xUzmG1Xw8AuV+yITMxbmQsMdxv0GpPIv6nj2v/i7JDL JkwD46/82NCIIUF7D82HAn1w2t2+6UaIunKVfj4PWyEP2bzL42Z+wo4c -----END CERTIFICATE-----Generated at Tue May 12 22:45:48 2026 by rpki-client