$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer (raw, json) Hash identifier: c2Vlx1MB7J/GL5s25nk7Xh+cN7wGT82HChU4nAIl0NU= Subject key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 785F52278F5E460E203C3355633858974B6F0810 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:40:20 +0000 Certificate not after: Sun 02 May 2027 02:45:20 +0000 Subordinate resources: IP: 157.66.86.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5f:52:27:8f:5e:46:0e:20:3c:33:55:63:38:58:97:4b:6f:08:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:40:20 2026 GMT Not After : May 2 02:45:20 2027 GMT Subject: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:5b:8c:b0:99:c6:b2:82:25:60:2e:3e:65: 47:48:0a:73:89:08:13:b5:2b:a3:d0:6a:f6:6f:51: 9c:78:13:2a:76:65:4c:2f:2c:0f:c2:80:f6:52:7d: d2:a6:c9:80:54:7d:e7:31:d4:be:c5:f7:19:5f:78: fe:87:b6:b0:c3:20:a8:c0:b8:20:a7:9b:3d:0d:8c: 71:66:fa:15:07:8a:f8:86:4a:3f:39:86:e4:9d:04: 4a:bd:27:d6:48:b1:e5:16:d2:f9:53:61:d4:96:ba: f0:4d:13:fa:6b:50:dc:8d:d7:ba:df:e0:a9:4c:54: c7:67:ed:5d:3a:67:ad:61:13:79:17:f3:12:25:b0: 40:bf:02:56:c9:31:1c:07:d7:41:59:0a:b4:59:dc: 39:f1:4d:86:d5:26:8b:8f:2f:e6:fa:94:74:d4:15: 69:38:5c:54:62:74:65:d0:e4:46:b3:a1:f5:cb:f7: ee:f2:b6:5e:62:cd:09:7c:39:b4:7b:c9:b6:57:c5: ea:bf:04:c5:b8:11:3a:69:ff:8f:2c:51:a1:cb:83: b3:43:7e:85:8a:c8:0d:1c:4d:92:b9:ac:ca:54:06: c4:40:79:3f:cf:b5:99:14:8e:db:88:fe:04:67:1e: 01:6f:b0:22:e5:f3:6f:c3:8a:39:f8:95:4a:ee:6e: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.86.0/23 Signature Algorithm: sha256WithRSAEncryption 89:4f:c4:fd:9b:a9:f8:30:e2:c8:03:14:d5:ad:4d:45:04:b6: 5e:7d:a5:c0:7e:a4:ce:19:81:78:e0:8b:1c:ea:13:2c:fe:d0: e3:92:99:f2:29:39:b1:7d:63:b7:5f:00:da:b6:5a:5f:20:81: c1:86:b4:16:da:c3:c6:cb:4c:c5:0a:11:13:ff:82:d9:bc:be: 9e:79:a9:31:95:32:c7:87:2a:c0:7b:be:23:a1:82:e8:ef:01: 74:0c:94:4d:a4:1a:ea:f0:c9:64:e8:a2:ae:0e:ea:9b:08:f0: ed:6b:a3:63:03:30:aa:f5:c0:40:99:9f:14:bf:e9:4c:3b:dd: 49:ed:55:38:66:85:12:52:14:65:75:5b:1c:77:e0:a5:bf:f3: 9b:df:95:b5:61:1d:d0:e2:8f:39:a0:d8:a5:d3:73:3f:24:76: 7e:47:88:67:67:c5:88:3f:02:a3:90:ee:04:ef:8c:09:66:e4: 74:98:d5:7c:97:71:93:4d:20:1d:4a:e1:73:1c:be:4b:50:b0: 17:87:1f:d3:5b:f2:d9:70:ca:43:d0:a1:83:2d:1d:f1:0f:2f: 71:b5:2d:53:4b:b7:75:2d:b1:83:b7:ad:36:a7:9f:c3:13:58: bb:59:b5:3b:2a:d1:00:36:c9:55:3c:2c:70:33:80:6d:d9:11: ec:fe:ad:fe -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeF9SJ49eRg4gPDNVYzhYl0tvCBAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyNDAyMFoX DTI3MDUwMjAyNDUyMFowMzExMC8GA1UEAxMoNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFC QUNFRUFGQ0ZEQjE4NTYxMzIxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqZW4ywmcaygiVgLj5lR0gKc4kIE7Uro9Bq9m9RnHgTKnZlTC8sD8KA9lJ9 0qbJgFR95zHUvsX3GV94/oe2sMMgqMC4IKebPQ2McWb6FQeK+IZKPzmG5J0ESr0n 1kix5RbS+VNh1Ja68E0T+mtQ3I3Xut/gqUxUx2ftXTpnrWETeRfzEiWwQL8CVskx HAfXQVkKtFncOfFNhtUmi48v5vqUdNQVaThcVGJ0ZdDkRrOh9cv37vK2XmLNCXw5 tHvJtlfF6r8ExbgROmn/jyxRocuDs0N+hYrIDRxNkrmsylQGxEB5P8+1mRSO24j+ BGceAW+wIuXzb8OKOfiVSu5uvI0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFhj78+M5wYc3/G6zur8/bGFYTIUMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y4N2RkNTk3LTQwY2QtNDA5Yi1iM2M1LTI4NTJjZTAxNDg4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mODdkZDU5 Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC81ODYzRUZDRjhDRTcwNjFD REZGMUJBQ0VFQUZDRkRCMTg1NjEzMjE0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUJWMA0GCSqGSIb3DQEBCwUAA4IBAQCJT8T9m6n4MOLIAxTVrU1FBLZefaXA fqTOGYF44Isc6hMs/tDjkpnyKTmxfWO3XwDatlpfIIHBhrQW2sPGy0zFChET/4LZ vL6eeakxlTLHhyrAe74joYLo7wF0DJRNpBrq8Mlk6KKuDuqbCPDta6NjAzCq9cBA mZ8Uv+lMO91J7VU4ZoUSUhRldVscd+Clv/Ob35W1YR3Q4o85oNil03M/JHZ+R4hn Z8WIPwKjkO4E74wJZuR0mNV8l3GTTSAdSuFzHL5LULAXhx/TW/LZcMpD0KGDLR3x Dy9xtS1TS7d1LbGDt602p5/DE1i7WbU7KtEANslVPCxwM4Bt2RHs/q3+ -----END CERTIFICATE-----Generated at Tue May 12 22:10:22 2026 by rpki-client