$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer (raw, json) Hash identifier: 70OEpXOQUwNIpAZIay83wCjSoxu18laqDrkijXJKHFA= Subject key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 19A40227FEE12619D195B954E10E78C30D573E4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:25:10 +0000 Certificate not after: Sun 02 May 2027 02:30:10 +0000 Subordinate resources: IP: 160.25.174.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a4:02:27:fe:e1:26:19:d1:95:b9:54:e1:0e:78:c3:0d:57:3e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:25:10 2026 GMT Not After : May 2 02:30:10 2027 GMT Subject: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:80:41:57:c5:3d:44:4e:1a:e7:ca:2c:a2: 25:40:20:85:35:e0:c8:19:83:d8:ed:2d:7e:65:1e: 87:6d:fc:4b:5f:ab:dd:d6:bb:58:7a:2f:4c:f1:16: 5a:4b:a8:91:2c:0e:9d:8a:cd:9b:0c:c4:4d:f5:f1: 35:a7:26:29:f0:b3:e7:23:97:f5:23:c8:62:7c:28: 3f:71:d3:c1:32:78:86:20:74:13:43:55:85:f6:4b: 34:b6:f7:2c:cf:35:8e:a6:25:4c:69:d8:35:ba:aa: e9:96:db:a2:a3:2e:b7:2c:6e:6b:9e:84:e6:ad:6c: 78:ca:24:d6:5b:ff:99:c0:64:db:99:46:26:34:e1: d7:63:b0:c0:0b:df:1f:40:20:ac:40:0a:bf:e9:39: dd:7a:8d:b0:9d:15:ce:0a:b1:d2:09:e6:52:cf:bb: 56:01:84:6a:12:ab:b0:94:72:45:82:c8:b0:11:f3: 49:5f:1a:56:cf:5b:7d:70:06:94:90:3d:c3:6c:3e: 0a:6f:8c:24:bd:f9:13:7b:19:18:89:5c:d1:b1:83: 33:8c:5c:49:c1:75:e9:3c:96:2f:7f:73:ad:ea:8d: 87:ae:64:2a:63:18:28:8a:48:6e:23:d9:36:5d:1b: c8:f2:7a:c6:67:97:94:f8:e4:81:6b:19:51:9c:01: 73:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.174.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:83:f3:e7:3d:09:a8:83:42:32:4a:9f:1f:c7:d0:2a:d0:c8: c1:ee:ae:6f:23:7f:4e:f3:6a:cb:ee:4a:28:07:d4:7f:79:e3: 0e:68:7e:3b:02:b4:4b:4b:e6:a6:b9:2a:fc:46:a0:01:b4:3f: 88:ef:10:98:b4:09:31:51:b1:23:f4:6e:41:9d:2a:fd:77:75: d0:02:eb:36:d1:e6:40:cf:b1:c1:38:ea:c9:db:02:9d:1c:27: f6:53:a8:02:0a:ac:79:d7:06:fc:1a:9e:b9:0e:f1:4d:55:e4: 08:6e:32:ae:4c:a2:ac:8d:08:bc:b9:ad:22:14:0e:e4:bb:80: de:5e:56:d2:93:2a:1c:8d:74:16:2a:36:52:a8:0a:63:1f:83: 69:53:d1:20:38:fb:37:e8:5c:0a:26:d1:37:b7:01:ad:4a:74: 4b:ad:6d:6a:14:b0:a7:9e:c5:a5:18:3a:a4:7f:1c:2f:4d:09: ae:a5:46:a0:5f:f4:91:74:3d:42:d6:cd:8b:d1:ab:d8:ba:db: 5c:e9:49:e4:8a:e4:64:5f:23:9a:0f:e1:44:e7:62:50:fd:15: 91:9c:3d:27:57:aa:a0:80:3b:c5:41:b0:1f:38:70:96:6b:3f: 88:48:b6:ab:00:bf:fe:88:b4:e6:bf:02:8f:32:16:65:72:9b: c4:07:ae:7d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGaQCJ/7hJhnRlblU4Q54ww1XPk4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMjUxMFoX DTI3MDUwMjAyMzAxMFowMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0 QkM1M0E3MUFDOTI3RDJDMjIwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsSgEFXxT1EThrnyiyiJUAghTXgyBmD2O0tfmUeh238S1+r3da7WHovTPEW WkuokSwOnYrNmwzETfXxNacmKfCz5yOX9SPIYnwoP3HTwTJ4hiB0E0NVhfZLNLb3 LM81jqYlTGnYNbqq6ZbboqMutyxua56E5q1seMok1lv/mcBk25lGJjTh12OwwAvf H0AgrEAKv+k53XqNsJ0Vzgqx0gnmUs+7VgGEahKrsJRyRYLIsBHzSV8aVs9bfXAG lJA9w2w+Cm+MJL35E3sZGIlc0bGDM4xcScF16TyWL39zreqNh65kKmMYKIpIbiPZ Nl0byPJ6xmeXlPjkgWsZUZwBcwUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFx0RcHhN25Ke0BLxTpxrJJ9LCIEMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VjNzJlZTNjLWUxODAtNDI5Ni05ZGFkLTk1MDBlZmQ5NDg5MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYzcyZWUz Yy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC81Qzc0NDVDMUUxMzc2RTRB N0I0MDRCQzUzQTcxQUM5MjdEMkMyMjA0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBmuMA0GCSqGSIb3DQEBCwUAA4IBAQBLg/PnPQmog0IySp8fx9Aq0MjB7q5v I39O82rL7kooB9R/eeMOaH47ArRLS+amuSr8RqABtD+I7xCYtAkxUbEj9G5BnSr9 d3XQAus20eZAz7HBOOrJ2wKdHCf2U6gCCqx51wb8Gp65DvFNVeQIbjKuTKKsjQi8 ua0iFA7ku4DeXlbSkyocjXQWKjZSqApjH4NpU9EgOPs36FwKJtE3twGtSnRLrW1q FLCnnsWlGDqkfxwvTQmupUagX/SRdD1C1s2L0avYuttc6UnkiuRkXyOaD+FE52JQ /RWRnD0nV6qggDvFQbAfOHCWaz+ISLarAL/+iLTmvwKPMhZlcpvEB659 -----END CERTIFICATE-----Generated at Tue May 12 22:16:52 2026 by rpki-client