$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer (raw, json) Hash identifier: eAPaRm4mVR8Zuh7H3XIsWY51vIWqFGurkJZ+ljeQrJU= Subject key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7C30532DCE21223E086A3F058A6B444EFAB13A42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:08:34 +0000 Certificate not after: Sun 02 May 2027 02:13:34 +0000 Subordinate resources: IP: 160.20.38.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:30:53:2d:ce:21:22:3e:08:6a:3f:05:8a:6b:44:4e:fa:b1:3a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:08:34 2026 GMT Not After : May 2 02:13:34 2027 GMT Subject: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:58:a2:d3:d2:63:28:fe:48:7c:c5:43:ed: f3:e1:fd:ae:39:9f:5c:ca:bc:d3:51:3a:8b:0a:f4: c3:c4:6a:92:17:fd:8c:98:d4:1f:1b:8d:5e:e0:99: 7f:8a:05:af:fe:b4:4f:cb:d8:e0:92:73:84:42:6d: 9a:5b:c7:1e:63:6c:f4:7f:a2:22:91:d9:87:5c:71: 6e:11:2d:fc:9a:2e:76:95:31:dd:01:61:03:27:71: 26:a3:05:d9:54:86:4e:8b:ab:9a:8f:cc:3b:d9:0d: ab:37:97:b0:8e:15:34:a4:b8:f4:a6:25:2c:6e:57: 1a:76:0c:0c:d2:af:46:de:28:3c:81:33:e8:97:02: bc:e9:31:b5:38:90:15:3e:53:f3:52:86:2e:75:98: 82:75:44:31:dd:e8:85:72:f0:f2:95:c5:42:7e:8d: f2:9f:ab:c0:72:2c:94:7d:7e:e5:64:5d:2d:b4:df: 84:de:5f:d2:6d:ae:69:41:bf:49:6b:57:76:04:74: 21:d3:f2:2e:89:29:2e:4c:67:f3:86:a8:f1:81:32: ea:bd:4e:9b:7f:3e:f7:b7:52:f6:8e:e7:87:ec:c0: a1:2a:34:e4:b7:d3:35:05:ea:09:3c:a3:ed:89:51: 6b:02:b6:62:0e:97:e4:ef:60:d8:b1:1b:2a:64:86: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.38.0/23 Signature Algorithm: sha256WithRSAEncryption 60:bd:49:4b:7e:3a:33:b1:1b:cf:61:f6:e4:37:37:34:cf:b4: 69:94:b7:4f:f1:ed:2d:17:7a:40:a8:2a:a6:e2:e7:a3:a4:c1: 78:3b:56:20:c6:84:11:9a:61:76:18:93:33:5d:f6:6b:3c:b5: ed:3c:7d:2d:d6:41:1d:c9:c9:9c:3b:6f:5e:e0:72:60:ab:af: 34:73:65:1b:2c:a9:a9:86:df:86:d1:80:a7:64:40:51:84:16: b3:af:31:94:02:86:dd:1b:10:3f:7b:aa:ac:23:d8:4a:c2:59: 50:8e:a4:55:58:5b:40:7b:0c:1b:c4:db:ff:04:8e:04:62:99: 35:65:e6:d3:84:67:ea:83:61:e1:c4:55:51:24:bb:b9:cf:9a: a0:f1:32:e7:ee:31:b4:73:0c:f1:e9:e2:9c:99:84:4f:db:f1: ac:5c:f7:33:1d:a9:13:28:23:0c:9a:15:a9:e6:80:7b:90:65: 7b:4f:37:20:77:b9:2e:1a:20:5e:1a:bf:77:ff:6a:0d:41:1c: e7:19:80:45:9b:b3:50:0b:6f:8d:6d:90:82:e8:63:b5:ed:96: 23:ac:69:56:f8:45:fa:56:01:61:01:d6:2b:9f:48:97:35:df: 4b:6e:7c:00:a9:c0:73:b5:5e:48:d1:5d:6f:0c:9b:1a:98:43: 70:11:14:41 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfDBTLc4hIj4Iaj8FimtETvqxOkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMDgzNFoX DTI3MDUwMjAyMTMzNFowMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0 QkFFRkRCNEFBMjkxRUI2RjhGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDdWKLT0mMo/kh8xUPt8+H9rjmfXMq801E6iwr0w8Rqkhf9jJjUHxuNXuCZ f4oFr/60T8vY4JJzhEJtmlvHHmNs9H+iIpHZh1xxbhEt/JoudpUx3QFhAydxJqMF 2VSGTourmo/MO9kNqzeXsI4VNKS49KYlLG5XGnYMDNKvRt4oPIEz6JcCvOkxtTiQ FT5T81KGLnWYgnVEMd3ohXLw8pXFQn6N8p+rwHIslH1+5WRdLbTfhN5f0m2uaUG/ SWtXdgR0IdPyLokpLkxn84ao8YEy6r1Om38+97dS9o7nh+zAoSo05LfTNQXqCTyj 7YlRawK2Yg6X5O9g2LEbKmSGWZcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGAtw8BCRQmJUJtLrv20qiketvj2MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmZTdkYWNjLTJiNDUtNDE0MS05Nzc1LWYxYmI5ZjA1MjM5Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZmU3ZGFj Yy0yYjQ1LTQxNDEtOTc3NS1mMWJiOWYwNTIzOTYvMC82MDJEQzNDMDQyNDUwOTg5 NTA5QjRCQUVGREI0QUEyOTFFQjZGOEY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBQmMA0GCSqGSIb3DQEBCwUAA4IBAQBgvUlLfjozsRvPYfbkNzc0z7RplLdP 8e0tF3pAqCqm4uejpMF4O1YgxoQRmmF2GJMzXfZrPLXtPH0t1kEdycmcO29e4HJg q680c2UbLKmpht+G0YCnZEBRhBazrzGUAobdGxA/e6qsI9hKwllQjqRVWFtAewwb xNv/BI4EYpk1ZebThGfqg2HhxFVRJLu5z5qg8TLn7jG0cwzx6eKcmYRP2/GsXPcz HakTKCMMmhWp5oB7kGV7Tzcgd7kuGiBeGr93/2oNQRznGYBFm7NQC2+NbZCC6GO1 7ZYjrGlW+EX6VgFhAdYrn0iXNd9LbnwAqcBztV5I0V1vDJsamENwERRB -----END CERTIFICATE-----Generated at Tue May 12 22:10:03 2026 by rpki-client