$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.cer File: 62DC4356F124B284CCF7683F293ACE03AA908BB4.cer (raw, json) Hash identifier: zxi6csxDUUT5d938zJm1pl+sBwvwGPhvvhm3HSSmTek= Subject key identifier: 62:DC:43:56:F1:24:B2:84:CC:F7:68:3F:29:3A:CE:03:AA:90:8B:B4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 583D3E7B467BBB163208521DA02CFCDA1DB00045 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:27:52 +0000 Certificate not after: Sun 02 May 2027 00:32:52 +0000 Subordinate resources: IP: 160.25.250.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3d:3e:7b:46:7b:bb:16:32:08:52:1d:a0:2c:fc:da:1d:b0:00:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:27:52 2026 GMT Not After : May 2 00:32:52 2027 GMT Subject: CN=62DC4356F124B284CCF7683F293ACE03AA908BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:24:dd:05:8f:11:cb:57:d2:68:91:66:32: 54:7e:9e:71:e3:85:4a:05:1d:68:d9:bd:9b:a4:b0: d1:96:1a:e1:e9:a9:3d:34:a3:40:88:6b:3e:d1:c4: ec:f8:94:98:45:61:1e:86:54:7d:40:d4:78:d6:65: 7f:e2:cd:9c:0d:f7:ab:b1:20:d3:94:68:12:25:3c: 64:86:bd:1b:f0:eb:8e:d2:51:ae:83:c7:5d:60:6c: 45:71:fa:1f:9b:12:58:43:b8:ee:62:51:f2:fa:92: 3d:24:8d:60:77:5f:6e:e1:9e:c2:1f:02:18:83:3f: 0f:55:c9:c3:59:11:02:9c:88:69:a3:fa:63:af:b8: 46:67:4c:20:2e:58:4b:eb:69:f4:43:6a:42:da:59: 9c:f1:d3:bb:42:17:1e:cb:43:e4:b8:9e:a3:a8:70: 6e:91:1c:e4:6c:8a:4f:87:31:73:a6:f8:f4:c2:34: 71:e8:8d:0b:65:31:74:e2:87:ec:f8:f0:c4:fe:7b: df:e1:7c:eb:63:93:45:a4:71:91:57:dc:af:0f:d0: d2:d6:ec:18:64:c0:cb:d0:55:cb:4e:a7:34:d1:72: 41:f7:78:cd:77:14:87:64:69:33:33:5e:88:54:56: f3:b4:25:59:56:11:30:26:9d:66:8f:85:71:05:4f: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:DC:43:56:F1:24:B2:84:CC:F7:68:3F:29:3A:CE:03:AA:90:8B:B4 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.250.0/23 Signature Algorithm: sha256WithRSAEncryption 48:0a:9c:d0:22:d0:33:66:23:d6:2a:86:df:ff:4c:e1:76:39: 60:64:89:94:71:ba:99:d1:04:2d:73:44:5d:be:6a:dc:0a:9d: 27:ab:95:6c:f2:b0:cd:11:cb:51:5f:71:db:f8:75:67:40:7d: 94:54:2e:f9:02:ed:fc:88:17:e2:04:c5:60:66:3a:85:a4:59: de:c9:5b:f2:42:d0:21:04:ab:6c:dd:78:3a:86:ac:77:1a:9d: 5f:46:80:60:38:81:7f:fc:8d:e6:8b:9e:2b:ec:05:82:9b:7e: 12:34:30:ac:0d:4d:74:83:bb:d9:cf:d0:b6:60:e8:98:aa:03: 05:b6:ba:21:fd:ba:65:c0:97:7c:58:e7:d9:77:60:3c:1a:75: 60:13:b5:9a:9b:ab:5e:69:5f:a6:06:51:ca:43:87:5e:ce:1a: d4:a1:a8:d3:1f:cb:5c:a9:c0:91:3c:9e:bc:0d:4a:fe:bf:55: 17:eb:0e:80:95:dd:92:a2:67:2b:ae:b3:0e:ae:2a:27:48:40: d7:78:e5:9e:06:2f:fc:8d:25:3a:dd:f4:1a:b7:e9:d2:2b:59: e0:e2:96:ef:27:d7:29:87:7c:13:f8:ec:3b:6d:8c:40:c3:b3: f2:2b:3d:51:1b:bb:25:c2:67:01:35:4e:4b:cc:90:8d:ad:b0: 71:c4:58:7e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWD0+e0Z7uxYyCFIdoCz82h2wAEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjc1MloX DTI3MDUwMjAwMzI1MlowMzExMC8GA1UEAxMoNjJEQzQzNTZGMTI0QjI4NENDRjc2 ODNGMjkzQUNFMDNBQTkwOEJCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/mJN0FjxHLV9JokWYyVH6eceOFSgUdaNm9m6Sw0ZYa4empPTSjQIhrPtHE 7PiUmEVhHoZUfUDUeNZlf+LNnA33q7Eg05RoEiU8ZIa9G/DrjtJRroPHXWBsRXH6 H5sSWEO47mJR8vqSPSSNYHdfbuGewh8CGIM/D1XJw1kRApyIaaP6Y6+4RmdMIC5Y S+tp9ENqQtpZnPHTu0IXHstD5Lieo6hwbpEc5GyKT4cxc6b49MI0ceiNC2UxdOKH 7PjwxP573+F862OTRaRxkVfcrw/Q0tbsGGTAy9BVy06nNNFyQfd4zXcUh2RpMzNe iFRW87QlWVYRMCadZo+FcQVP8lUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGLcQ1bxJLKEzPdoPyk6zgOqkIu0MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ3YWQwYTNhLTI2YjgtNDQ5YS04OGVjLWJmMDM5OGVhNTNhNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80N2FkMGEz YS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC82MkRDNDM1NkYxMjRCMjg0 Q0NGNzY4M0YyOTNBQ0UwM0FBOTA4QkI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBn6MA0GCSqGSIb3DQEBCwUAA4IBAQBICpzQItAzZiPWKobf/0zhdjlgZImU cbqZ0QQtc0RdvmrcCp0nq5Vs8rDNEctRX3Hb+HVnQH2UVC75Au38iBfiBMVgZjqF pFneyVvyQtAhBKts3Xg6hqx3Gp1fRoBgOIF//I3mi54r7AWCm34SNDCsDU10g7vZ z9C2YOiYqgMFtroh/bplwJd8WOfZd2A8GnVgE7Wam6teaV+mBlHKQ4dezhrUoajT H8tcqcCRPJ68DUr+v1UX6w6Ald2SomcrrrMOrionSEDXeOWeBi/8jSU63fQat+nS K1ng4pbvJ9cph3wT+Ow7bYxAw7PyKz1RG7slwmcBNU5LzJCNrbBxxFh+ -----END CERTIFICATE-----Generated at Tue May 12 22:46:05 2026 by rpki-client