$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer File: 6788613027532DE8F60D043DF88AC63BAB03BBF8.cer (raw, json) Hash identifier: yjTJ5Oc78d+5iuUApwXA6Xoc9yO1xHugfG/SdJljc4Y= Subject key identifier: 67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3E12A5D9431AA41E4810AF7D00DEFB1621FCF759 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:20 +0000 Certificate not after: Sun 02 May 2027 01:44:20 +0000 Subordinate resources: IP: 157.66.4.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:12:a5:d9:43:1a:a4:1e:48:10:af:7d:00:de:fb:16:21:fc:f7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:39:20 2026 GMT Not After : May 2 01:44:20 2027 GMT Subject: CN=6788613027532DE8F60D043DF88AC63BAB03BBF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:f8:82:25:bd:0f:10:3d:dc:cc:01:98:bf: 15:b9:01:a5:05:d4:b8:83:d7:4a:3c:79:dc:5f:c3: 4d:01:ae:94:ff:35:ae:63:bd:ce:c6:c5:b8:36:1d: 16:bd:9a:55:74:0e:70:c5:05:6f:dc:fa:b8:2a:c8: 82:ef:28:33:28:52:1e:9f:9b:c4:55:82:de:91:bf: bc:a0:66:51:12:61:dd:10:ac:97:0b:42:8e:ed:f9: d0:5d:a9:93:aa:f3:57:ff:ac:81:74:97:79:45:59: 35:e1:ab:b5:4a:d1:ee:3f:ce:05:a2:b0:48:1e:d3: e1:49:cb:fa:18:b1:03:42:9a:76:a1:00:42:45:bc: 59:78:7f:5f:b3:20:17:df:45:20:67:76:f9:a4:65: da:6d:0a:32:3e:4a:50:32:2e:e8:ff:c0:21:23:e9: 31:c3:37:b1:28:96:ab:8c:9e:0d:b6:e9:b1:c6:18: 1e:c2:27:24:cc:23:1e:71:46:fa:12:76:47:00:02: 84:44:8d:50:f8:94:20:43:d3:97:56:03:1e:15:77: cd:22:9b:ed:67:d0:91:24:ca:9a:20:e6:42:ce:fd: de:e1:9a:7a:a8:da:f2:ef:b5:cc:02:e3:23:3a:4a: 57:ba:e7:41:81:1b:e0:ad:ac:50:90:35:a4:0a:5c: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.4.0/23 Signature Algorithm: sha256WithRSAEncryption 43:8c:a6:e7:bd:9f:5b:17:94:03:e1:9a:0b:94:8b:78:e9:c1: 4c:30:08:87:de:6a:d6:c7:22:99:8f:de:70:9b:8f:fe:58:6e: 05:17:58:d2:c1:62:22:9c:68:22:97:f6:42:93:d2:fd:4f:82: 09:83:08:55:df:5b:d1:dc:a4:a5:f5:0d:81:2e:94:ca:f0:de: 4b:86:dd:77:25:25:18:7a:f6:69:a7:2f:f1:e6:4e:3c:dc:1a: 6c:f0:73:b3:37:60:bd:86:46:92:24:7b:10:a3:3c:b8:2e:b0: c9:bd:2a:e1:f7:d5:cf:2e:b2:24:96:e2:f4:97:80:2d:fe:d8: ba:ca:88:22:cf:f0:1b:dc:fc:40:47:39:ba:70:8d:44:67:09: 98:4f:85:02:b8:5c:ae:44:17:76:7c:38:5d:cb:7c:c5:64:74: 4d:b4:23:5d:4d:50:1d:3f:39:df:8a:b4:fc:1d:a3:09:97:2a: 92:c1:5b:51:21:65:c1:fa:a0:ce:c1:fc:ce:0c:20:5b:c6:bd: 23:e8:e4:99:63:19:34:57:a8:50:36:c2:24:66:fa:b5:99:48: 73:37:5b:24:57:40:91:c2:cb:60:41:8a:b4:52:52:da:fe:7b: 16:02:73:8e:d8:68:ac:05:be:ff:2b:23:5c:82:99:32:9b:a0: ff:51:5e:52 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPhKl2UMapB5IEK99AN77FiH891kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzkyMFoX DTI3MDUwMjAxNDQyMFowMzExMC8GA1UEAxMoNjc4ODYxMzAyNzUzMkRFOEY2MEQw NDNERjg4QUM2M0JBQjAzQkJGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4H+IIlvQ8QPdzMAZi/FbkBpQXUuIPXSjx53F/DTQGulP81rmO9zsbFuDYd Fr2aVXQOcMUFb9z6uCrIgu8oMyhSHp+bxFWC3pG/vKBmURJh3RCslwtCju350F2p k6rzV/+sgXSXeUVZNeGrtUrR7j/OBaKwSB7T4UnL+hixA0KadqEAQkW8WXh/X7Mg F99FIGd2+aRl2m0KMj5KUDIu6P/AISPpMcM3sSiWq4yeDbbpscYYHsInJMwjHnFG +hJ2RwAChESNUPiUIEPTl1YDHhV3zSKb7WfQkSTKmiDmQs793uGaeqja8u+1zALj IzpKV7rnQYEb4K2sUJA1pApcRkECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGeIYTAnUy3o9g0EPfiKxjurA7v4MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyNjRiZmIyLWQ0MWQtNDMxNy1iOTJkLWJiOTQ0MWZkMGRjZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjY0YmZi Mi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82Nzg4NjEzMDI3NTMyREU4 RjYwRDA0M0RGODhBQzYzQkFCMDNCQkY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUIEMA0GCSqGSIb3DQEBCwUAA4IBAQBDjKbnvZ9bF5QD4ZoLlIt46cFMMAiH 3mrWxyKZj95wm4/+WG4FF1jSwWIinGgil/ZCk9L9T4IJgwhV31vR3KSl9Q2BLpTK 8N5Lht13JSUYevZppy/x5k483Bps8HOzN2C9hkaSJHsQozy4LrDJvSrh99XPLrIk luL0l4At/ti6yogiz/Ab3PxARzm6cI1EZwmYT4UCuFyuRBd2fDhdy3zFZHRNtCNd TVAdPznfirT8HaMJlyqSwVtRIWXB+qDOwfzODCBbxr0j6OSZYxk0V6hQNsIkZvq1 mUhzN1skV0CRwstgQYq0UlLa/nsWAnOO2GisBb7/KyNcgpkym6D/UV5S -----END CERTIFICATE-----Generated at Tue May 12 22:03:19 2026 by rpki-client