$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer (raw, json) Hash identifier: /OZcmPnVT/xI9+gvWAiDMT0eeVqn+Ln+wtdsU6LTG08= Subject key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3BDDB41D3D937AD454A6ACEC556B56DD3BCFC3C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:16:16 +0000 Certificate not after: Sun 02 May 2027 00:21:16 +0000 Subordinate resources: IP: 157.15.122.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:dd:b4:1d:3d:93:7a:d4:54:a6:ac:ec:55:6b:56:dd:3b:cf:c3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:16:16 2026 GMT Not After : May 2 00:21:16 2027 GMT Subject: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:42:f6:f0:69:ce:70:f2:f6:5c:4c:38:f8:05: 63:d4:4f:ba:96:cf:bb:d0:c8:ed:06:34:ff:67:9b: ac:cd:33:85:6a:ed:f7:4d:17:d8:25:49:35:54:5c: 67:26:f0:36:4f:8b:d0:54:a9:e4:d1:b7:4e:a2:93: af:50:93:7a:4f:26:09:58:08:ab:87:9c:7d:3a:29: a4:8a:a9:e5:96:95:60:62:1b:02:1d:cd:c2:b4:59: 4c:06:26:48:41:bc:f1:ff:6e:8f:29:a8:fb:56:ae: d8:bf:a6:79:4e:0f:c8:f5:99:9d:66:3c:de:39:d0: 44:f9:82:f0:0f:b2:79:60:6a:4d:4c:2f:bc:7f:12: c5:c1:18:e0:20:0e:e0:57:10:f0:1f:5d:d1:5f:2a: 33:90:3f:1b:1c:45:0d:67:46:e2:5c:53:d6:e9:3d: fb:bc:32:d0:ff:9b:04:26:fa:62:e7:b3:7f:dc:a9: 24:68:d7:f9:63:e1:39:47:4f:3f:8e:8f:0f:14:44: 5e:f5:49:78:85:4b:70:f2:fa:25:fe:50:75:fc:21: 2c:e1:82:09:6e:80:84:04:6b:c3:c6:be:c7:58:7b: 90:d7:2e:50:7e:ee:e0:cc:35:f9:89:4a:5a:d1:74: 6a:83:ab:16:cc:56:1c:3c:9c:bc:78:dd:62:dc:72: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.122.0/23 Signature Algorithm: sha256WithRSAEncryption a2:b5:bd:e9:0b:fd:8a:75:da:44:bd:18:cb:12:21:78:54:26: d8:7c:9e:ea:1e:da:4f:05:b8:09:2d:ac:21:b0:78:05:c5:05: 15:81:bf:a2:93:94:89:4d:b0:c9:ca:5c:3a:69:fd:8e:73:56: ab:0c:c0:7a:04:73:db:06:ce:5b:6f:35:fa:6b:f7:6c:67:c6: a1:bc:43:73:05:e9:b1:37:14:ab:05:f5:f7:15:d4:61:c5:d2: f4:8e:d7:4e:93:f2:c7:80:31:33:b3:10:17:46:63:6d:2c:97: 9f:56:dc:f2:46:f7:7a:3a:e9:46:23:d0:55:9e:a2:35:ee:e5: bc:e5:d0:35:36:74:62:78:86:37:37:ef:1c:a6:0d:a7:88:5c: 45:a2:52:4b:f7:c6:44:47:ca:94:39:22:71:18:5d:07:6c:74: 8a:54:6a:5c:2d:97:99:e8:1e:b6:cf:08:72:12:9f:cb:9a:40: ea:71:a1:b2:8b:65:d4:94:d9:d1:8c:f3:29:36:c0:6a:35:44: 65:7a:e3:61:8f:06:9c:36:36:9a:54:c7:c6:87:e9:5a:ce:77: 19:0d:1b:c7:78:07:ac:6a:8c:cb:ee:c9:8a:bd:0c:3a:6c:3b: f7:3a:c5:8a:f0:76:0a:c3:d5:d7:cf:94:ea:83:6b:ad:7e:b4: 88:7a:45:08 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUO920HT2TetRUpqzsVWtW3TvPw8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMTYxNloX DTI3MDUwMjAwMjExNlowMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5 MzQ1Q0MzREY2Q0VCQzk5REI4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPNC9vBpznDy9lxMOPgFY9RPupbPu9DI7QY0/2ebrM0zhWrt900X2CVJNVRc ZybwNk+L0FSp5NG3TqKTr1CTek8mCVgIq4ecfToppIqp5ZaVYGIbAh3NwrRZTAYm SEG88f9ujymo+1au2L+meU4PyPWZnWY83jnQRPmC8A+yeWBqTUwvvH8SxcEY4CAO 4FcQ8B9d0V8qM5A/GxxFDWdG4lxT1uk9+7wy0P+bBCb6Yuezf9ypJGjX+WPhOUdP P46PDxREXvVJeIVLcPL6Jf5QdfwhLOGCCW6AhARrw8a+x1h7kNcuUH7u4Mw1+YlK WtF0aoOrFsxWHDycvHjdYtxyM6sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHD27B5yPW3tQkuTRcw99s68mduOMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM2ZGQxNWUzLTllZTUtNGQ1Mi05ZWVlLTcxMmJiM2I3YmZmYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNmRkMTVl My05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC83MEY2RUMxRTcyM0Q2REVE NDI0QjkzNDVDQzNERjZDRUJDOTlEQjhFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ96MA0GCSqGSIb3DQEBCwUAA4IBAQCitb3pC/2KddpEvRjLEiF4VCbYfJ7q HtpPBbgJLawhsHgFxQUVgb+ik5SJTbDJylw6af2Oc1arDMB6BHPbBs5bbzX6a/ds Z8ahvENzBemxNxSrBfX3FdRhxdL0jtdOk/LHgDEzsxAXRmNtLJefVtzyRvd6OulG I9BVnqI17uW85dA1NnRieIY3N+8cpg2niFxFolJL98ZER8qUOSJxGF0HbHSKVGpc LZeZ6B62zwhyEp/LmkDqcaGyi2XUlNnRjPMpNsBqNURleuNhjwacNjaaVMfGh+la zncZDRvHeAesaozL7smKvQw6bDv3OsWK8HYKw9XXz5Tqg2utfrSIekUI -----END CERTIFICATE-----Generated at Tue May 12 22:10:21 2026 by rpki-client