$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer (raw, json) Hash identifier: EuuE0+2NuEpIPWuY6SfF5w5xiCc305NUwMoMTDwDi8I= Subject key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 300F348414A1B532A08348322622B19061720359 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:29 +0000 Certificate not after: Sun 02 May 2027 01:10:29 +0000 Subordinate resources: IP: 160.20.240.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0f:34:84:14:a1:b5:32:a0:83:48:32:26:22:b1:90:61:72:03:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:05:29 2026 GMT Not After : May 2 01:10:29 2027 GMT Subject: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:92:e9:5d:b5:92:15:06:d6:b7:e6:a2:64: 2b:4e:18:c5:f8:02:66:fa:e8:90:a0:a0:1d:28:24: 55:2d:03:b5:d8:81:15:29:4b:d0:77:63:96:c7:a0: 45:45:c6:1a:60:c2:9f:ae:3d:58:eb:0e:48:8f:91: d3:e2:4b:ea:a6:5c:42:8b:fb:4e:09:b8:86:3f:ec: 56:7d:0e:24:4a:1e:17:b4:30:95:67:d5:f8:57:76: 63:9e:14:42:81:c3:59:52:9d:0e:d9:46:fd:ee:3d: 22:9d:dd:89:42:14:f7:82:f8:77:04:1a:d3:d3:c6: d8:8d:b0:72:62:82:6c:1e:a2:f8:6e:d3:fa:d2:ad: 5b:36:85:bd:e4:15:3e:72:48:64:39:eb:0a:c5:64: 12:6a:d0:44:d3:de:07:74:99:16:fa:5f:5c:3f:53: 6a:ff:7f:83:dc:ea:89:c4:45:24:a3:68:79:c1:13: 5d:c3:67:d1:a5:de:a2:c5:25:3d:8c:b2:9e:b3:d0: 5d:06:87:d1:db:93:5c:b3:87:3c:94:0c:2d:dd:e0: e3:30:df:b0:e6:c0:0f:a5:9a:2f:1f:0f:d0:3c:a4: fe:3f:60:b2:65:83:b8:3b:eb:d7:69:31:a8:51:38: 3d:b1:a4:8e:62:e3:31:dc:98:94:6b:bf:e1:85:56: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.240.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:45:d2:6a:ca:96:93:92:50:03:7b:28:66:b9:b6:e7:eb:f4: 25:46:9c:88:5d:e8:fe:9b:00:b2:a1:db:a7:a0:95:c8:47:ff: e8:c5:97:51:65:2a:a8:aa:38:66:a1:b3:35:9d:32:7f:ad:46: 2e:70:42:79:8f:d7:bf:35:f7:76:4a:fb:e1:ff:82:a2:c0:b8: c9:78:61:ff:0a:49:ea:18:92:c1:d8:73:a9:16:31:35:0e:87: c3:b7:86:3a:dc:23:36:c4:6d:fa:0c:c2:fb:c5:1e:af:a7:56: dd:a7:66:cb:1f:2a:bd:6a:c8:73:2d:dd:3b:64:01:d2:62:ff: b9:8c:8f:86:47:b1:78:3a:70:6e:71:5e:d7:88:ab:d1:7d:9f: 1d:cb:91:ee:f5:e6:f2:4e:8c:06:c2:b0:36:a2:0a:b8:64:36: 81:ff:0e:94:43:0e:07:84:54:e1:3a:fa:22:60:4c:8b:96:c6: e2:00:49:00:40:da:f1:04:40:ad:56:3b:32:b6:8c:d8:10:e0: 8c:64:3a:e5:0b:21:29:e1:e0:c0:75:c7:60:d7:f5:ae:06:63: 29:73:c2:cd:3a:60:22:51:ad:b6:f0:a5:4d:05:08:a2:3b:89: 50:b0:83:d7:3f:ac:b5:dc:1e:a8:6a:60:f2:f0:4a:f4:23:1d: 14:73:93:b0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMA80hBShtTKgg0gyJiKxkGFyA1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDUyOVoX DTI3MDUwMjAxMTAyOVowMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJE NjY3NjJEREQ4RUU0QjQxMTc4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKW5kuldtZIVBta35qJkK04YxfgCZvrokKCgHSgkVS0DtdiBFSlL0Hdjlseg RUXGGmDCn649WOsOSI+R0+JL6qZcQov7Tgm4hj/sVn0OJEoeF7QwlWfV+Fd2Y54U QoHDWVKdDtlG/e49Ip3diUIU94L4dwQa09PG2I2wcmKCbB6i+G7T+tKtWzaFveQV PnJIZDnrCsVkEmrQRNPeB3SZFvpfXD9Tav9/g9zqicRFJKNoecETXcNn0aXeosUl PYyynrPQXQaH0duTXLOHPJQMLd3g4zDfsObAD6WaLx8P0Dyk/j9gsmWDuDvr12kx qFE4PbGkjmLjMdyYlGu/4YVWZfsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHD3qk7bbEV7XQLWZ2Ld2O5LQReBMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdmYzVhMWNjLWNjNWUtNGU1OC04ZGY0LWY4ODY3MTgzMTNhYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZmM1YTFj Yy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC83MEY3QUE0RURCNkM0NTdC NUQwMkQ2Njc2MkRERDhFRTRCNDExNzgxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBTwMA0GCSqGSIb3DQEBCwUAA4IBAQAcRdJqypaTklADeyhmubbn6/QlRpyI Xej+mwCyodunoJXIR//oxZdRZSqoqjhmobM1nTJ/rUYucEJ5j9e/Nfd2Svvh/4Ki wLjJeGH/CknqGJLB2HOpFjE1DofDt4Y63CM2xG36DML7xR6vp1bdp2bLHyq9ashz Ld07ZAHSYv+5jI+GR7F4OnBucV7XiKvRfZ8dy5Hu9ebyTowGwrA2ogq4ZDaB/w6U Qw4HhFThOvoiYEyLlsbiAEkAQNrxBECtVjsytozYEOCMZDrlCyEp4eDAdcdg1/Wu BmMpc8LNOmAiUa228KVNBQiiO4lQsIPXP6y13B6oamDy8Er0Ix0Uc5Ow -----END CERTIFICATE-----Generated at Tue May 12 22:03:33 2026 by rpki-client