$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer File: 7192B96CAD2F513423F7D689B668C3C7840AC34F.cer (raw, json) Hash identifier: 7a4IWhqfLgVC4OUsmpO3X0yu9HqxQt+baMljhDC32a4= Subject key identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2E8FC1BE61D3F311B6EB7D531D247B8D8C35996C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:08 +0000 Certificate not after: Sun 02 May 2027 00:04:08 +0000 Subordinate resources: IP: 160.25.222.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8f:c1:be:61:d3:f3:11:b6:eb:7d:53:1d:24:7b:8d:8c:35:99:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:59:08 2026 GMT Not After : May 2 00:04:08 2027 GMT Subject: CN=7192B96CAD2F513423F7D689B668C3C7840AC34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:92:10:20:8c:8e:b3:5b:04:a5:1b:55:dc: be:57:76:50:a1:fb:62:2f:60:17:37:37:8c:d8:17: 98:8d:e1:da:b1:a9:03:b8:45:bd:a5:4e:7a:07:8b: 94:22:50:73:4f:5b:cb:ce:d3:a5:e4:7f:90:72:17: 1b:ab:76:d1:f4:a8:26:c2:4b:04:99:90:01:82:81: 8c:0a:95:20:39:2f:94:0c:f3:1b:5c:33:4a:b0:17: 73:67:a6:84:69:06:eb:73:48:e8:7b:c4:09:09:27: 7b:42:d3:07:18:16:d5:30:82:b0:d2:0c:22:b8:f8: 63:de:21:89:46:1d:11:31:7e:4e:09:d8:c9:17:f8: f8:ad:1a:d6:9c:d6:8d:62:a2:fc:2b:01:6e:a5:d1: d0:7a:a0:c9:64:6c:9d:70:08:54:eb:07:74:66:a8: ba:a6:6e:25:22:c3:82:77:3d:f6:d1:97:40:00:87: 23:95:75:2b:79:cf:24:04:f6:e0:3c:8f:74:7c:53: aa:83:bd:40:82:fe:6e:dc:66:c7:f5:25:e5:9f:e3: 8e:63:59:70:d8:4b:b6:71:f5:78:84:9b:ba:3e:7b: 86:95:0c:fc:6b:e9:84:45:a2:ed:bf:19:64:86:7f: 4d:c1:5f:85:a9:d2:05:fd:d2:ae:95:71:ef:42:74: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.222.0/23 Signature Algorithm: sha256WithRSAEncryption 80:5c:1f:05:63:3a:eb:3d:e4:75:fd:de:74:7e:f4:ab:e1:d2: 12:42:de:ab:da:8b:99:dd:b6:48:3b:de:3d:b6:b8:42:6b:86: 4e:3c:a7:af:5c:7a:fc:06:d4:a0:67:84:a0:02:ae:50:d3:0c: ca:d6:37:b9:56:f1:86:19:08:74:f2:4a:a9:9e:e2:0b:ba:e8: 11:c6:0c:72:ca:28:8d:5c:12:ec:3f:94:3e:13:8b:93:b5:a9: c7:12:6c:26:07:32:87:c3:f3:ac:45:c3:4f:be:89:f2:00:70: 3b:47:9f:ab:55:27:73:c7:b5:8b:10:fa:bc:85:e1:20:07:6f: 31:4a:6c:d4:9d:b7:bd:f0:3b:cd:43:a6:7e:68:f2:f3:fa:f6: fc:9d:35:d7:b8:f9:2b:54:07:21:c5:6e:16:0f:ce:46:ea:20: 28:75:c3:4c:74:8e:98:23:fc:36:76:a7:da:7f:8d:62:cd:e5: a4:eb:6d:80:34:61:e9:93:60:a9:cc:6b:bc:f3:ee:6e:20:bd: 79:f2:db:67:34:80:dd:4a:33:4a:6b:7e:38:0d:a5:c8:c1:b8: 69:dc:ee:75:b8:1f:6a:9c:5d:b9:4e:af:e3:cd:dc:6f:34:12: 31:fb:92:b2:ad:a3:e0:53:8f:bb:fc:e6:fe:94:6e:cc:ae:0d: a3:e0:5b:2a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULo/BvmHT8xG2631THSR7jYw1mWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNTkwOFoX DTI3MDUwMjAwMDQwOFowMzExMC8GA1UEAxMoNzE5MkI5NkNBRDJGNTEzNDIzRjdE Njg5QjY2OEMzQzc4NDBBQzM0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwykhAgjI6zWwSlG1Xcvld2UKH7Yi9gFzc3jNgXmI3h2rGpA7hFvaVOegeL lCJQc09by87TpeR/kHIXG6t20fSoJsJLBJmQAYKBjAqVIDkvlAzzG1wzSrAXc2em hGkG63NI6HvECQkne0LTBxgW1TCCsNIMIrj4Y94hiUYdETF+TgnYyRf4+K0a1pzW jWKi/CsBbqXR0HqgyWRsnXAIVOsHdGaouqZuJSLDgnc99tGXQACHI5V1K3nPJAT2 4DyPdHxTqoO9QIL+btxmx/Ul5Z/jjmNZcNhLtnH1eISbuj57hpUM/GvphEWi7b8Z ZIZ/TcFfhanSBf3SrpVx70J03BECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHGSuWytL1E0I/fWibZow8eECsNPMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFkZWQ1ODExLWJlNTAtNGNhYS05Zjk2LTYzZDM3MjAzMTFkZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZGVkNTgx MS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC83MTkyQjk2Q0FEMkY1MTM0 MjNGN0Q2ODlCNjY4QzNDNzg0MEFDMzRGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBneMA0GCSqGSIb3DQEBCwUAA4IBAQCAXB8FYzrrPeR1/d50fvSr4dISQt6r 2ouZ3bZIO949trhCa4ZOPKevXHr8BtSgZ4SgAq5Q0wzK1je5VvGGGQh08kqpnuIL uugRxgxyyiiNXBLsP5Q+E4uTtanHEmwmBzKHw/OsRcNPvonyAHA7R5+rVSdzx7WL EPq8heEgB28xSmzUnbe98DvNQ6Z+aPLz+vb8nTXXuPkrVAchxW4WD85G6iAodcNM dI6YI/w2dqfaf41izeWk622ANGHpk2CpzGu88+5uIL158ttnNIDdSjNKa344DaXI wbhp3O51uB9qnF25Tq/jzdxvNBIx+5KyraPgU4+7/Ob+lG7Mrg2j4Fsq -----END CERTIFICATE-----Generated at Tue May 12 22:47:53 2026 by rpki-client