$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer File: 72B17A79879EF6757A1AF958307849AC03D91209.cer (raw, json) Hash identifier: pwekEPa1+/B3hYVvXqlFCMry+34PeUv+VGuPGUDxqEY= Subject key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5E806258C035705F193021587525C32C38E52026 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:09:39 +0000 Certificate not after: Sun 02 May 2027 00:14:39 +0000 Subordinate resources: IP: 160.25.34.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:80:62:58:c0:35:70:5f:19:30:21:58:75:25:c3:2c:38:e5:20:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:09:39 2026 GMT Not After : May 2 00:14:39 2027 GMT Subject: CN=72B17A79879EF6757A1AF958307849AC03D91209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:3b:40:28:3b:f3:ee:5a:92:82:a6:06:96: ce:bf:8b:b5:25:ab:ff:6c:ed:31:1e:62:77:03:ff: 2d:12:70:99:e0:a7:3e:0d:ba:3d:69:3b:b2:84:1d: 84:93:7c:67:49:39:15:ad:8f:d1:b8:13:fe:95:9c: 91:c1:8a:f2:56:1f:a8:a2:0e:5e:ae:14:04:0c:41: 13:51:c6:c7:e0:18:e9:fc:12:44:eb:40:3a:eb:d6: f5:fe:6d:7e:5d:b1:07:4c:d5:c8:ee:f6:58:8b:ae: 72:e4:9f:b9:e0:91:e7:03:46:b6:58:c8:93:f2:f5: 28:5d:e9:43:99:7d:48:f5:59:ac:c3:04:ee:63:5a: f0:4d:da:1e:37:1c:70:cf:a9:a9:76:6b:72:c8:2a: 68:e2:c3:01:56:5c:66:b8:c9:d3:0e:79:be:d1:4d: 76:45:ec:a1:d5:e7:f1:4a:0b:7b:e1:29:0e:9f:7c: cd:67:bc:97:64:7a:19:c4:cf:46:8d:a5:2c:c4:0c: 87:94:cf:86:33:7d:98:d2:f7:6d:2d:b6:fb:98:fd: 80:f5:2e:a8:f9:65:8f:27:6e:1b:93:98:1d:a5:58: 3f:ae:27:9a:e9:6c:75:f3:d1:04:7a:51:54:10:fb: 1b:c1:52:68:a8:2e:70:3d:25:14:90:07:af:a3:34: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.34.0/23 Signature Algorithm: sha256WithRSAEncryption 94:b0:40:b6:44:df:e4:90:f7:fb:63:4c:57:7f:7b:dc:4d:e3: dd:f2:c2:79:8d:a6:f6:ff:f5:22:76:e3:31:f2:5a:5b:77:9c: 53:51:76:26:17:e2:da:03:8e:6b:a4:c9:d7:9e:79:d1:7e:1c: 51:f9:65:86:b6:a2:1a:3b:3c:8d:6e:d6:2e:12:17:95:e9:79: 6a:ad:7b:e0:74:02:9d:1c:24:24:1e:45:5d:08:67:9c:d8:0a: 18:2a:0a:a1:5f:90:52:da:5c:15:62:84:66:20:bb:81:42:43: 41:fa:d2:f7:98:76:13:c6:fa:7a:55:7f:3c:0f:66:be:49:f4: 2f:01:6a:d0:6f:7d:1c:8f:82:53:5e:82:3e:64:af:b2:bf:e3: 54:38:b5:77:18:86:d1:ae:0a:0c:24:a7:95:d3:dd:ab:96:54: 86:ab:b2:29:ad:24:d3:97:8a:bd:96:22:ab:b2:2f:fc:a4:ae: 44:21:86:e7:67:8f:cf:cf:f3:b8:eb:47:b1:36:c5:af:27:99: 42:cc:04:69:96:f2:88:93:75:ed:06:51:ba:47:78:a2:10:a4: 9b:3b:7b:96:ab:39:5a:e2:dd:d1:a4:e3:9b:21:c6:84:70:ef: 01:29:3a:bd:ce:5e:0b:33:58:8a:b9:f2:46:a2:ff:68:0a:23: ac:4d:37:d7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXoBiWMA1cF8ZMCFYdSXDLDjlICYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDkzOVoX DTI3MDUwMjAwMTQzOVowMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFG OTU4MzA3ODQ5QUMwM0Q5MTIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuXO0AoO/PuWpKCpgaWzr+LtSWr/2ztMR5idwP/LRJwmeCnPg26PWk7soQd hJN8Z0k5Fa2P0bgT/pWckcGK8lYfqKIOXq4UBAxBE1HGx+AY6fwSROtAOuvW9f5t fl2xB0zVyO72WIuucuSfueCR5wNGtljIk/L1KF3pQ5l9SPVZrMME7mNa8E3aHjcc cM+pqXZrcsgqaOLDAVZcZrjJ0w55vtFNdkXsodXn8UoLe+EpDp98zWe8l2R6GcTP Ro2lLMQMh5TPhjN9mNL3bS22+5j9gPUuqPlljyduG5OYHaVYP64nmulsdfPRBHpR VBD7G8FSaKgucD0lFJAHr6M0au8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHKxenmHnvZ1ehr5WDB4SawD2RIJMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJkNmM5YjhjLTNiZTctNGMwMi05NTUxLWZiYzZmZmM0MDcwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZDZjOWI4 Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC83MkIxN0E3OTg3OUVGNjc1 N0ExQUY5NTgzMDc4NDlBQzAzRDkxMjA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBkiMA0GCSqGSIb3DQEBCwUAA4IBAQCUsEC2RN/kkPf7Y0xXf3vcTePd8sJ5 jab2//UiduMx8lpbd5xTUXYmF+LaA45rpMnXnnnRfhxR+WWGtqIaOzyNbtYuEheV 6XlqrXvgdAKdHCQkHkVdCGec2AoYKgqhX5BS2lwVYoRmILuBQkNB+tL3mHYTxvp6 VX88D2a+SfQvAWrQb30cj4JTXoI+ZK+yv+NUOLV3GIbRrgoMJKeV092rllSGq7Ip rSTTl4q9liKrsi/8pK5EIYbnZ4/Pz/O460exNsWvJ5lCzARplvKIk3XtBlG6R3ii EKSbO3uWqzla4t3RpOObIcaEcO8BKTq9zl4LM1iKufJGov9oCiOsTTfX -----END CERTIFICATE-----Generated at Tue May 12 22:33:13 2026 by rpki-client