$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer File: 73AC68F9F57E709948037DADDAC8DC88616BF980.cer (raw, json) Hash identifier: aNYbiI5Q61nADX6oOJsP/SQ8qSc4Ws4sWIuBSCFsAr4= Subject key identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 08534B00FEB604D80012E2A2580B7E15E5ED9B05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:42 +0000 Certificate not after: Sun 02 May 2027 00:04:42 +0000 Subordinate resources: IP: 160.191.106.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:53:4b:00:fe:b6:04:d8:00:12:e2:a2:58:0b:7e:15:e5:ed:9b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:59:42 2026 GMT Not After : May 2 00:04:42 2027 GMT Subject: CN=73AC68F9F57E709948037DADDAC8DC88616BF980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:75:16:d2:fb:48:7d:72:96:83:ca:c3:da: 78:b9:c5:33:73:2c:e7:aa:c0:e2:5c:1b:1b:9a:f4: bb:85:c3:c1:fe:1d:12:00:40:0e:7a:58:b2:1b:8f: d5:80:c4:b2:a9:98:a7:1a:58:12:4a:48:1a:e8:41: 1c:b6:49:a4:93:9e:fa:3b:5b:c2:27:5c:c6:3f:b7: e8:14:a7:47:0f:fa:e2:d7:85:ef:8f:ed:d6:2c:43: 9f:b6:ed:ae:0a:85:de:7a:f1:74:22:cf:ef:d0:46: c1:e6:bb:cf:fe:33:94:48:2e:36:7c:59:f7:db:82: 4a:ba:ea:21:4b:d1:cf:33:c7:9e:8a:a2:c4:97:bd: 62:3c:67:5e:db:21:7d:13:1b:75:6a:6e:28:1f:5a: 63:28:62:84:8c:3f:1d:05:b2:22:9a:d7:3a:40:13: 4b:9b:f9:c2:d1:11:77:35:a8:d4:98:c0:34:22:1e: 90:6f:33:28:9a:dc:c0:c7:8b:2b:df:68:09:5c:db: c8:70:58:a2:38:c4:04:fb:16:87:b7:d9:51:f5:f9: 45:d9:99:5b:9d:f1:e4:b4:ef:9e:a6:a7:d1:08:9e: a2:7a:97:c0:f0:b1:4a:24:b5:a6:89:2e:b9:2a:77: 88:5d:3f:35:a6:28:70:69:32:62:29:8c:90:0a:25: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.106.0/23 Signature Algorithm: sha256WithRSAEncryption 03:89:4c:34:b2:17:af:99:20:9e:6a:99:91:31:83:51:08:5f: 52:58:f7:f5:28:04:5c:0d:70:56:94:95:88:06:4a:cf:18:d5: 26:22:4e:1f:8e:c2:7f:cd:b3:8b:32:03:4d:b6:82:99:f7:a9: 9c:b5:df:30:e9:43:da:3d:2b:ba:3b:a5:17:fe:92:6d:6b:b8: 80:b3:79:51:32:57:ea:80:be:9a:05:b3:a4:4a:6e:ef:2c:42: 2a:db:b0:76:f8:c4:7b:6c:28:d8:a4:7e:4f:29:5a:5c:65:76: f0:7f:c7:8d:2c:68:96:0f:71:44:aa:40:57:fe:18:41:3c:3d: a0:12:a6:b3:19:1b:17:79:36:5d:44:0a:e2:e8:54:fa:36:ce: e6:45:be:df:ad:3a:cd:0d:6b:52:51:02:b9:66:ae:b4:b1:40: 53:9b:11:84:08:d4:f3:b0:be:3b:a2:73:1a:09:eb:20:61:e9: 37:f1:8b:ea:55:dd:2c:a8:01:9e:8b:36:ab:32:92:7e:c1:94: 19:19:9f:79:df:c1:47:4f:5b:35:0f:da:f9:4d:58:69:96:06: 33:ac:07:f6:f7:22:7c:de:17:4f:18:65:4a:f5:62:46:50:dd: 89:8a:72:32:25:5b:21:22:60:ab:6b:01:e1:22:23:64:9d:33: 6f:77:78:66 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCFNLAP62BNgAEuKiWAt+FeXtmwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNTk0MloX DTI3MDUwMjAwMDQ0MlowMzExMC8GA1UEAxMoNzNBQzY4RjlGNTdFNzA5OTQ4MDM3 REFEREFDOERDODg2MTZCRjk4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0kdRbS+0h9cpaDysPaeLnFM3Ms56rA4lwbG5r0u4XDwf4dEgBADnpYshuP 1YDEsqmYpxpYEkpIGuhBHLZJpJOe+jtbwidcxj+36BSnRw/64teF74/t1ixDn7bt rgqF3nrxdCLP79BGwea7z/4zlEguNnxZ99uCSrrqIUvRzzPHnoqixJe9YjxnXtsh fRMbdWpuKB9aYyhihIw/HQWyIprXOkATS5v5wtERdzWo1JjANCIekG8zKJrcwMeL K99oCVzbyHBYojjEBPsWh7fZUfX5RdmZW53x5LTvnqan0QieonqXwPCxSiS1poku uSp3iF0/NaYocGkyYimMkAolkY8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHOsaPn1fnCZSAN9rdrI3Ihha/mAMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFlODU1ZThhLTNmZjgtNDdmZi1hYWVjLTQ4ZDhiMzgwYTkwNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZTg1NWU4 YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC83M0FDNjhGOUY1N0U3MDk5 NDgwMzdEQUREQUM4REM4ODYxNkJGOTgwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoL9qMA0GCSqGSIb3DQEBCwUAA4IBAQADiUw0shevmSCeapmRMYNRCF9SWPf1 KARcDXBWlJWIBkrPGNUmIk4fjsJ/zbOLMgNNtoKZ96mctd8w6UPaPSu6O6UX/pJt a7iAs3lRMlfqgL6aBbOkSm7vLEIq27B2+MR7bCjYpH5PKVpcZXbwf8eNLGiWD3FE qkBX/hhBPD2gEqazGRsXeTZdRAri6FT6Ns7mRb7frTrNDWtSUQK5Zq60sUBTmxGE CNTzsL47onMaCesgYek38YvqVd0sqAGeizarMpJ+wZQZGZ9538FHT1s1D9r5TVhp lgYzrAf29yJ83hdPGGVK9WJGUN2JinIyJVshImCrawHhIiNknTNvd3hm -----END CERTIFICATE-----Generated at Tue May 12 22:04:06 2026 by rpki-client