$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer File: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer (raw, json) Hash identifier: FVMzrSs/ZkiMuU0DxQLW3aaaQxLgnIyJWvAcrI+8gc0= Subject key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6C1B605AEB768A618E38FC2068EC81EAC84C5E18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:16:47 +0000 Certificate not after: Sun 02 May 2027 00:21:47 +0000 Subordinate resources: IP: 157.66.18.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1b:60:5a:eb:76:8a:61:8e:38:fc:20:68:ec:81:ea:c8:4c:5e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:16:47 2026 GMT Not After : May 2 00:21:47 2027 GMT Subject: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:22:4d:7b:22:63:1c:bd:e0:9a:e2:33:31: d3:b8:da:6e:59:67:50:4b:2e:cb:4c:c6:8f:51:c1: d0:fb:37:07:69:1d:44:bb:be:2e:2e:97:f4:d2:ba: 41:b1:5a:27:69:90:00:a5:f9:66:fc:40:ae:35:5f: fa:10:4d:fd:e7:ec:9d:ef:4b:06:4e:c2:88:b3:8d: 30:a6:20:a5:38:ae:14:54:38:5b:a2:17:d4:de:63: 8d:51:20:08:2e:6b:18:0a:09:67:a5:d7:1a:4e:81: 66:50:ef:e8:a1:a7:06:47:67:ee:67:19:56:2d:89: f7:eb:a4:63:86:5a:a1:7d:5a:9e:ae:7c:9a:22:a4: 2a:9c:2f:6b:c4:6c:ab:5c:5c:b8:6d:cd:c3:45:af: 11:df:aa:34:11:ee:01:02:33:2e:53:88:f2:61:8d: 7f:a9:7b:1d:2a:28:38:6e:71:ef:b1:8f:a5:b0:76: 6c:bd:1b:48:31:38:fc:0b:f0:7b:c4:81:6f:98:33: e5:bd:11:8a:32:0a:40:2d:39:50:8e:d6:0a:de:18: 59:5d:03:7a:d4:db:55:f0:f8:b8:1f:5c:65:27:bc: 70:e7:29:3d:41:50:db:18:a1:a6:1c:be:e1:e4:9b: 9c:71:c0:45:7b:d9:cb:ab:d4:b2:36:28:b1:9d:8a: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.18.0/23 Signature Algorithm: sha256WithRSAEncryption 05:2b:28:1c:46:c1:45:d9:7b:cb:dc:67:1a:e1:c3:d8:c6:32: f8:6b:98:59:71:2e:d4:36:89:2e:87:9a:d4:c5:fc:32:06:60: b6:23:60:79:22:cd:90:7a:c4:83:74:41:66:6b:b7:4b:a6:03: 2a:08:dc:8d:1e:26:06:77:ff:a8:c9:1c:1a:a6:57:91:42:36: 1c:18:ca:31:36:61:b0:ee:b8:2d:04:c0:28:cc:c7:1d:ac:3d: b0:44:c0:24:3e:e8:ea:7b:84:28:00:f6:9a:14:3d:eb:d9:11: fd:dc:c5:1d:d7:c3:93:45:dd:ab:1f:57:6b:0a:4a:19:c6:3d: da:54:ce:77:bd:cd:59:d1:9a:5f:10:b3:47:61:e3:f4:da:e3: 3f:87:69:67:33:a2:b5:3a:74:9f:da:df:95:44:d6:77:25:a0: 73:1a:66:0d:2a:68:82:65:f3:d0:a2:43:25:7f:8d:b0:6d:e8: 08:b4:71:3c:04:2d:1b:bd:d5:83:73:35:18:35:fe:d5:78:5b: 70:30:64:a7:15:76:dc:00:47:7d:70:9d:45:b2:0c:c4:84:40: 90:43:b0:8b:82:b5:d3:ac:db:75:f0:2a:35:df:76:c7:dc:3a: f6:65:a2:63:78:ca:92:2c:d7:94:03:f1:a4:2c:66:5d:20:42: 2b:17:46:83 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbBtgWut2imGOOPwgaOyB6shMXhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMTY0N1oX DTI3MDUwMjAwMjE0N1owMzExMC8GA1UEAxMoNzdFOUY4RDNCQ0NGNTNFNzE2NjY4 OUZCMkQzQjI2QzVEMDcxN0Y4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAwIk17ImMcveCa4jMx07jabllnUEsuy0zGj1HB0Ps3B2kdRLu+Li6X9NK6 QbFaJ2mQAKX5ZvxArjVf+hBN/efsne9LBk7CiLONMKYgpTiuFFQ4W6IX1N5jjVEg CC5rGAoJZ6XXGk6BZlDv6KGnBkdn7mcZVi2J9+ukY4ZaoX1anq58miKkKpwva8Rs q1xcuG3Nw0WvEd+qNBHuAQIzLlOI8mGNf6l7HSooOG5x77GPpbB2bL0bSDE4/Avw e8SBb5gz5b0RijIKQC05UI7WCt4YWV0DetTbVfD4uB9cZSe8cOcpPUFQ2xihphy+ 4eSbnHHARXvZy6vUsjYosZ2K7z0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHfp+NO8z1PnFmaJ+y07JsXQcX+KMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM3NDQ2NTYzLTA5YmMtNDkxYi04ZmI5LWZkMzlmMDkxNjY5ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNzQ0NjU2 My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC83N0U5RjhEM0JDQ0Y1M0U3 MTY2Njg5RkIyRDNCMjZDNUQwNzE3RjhBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUISMA0GCSqGSIb3DQEBCwUAA4IBAQAFKygcRsFF2XvL3Gca4cPYxjL4a5hZ cS7UNokuh5rUxfwyBmC2I2B5Is2QesSDdEFma7dLpgMqCNyNHiYGd/+oyRwapleR QjYcGMoxNmGw7rgtBMAozMcdrD2wRMAkPujqe4QoAPaaFD3r2RH93MUd18OTRd2r H1drCkoZxj3aVM53vc1Z0ZpfELNHYeP02uM/h2lnM6K1OnSf2t+VRNZ3JaBzGmYN KmiCZfPQokMlf42wbegItHE8BC0bvdWDczUYNf7VeFtwMGSnFXbcAEd9cJ1FsgzE hECQQ7CLgrXTrNt18Co133bH3Dr2ZaJjeMqSLNeUA/GkLGZdIEIrF0aD -----END CERTIFICATE-----Generated at Tue May 12 22:03:27 2026 by rpki-client