$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer File: 792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer (raw, json) Hash identifier: btbSH/Kv0t53Q7kcQnIj5ls9DiQ45bN6sDO/J9UDCHA= Subject key identifier: 79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7EC6029D0F29622C3DDD1B521ED021B62FA595C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:58 +0000 Certificate not after: Sun 02 May 2027 00:47:58 +0000 Subordinate resources: IP: 160.22.64.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c6:02:9d:0f:29:62:2c:3d:dd:1b:52:1e:d0:21:b6:2f:a5:95:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:42:58 2026 GMT Not After : May 2 00:47:58 2027 GMT Subject: CN=792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:0e:98:83:4b:f3:1d:3c:4c:90:d5:3c:9b: 55:ad:d1:77:a3:bb:36:d8:6a:07:62:14:79:41:30: 13:16:00:69:53:d4:58:c1:8b:85:2b:03:09:d2:29: 0e:80:0a:49:ab:a5:4b:22:4f:a5:d4:64:29:53:a7: 49:e6:94:2a:1e:b7:8e:1a:df:c3:e2:a3:93:75:a2: 00:16:0b:50:b5:74:d1:55:c7:7e:51:01:63:4f:55: 73:cc:33:eb:cf:7c:df:a3:78:f5:8a:50:96:6c:8f: d1:a5:2f:f6:83:48:1c:ff:06:6a:6a:b2:dc:55:0b: 2c:ee:4a:9e:92:62:8d:b3:ab:84:01:a6:56:23:36: 19:25:20:23:5a:6a:19:21:d4:7f:f5:00:97:c7:65: 2a:e4:d6:db:db:70:b3:97:fc:d8:26:f2:27:6b:da: 22:f2:73:e4:fa:bc:3b:70:36:9b:e4:ec:d3:d2:2d: 08:9e:29:8f:cf:49:98:0c:93:4a:fd:5b:fb:db:f9: 97:be:43:b2:9b:9a:e0:55:12:ae:ae:c3:80:e2:10: 9e:f7:25:6d:26:96:be:e8:c8:d9:06:00:bb:d9:5d: 66:f8:9f:4e:10:bf:9e:7c:24:86:4a:a6:5d:5d:77: 14:e3:cc:7f:cb:7c:e2:21:09:8b:31:6b:07:b4:b5: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.64.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:51:0a:f1:7c:8b:2b:6d:e1:fb:6f:07:33:0e:36:b3:62:17: 4c:30:cb:84:42:a8:eb:01:4f:8c:8d:34:a3:a4:b2:b8:5e:95: 29:f7:8f:a5:c0:d5:f3:95:c3:17:14:65:e6:84:fd:6d:39:8d: c6:a6:df:81:ff:12:3d:57:15:88:31:31:77:df:35:1b:7a:a7: f7:c5:13:26:9f:b0:9e:4f:24:1c:ee:06:c2:92:48:2a:d6:0b: 4c:72:d4:9b:69:24:e2:48:28:d3:ce:1e:18:13:b3:aa:42:65: 5f:da:a2:a0:43:46:f8:88:02:ac:6b:21:5b:ce:78:17:d4:16: 8b:c3:72:c8:6d:96:62:fc:b5:e6:6e:65:1a:43:31:11:8a:7d: 0b:1c:82:a7:15:f3:54:e7:22:c5:85:9f:42:59:80:7c:fd:02: 4a:31:4c:50:20:fd:60:28:29:c9:20:9b:62:8c:16:52:ff:a1: ed:e7:5f:8e:17:b8:c8:5c:a6:ce:6f:7e:5a:37:c0:c2:4c:dd: fe:3d:a6:47:e0:2b:e2:55:26:24:38:ac:d0:83:98:13:33:18: e0:f9:b8:6d:cc:c0:89:d0:32:95:23:73:46:44:1c:03:e1:ac: 29:14:b2:cb:d7:f8:79:ae:d4:e5:75:c1:84:42:a0:99:fa:50: 2f:e3:b7:2c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfsYCnQ8pYiw93RtSHtAhti+llcQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNDI1OFoX DTI3MDUwMjAwNDc1OFowMzExMC8GA1UEAxMoNzkyQkVBQjY0NTQ0NkUxQTlBNkUx QkFGNzY3NEJDNjkwNEM4QkUxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRfDpiDS/MdPEyQ1TybVa3Rd6O7NthqB2IUeUEwExYAaVPUWMGLhSsDCdIp DoAKSaulSyJPpdRkKVOnSeaUKh63jhrfw+Kjk3WiABYLULV00VXHflEBY09Vc8wz 689836N49YpQlmyP0aUv9oNIHP8Gamqy3FULLO5KnpJijbOrhAGmViM2GSUgI1pq GSHUf/UAl8dlKuTW29tws5f82CbyJ2vaIvJz5Pq8O3A2m+Ts09ItCJ4pj89JmAyT Sv1b+9v5l75Dspua4FUSrq7DgOIQnvclbSaWvujI2QYAu9ldZvifThC/nnwkhkqm XV13FOPMf8t84iEJizFrB7S1ZLMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHkr6rZFRG4amm4br3Z0vGkEyL4fMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVlNGFiYTBhLTFjMmMtNGY4YS1hNGI0LWVhNzJkOWIyYTYwYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZTRhYmEw YS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMC83OTJCRUFCNjQ1NDQ2RTFB OUE2RTFCQUY3Njc0QkM2OTA0QzhCRTFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBZAMA0GCSqGSIb3DQEBCwUAA4IBAQB8UQrxfIsrbeH7bwczDjazYhdMMMuE QqjrAU+MjTSjpLK4XpUp94+lwNXzlcMXFGXmhP1tOY3Gpt+B/xI9VxWIMTF33zUb eqf3xRMmn7CeTyQc7gbCkkgq1gtMctSbaSTiSCjTzh4YE7OqQmVf2qKgQ0b4iAKs ayFbzngX1BaLw3LIbZZi/LXmbmUaQzERin0LHIKnFfNU5yLFhZ9CWYB8/QJKMUxQ IP1gKCnJIJtijBZS/6Ht51+OF7jIXKbOb35aN8DCTN3+PaZH4CviVSYkOKzQg5gT Mxjg+bhtzMCJ0DKVI3NGRBwD4awpFLLL1/h5rtTldcGEQqCZ+lAv47cs -----END CERTIFICATE-----Generated at Tue May 12 22:02:55 2026 by rpki-client