$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.cer (raw, json) Hash identifier: xyXwleZwBtyDUz5s8svvEu+WC0YuHjF37ZgYVta5Bmk= Subject key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 750AA7A6A3CD0ED8A92320105DD22734D10AC4AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:03 +0000 Certificate not after: Sun 02 May 2027 02:01:03 +0000 Subordinate resources: IP: 160.25.120.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0a:a7:a6:a3:cd:0e:d8:a9:23:20:10:5d:d2:27:34:d1:0a:c4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:56:03 2026 GMT Not After : May 2 02:01:03 2027 GMT Subject: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:6b:95:bf:5a:da:ff:4a:a6:0e:66:d5:8b: 15:16:12:03:b3:4a:c5:5b:cc:e7:d1:a3:23:35:80: 42:f1:ff:c6:c4:ff:6a:ab:28:ca:90:75:dd:61:ae: ec:76:c5:0e:fe:c3:0a:23:39:a6:ea:ef:43:65:e9: 7a:80:bf:dc:51:55:81:a8:df:93:de:e9:1b:2f:d6: 4c:57:8b:69:e1:3e:92:17:7d:23:47:6d:90:50:a3: 00:80:6b:3a:e4:73:37:14:a8:d0:62:87:f7:d5:d3: 1c:d6:96:dc:ca:e0:b2:75:27:3d:a5:d2:00:a2:92: 05:24:d6:fd:bd:5e:08:66:ca:dd:ea:4e:f4:0c:2c: 32:41:c2:5a:9f:d8:91:24:5b:9d:db:2f:71:95:0c: 8c:be:cf:e0:5a:41:3a:bf:27:6b:e9:78:a6:2e:b8: 40:49:e2:85:33:a3:4d:39:ea:e2:f8:7e:a5:d2:58: d0:1d:63:d1:9e:8c:a6:30:25:63:30:79:f2:66:f8: dc:56:00:ad:52:15:90:96:f6:53:e1:70:ad:12:54: f7:c2:cc:8f:dc:e3:48:bb:28:30:31:02:aa:ff:65: 56:81:7d:31:87:57:63:1f:c6:6d:29:19:2f:c1:01: e5:11:65:a6:0b:0a:c4:d5:1b:7e:0a:26:9f:9b:b2: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.120.0/23 Signature Algorithm: sha256WithRSAEncryption 19:14:71:b2:ca:a1:4e:b7:e3:28:3f:58:74:6a:e9:f2:e1:25: c9:ce:8e:13:c4:4f:60:44:ca:ed:14:67:f2:f4:29:7f:ab:3e: 43:60:99:87:0f:df:59:9b:58:03:54:61:35:74:9e:52:bd:e1: d3:b0:32:b0:8c:ef:20:03:d9:0c:ad:5a:00:3c:2e:70:b3:94: ff:d4:a9:7a:9d:8b:1c:80:bb:f9:b6:af:f5:32:9b:ca:6e:4f: d0:d7:8c:f0:b8:46:3a:88:42:e5:0f:85:08:af:c3:5a:54:8e: ae:6f:59:9d:b5:2b:c2:15:e9:97:4f:8d:4d:f6:19:39:fd:94: 54:96:44:fb:0f:ce:11:c2:65:da:cc:a1:ce:c4:ce:83:eb:ba: 2e:4a:9e:4f:76:31:e6:a7:00:89:ba:4f:ed:0a:93:aa:f9:7b: 15:4b:d9:32:a4:38:94:ed:76:fd:c3:4a:e1:b9:58:98:7d:a4: c6:44:64:19:56:cc:16:c2:f9:4b:9d:cf:d7:15:13:59:8e:27: 88:bb:1d:9e:81:5e:03:6a:fd:13:a5:70:cd:14:e4:90:fa:34: f3:06:23:bc:45:dc:32:03:be:2e:a7:46:68:97:8d:a7:1b:46: 1b:5d:06:d4:b9:57:c9:61:2c:7b:fc:b1:df:ba:e2:24:1d:51: 09:c3:30:e1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdQqnpqPNDtipIyAQXdInNNEKxK0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTYwM1oX DTI3MDUwMjAyMDEwM1owMzExMC8GA1UEAxMoN0JFRUIyOTBFOTI1NEU3NjZBN0Q4 QzNCMjE2RjA3ODUyMDY2MTdFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHxa5W/Wtr/SqYOZtWLFRYSA7NKxVvM59GjIzWAQvH/xsT/aqsoypB13WGu 7HbFDv7DCiM5purvQ2XpeoC/3FFVgajfk97pGy/WTFeLaeE+khd9I0dtkFCjAIBr OuRzNxSo0GKH99XTHNaW3MrgsnUnPaXSAKKSBSTW/b1eCGbK3epO9AwsMkHCWp/Y kSRbndsvcZUMjL7P4FpBOr8na+l4pi64QEnihTOjTTnq4vh+pdJY0B1j0Z6MpjAl YzB58mb43FYArVIVkJb2U+FwrRJU98LMj9zjSLsoMDECqv9lVoF9MYdXYx/GbSkZ L8EB5RFlpgsKxNUbfgomn5uyoXUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHvuspDpJU52an2MOyFvB4UgZhfvMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NmNzJmMDEyLWE0M2EtNGZjYi04NmE5LWFiM2U5NTczYThkOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZjcyZjAx Mi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC83QkVFQjI5MEU5MjU0RTc2 NkE3RDhDM0IyMTZGMDc4NTIwNjYxN0VGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBl4MA0GCSqGSIb3DQEBCwUAA4IBAQAZFHGyyqFOt+MoP1h0auny4SXJzo4T xE9gRMrtFGfy9Cl/qz5DYJmHD99Zm1gDVGE1dJ5SveHTsDKwjO8gA9kMrVoAPC5w s5T/1Kl6nYscgLv5tq/1MpvKbk/Q14zwuEY6iELlD4UIr8NaVI6ub1mdtSvCFemX T41N9hk5/ZRUlkT7D84RwmXazKHOxM6D67ouSp5PdjHmpwCJuk/tCpOq+XsVS9ky pDiU7Xb9w0rhuViYfaTGRGQZVswWwvlLnc/XFRNZjieIux2egV4Dav0TpXDNFOSQ +jTzBiO8RdwyA74up0Zol42nG0YbXQbUuVfJYSx7/LHfuuIkHVEJwzDh -----END CERTIFICATE-----Generated at Tue May 12 22:33:17 2026 by rpki-client