$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer File: 80DF8BB38CBC3C159969522F39C2926484A3509E.cer (raw, json) Hash identifier: IqAX+s6+Y7iDkOF0DQn5B72+FJ+BbSsP1fneCEjignY= Subject key identifier: 80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 47521A088D2F8443BC1AE884D9F38DDC8F3131B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:20:29 +0000 Certificate not after: Sun 02 May 2027 02:25:29 +0000 Subordinate resources: IP: 157.20.38.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:52:1a:08:8d:2f:84:43:bc:1a:e8:84:d9:f3:8d:dc:8f:31:31:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:20:29 2026 GMT Not After : May 2 02:25:29 2027 GMT Subject: CN=80DF8BB38CBC3C159969522F39C2926484A3509E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:48:c5:de:d2:ca:2d:cd:36:d6:15:d5:06: 5b:4f:48:b1:09:48:16:1e:c1:12:1f:c4:9a:0a:87: 27:8c:51:99:35:78:c1:df:b2:5e:83:f0:9e:0d:6f: ae:6e:cf:dc:fd:cd:8d:55:a5:08:c2:ca:d5:51:38: 77:cb:a1:7d:3d:bf:d3:25:63:0b:60:e9:f2:8e:dc: 22:a8:d1:7f:a8:72:63:62:85:a1:10:13:9f:22:9e: 03:d7:b5:6b:a3:cc:ba:a9:0e:55:b4:0e:e0:7c:36: 1c:be:cc:21:a5:30:cb:20:c8:66:56:29:49:26:6b: 93:07:a3:9a:1a:8c:0e:30:0c:8f:40:ba:0a:02:32: fa:fd:54:80:bb:b3:b9:0a:1d:9f:3e:d5:99:30:42: f5:4f:06:b7:3e:5a:d2:c5:ba:37:a2:43:09:66:53: 43:20:28:68:fa:d1:9d:ea:5a:27:40:67:2e:a1:bb: db:f4:bf:26:19:e8:7f:b4:9f:ee:e7:bc:f8:a3:9f: c4:ad:9f:b7:6c:a5:65:2e:87:ee:f4:49:60:cd:9d: 0f:4d:4d:36:86:c7:fc:6e:0d:b3:bb:56:59:b6:82: 31:c4:5e:cf:78:b0:06:18:2b:45:56:2c:e7:61:aa: 84:80:b0:b3:88:6e:09:90:8d:dd:a2:9c:74:e3:47: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.38.0/23 Signature Algorithm: sha256WithRSAEncryption 27:29:a5:1e:1e:21:9b:0b:e9:e4:4b:4c:88:20:38:61:12:8d: 64:58:7a:f9:89:4f:6b:11:cc:06:9b:ab:c7:e9:bb:46:d9:4a: f4:15:b2:30:86:7d:ad:54:0f:fc:61:10:19:9e:82:fd:d1:ef: 9e:2c:bf:6b:c5:80:99:04:09:7e:52:34:24:82:df:ad:f0:0a: 72:d8:0a:61:d0:6d:95:93:b9:30:35:3a:03:c6:ff:0a:33:b8: bd:50:64:59:75:27:6d:d4:e3:e5:e2:08:e6:26:99:fb:4e:2a: 78:2c:c2:f8:03:0f:fb:63:a8:62:84:b9:4f:78:69:0b:f1:59: 10:59:ce:88:31:8e:48:2c:5b:2a:21:5d:72:7d:31:8c:f1:0c: b1:21:a3:a7:ab:2e:0c:bd:cb:c2:78:4b:3f:93:f8:53:cf:c5: d1:ec:63:2d:eb:d2:2c:7d:48:1a:01:9c:f1:d8:73:21:e3:40: 24:53:97:c4:56:bc:4f:43:c6:a0:bc:24:00:f9:19:b6:3f:3b: a7:24:cc:9a:90:ea:8f:eb:cb:04:63:53:98:df:73:62:d0:a4: 28:13:e0:23:6c:df:88:d7:c8:40:b7:74:c7:3c:98:fa:e1:38: 57:92:82:8e:e6:4e:b2:5d:43:46:b7:0e:b9:e7:ee:f6:a6:e1: 95:1c:03:26 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUR1IaCI0vhEO8GuiE2fON3I8xMbkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMjAyOVoX DTI3MDUwMjAyMjUyOVowMzExMC8GA1UEAxMoODBERjhCQjM4Q0JDM0MxNTk5Njk1 MjJGMzlDMjkyNjQ4NEEzNTA5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8cSMXe0sotzTbWFdUGW09IsQlIFh7BEh/EmgqHJ4xRmTV4wd+yXoPwng1v rm7P3P3NjVWlCMLK1VE4d8uhfT2/0yVjC2Dp8o7cIqjRf6hyY2KFoRATnyKeA9e1 a6PMuqkOVbQO4Hw2HL7MIaUwyyDIZlYpSSZrkwejmhqMDjAMj0C6CgIy+v1UgLuz uQodnz7VmTBC9U8Gtz5a0sW6N6JDCWZTQyAoaPrRnepaJ0BnLqG72/S/Jhnof7Sf 7ue8+KOfxK2ft2ylZS6H7vRJYM2dD01NNobH/G4Ns7tWWbaCMcRez3iwBhgrRVYs 52GqhICws4huCZCN3aKcdONHjLsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIDfi7OMvDwVmWlSLznCkmSEo1CeMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U5OTJiZjI2LWM4ZTYtNGE4Ni05YjMzLWVhM2EyYWY1NTdmMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lOTkyYmYy Ni1jOGU2LTRhODYtOWIzMy1lYTNhMmFmNTU3ZjAvMC84MERGOEJCMzhDQkMzQzE1 OTk2OTUyMkYzOUMyOTI2NDg0QTM1MDlFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRQmMA0GCSqGSIb3DQEBCwUAA4IBAQAnKaUeHiGbC+nkS0yIIDhhEo1kWHr5 iU9rEcwGm6vH6btG2Ur0FbIwhn2tVA/8YRAZnoL90e+eLL9rxYCZBAl+UjQkgt+t 8Apy2Aph0G2Vk7kwNToDxv8KM7i9UGRZdSdt1OPl4gjmJpn7Tip4LML4Aw/7Y6hi hLlPeGkL8VkQWc6IMY5ILFsqIV1yfTGM8QyxIaOnqy4MvcvCeEs/k/hTz8XR7GMt 69IsfUgaAZzx2HMh40AkU5fEVrxPQ8agvCQA+Rm2PzunJMyakOqP68sEY1OY33Ni 0KQoE+AjbN+I18hAt3THPJj64ThXkoKO5k6yXUNGtw655+72puGVHAMm -----END CERTIFICATE-----Generated at Tue May 12 22:02:40 2026 by rpki-client