$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.cer (raw, json) Hash identifier: ESBJ1lfOrZsdEqJbAbsnXOHgT3bskRLXdPwfamQNmtc= Subject key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7B99B2FE843E8DA2384B7DAB6809D5500507758D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:08:05 +0000 Certificate not after: Sun 02 May 2027 00:13:05 +0000 Subordinate resources: IP: 198.15.25.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:99:b2:fe:84:3e:8d:a2:38:4b:7d:ab:68:09:d5:50:05:07:75:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:08:05 2026 GMT Not After : May 2 00:13:05 2027 GMT Subject: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:3e:95:fc:32:69:ea:39:c1:df:90:96:28: 97:51:28:b5:01:85:2f:65:2f:9e:98:e8:1a:92:93: fd:0b:25:ca:ec:bf:3a:b5:4a:d9:cc:c7:36:86:8f: 07:b0:39:10:9b:f8:72:fd:d0:ad:54:32:0e:2b:d7: 7b:eb:29:33:eb:c4:98:80:99:b6:b6:62:59:d4:0b: 29:77:85:40:6a:8c:02:8f:a3:34:5a:6f:f4:61:5b: 44:a9:d0:3c:dc:55:7f:ab:20:b9:c2:9d:07:e6:f1: 0b:4f:5a:8b:50:dd:70:a0:86:c6:a9:18:a9:ff:61: e4:6a:04:c8:37:ee:18:22:ca:c1:08:5b:fb:71:7d: db:37:ef:4d:70:ef:3a:36:a1:05:fb:0b:9d:9a:0c: f4:c4:fa:f4:99:e9:52:77:76:b7:9c:96:f3:b4:5e: 6f:75:05:53:f0:4f:59:bf:d4:0b:a9:3d:e6:d4:11: 93:ac:b6:13:a2:6d:b0:37:8d:28:f0:f0:2f:44:86: 4f:6a:8c:99:0c:80:ab:46:55:c5:13:3b:e2:4e:1c: 49:d8:2f:f8:0d:f0:ed:f5:f2:8f:30:17:4b:31:ab: 57:0a:e1:82:96:bb:6e:30:c6:e9:0b:e8:77:f6:6d: 38:2b:a3:ec:95:83:ee:52:81:16:be:77:67:cf:df: 0d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.15.25.0/24 Signature Algorithm: sha256WithRSAEncryption 27:c5:6a:95:dc:c2:bf:e6:62:e4:7f:5f:ae:66:a4:83:fd:4c: 3b:e5:f8:fa:fd:b7:5a:61:33:5b:e4:3d:06:72:c3:1a:c1:5b: c0:53:91:4a:5f:a7:87:59:4d:b0:e9:36:1c:f4:32:e9:5d:50: fb:a1:f6:c7:2a:87:e3:d3:09:76:5b:24:ab:1d:e6:64:d4:19: ba:25:65:e6:20:e8:7c:26:68:01:bb:ec:d9:31:95:cb:3f:24: f9:08:96:e5:22:05:dc:b9:5c:bf:25:a8:c7:1e:54:c0:43:47: 0e:0d:78:1d:8b:27:59:dd:e6:4a:57:89:8b:a4:37:dc:80:f3: d4:e3:f9:6b:e3:1b:71:6b:93:26:b4:64:d6:22:e9:32:e7:7d: 15:c8:f8:bf:d2:67:3f:79:aa:2d:20:e6:b2:58:11:3e:f3:95: 3b:4b:e6:c8:04:16:e8:38:ce:44:61:d0:05:47:80:ca:4d:96: 19:56:2f:c7:09:aa:12:b4:6a:ac:e4:c2:d6:d3:fb:2f:bf:39: 7a:d4:35:62:bd:c6:f1:4a:ce:0d:7c:05:5e:77:c5:d4:62:bc: 62:fb:9b:92:2a:1f:3f:49:82:a8:6b:b2:24:96:17:6e:b5:3f: d5:38:64:8e:63:ea:9f:8b:42:40:52:0a:cf:87:4d:b5:61:ad: 5b:0b:11:22 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUe5my/oQ+jaI4S32raAnVUAUHdY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDgwNVoX DTI3MDUwMjAwMTMwNVowMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZB RDU5RUY5MEFFODQwMDZEQzcwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiwPpX8MmnqOcHfkJYol1EotQGFL2UvnpjoGpKT/Qslyuy/OrVK2czHNoaP B7A5EJv4cv3QrVQyDivXe+spM+vEmICZtrZiWdQLKXeFQGqMAo+jNFpv9GFbRKnQ PNxVf6sgucKdB+bxC09ai1DdcKCGxqkYqf9h5GoEyDfuGCLKwQhb+3F92zfvTXDv OjahBfsLnZoM9MT69JnpUnd2t5yW87Reb3UFU/BPWb/UC6k95tQRk6y2E6JtsDeN KPDwL0SGT2qMmQyAq0ZVxRM74k4cSdgv+A3w7fXyjzAXSzGrVwrhgpa7bjDG6Qvo d/ZtOCuj7JWD7lKBFr53Z8/fDccCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIF88IfTJUs/5AatWe+QroQAbccLMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJiZTI5OTAyLWUwZjQtNDI5YS05YTI2LTQzOWI5YmZlZTQ4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYmUyOTkw Mi1lMGY0LTQyOWEtOWEyNi00MzliOWJmZWU0ODkvMC84MTdDRjA4N0QzMjU0QjNG RTQwNkFENTlFRjkwQUU4NDAwNkRDNzBCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAxg8ZMA0GCSqGSIb3DQEBCwUAA4IBAQAnxWqV3MK/5mLkf1+uZqSD/Uw75fj6 /bdaYTNb5D0GcsMawVvAU5FKX6eHWU2w6TYc9DLpXVD7ofbHKofj0wl2WySrHeZk 1Bm6JWXmIOh8JmgBu+zZMZXLPyT5CJblIgXcuVy/JajHHlTAQ0cODXgdiydZ3eZK V4mLpDfcgPPU4/lr4xtxa5MmtGTWIuky530VyPi/0mc/eaotIOayWBE+85U7S+bI BBboOM5EYdAFR4DKTZYZVi/HCaoStGqs5MLW0/svvzl61DVivcbxSs4NfAVed8XU Yrxi+5uSKh8/SYKoa7IklhdutT/VOGSOY+qfi0JAUgrPh021Ya1bCxEi -----END CERTIFICATE-----Generated at Tue May 12 22:45:51 2026 by rpki-client