$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer File: 82619591421B67CACDA4E6A0B166011B7E6D1D21.cer (raw, json) Hash identifier: i3v6zke5KPntwTw7KAz/7Odvao/a9WBWFtfzsverkmM= Subject key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 494CF0B523C9B6C11CE3377968B4410856BC2F10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:22 +0000 Certificate not after: Sun 02 May 2027 01:32:22 +0000 Subordinate resources: IP: 157.20.126.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4c:f0:b5:23:c9:b6:c1:1c:e3:37:79:68:b4:41:08:56:bc:2f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:27:22 2026 GMT Not After : May 2 01:32:22 2027 GMT Subject: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:d0:4f:0c:77:0f:7f:5b:d2:5a:72:35:bc: d2:07:db:fe:07:73:f9:01:ef:6c:50:49:f8:63:1f: 7e:12:40:60:a0:13:73:90:95:6b:e9:f7:a3:12:d3: 68:c4:9a:39:28:c2:65:f4:77:06:ec:b9:40:94:32: 34:2e:67:49:6d:77:c1:c7:f2:f8:9d:d3:89:72:53: 8f:bb:81:30:7a:d1:e5:bf:87:77:70:b8:60:d2:76: 3e:79:ba:52:72:f6:98:5a:c8:19:10:76:b1:06:43: 78:75:c7:2f:30:30:c6:14:ab:62:65:60:f0:b8:22: 24:78:e0:65:af:b8:17:a8:76:a0:1a:52:51:9b:d7: b4:bd:6c:62:bc:3b:4e:27:12:5b:84:b9:89:39:df: 71:0e:b1:34:73:ee:0a:a4:48:2b:e7:a7:37:8b:48: 45:59:b0:c0:a2:1b:51:b7:81:de:81:53:82:a7:35: 96:fe:bd:b8:d3:b5:a5:1e:e0:69:2b:5c:f1:9e:2f: 22:20:c1:7a:71:aa:b0:f9:ea:41:f4:d4:17:7c:62: 15:51:fe:2b:cb:1f:36:a4:8f:ba:5d:7a:d8:5c:cf: d0:51:5c:5c:e8:09:a3:9b:f6:f0:c5:6f:8c:2d:d3: bb:b9:d9:ea:bf:b3:04:4b:0d:7c:03:51:99:2b:2a: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.126.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:14:62:50:f0:4c:a4:3b:7a:d9:8b:d1:52:0a:4c:94:31:52: 2f:f9:bd:18:46:43:da:05:34:dd:29:73:57:be:48:c5:6f:89: c1:89:92:c7:ab:6e:4f:8a:ee:bc:0e:f3:d4:7e:d8:56:c3:4a: 48:2f:dc:75:cc:cc:cc:d6:82:93:71:b4:63:1b:bd:ee:e3:c1: 9f:75:f6:42:d7:d5:ac:ea:eb:11:74:fd:10:95:bc:58:43:fa: d3:65:43:17:d6:c2:70:92:38:96:3b:49:7c:76:1d:3a:28:d9: e4:57:74:89:1e:c5:b6:88:11:4e:27:1e:69:16:40:5c:c9:b3: a7:24:4e:69:2e:f4:4d:9e:3f:82:1d:73:15:35:72:1a:4a:03: 20:81:41:17:9f:a9:2d:e2:9c:0a:a2:bd:2c:d5:30:ba:5f:86: 30:6d:45:07:10:0b:90:73:ec:29:2d:4c:f6:23:6e:50:e4:a4: 3c:6a:81:5b:02:cd:65:f7:84:21:f1:da:41:09:75:fc:51:f8: b7:37:4f:4d:0c:97:3e:65:33:d2:7f:43:57:ee:09:1a:6b:6d: 78:6e:b0:3c:10:8b:f2:28:78:fb:bf:e3:74:b3:c9:3b:cb:04: 59:7e:40:48:e1:62:3a:89:e2:aa:7d:4d:e0:f4:9c:3c:ae:5e: 13:64:6d:c8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSUzwtSPJtsEc4zd5aLRBCFa8LxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjcyMloX DTI3MDUwMjAxMzIyMlowMzExMC8GA1UEAxMoODI2MTk1OTE0MjFCNjdDQUNEQTRF NkEwQjE2NjAxMUI3RTZEMUQyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOC50E8Mdw9/W9JacjW80gfb/gdz+QHvbFBJ+GMffhJAYKATc5CVa+n3oxLT aMSaOSjCZfR3Buy5QJQyNC5nSW13wcfy+J3TiXJTj7uBMHrR5b+Hd3C4YNJ2Pnm6 UnL2mFrIGRB2sQZDeHXHLzAwxhSrYmVg8LgiJHjgZa+4F6h2oBpSUZvXtL1sYrw7 TicSW4S5iTnfcQ6xNHPuCqRIK+enN4tIRVmwwKIbUbeB3oFTgqc1lv69uNO1pR7g aStc8Z4vIiDBenGqsPnqQfTUF3xiFVH+K8sfNqSPul162FzP0FFcXOgJo5v28MVv jC3Tu7nZ6r+zBEsNfANRmSsqwncCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIJhlZFCG2fKzaTmoLFmARt+bR0hMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EwZjc4YmQ0LWMxOWItNGQ0MC1hYTU0LWVkOGQ3YmM3NzJjYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMGY3OGJk NC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC84MjYxOTU5MTQyMUI2N0NB Q0RBNEU2QTBCMTY2MDExQjdFNkQxRDIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRR+MA0GCSqGSIb3DQEBCwUAA4IBAQAsFGJQ8EykO3rZi9FSCkyUMVIv+b0Y RkPaBTTdKXNXvkjFb4nBiZLHq25Piu68DvPUfthWw0pIL9x1zMzM1oKTcbRjG73u 48GfdfZC19Ws6usRdP0QlbxYQ/rTZUMX1sJwkjiWO0l8dh06KNnkV3SJHsW2iBFO Jx5pFkBcybOnJE5pLvRNnj+CHXMVNXIaSgMggUEXn6kt4pwKor0s1TC6X4YwbUUH EAuQc+wpLUz2I25Q5KQ8aoFbAs1l94Qh8dpBCXX8Ufi3N09NDJc+ZTPSf0NX7gka a214brA8EIvyKHj7v+N0s8k7ywRZfkBI4WI6ieKqfU3g9Jw8rl4TZG3I -----END CERTIFICATE-----Generated at Tue May 12 22:32:25 2026 by rpki-client