$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer (raw, json) Hash identifier: 6jNrpPnHr5Oa7eLikW8lZTmxpO0pKhX5HKTr6ZveMY0= Subject key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 78E3095FB029FB595890EFBC3A15E9C3E5370F44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:07:51 +0000 Certificate not after: Sun 02 May 2027 02:12:51 +0000 Subordinate resources: IP: 157.15.120.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e3:09:5f:b0:29:fb:59:58:90:ef:bc:3a:15:e9:c3:e5:37:0f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:07:51 2026 GMT Not After : May 2 02:12:51 2027 GMT Subject: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:cd:ef:9d:8e:e5:51:45:84:0e:48:46:49: f3:a0:6f:83:b9:30:fb:e5:53:07:a3:d7:27:3f:3c: b5:37:5c:5c:5d:1f:cf:40:c5:fc:b7:ff:42:57:f7: 6c:2e:29:82:43:90:c9:52:c3:df:07:8c:92:17:a3: 2c:ef:94:bd:0f:5a:e5:f3:ad:a6:2d:43:2a:2b:63: ec:c6:5e:ca:5f:90:bc:1f:4c:47:0e:d7:3b:be:a2: 99:a8:0b:c5:1b:74:97:73:c0:7d:5a:f4:17:18:6d: 72:f0:ff:a3:c4:4b:b6:6d:7c:02:25:ea:d6:c8:02: 5c:40:7e:98:1c:ab:4b:03:bd:c1:20:ba:60:bf:97: 1f:89:73:27:8c:88:71:24:9d:72:5e:ca:67:04:50: f4:38:44:97:3e:55:f5:ca:6f:79:a7:ad:59:59:af: 08:b3:af:4d:a3:95:dd:b3:b7:f5:da:2a:61:bb:f2: 82:a2:68:05:d5:f8:a3:cd:34:ad:39:e3:7b:e7:44: ef:46:e2:6c:68:33:55:d2:57:dc:e9:47:a4:4d:bb: 7e:5d:2f:ae:94:9e:fc:98:6a:e0:21:2c:8f:7e:0f: d4:82:ae:08:8c:76:0b:7b:25:0b:ec:b7:e2:be:65: 1a:9f:fc:b9:50:f7:33:3d:d7:8f:82:20:11:a0:3c: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.120.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:12:8b:35:ba:47:33:d4:c7:a7:6f:80:ac:5f:94:36:f6:d1: ad:c1:49:d1:f3:1f:7b:59:f7:21:ed:93:2a:66:fe:b5:76:4a: 67:4c:f4:5d:dd:54:d5:6a:d9:cf:f8:95:ab:2c:66:c2:88:35: fb:39:28:63:9f:0a:d1:1d:8b:45:1d:58:a4:81:01:25:65:5f: 67:3b:9e:55:54:f2:cf:0b:7a:18:22:c3:40:28:1b:bb:5a:5b: 65:80:dc:dc:94:83:92:ca:59:60:7f:39:da:1a:83:29:e4:49: dc:52:e9:e9:92:d9:81:99:d4:72:04:5d:68:84:a5:8a:a5:a2: e3:1b:b1:af:c9:1e:90:b5:04:ad:69:b8:f0:61:c6:06:34:3b: d0:bf:70:9c:c9:69:82:74:e9:a0:83:4e:37:d4:38:c9:ba:0f: de:e7:69:e6:11:77:c9:62:d7:f0:6b:8a:cb:46:ca:f6:c6:ee: 72:0a:61:c0:b1:6f:aa:21:f7:68:3f:2a:cc:df:f5:74:33:93: 86:bf:83:f8:ab:41:cd:bd:f4:da:e2:c8:90:5b:2a:78:c6:bb: 42:fb:52:9d:62:2d:00:73:a8:36:1f:05:44:2e:11:ae:0f:89: 6b:d4:bf:55:4e:d5:34:eb:82:49:27:81:79:03:ad:77:df:d7: 3f:cc:dd:02 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeOMJX7Ap+1lYkO+8OhXpw+U3D0QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMDc1MVoX DTI3MDUwMjAyMTI1MVowMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVB RkRGRDVDMEFEODA5MEVGREY1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnLze+djuVRRYQOSEZJ86Bvg7kw++VTB6PXJz88tTdcXF0fz0DF/Lf/Qlf3 bC4pgkOQyVLD3weMkhejLO+UvQ9a5fOtpi1DKitj7MZeyl+QvB9MRw7XO76imagL xRt0l3PAfVr0FxhtcvD/o8RLtm18AiXq1sgCXEB+mByrSwO9wSC6YL+XH4lzJ4yI cSSdcl7KZwRQ9DhElz5V9cpveaetWVmvCLOvTaOV3bO39doqYbvygqJoBdX4o800 rTnje+dE70bibGgzVdJX3OlHpE27fl0vrpSe/Jhq4CEsj34P1IKuCIx2C3slC+y3 4r5lGp/8uVD3Mz3Xj4IgEaA8C+cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIhHj9ysFlsVnqWv39XArYCQ799TMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmYjQ2NmM2LTM3NDMtNDk1Zi1iMWE4LTI2MDdjYzk5NTczZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZmI0NjZj Ni0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC84ODQ3OEZEQ0FDMTY1QjE1 OUVBNUFGREZENUMwQUQ4MDkwRUZERjUzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQ94MA0GCSqGSIb3DQEBCwUAA4IBAQCOEos1ukcz1Menb4CsX5Q29tGtwUnR 8x97Wfch7ZMqZv61dkpnTPRd3VTVatnP+JWrLGbCiDX7OShjnwrRHYtFHVikgQEl ZV9nO55VVPLPC3oYIsNAKBu7WltlgNzclIOSyllgfznaGoMp5EncUunpktmBmdRy BF1ohKWKpaLjG7GvyR6QtQStabjwYcYGNDvQv3CcyWmCdOmgg0431DjJug/e52nm EXfJYtfwa4rLRsr2xu5yCmHAsW+qIfdoPyrM3/V0M5OGv4P4q0HNvfTa4siQWyp4 xrtC+1KdYi0Ac6g2HwVELhGuD4lr1L9VTtU064JJJ4F5A61339c/zN0C -----END CERTIFICATE-----Generated at Tue May 12 22:10:16 2026 by rpki-client