$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer (raw, json) Hash identifier: AseBIqiOhV1oGvbHvwYFsw6RldQWS0y2QZAttPsOhPI= Subject key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 150A7526549B59594526A21C1B295D9021D53B8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:45 +0000 Certificate not after: Sun 02 May 2027 01:48:45 +0000 Subordinate resources: IP: 160.19.84.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:0a:75:26:54:9b:59:59:45:26:a2:1c:1b:29:5d:90:21:d5:3b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:43:45 2026 GMT Not After : May 2 01:48:45 2027 GMT Subject: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:2f:08:c2:e3:a3:a4:d1:92:b5:11:2d:92: a2:d5:a9:c9:a3:b7:52:59:75:61:e5:18:d2:93:cc: e4:f5:b1:e1:68:de:ec:16:85:c6:66:fd:01:8d:2f: 1e:5d:c5:8f:71:19:44:ce:89:da:77:d5:f4:63:a6: 93:18:63:06:58:d0:9f:b3:29:47:51:6b:7b:6a:08: 47:84:3e:1b:a7:04:d3:be:f3:7b:0b:1b:e8:bf:c0: b9:63:45:64:1b:48:a3:49:45:3d:08:b5:48:49:4e: 30:1d:f2:13:98:ad:05:12:7a:7c:ee:b3:49:21:ab: 90:5e:f8:1d:e2:1b:77:a4:54:07:e0:cc:f7:a4:9d: fc:95:d3:fa:e4:96:93:a1:a4:01:32:96:bc:32:0c: 2e:05:80:c6:1c:8f:47:f3:a2:dd:1f:d0:0d:6e:ad: 75:33:fe:67:49:7d:c3:af:67:2c:64:a9:f8:3a:8f: 56:43:7d:58:61:fa:44:6f:6e:b6:17:4a:78:9c:1d: 4e:fd:af:6d:4f:1a:52:9a:9f:fd:dd:58:b6:98:22: d3:8a:30:d9:86:fc:39:19:d6:0e:c3:e0:db:8b:b9: 28:5a:77:c5:eb:ab:18:83:33:c4:2a:86:59:00:cd: f8:7e:28:69:7f:e7:ae:5e:de:f5:7e:89:40:ea:ab: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/23 Signature Algorithm: sha256WithRSAEncryption 52:c9:39:85:dc:4b:7d:53:5f:f4:29:cd:e6:f3:0d:96:0d:dc: 18:0d:b2:34:eb:f2:01:76:09:e3:a4:84:32:86:49:0b:f0:15: c2:38:31:d5:71:a7:cd:9b:ef:b9:1b:0d:3c:82:30:94:15:06: b5:cd:ec:14:56:93:2c:da:7a:6f:1b:f0:38:43:3e:c5:ca:2a: 21:58:18:21:08:92:62:d5:be:f0:f9:7d:10:c7:ae:44:f7:83: b6:10:a0:db:af:ae:65:a1:12:bd:df:cf:30:a9:f3:59:9e:dd: 4e:36:a7:70:51:29:d5:14:b8:9b:c2:6a:bc:27:67:b4:21:b5: 11:5d:d8:7a:de:ef:60:db:5f:cf:cd:e8:af:86:85:24:c6:06: 78:43:24:8a:72:ed:ac:fd:25:e4:f5:14:d6:51:ee:5f:f7:d2: ce:75:03:fc:75:04:ea:97:38:83:ce:2f:4b:04:a6:79:56:0e: 68:9f:bb:93:52:94:54:1e:26:c2:4c:0e:4b:9f:9e:73:71:bb: dc:46:ae:87:d7:ac:5d:e8:28:94:ed:46:c8:7c:87:e0:46:89: c1:ff:a4:46:59:09:af:8e:20:d5:f1:64:e2:ae:26:3b:0b:03: 5e:a9:d7:25:73:d3:70:55:e0:cb:19:42:8b:3d:78:bf:5a:d9: a1:1f:9c:83 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFQp1JlSbWVlFJqIcGyldkCHVO48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDM0NVoX DTI3MDUwMjAxNDg0NVowMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJF QUJDMUMyRDg5QTZGM0ZDMTdDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZoLwjC46Ok0ZK1ES2SotWpyaO3Ull1YeUY0pPM5PWx4Wje7BaFxmb9AY0v Hl3Fj3EZRM6J2nfV9GOmkxhjBljQn7MpR1Fre2oIR4Q+G6cE077zewsb6L/AuWNF ZBtIo0lFPQi1SElOMB3yE5itBRJ6fO6zSSGrkF74HeIbd6RUB+DM96Sd/JXT+uSW k6GkATKWvDIMLgWAxhyPR/Oi3R/QDW6tdTP+Z0l9w69nLGSp+DqPVkN9WGH6RG9u thdKeJwdTv2vbU8aUpqf/d1Ytpgi04ow2Yb8ORnWDsPg24u5KFp3xeurGIMzxCqG WQDN+H4oaX/nrl7e9X6JQOqrTw8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIicbeP1elNHDrvqvBwtiabz/BfIMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JhMDk4ZjAwLWEwYTAtNGI1Yy05ZTgzLTYwNjczNzEyOGNiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYTA5OGYw MC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC84ODlDNkRFM0Y1N0E1MzQ3 MEVCQkVBQkMxQzJEODlBNkYzRkMxN0M4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBNUMA0GCSqGSIb3DQEBCwUAA4IBAQBSyTmF3Et9U1/0Kc3m8w2WDdwYDbI0 6/IBdgnjpIQyhkkL8BXCODHVcafNm++5Gw08gjCUFQa1zewUVpMs2npvG/A4Qz7F yiohWBghCJJi1b7w+X0Qx65E94O2EKDbr65loRK9388wqfNZnt1ONqdwUSnVFLib wmq8J2e0IbURXdh63u9g21/PzeivhoUkxgZ4QySKcu2s/SXk9RTWUe5f99LOdQP8 dQTqlziDzi9LBKZ5Vg5on7uTUpRUHibCTA5Ln55zcbvcRq6H16xd6CiU7UbIfIfg RonB/6RGWQmvjiDV8WTiriY7CwNeqdclc9NwVeDLGUKLPXi/WtmhH5yD -----END CERTIFICATE-----Generated at Tue May 12 22:46:02 2026 by rpki-client