$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer (raw, json) Hash identifier: VDZsZvhi9WULsx1SnViSlkGqSb27onWTuYAmdhm/TOc= Subject key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7B4B06875B16F4083DA13E35A84C0CDA534CEF50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:40 +0000 Certificate not after: Sun 02 May 2027 01:44:40 +0000 Subordinate resources: IP: 160.25.68.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4b:06:87:5b:16:f4:08:3d:a1:3e:35:a8:4c:0c:da:53:4c:ef:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:39:40 2026 GMT Not After : May 2 01:44:40 2027 GMT Subject: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:79:96:c1:ae:83:c9:60:84:c7:5e:2a:c9: ca:b4:92:9a:a7:51:30:3a:0c:14:ea:0f:9b:8b:1b: 74:08:d0:ce:cb:2b:bb:53:d7:9e:66:3d:6f:75:ed: bc:b4:02:7d:99:89:6f:f7:41:38:10:b7:a1:09:8e: 7f:b6:b2:d0:53:35:f2:2c:1f:f1:3c:e3:5e:17:a1: fd:9b:1f:1a:5b:1e:49:09:41:62:fb:37:0e:3e:37: 41:54:11:fd:3a:71:65:1f:c2:29:64:2a:03:35:74: d8:30:ce:da:7e:1e:6b:24:bc:f2:ae:79:5e:5f:29: 66:9a:0b:90:62:dc:c4:7b:b5:c6:b6:f1:98:cd:f7: df:df:69:1b:03:0a:07:28:3b:e2:aa:59:0e:3b:95: 6b:5e:71:f9:34:d7:31:5a:a1:22:50:7b:e1:9d:57: 68:c3:f8:d7:db:4d:78:5d:18:fa:cd:4a:ec:cd:82: ae:25:aa:2e:ba:63:6a:06:7c:74:97:71:a1:8a:79: ab:d2:df:53:c9:5f:b5:0f:2f:af:04:83:e6:7d:2e: 1d:62:51:fe:be:98:b6:45:52:cc:99:7d:18:e5:99: fc:b4:88:83:3c:d0:53:d6:0c:df:f4:b0:0f:74:2f: 96:1a:e2:de:aa:02:46:94:22:07:c9:40:0e:53:75: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.68.0/23 Signature Algorithm: sha256WithRSAEncryption 86:9e:ed:f0:73:97:97:11:8f:82:57:41:9c:9a:69:dd:e6:9c: 7c:fd:62:18:25:f5:fb:bb:72:4f:a8:b5:5f:b6:9e:6a:90:5c: 6b:39:6a:29:ca:e2:2f:c0:3e:90:4b:2f:fe:51:48:e6:3f:6d: f1:71:fa:dc:49:e1:39:36:01:cb:c1:b6:14:83:b6:99:23:30: 60:8e:cd:fc:fc:6e:60:e3:46:cf:0e:21:b5:cb:05:5a:a9:01: dd:ec:4d:d1:71:2b:a9:70:e3:12:7f:90:18:5b:5a:48:d8:ca: 0a:8f:62:5d:e8:f9:57:da:e4:b3:d0:7c:0d:c2:50:ef:f6:44: ac:3a:18:38:e6:c9:fb:90:e4:f7:c5:b7:9a:61:13:32:90:00: 5b:88:38:92:e0:48:fd:e9:22:0b:21:2d:31:39:bd:ea:3e:be: 4b:6c:89:d3:5c:26:19:c5:b5:9e:1c:da:eb:52:f4:99:01:41: 4a:f9:ac:54:65:c7:ca:24:c7:05:c2:03:e6:85:73:84:59:57: 59:32:59:f6:23:27:61:dc:95:e7:eb:87:3a:92:56:49:30:4d: 74:f5:2a:c3:cf:cc:eb:3d:2c:f8:79:cb:e9:a8:76:ed:76:04: 24:fb:4d:02:7d:66:57:6d:57:ba:11:9a:83:b1:97:3f:0f:d4: d2:40:23:e5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUe0sGh1sW9Ag9oT41qEwM2lNM71AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzk0MFoX DTI3MDUwMjAxNDQ0MFowMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAx NUIyRkM4NDQ0RjY2RUM1NEU1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzveZbBroPJYITHXirJyrSSmqdRMDoMFOoPm4sbdAjQzssru1PXnmY9b3Xt vLQCfZmJb/dBOBC3oQmOf7ay0FM18iwf8TzjXheh/ZsfGlseSQlBYvs3Dj43QVQR /TpxZR/CKWQqAzV02DDO2n4eayS88q55Xl8pZpoLkGLcxHu1xrbxmM33399pGwMK Byg74qpZDjuVa15x+TTXMVqhIlB74Z1XaMP419tNeF0Y+s1K7M2CriWqLrpjagZ8 dJdxoYp5q9LfU8lftQ8vrwSD5n0uHWJR/r6YtkVSzJl9GOWZ/LSIgzzQU9YM3/Sw D3Qvlhri3qoCRpQiB8lADlN16TECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIjU9P31G/EDCMAVsvyERPZuxU5VMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyZmJhYWZjLTRkYjItNGZjNC1hMWE4LTJkOGU0YzhiMmNlMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMmZiYWFm Yy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC84OEQ0RjRGREY1MUJGMTAz MDhDMDE1QjJGQzg0NDRGNjZFQzU0RTU1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBlEMA0GCSqGSIb3DQEBCwUAA4IBAQCGnu3wc5eXEY+CV0Gcmmnd5px8/WIY JfX7u3JPqLVftp5qkFxrOWopyuIvwD6QSy/+UUjmP23xcfrcSeE5NgHLwbYUg7aZ IzBgjs38/G5g40bPDiG1ywVaqQHd7E3RcSupcOMSf5AYW1pI2MoKj2Jd6PlX2uSz 0HwNwlDv9kSsOhg45sn7kOT3xbeaYRMykABbiDiS4Ej96SILIS0xOb3qPr5LbInT XCYZxbWeHNrrUvSZAUFK+axUZcfKJMcFwgPmhXOEWVdZMln2Iydh3JXn64c6klZJ ME109SrDz8zrPSz4ecvpqHbtdgQk+00CfWZXbVe6EZqDsZc/D9TSQCPl -----END CERTIFICATE-----Generated at Tue May 12 22:52:54 2026 by rpki-client