$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/921F400C4C46F802E9ABB17F291DC57058C8535E.cer File: 921F400C4C46F802E9ABB17F291DC57058C8535E.cer (raw, json) Hash identifier: k4D3dFnemITEZBZmD0VB8fQ4wguUMfWzEAXuwWZY5Oo= Subject key identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3B4E9A4529911E512645FD01C7DE16B745175FE0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:45:57 +0000 Certificate not after: Sat 01 May 2027 23:50:57 +0000 Subordinate resources: IP: 160.22.28.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4e:9a:45:29:91:1e:51:26:45:fd:01:c7:de:16:b7:45:17:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:45:57 2026 GMT Not After : May 1 23:50:57 2027 GMT Subject: CN=921F400C4C46F802E9ABB17F291DC57058C8535E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:46:b8:f7:82:03:db:00:93:89:0c:bd:20: a5:8b:74:56:f1:b4:ce:7c:66:32:3c:e2:80:d6:a5: 41:a8:04:e0:6e:e1:e6:f6:ff:cd:b4:a3:9a:14:87: 38:9e:50:1e:0a:a5:87:c7:6d:03:56:85:72:8d:fc: 1c:98:3c:ba:ad:8d:da:81:62:fa:dd:50:da:cd:5f: 21:1b:7b:c4:ed:f1:f8:02:98:44:ba:d9:c6:3e:52: 90:c1:87:ae:de:44:2d:83:c4:74:97:be:4c:d9:34: 91:25:27:b0:c8:af:74:61:37:57:78:34:31:77:f8: 27:a1:14:6b:c8:07:10:27:7d:40:20:ea:ba:8b:f4: cd:03:48:6c:b2:20:60:f8:fa:23:a9:af:f7:26:bd: 5d:ca:c5:05:b1:26:03:f4:11:fd:04:ed:14:22:63: 55:74:fb:81:c6:c7:d3:0a:16:5e:80:47:93:4c:04: 18:15:70:cd:37:ed:27:e4:09:fc:db:a9:48:0b:ca: d4:ae:6e:61:3e:b1:35:d9:a8:6f:5b:2b:e5:23:a9: 37:df:4d:4e:c0:76:da:c0:b6:9b:3a:ad:f4:78:49: e5:21:15:33:c4:cf:04:3e:c5:0d:6b:0b:91:85:ae: e4:5c:47:41:56:b9:c2:a6:e6:a6:a2:4e:17:f8:5e: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:1F:40:0C:4C:46:F8:02:E9:AB:B1:7F:29:1D:C5:70:58:C8:53:5E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/921F400C4C46F802E9ABB17F291DC57058C8535E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.28.0/23 Signature Algorithm: sha256WithRSAEncryption 82:f0:9e:67:cb:e7:b2:9f:04:a6:6b:63:97:28:63:07:92:b3: 9f:0f:da:28:fc:ff:da:62:62:61:dc:74:1a:ea:6b:a1:ed:c9: ed:92:5e:b5:99:e2:eb:8f:63:56:24:ae:a6:34:16:6f:13:63: 28:e2:63:6a:51:92:ca:0e:d5:9a:f6:33:c8:7b:8b:75:f7:c5: d6:9d:d8:2c:d4:49:fe:de:0b:6f:03:8f:6b:7b:3a:7d:04:8d: 08:02:1d:b2:df:f9:de:4c:ac:bd:80:0b:44:73:4b:58:90:89: 1c:77:09:4b:9e:dd:4a:45:0a:9e:d5:99:06:0e:5d:f9:65:59: 06:82:ae:b9:8f:42:dd:b7:d3:d7:6a:20:a1:1d:6c:97:be:43: 84:58:3f:e5:ea:b4:b8:28:64:53:74:9e:f2:f0:02:db:31:57: c0:1c:e7:f2:0a:cf:13:b5:af:16:cb:43:27:c1:74:95:52:c1: 7b:82:bf:b6:1f:f1:15:51:0c:83:ce:08:70:23:7e:5d:c2:f7: 36:6f:f2:e9:68:5d:9d:a4:05:ec:cc:e3:e7:08:ce:8d:74:8c: 71:3f:58:0e:59:71:47:61:22:11:96:fb:21:84:a2:d5:07:84: 94:fd:c6:f6:07:2d:7d:6c:ee:a7:93:ee:a9:ed:f8:73:69:d2: de:33:6b:f5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUO06aRSmRHlEmRf0Bx94Wt0UXX+AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNDU1N1oX DTI3MDUwMTIzNTA1N1owMzExMC8GA1UEAxMoOTIxRjQwMEM0QzQ2RjgwMkU5QUJC MTdGMjkxREM1NzA1OEM4NTM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJajRrj3ggPbAJOJDL0gpYt0VvG0znxmMjzigNalQagE4G7h5vb/zbSjmhSH OJ5QHgqlh8dtA1aFco38HJg8uq2N2oFi+t1Q2s1fIRt7xO3x+AKYRLrZxj5SkMGH rt5ELYPEdJe+TNk0kSUnsMivdGE3V3g0MXf4J6EUa8gHECd9QCDquov0zQNIbLIg YPj6I6mv9ya9XcrFBbEmA/QR/QTtFCJjVXT7gcbH0woWXoBHk0wEGBVwzTftJ+QJ /NupSAvK1K5uYT6xNdmob1sr5SOpN99NTsB22sC2mzqt9HhJ5SEVM8TPBD7FDWsL kYWu5FxHQVa5wqbmpqJOF/heDiMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJIfQAxMRvgC6auxfykdxXBYyFNeMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA5MTQyYzgyLWIwNDMtNDZlYi1iMGExLThlMTVmZDVkYWE3OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wOTE0MmM4 Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC85MjFGNDAwQzRDNDZGODAy RTlBQkIxN0YyOTFEQzU3MDU4Qzg1MzVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBYcMA0GCSqGSIb3DQEBCwUAA4IBAQCC8J5ny+eynwSma2OXKGMHkrOfD9oo /P/aYmJh3HQa6muh7cntkl61meLrj2NWJK6mNBZvE2Mo4mNqUZLKDtWa9jPIe4t1 98XWndgs1En+3gtvA49rezp9BI0IAh2y3/neTKy9gAtEc0tYkIkcdwlLnt1KRQqe 1ZkGDl35ZVkGgq65j0Ldt9PXaiChHWyXvkOEWD/l6rS4KGRTdJ7y8ALbMVfAHOfy Cs8Tta8Wy0MnwXSVUsF7gr+2H/EVUQyDzghwI35dwvc2b/LpaF2dpAXszOPnCM6N dIxxP1gOWXFHYSIRlvshhKLVB4SU/cb2By19bO6nk+6p7fhzadLeM2v1 -----END CERTIFICATE-----Generated at Tue May 12 22:38:47 2026 by rpki-client