$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer File: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer (raw, json) Hash identifier: LQhjiED0FqV6zlfWlXQ7qXSbH5BBXdth+aIo2ixFBEk= Subject key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2FCD42593D5D194DD2819E6C64EF58667C760908 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:51:34 +0000 Certificate not after: Sat 01 May 2027 23:56:34 +0000 Subordinate resources: IP: 157.20.98.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cd:42:59:3d:5d:19:4d:d2:81:9e:6c:64:ef:58:66:7c:76:09:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:51:34 2026 GMT Not After : May 1 23:56:34 2027 GMT Subject: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:9d:14:a6:19:d4:3d:53:b6:ce:48:cb:20: 6b:83:50:c1:05:ee:e2:f4:f1:f3:77:0c:4e:4e:e2: 20:80:18:2d:74:6a:11:2a:58:d8:fc:40:ec:44:80: 79:32:ba:30:fa:52:59:1c:ba:19:53:85:0d:aa:c1: 2c:c9:ba:3f:cb:8b:69:a4:d3:18:c7:d4:12:5e:ab: 27:27:56:23:f0:cc:cb:e8:85:1e:ce:42:b1:5d:69: 0e:2e:85:16:c6:5b:c8:de:e5:eb:46:31:5d:82:40: 38:63:7d:22:dd:f2:1f:49:a2:2d:51:9c:06:86:88: 33:54:40:9a:28:59:fc:d1:fc:de:b5:53:01:59:f6: 11:02:4d:f2:eb:2f:cf:d1:d6:f0:1b:79:ad:ff:05: 85:0d:c2:9a:ac:93:5f:e9:5b:66:25:94:48:73:2f: 00:b6:97:69:56:a7:f3:d0:93:41:a8:ab:c9:b6:f0: 68:b0:96:dc:57:b5:1c:53:cd:b7:be:c9:b5:03:07: 91:de:a9:d2:d0:50:ee:f5:5e:a8:da:4b:50:70:bd: 9e:b7:6b:e5:d4:f3:e9:08:f6:2e:f0:ac:8d:bd:db: b0:af:a6:45:49:a6:a4:55:11:ee:da:c8:8c:ed:6a: a3:e6:90:49:7e:56:f0:4e:5e:19:aa:20:65:f0:50: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.98.0/23 Signature Algorithm: sha256WithRSAEncryption 97:ed:57:f0:88:56:d0:44:05:00:84:01:dd:ba:ba:dc:40:41: b5:9b:1f:77:e1:ed:ee:30:72:a9:c2:6b:ce:34:cf:50:54:5e: c6:72:99:e0:5c:39:59:71:5d:b1:8f:e0:15:0e:9d:2e:a0:6f: 05:2d:ee:d6:95:ab:8b:15:60:70:e1:ff:6c:e6:1d:78:83:d8: 8b:1f:8f:7c:9f:57:be:25:f1:0a:32:52:f4:ab:5f:7f:d3:9f: 5a:12:8b:9c:99:26:08:8c:f0:1f:e8:33:e8:8c:70:47:84:9b: 77:26:b1:d9:a5:e2:77:44:f2:f0:3c:0e:b1:e1:07:09:67:9f: 9d:7e:28:17:fc:cf:4f:fa:d8:2d:9f:c1:20:1d:19:5d:78:14: fa:e3:b3:ed:9c:43:52:f6:b8:11:ae:fa:37:73:33:c3:99:7a: 59:ce:71:91:ab:85:48:f8:f3:80:a0:8c:67:91:c1:ee:90:fd: af:6e:52:c3:65:49:c4:77:4e:49:fa:a1:6f:42:1e:eb:f0:fb: 02:ff:79:09:3b:87:83:9d:f1:f1:7d:69:41:2e:04:fc:13:93: 84:1c:92:64:d4:73:20:8c:b5:72:bf:8b:f3:f2:69:07:9d:d1: 15:f2:b4:78:44:e9:62:50:b2:ad:a3:36:62:18:4c:cf:a3:3f: c0:09:b7:5e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUL81CWT1dGU3SgZ5sZO9YZnx2CQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNTEzNFoX DTI3MDUwMTIzNTYzNFowMzExMC8GA1UEAxMoOTM3NkNERjNEMkE0NENDNDE3NjRG ODlGNjhGRDdFNDEzMEVCMzUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIjinRSmGdQ9U7bOSMsga4NQwQXu4vTx83cMTk7iIIAYLXRqESpY2PxA7ESA eTK6MPpSWRy6GVOFDarBLMm6P8uLaaTTGMfUEl6rJydWI/DMy+iFHs5CsV1pDi6F FsZbyN7l60YxXYJAOGN9It3yH0miLVGcBoaIM1RAmihZ/NH83rVTAVn2EQJN8usv z9HW8Bt5rf8FhQ3CmqyTX+lbZiWUSHMvALaXaVan89CTQairybbwaLCW3Fe1HFPN t77JtQMHkd6p0tBQ7vVeqNpLUHC9nrdr5dTz6Qj2LvCsjb3bsK+mRUmmpFUR7trI jO1qo+aQSX5W8E5eGaogZfBQHXMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJN2zfPSpEzEF2T4n2j9fkEw6zUcMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEzNDZjMGUyLTgxOTQtNDAyNC1iY2IzLWQwMjk1NmNlM2E5OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMzQ2YzBl Mi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC85Mzc2Q0RGM0QyQTQ0Q0M0 MTc2NEY4OUY2OEZEN0U0MTMwRUIzNTFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRRiMA0GCSqGSIb3DQEBCwUAA4IBAQCX7VfwiFbQRAUAhAHdurrcQEG1mx93 4e3uMHKpwmvONM9QVF7GcpngXDlZcV2xj+AVDp0uoG8FLe7WlauLFWBw4f9s5h14 g9iLH498n1e+JfEKMlL0q19/059aEoucmSYIjPAf6DPojHBHhJt3JrHZpeJ3RPLw PA6x4QcJZ5+dfigX/M9P+tgtn8EgHRldeBT647PtnENS9rgRrvo3czPDmXpZznGR q4VI+POAoIxnkcHukP2vblLDZUnEd05J+qFvQh7r8PsC/3kJO4eDnfHxfWlBLgT8 E5OEHJJk1HMgjLVyv4vz8mkHndEV8rR4ROliULKtozZiGEzPoz/ACbde -----END CERTIFICATE-----Generated at Tue May 12 22:10:38 2026 by rpki-client