$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.cer File: 93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.cer (raw, json) Hash identifier: /NYebfSYdiBQS63XE9HkHr0FSrBHVEopYR0L9HbZDVI= Subject key identifier: 93:C4:CA:2E:74:D1:3A:4D:30:BA:87:FF:45:F9:CE:36:10:ED:16:2D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3F36EAFE56DADDE3E12DF21873E65DA5B1847BE3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:13 +0000 Certificate not after: Sun 02 May 2027 02:09:13 +0000 Subordinate resources: IP: 157.15.46.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:36:ea:fe:56:da:dd:e3:e1:2d:f2:18:73:e6:5d:a5:b1:84:7b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:04:13 2026 GMT Not After : May 2 02:09:13 2027 GMT Subject: CN=93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:e4:de:38:17:3a:92:db:51:6b:8d:0a:8c: b8:c1:02:46:db:36:e2:e3:cb:53:8e:d4:60:ec:85: c7:3c:cb:4a:23:10:2a:e0:4d:94:9c:03:3f:2d:92: f3:cb:6a:89:ec:c9:7d:14:e9:2e:c5:67:2e:24:4d: a9:c0:ae:13:33:89:1c:7d:8c:19:68:4b:af:81:d7: c2:7f:01:72:36:c2:3b:65:9b:dd:ed:80:dd:8b:d9: 5c:e2:57:52:75:b0:a2:12:60:f9:99:61:4e:26:e4: d0:dc:c2:cf:b4:31:1a:2f:ed:4a:a1:7d:64:69:9f: ae:19:ed:c4:12:f5:aa:c4:50:b7:83:02:5d:36:8a: 93:61:39:a7:1e:9c:b9:bb:e4:dd:50:30:53:0a:40: 3a:78:12:f7:ce:26:03:ee:44:98:f9:09:eb:83:94: a0:8f:36:78:9c:93:fc:85:a7:e7:d7:f5:ad:50:20: 0f:97:29:b2:50:28:55:57:e8:b8:90:41:d4:ff:12: 99:a4:a3:a1:95:5c:b7:16:82:36:b1:65:0e:b5:1c: 85:e8:bc:c7:90:fd:2e:3e:30:17:51:55:d6:c7:d8: a7:d7:ec:64:c7:5c:fb:c8:68:0f:ff:d4:c3:4e:de: e1:38:72:8f:36:29:2c:ea:22:22:72:00:2d:16:df: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:C4:CA:2E:74:D1:3A:4D:30:BA:87:FF:45:F9:CE:36:10:ED:16:2D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.46.0/23 Signature Algorithm: sha256WithRSAEncryption 24:de:d5:6d:79:ac:28:41:e5:e3:ee:85:d5:73:14:95:cd:71: 6b:fc:08:ac:65:fa:9e:81:70:70:d8:6b:b4:28:0c:0a:6e:59: 66:00:14:a6:78:cd:8a:49:55:2b:fe:a0:89:1f:09:70:76:90: 15:c8:ea:ea:4d:09:50:68:f4:38:81:fa:85:2a:46:4c:ac:01: ef:2f:4b:da:89:1a:1a:58:9e:96:ce:5d:56:9c:4d:88:2f:21: 3d:59:24:de:02:69:6a:a3:0b:4e:60:fe:aa:93:26:e6:de:ba: fe:3b:2f:7e:94:2a:bb:09:69:aa:9a:3f:93:e8:37:92:99:09: 5e:bf:f8:ff:3e:1d:2a:cb:de:65:88:24:b4:85:c3:c9:c5:b7: 32:84:ac:7d:f5:e4:b3:76:00:47:0f:8f:85:e3:d5:de:83:d5: 2e:db:de:3f:0e:91:f2:ee:b2:2a:27:a2:9d:8a:01:18:f1:05: 56:a8:b1:a2:fa:37:fb:70:a6:10:e1:c8:d8:42:ef:7e:6d:4b: 8d:12:7f:5c:4d:25:9a:4f:3d:4a:91:a2:5d:f6:67:9c:33:28: 5c:96:31:6f:2a:14:fc:02:51:b9:87:f1:c0:40:22:6e:e6:cd: 61:ee:f7:96:09:84:15:e1:96:9f:ba:a2:44:33:fd:00:f1:ba: dc:d9:b8:fc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPzbq/lba3ePhLfIYc+ZdpbGEe+MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMDQxM1oX DTI3MDUwMjAyMDkxM1owMzExMC8GA1UEAxMoOTNDNENBMkU3NEQxM0E0RDMwQkE4 N0ZGNDVGOUNFMzYxMEVEMTYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuD5N44FzqS21FrjQqMuMECRts24uPLU47UYOyFxzzLSiMQKuBNlJwDPy2S 88tqiezJfRTpLsVnLiRNqcCuEzOJHH2MGWhLr4HXwn8BcjbCO2Wb3e2A3YvZXOJX UnWwohJg+ZlhTibk0NzCz7QxGi/tSqF9ZGmfrhntxBL1qsRQt4MCXTaKk2E5px6c ubvk3VAwUwpAOngS984mA+5EmPkJ64OUoI82eJyT/IWn59f1rVAgD5cpslAoVVfo uJBB1P8SmaSjoZVctxaCNrFlDrUchei8x5D9Lj4wF1FV1sfYp9fsZMdc+8hoD//U w07e4ThyjzYpLOoiInIALRbffEkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJPEyi500TpNMLqH/0X5zjYQ7RYtMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RjMzRlZWQ5LTE4N2UtNGY0Ni1hNWJiLTBlYThmNjY5YWU5MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYzM0ZWVk OS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC85M0M0Q0EyRTc0RDEzQTRE MzBCQTg3RkY0NUY5Q0UzNjEwRUQxNjJELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ8uMA0GCSqGSIb3DQEBCwUAA4IBAQAk3tVteawoQeXj7oXVcxSVzXFr/Ais ZfqegXBw2Gu0KAwKbllmABSmeM2KSVUr/qCJHwlwdpAVyOrqTQlQaPQ4gfqFKkZM rAHvL0vaiRoaWJ6Wzl1WnE2ILyE9WSTeAmlqowtOYP6qkybm3rr+Oy9+lCq7CWmq mj+T6DeSmQlev/j/Ph0qy95liCS0hcPJxbcyhKx99eSzdgBHD4+F49Xeg9Uu294/ DpHy7rIqJ6KdigEY8QVWqLGi+jf7cKYQ4cjYQu9+bUuNEn9cTSWaTz1KkaJd9mec MyhcljFvKhT8AlG5h/HAQCJu5s1h7veWCYQV4ZafuqJEM/0A8brc2bj8 -----END CERTIFICATE-----Generated at Tue May 12 22:52:42 2026 by rpki-client