$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.cer (raw, json) Hash identifier: nkBAVFFX2yDx89Au4OclIgqMZ6gs3zN8vNBruyrd5ZY= Subject key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2F50FE6F05E2047202B195BF95D9288704DE29D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:01 +0000 Certificate not after: Sun 02 May 2027 01:10:01 +0000 Subordinate resources: IP: 160.22.242.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:50:fe:6f:05:e2:04:72:02:b1:95:bf:95:d9:28:87:04:de:29:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:05:01 2026 GMT Not After : May 2 01:10:01 2027 GMT Subject: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:a0:19:a5:0f:0e:88:44:58:80:40:ac:0b: e7:c1:b4:71:70:fd:ce:0e:b7:a8:5e:d3:09:68:49: fa:57:9e:ca:b3:0f:b1:fc:18:6e:fd:fc:0f:36:c9: b6:b7:a0:b4:d2:04:67:42:07:19:a5:b6:a1:e7:e1: 61:c5:eb:da:fb:05:71:00:8a:49:2c:ab:1d:e6:2b: 0d:43:46:35:16:12:03:f3:fa:40:95:08:bd:22:77: e8:db:89:4a:d5:5b:1c:a0:95:15:33:93:0e:95:78: ef:a8:f2:e2:5f:17:da:40:95:67:88:f7:71:38:1d: c6:df:6a:83:d6:8b:b1:90:88:c5:99:05:7d:4b:62: fe:80:48:e2:88:89:8d:26:7c:9e:98:35:b7:c7:94: 52:59:00:b3:56:d5:d4:88:17:2d:f9:3a:50:9f:46: ef:2c:df:3a:53:d1:92:a7:83:e9:09:8f:e2:c2:d7: 96:e8:22:bc:bf:c5:ff:51:c9:9e:88:a9:1b:63:ae: 6a:90:fb:a8:f4:3c:3d:85:63:0c:94:b6:97:da:6a: 0f:4f:f6:9a:2a:e6:05:78:c3:d8:7d:e8:2a:5f:c3: 29:8b:de:e5:cb:88:70:39:f6:a2:51:91:41:c9:5a: 60:35:22:cc:43:d0:d4:8d:77:33:c4:8b:a3:46:8e: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.242.0/23 Signature Algorithm: sha256WithRSAEncryption 30:2c:c3:de:25:31:fa:25:c4:85:e9:ae:ae:0a:49:1b:bb:aa: 5b:5d:ae:83:d7:89:0b:b4:af:86:4d:ab:5b:e5:1b:28:fd:56: b4:df:db:84:e3:d2:03:37:8d:0f:9e:7b:ea:5b:fa:55:05:08: 56:b3:9e:98:4f:57:f8:51:e6:b6:57:24:6c:15:18:44:8b:ae: 8f:59:0b:53:2e:d0:e3:a3:59:33:35:31:07:a3:be:31:b7:f8: 54:26:ac:65:4a:c0:ac:e2:5c:a7:41:92:fd:ed:54:6e:b9:dd: c9:d5:09:d7:f4:54:6d:ad:f4:11:25:69:80:12:c4:d2:8a:e6: 5f:04:95:08:66:8f:1c:10:c9:72:94:27:6e:57:8e:47:1e:89: c4:db:c7:01:03:d9:b0:fa:fe:98:77:d8:95:48:02:fd:73:c4: 07:cd:1d:58:72:3f:ff:af:a2:78:14:41:2d:f3:dc:f3:2d:be: 0f:2f:40:92:c6:28:ff:75:41:4a:70:9a:b6:50:4e:36:85:1b: 12:5c:a4:59:af:d0:97:39:27:cc:33:9a:aa:7b:75:3f:c5:46: d6:e5:cd:b1:01:a4:52:9d:aa:58:30:aa:e6:53:84:a0:6a:ca: 9f:94:1d:4e:5d:80:4d:58:b8:7e:16:58:f2:3d:6a:f0:c0:d7: 3d:cb:60:1f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUL1D+bwXiBHICsZW/ldkohwTeKdIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDUwMVoX DTI3MDUwMjAxMTAwMVowMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTND RDE2NEZBNTVCMEE5NEU5QkEwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1LoBmlDw6IRFiAQKwL58G0cXD9zg63qF7TCWhJ+leeyrMPsfwYbv38DzbJ tregtNIEZ0IHGaW2oefhYcXr2vsFcQCKSSyrHeYrDUNGNRYSA/P6QJUIvSJ36NuJ StVbHKCVFTOTDpV476jy4l8X2kCVZ4j3cTgdxt9qg9aLsZCIxZkFfUti/oBI4oiJ jSZ8npg1t8eUUlkAs1bV1IgXLfk6UJ9G7yzfOlPRkqeD6QmP4sLXlugivL/F/1HJ noipG2OuapD7qPQ8PYVjDJS2l9pqD0/2mirmBXjD2H3oKl/DKYve5cuIcDn2olGR QclaYDUizEPQ1I13M8SLo0aOuxECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJQLEAQW1pWS3qPNFk+lWwqU6boJMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlOWFmNGRiLWNmNmYtNDliMy1hMDViLTYxYTdiOWM4MTdjMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZTlhZjRk Yi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC85NDBCMTAwNDE2RDY5NTky REVBM0NEMTY0RkE1NUIwQTk0RTlCQTA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBbyMA0GCSqGSIb3DQEBCwUAA4IBAQAwLMPeJTH6JcSF6a6uCkkbu6pbXa6D 14kLtK+GTatb5Rso/Va039uE49IDN40PnnvqW/pVBQhWs56YT1f4Uea2VyRsFRhE i66PWQtTLtDjo1kzNTEHo74xt/hUJqxlSsCs4lynQZL97VRuud3J1QnX9FRtrfQR JWmAEsTSiuZfBJUIZo8cEMlylCduV45HHonE28cBA9mw+v6Yd9iVSAL9c8QHzR1Y cj//r6J4FEEt89zzLb4PL0CSxij/dUFKcJq2UE42hRsSXKRZr9CXOSfMM5qqe3U/ xUbW5c2xAaRSnapYMKrmU4SgasqflB1OXYBNWLh+FljyPWrwwNc9y2Af -----END CERTIFICATE-----Generated at Tue May 12 22:16:39 2026 by rpki-client