$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.cer (raw, json) Hash identifier: mrxpgLC0/qbzm6BunmuNjcYFgeXc6iNiSjWgWZzkYUc= Subject key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 58AD22FF88F4DEBBED6934AD62399B4289CCED4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:56 +0000 Certificate not after: Sun 02 May 2027 00:50:56 +0000 Subordinate resources: IP: 160.22.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ad:22:ff:88:f4:de:bb:ed:69:34:ad:62:39:9b:42:89:cc:ed:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:45:56 2026 GMT Not After : May 2 00:50:56 2027 GMT Subject: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f1:e5:eb:18:5c:db:b8:57:0f:15:11:7f:7b: 0b:a9:ff:bf:75:6c:7b:4f:b5:be:ca:5a:6a:e3:5c: 98:81:7c:9b:c3:d0:71:72:d0:a4:43:ed:5a:f8:dc: ca:6c:37:e7:e9:48:2f:91:d3:c4:28:47:e8:9a:35: af:d5:a6:c4:f7:74:50:73:18:76:f5:b3:a6:f1:1e: c1:a9:40:f1:34:ce:b0:8d:4b:b3:e1:a3:54:8d:8b: e5:70:7e:fe:b6:2f:f6:17:32:a2:63:76:9d:a3:54: 26:f4:92:de:dd:ee:35:76:a4:4f:74:00:68:59:d1: fc:a2:5c:95:75:78:cf:d8:3a:98:48:3f:ec:2b:ee: bf:21:d6:11:f2:77:b5:de:f5:7a:4f:23:80:b3:25: 89:b7:7c:f1:d9:ed:ed:e4:7d:fa:56:11:1b:71:20: ae:08:15:23:5a:f4:4b:0f:ca:e1:70:04:de:f1:64: d9:c0:3d:f6:d2:e9:41:78:01:73:72:b9:ca:59:80: 14:08:db:ae:66:48:21:bd:9d:bf:21:3e:a4:42:2e: 61:bc:14:4c:5c:b6:bc:65:ec:83:14:a6:e9:22:2a: 84:4d:a0:b1:dd:cd:a7:a1:42:cf:52:3c:07:59:a9: 6a:72:25:88:ec:fc:d3:68:0e:a5:e3:47:e8:9e:19: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.92.0/23 Signature Algorithm: sha256WithRSAEncryption 77:a3:24:3f:d8:d5:bc:26:5e:65:c4:08:23:69:ef:6e:7e:ef: 17:42:a1:36:79:51:3d:e3:1e:d5:11:8f:32:27:a8:1a:44:e7: 98:a2:9d:75:a0:1c:91:a4:a9:95:18:9b:1d:d6:93:09:67:15: aa:99:a9:60:79:ac:c1:9d:d4:76:a2:e7:a0:c1:47:f5:fc:91: 8e:fc:9a:59:e9:88:2e:e2:57:9c:2e:42:0b:5e:70:4f:62:1f: bc:50:a7:55:eb:3a:d1:03:b8:cf:13:09:ec:0c:9a:43:3a:be: 4f:bd:18:ab:42:a5:94:8b:7e:7f:33:f0:bb:af:0d:d6:ef:58: 9f:25:32:27:d1:ff:ab:59:02:2a:1f:97:ad:78:91:08:6e:30: 85:6b:9e:db:b4:b6:35:bd:a3:71:32:a8:11:43:4e:c7:1a:9e: 5c:35:e4:8a:34:cc:ba:37:da:c1:9a:44:39:d2:a0:1d:9f:f1: cd:54:f1:fb:34:ca:41:f2:17:1e:19:1f:60:48:f9:da:f5:60: 85:8d:ae:83:7f:3c:28:46:f1:bf:b4:4e:af:ad:1a:0e:8b:45: 43:ee:3e:ab:c9:68:bd:71:e8:16:ca:22:bb:7d:95:1b:42:1d: 6d:68:18:89:de:79:2e:b9:72:e4:47:6a:64:46:e7:fa:cd:6d: 12:a0:fc:e1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWK0i/4j03rvtaTStYjmbQonM7U8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNDU1NloX DTI3MDUwMjAwNTA1NlowMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2 RkQzOEYwODE3MzEwMDc3QkZDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7x5esYXNu4Vw8VEX97C6n/v3Vse0+1vspaauNcmIF8m8PQcXLQpEPtWvjc ymw35+lIL5HTxChH6Jo1r9WmxPd0UHMYdvWzpvEewalA8TTOsI1Ls+GjVI2L5XB+ /rYv9hcyomN2naNUJvSS3t3uNXakT3QAaFnR/KJclXV4z9g6mEg/7CvuvyHWEfJ3 td71ek8jgLMlibd88dnt7eR9+lYRG3EgrggVI1r0Sw/K4XAE3vFk2cA99tLpQXgB c3K5ylmAFAjbrmZIIb2dvyE+pEIuYbwUTFy2vGXsgxSm6SIqhE2gsd3Np6FCz1I8 B1mpanIliOz802gOpeNH6J4ZM2ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJstmUb/BD0QgcJv048IFzEAd7/HMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYyZDI5YjMyLTNhMjktNGExNC1iYzliLWM3NmEwMDdjYTAzMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MmQyOWIz Mi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC85QjJEOTk0NkZGMDQzRDEw ODFDMjZGRDM4RjA4MTczMTAwNzdCRkM3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBZcMA0GCSqGSIb3DQEBCwUAA4IBAQB3oyQ/2NW8Jl5lxAgjae9ufu8XQqE2 eVE94x7VEY8yJ6gaROeYop11oByRpKmVGJsd1pMJZxWqmalgeazBndR2ouegwUf1 /JGO/JpZ6Ygu4lecLkILXnBPYh+8UKdV6zrRA7jPEwnsDJpDOr5PvRirQqWUi35/ M/C7rw3W71ifJTIn0f+rWQIqH5eteJEIbjCFa57btLY1vaNxMqgRQ07HGp5cNeSK NMy6N9rBmkQ50qAdn/HNVPH7NMpB8hceGR9gSPna9WCFja6DfzwoRvG/tE6vrRoO i0VD7j6ryWi9cegWyiK7fZUbQh1taBiJ3nkuuXLkR2pkRuf6zW0SoPzh -----END CERTIFICATE-----Generated at Tue May 12 22:09:50 2026 by rpki-client