$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer (raw, json) Hash identifier: 1F+O0cdtVCyXAV87IjyR614MHzP1Hj/Og0otz8ul/Qw= Subject key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4B82B32F49DBA41175EB096A0100E432CB259B71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:35:23 +0000 Certificate not after: Sun 02 May 2027 02:40:23 +0000 Subordinate resources: IP: 160.22.208.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:82:b3:2f:49:db:a4:11:75:eb:09:6a:01:00:e4:32:cb:25:9b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:35:23 2026 GMT Not After : May 2 02:40:23 2027 GMT Subject: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:fb:dc:74:3c:b5:c9:fc:83:96:17:8b:01: e4:c4:5b:3f:fd:c6:d4:2a:0b:f5:40:64:fc:81:36: 0e:4a:f6:db:86:71:21:28:da:61:d0:da:ff:62:41: 91:55:b8:a7:11:de:14:c1:31:b6:49:bb:a1:01:3f: 7c:95:7c:23:ca:8f:41:81:46:6c:11:d4:71:7b:ce: 34:83:ce:a0:71:a2:72:a3:6d:11:47:92:e8:44:ed: 13:dd:01:69:ad:67:c3:48:64:54:1f:00:eb:f6:2e: 77:7e:43:81:45:28:f8:b4:ca:af:21:1c:bc:90:17: 46:c1:75:61:ce:d0:74:5d:6d:7f:ec:f8:f7:f5:b6: 5e:04:94:b0:fa:e8:2b:a4:5e:80:8a:a1:e8:51:94: e5:d0:ec:0a:1a:23:3d:5a:a2:f9:5c:bc:8a:2c:28: 93:11:77:1e:e4:03:2c:da:4c:9d:e9:0f:51:8b:3a: 73:4a:ff:79:43:fb:3e:71:33:37:a4:98:25:d2:d3: b5:bf:25:53:49:c1:44:dc:95:cb:50:59:a7:1d:52: a3:55:a7:f4:d9:d0:80:d2:58:d9:f5:d6:c2:c3:21: 32:10:33:9c:d4:33:f7:d6:bf:08:fc:69:bb:0f:f6: 21:b8:77:8d:67:a3:b5:a9:35:a0:75:06:bd:dc:c2: d1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.208.0/23 Signature Algorithm: sha256WithRSAEncryption 76:f8:6c:44:7b:e2:7e:df:43:cd:9e:37:a6:81:7a:0b:cc:ac: 24:ac:16:3b:b7:20:4a:7d:c7:6a:f0:26:0c:3f:f9:9a:7e:42: 59:3e:17:8a:3f:b7:4b:90:63:9a:4e:1a:2b:1c:93:74:32:62: c4:82:93:81:5e:fb:7d:96:f1:47:94:88:e1:79:3d:9f:cb:66: 31:a6:b1:d8:48:f5:64:7f:be:1a:68:7b:f2:88:ec:b6:32:0a: 90:4f:c7:14:50:5f:94:da:47:3a:0d:01:fe:95:03:d2:73:1d: 7c:f0:12:c2:53:c9:17:d5:40:32:a5:dc:50:82:d4:15:6b:cb: 6e:1c:0a:70:d2:7e:44:d6:51:aa:2d:c4:30:a6:8e:02:cd:8f: d5:b6:24:a4:e2:42:4e:e0:a2:ee:84:8c:61:17:f2:b2:6b:85: e4:b9:d3:83:e1:89:6c:33:73:d6:ed:75:dc:98:a8:9a:28:c3: 39:ba:a9:82:d2:7b:fc:53:02:63:2c:6d:50:87:b7:28:4a:0b: 0c:b1:90:fb:e4:81:50:17:7e:5b:35:bd:4e:71:74:2d:0b:fe: f2:cd:11:91:d5:40:d7:92:d7:27:a8:6a:71:24:1d:3f:ad:88: 7b:00:43:ff:5e:07:fb:40:9e:27:78:d7:29:48:e1:73:98:51: 65:6d:0b:27 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUS4KzL0nbpBF16wlqAQDkMsslm3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMzUyM1oX DTI3MDUwMjAyNDAyM1owMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJD NzgwREFGNDRDRUZCNjQ3QzZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/G+9x0PLXJ/IOWF4sB5MRbP/3G1CoL9UBk/IE2Dkr224ZxISjaYdDa/2JB kVW4pxHeFMExtkm7oQE/fJV8I8qPQYFGbBHUcXvONIPOoHGicqNtEUeS6ETtE90B aa1nw0hkVB8A6/Yud35DgUUo+LTKryEcvJAXRsF1Yc7QdF1tf+z49/W2XgSUsPro K6RegIqh6FGU5dDsChojPVqi+Vy8iiwokxF3HuQDLNpMnekPUYs6c0r/eUP7PnEz N6SYJdLTtb8lU0nBRNyVy1BZpx1So1Wn9NnQgNJY2fXWwsMhMhAznNQz99a/CPxp uw/2Ibh3jWejtak1oHUGvdzC0U0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJwj+z6LhZYf1IvHgNr0TO+2R8bpMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YzY2I1MGIwLTQzY2MtNDhkMC05MWY0LTA1YmJkZTdhYzFkMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mM2NiNTBi MC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC85QzIzRkIzRThCODU5NjFG RDQ4QkM3ODBEQUY0NENFRkI2NDdDNkU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBbQMA0GCSqGSIb3DQEBCwUAA4IBAQB2+GxEe+J+30PNnjemgXoLzKwkrBY7 tyBKfcdq8CYMP/mafkJZPheKP7dLkGOaThorHJN0MmLEgpOBXvt9lvFHlIjheT2f y2YxprHYSPVkf74aaHvyiOy2MgqQT8cUUF+U2kc6DQH+lQPScx188BLCU8kX1UAy pdxQgtQVa8tuHApw0n5E1lGqLcQwpo4CzY/VtiSk4kJO4KLuhIxhF/Kya4XkudOD 4YlsM3PW7XXcmKiaKMM5uqmC0nv8UwJjLG1Qh7coSgsMsZD75IFQF35bNb1OcXQt C/7yzRGR1UDXktcnqGpxJB0/rYh7AEP/Xgf7QJ4neNcpSOFzmFFlbQsn -----END CERTIFICATE-----Generated at Tue May 12 22:45:30 2026 by rpki-client