$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer File: 9C7034B698C7FF4F82CC082FF9330FF137728D54.cer (raw, json) Hash identifier: RSjCW7oQ07Bj6wZWOUpZSaO9jnrlZVSxA7xD1VT9/AQ= Subject key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 08F779B5D06CE9D7EB88C5C8D1752F2BC5C6145F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft caRepository: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:28:49 +0000 Certificate not after: Sun 02 May 2027 00:33:49 +0000 Subordinate resources: IP: 160.25.50.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f7:79:b5:d0:6c:e9:d7:eb:88:c5:c8:d1:75:2f:2b:c5:c6:14:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:28:49 2026 GMT Not After : May 2 00:33:49 2027 GMT Subject: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:fe:9d:90:b8:13:ba:de:16:85:c7:31:d4: fb:07:b8:fc:04:fd:4e:a7:28:d3:2e:72:fa:33:7f: 0c:0f:20:97:12:ec:e8:fa:af:a6:ee:07:57:c0:2d: ec:a9:c4:57:53:f4:54:df:1f:c5:ca:c4:e9:d7:0b: a3:6c:c4:2f:81:14:9d:e6:f4:1c:8e:74:cc:bf:f9: 0f:e4:49:73:7b:63:d4:65:33:26:fc:5e:38:d0:e3: e8:a7:16:b3:97:3b:da:d4:bf:3e:d0:f9:7f:6e:86: db:a3:c9:ae:2d:e0:2b:de:3b:b9:1a:8e:dc:1a:ec: db:ad:52:cd:e8:64:42:d4:d7:be:d6:be:c2:5f:b0: e8:08:65:61:ec:01:9a:61:e0:a4:7d:e1:83:76:ed: 51:68:3c:f3:d6:52:63:e7:32:27:12:df:8a:b5:6c: ce:30:eb:a8:18:6f:18:9c:87:01:06:4a:9c:16:90: fc:ab:0f:d0:63:90:e6:34:46:d4:4e:c0:26:4c:54: 23:97:bd:1a:01:52:f9:8c:3d:4a:a7:ea:05:29:2a: 3c:bd:02:bd:6a:94:25:bb:37:5a:e7:51:97:2a:de: c0:f7:2d:bc:0c:30:1d:89:23:f6:f7:2d:f8:9c:61: 86:6e:1b:b3:a3:75:7f:a1:03:25:b4:56:24:b1:6a: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.50.0/23 Signature Algorithm: sha256WithRSAEncryption 99:42:4a:6d:15:d9:7e:e1:48:74:6f:fe:f5:6b:d6:c5:1d:e2: 1f:01:24:59:fa:fa:80:95:1c:1c:99:31:cd:57:34:70:fa:88: bd:7e:71:d4:23:83:47:57:bb:61:85:fc:78:08:a3:ae:ae:49: 96:23:d5:d0:2a:5e:8a:63:93:b8:e9:77:c3:d4:1f:d1:15:a9: b9:ae:95:28:db:19:59:44:b0:e7:82:26:23:cc:d5:17:55:a9: 87:79:bb:75:cf:b6:93:54:49:da:a5:f0:0a:dc:b0:1d:a3:02: a7:33:b8:f9:47:96:8e:4c:48:20:09:12:6f:db:03:3c:89:16: 5a:f6:57:7d:e3:66:aa:cb:c7:2b:4d:cc:f0:cc:02:bd:66:3b: 35:72:15:4c:c0:72:fe:ee:34:31:81:c2:16:94:e7:94:10:67: 5a:ad:41:02:32:4c:0f:02:6c:91:d7:f7:98:e4:b0:da:f2:26: 37:99:cd:1e:34:0d:44:f0:74:eb:9c:6c:1c:89:1e:1d:21:1a: f7:ad:9b:07:b7:f1:63:83:02:f0:ee:3f:a1:d8:ca:7d:8c:89: 58:76:32:a3:63:d0:1e:e2:fb:68:9f:6d:10:8d:6c:42:07:3e: 77:80:32:d1:1f:4e:23:0a:bd:5d:10:95:9d:e2:ad:63:0f:2b: ec:f9:f7:d4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCPd5tdBs6dfriMXI0XUvK8XGFF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjg0OVoX DTI3MDUwMjAwMzM0OVowMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0Mw ODJGRjkzMzBGRjEzNzcyOEQ1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmw/p2QuBO63haFxzHU+we4/AT9Tqco0y5y+jN/DA8glxLs6Pqvpu4HV8At 7KnEV1P0VN8fxcrE6dcLo2zEL4EUneb0HI50zL/5D+RJc3tj1GUzJvxeONDj6KcW s5c72tS/PtD5f26G26PJri3gK947uRqO3Brs261SzehkQtTXvta+wl+w6AhlYewB mmHgpH3hg3btUWg889ZSY+cyJxLfirVszjDrqBhvGJyHAQZKnBaQ/KsP0GOQ5jRG 1E7AJkxUI5e9GgFS+Yw9SqfqBSkqPL0CvWqUJbs3WudRlyrewPctvAwwHYkj9vct +Jxhhm4bs6N1f6EDJbRWJLFqEKkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJxwNLaYx/9PgswIL/kzD/E3co1UMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ5ZWNhNTBiLTU3MjItNDkxOC04MzE0LTg1OWQzYzFmNTVhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80OWVjYTUw Yi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC85QzcwMzRCNjk4QzdGRjRG ODJDQzA4MkZGOTMzMEZGMTM3NzI4RDU0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBkyMA0GCSqGSIb3DQEBCwUAA4IBAQCZQkptFdl+4Uh0b/71a9bFHeIfASRZ +vqAlRwcmTHNVzRw+oi9fnHUI4NHV7thhfx4CKOurkmWI9XQKl6KY5O46XfD1B/R Fam5rpUo2xlZRLDngiYjzNUXVamHebt1z7aTVEnapfAK3LAdowKnM7j5R5aOTEgg CRJv2wM8iRZa9ld942aqy8crTczwzAK9Zjs1chVMwHL+7jQxgcIWlOeUEGdarUEC MkwPAmyR1/eY5LDa8iY3mc0eNA1E8HTrnGwciR4dIRr3rZsHt/FjgwLw7j+h2Mp9 jIlYdjKjY9Ae4vton20QjWxCBz53gDLRH04jCr1dEJWd4q1jDyvs+ffU -----END CERTIFICATE-----Generated at Wed May 13 01:07:12 2026 by rpki-client