$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer (raw, json) Hash identifier: 5A5CnfYJvge+wAnY+JNPFX6B4ERzolbh5MkVGr3/zcA= Subject key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2F3B471B5D5A87948B54E3DC5E45DD015A675B70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft caRepository: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:17 +0000 Certificate not after: Sun 02 May 2027 00:28:17 +0000 Subordinate resources: IP: 160.25.249.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3b:47:1b:5d:5a:87:94:8b:54:e3:dc:5e:45:dd:01:5a:67:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:23:17 2026 GMT Not After : May 2 00:28:17 2027 GMT Subject: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:ca:21:87:0e:1d:8d:3d:79:8f:07:8e:f0: 80:ac:ad:0c:bd:fa:45:f0:db:19:e0:1d:d6:f2:da: 57:6b:c0:a7:ef:1b:e4:71:09:c5:c3:c6:7c:8b:30: 8c:fa:87:9a:ae:c7:2d:8e:50:c4:68:0c:31:b1:68: af:37:29:fb:dc:af:63:ef:31:a2:e8:ff:86:a4:3e: f6:ef:7d:49:57:e8:41:40:8f:a5:3e:d7:76:5e:ac: 09:52:99:50:aa:96:49:cd:25:54:d6:e8:4d:fd:70: 69:7e:e7:c3:5f:2d:cc:6c:d9:b1:30:32:c3:dc:cc: d9:96:93:6e:57:32:3d:93:a2:79:7f:a3:c3:e4:51: 38:fe:03:eb:12:fe:9d:81:20:c4:22:b8:2a:87:90: 98:0e:9c:1c:05:b8:2b:6d:bc:58:4d:59:e7:17:0e: b8:a8:de:9d:88:11:ec:c9:f9:41:89:09:9b:ce:ce: 6d:e7:a2:e7:82:bc:c8:e8:68:fd:78:14:51:ab:41: df:a4:4a:0e:94:cb:12:e3:fe:0a:38:6a:94:65:86: 72:0f:53:18:43:12:fe:a5:b0:10:fa:fe:f7:9e:d9: 4c:f6:ce:5c:e2:5d:2b:96:09:2a:05:c2:ea:ee:73: 1f:a4:24:6e:0b:c5:9e:de:7b:55:7b:54:19:b1:3e: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.249.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:b7:1e:32:92:7e:c0:9b:13:a2:d8:78:a0:f0:7d:c6:59:69: 66:b0:d4:c9:f7:e3:f4:d5:c9:41:2d:6b:40:c8:08:8c:ac:71: 8a:19:f3:bc:4a:82:f4:54:8c:db:b5:b8:de:d9:e1:9b:0e:fe: c5:e9:4a:a0:dd:25:50:c7:86:af:41:d4:05:89:fe:ec:0b:a3: 46:f7:fa:e6:a8:05:87:60:54:92:76:fe:2d:46:c2:dc:48:66: 1e:44:5e:e4:00:e7:4e:4f:21:f1:76:84:2a:28:da:a9:f6:96: 11:2a:6f:3a:d8:d5:29:cc:c7:ea:93:84:66:4e:ab:73:5a:f9: 76:9e:24:ed:05:ea:f1:9d:43:38:62:2c:ac:d2:25:f0:db:4a: fb:ba:f5:89:07:16:34:77:fd:7e:fc:74:76:19:10:9d:c6:77: 06:35:53:32:13:0a:9d:c8:be:25:9f:8c:3e:9b:55:7b:79:69: 15:ec:58:02:0a:ba:29:ed:7f:5d:8a:1d:91:88:84:5a:c6:f0: e7:e9:cf:cc:18:bd:f1:dc:b8:eb:73:26:e0:ed:04:bb:67:89: cc:14:ed:a3:e1:e7:0f:63:fe:e1:98:ab:82:a1:57:92:31:83: 5b:99:4a:12:35:d9:cb:30:f9:9f:de:50:2a:d3:26:f6:27:f4: 17:11:79:79 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULztHG11ah5SLVOPcXkXdAVpnW3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjMxN1oX DTI3MDUwMjAwMjgxN1owMzExMC8GA1UEAxMoOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1 NDE3NEE4Q0ExQUQ2NzdCMzU2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALB0yiGHDh2NPXmPB47wgKytDL36RfDbGeAd1vLaV2vAp+8b5HEJxcPGfIsw jPqHmq7HLY5QxGgMMbForzcp+9yvY+8xouj/hqQ+9u99SVfoQUCPpT7Xdl6sCVKZ UKqWSc0lVNboTf1waX7nw18tzGzZsTAyw9zM2ZaTblcyPZOieX+jw+RROP4D6xL+ nYEgxCK4KoeQmA6cHAW4K228WE1Z5xcOuKjenYgR7Mn5QYkJm87Obeei54K8yOho /XgUUatB36RKDpTLEuP+CjhqlGWGcg9TGEMS/qWwEPr+957ZTPbOXOJdK5YJKgXC 6u5zH6QkbgvFnt57VXtUGbE+pd8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/7eRwJwqK/U89UF0qMoa1nezVkMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQxNDA1NTQ1LWMzNWQtNGRlMS05NjE4LTQ0YjVmNDE3YTMwMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MTQwNTU0 NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC85RkZCNzkxQzA5QzJBMkJG NTNDRjU0MTc0QThDQTFBRDY3N0IzNTY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBn5MA0GCSqGSIb3DQEBCwUAA4IBAQAdtx4ykn7AmxOi2Hig8H3GWWlmsNTJ 9+P01clBLWtAyAiMrHGKGfO8SoL0VIzbtbje2eGbDv7F6Uqg3SVQx4avQdQFif7s C6NG9/rmqAWHYFSSdv4tRsLcSGYeRF7kAOdOTyHxdoQqKNqp9pYRKm862NUpzMfq k4RmTqtzWvl2niTtBerxnUM4Yiys0iXw20r7uvWJBxY0d/1+/HR2GRCdxncGNVMy EwqdyL4ln4w+m1V7eWkV7FgCCrop7X9dih2RiIRaxvDn6c/MGL3x3Ljrcybg7QS7 Z4nMFO2j4ecPY/7hmKuCoVeSMYNbmUoSNdnLMPmf3lAq0yb2J/QXEXl5 -----END CERTIFICATE-----Generated at Tue May 12 22:03:41 2026 by rpki-client