$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer File: A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.cer (raw, json) Hash identifier: vaqqI6N84UhasLW/sZtmafjw2olnySXsxwt5OchTHtI= Subject key identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4F81A137B23208F46725E9A141EFDEF6A7795803 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft caRepository: rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:24:08 +0000 Certificate not after: Sun 02 May 2027 00:29:08 +0000 Subordinate resources: IP: 160.25.58.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:81:a1:37:b2:32:08:f4:67:25:e9:a1:41:ef:de:f6:a7:79:58:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:24:08 2026 GMT Not After : May 2 00:29:08 2027 GMT Subject: CN=A2CABC2E52BF7E65FC501F07AC4834AC7772EE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:f7:1a:94:ec:c2:f6:e5:74:6d:0c:76:1f: c4:50:25:8b:78:e8:53:64:a4:97:d5:74:94:6e:41: f4:c6:39:b0:e6:76:77:83:06:36:81:ec:46:c4:b1: 39:a1:75:12:dd:3c:e8:a6:4f:6e:0a:ac:3f:39:42: 0f:30:e9:ed:ac:88:b7:f7:bd:2c:4c:48:f8:85:13: 06:cf:94:48:73:d0:f2:40:ff:bd:ef:a8:6f:8e:7c: 9d:26:63:cf:be:a1:27:60:60:e3:d4:8f:0d:fd:a0: 2f:6c:2d:a5:f7:5b:77:37:17:8b:04:82:ae:cb:8a: f7:4a:35:2d:06:e1:4b:3c:fb:be:a6:26:ff:50:be: e8:e0:f9:2e:60:27:57:17:72:a6:8e:dd:07:4b:8b: b3:67:f0:29:c9:a6:28:ab:b5:f6:06:f7:bb:5e:07: e7:38:55:04:61:36:76:42:b4:80:aa:87:a6:7c:c9: 86:05:c3:f4:1a:0f:9f:26:30:f3:38:9b:30:00:85: 20:9e:40:0f:b8:dc:01:fd:5d:b4:bc:5d:80:0f:0c: 45:17:37:91:eb:3f:26:0c:f2:fb:bb:62:dc:b0:04: 19:da:3e:e7:8f:16:ce:a6:c8:8a:7a:1c:82:9a:86: 7d:9e:af:36:cb:eb:5b:4c:67:f9:8a:ea:46:ad:cc: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:CA:BC:2E:52:BF:7E:65:FC:50:1F:07:AC:48:34:AC:77:72:EE:86 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/A2CABC2E52BF7E65FC501F07AC4834AC7772EE86.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.58.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:80:3e:4e:38:73:37:de:80:28:0c:1d:49:ff:e0:c2:04:37: 00:76:d9:7d:ac:b2:dd:4a:1c:7f:09:a6:19:78:51:85:a4:06: 9b:0b:f4:31:af:18:56:1e:f4:ec:f9:75:36:19:b4:20:4b:84: 8f:3d:13:b5:8b:c5:b8:f2:ff:e9:91:0b:80:79:ee:0f:05:9e: 71:27:77:7e:b0:52:ef:d1:3b:32:ca:80:17:24:07:bb:56:ed: f3:18:d5:85:5f:0e:03:ab:c8:3a:0f:29:71:f9:fc:8d:b4:32: d9:73:37:29:77:ca:2c:08:67:f8:dc:97:f3:86:3d:c2:c0:10: e4:0b:02:da:ce:51:06:8b:4d:0f:5e:2a:09:2f:02:6a:03:04: 63:7c:c2:7e:ac:76:97:8d:2c:41:18:6d:a8:ac:9b:2f:55:cb: 61:d4:e5:cc:8b:d4:97:a4:de:b5:4c:c4:1d:b4:b0:26:b8:88: db:a2:e9:4b:3d:a8:04:c0:70:7b:5d:4f:08:ea:28:44:ef:be: 40:9e:8e:73:d6:2e:f3:1f:e8:95:e0:e0:ce:0d:a2:5a:f5:60: 75:4b:4d:49:47:43:74:24:d4:90:82:3f:40:15:2e:ea:b4:09: 07:36:6a:96:0b:6b:ef:47:7f:1e:22:d0:d4:8c:c9:f7:18:b1: 1b:f8:fa:8b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUT4GhN7IyCPRnJemhQe/e9qd5WAMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjQwOFoX DTI3MDUwMjAwMjkwOFowMzExMC8GA1UEAxMoQTJDQUJDMkU1MkJGN0U2NUZDNTAx RjA3QUM0ODM0QUM3NzcyRUU4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWi9xqU7ML25XRtDHYfxFAli3joU2Skl9V0lG5B9MY5sOZ2d4MGNoHsRsSx OaF1Et086KZPbgqsPzlCDzDp7ayIt/e9LExI+IUTBs+USHPQ8kD/ve+ob458nSZj z76hJ2Bg49SPDf2gL2wtpfdbdzcXiwSCrsuK90o1LQbhSzz7vqYm/1C+6OD5LmAn Vxdypo7dB0uLs2fwKcmmKKu19gb3u14H5zhVBGE2dkK0gKqHpnzJhgXD9BoPnyYw 8zibMACFIJ5AD7jcAf1dtLxdgA8MRRc3kes/Jgzy+7ti3LAEGdo+548WzqbIinoc gpqGfZ6vNsvrW0xn+YrqRq3MrakCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKLKvC5Sv35l/FAfB6xINKx3cu6GMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQyZGFiNDZhLTA4NWUtNDQzMi05ODMzLTcxYjhkYjE0NGQ5NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MmRhYjQ2 YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9BMkNBQkMyRTUyQkY3RTY1 RkM1MDFGMDdBQzQ4MzRBQzc3NzJFRTg2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBk6MA0GCSqGSIb3DQEBCwUAA4IBAQArgD5OOHM33oAoDB1J/+DCBDcAdtl9 rLLdShx/CaYZeFGFpAabC/QxrxhWHvTs+XU2GbQgS4SPPRO1i8W48v/pkQuAee4P BZ5xJ3d+sFLv0TsyyoAXJAe7Vu3zGNWFXw4Dq8g6Dylx+fyNtDLZczcpd8osCGf4 3Jfzhj3CwBDkCwLazlEGi00PXioJLwJqAwRjfMJ+rHaXjSxBGG2orJsvVcth1OXM i9SXpN61TMQdtLAmuIjboulLPagEwHB7XU8I6ihE775Ano5z1i7zH+iV4ODODaJa 9WB1S01JR0N0JNSQgj9AFS7qtAkHNmqWC2vvR38eItDUjMn3GLEb+PqL -----END CERTIFICATE-----Generated at Tue May 12 22:39:10 2026 by rpki-client