$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer (raw, json) Hash identifier: mV9XP2R72fgXrZ4Ik2hhpPzlKN1jrIoBOZJ2chVp+Eo= Subject key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6EE548B754599A0973DF7EECD0533857EF6F3D4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:44:33 +0000 Certificate not after: Sun 02 May 2027 01:49:33 +0000 Subordinate resources: IP: 160.20.250.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e5:48:b7:54:59:9a:09:73:df:7e:ec:d0:53:38:57:ef:6f:3d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:44:33 2026 GMT Not After : May 2 01:49:33 2027 GMT Subject: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:52:f3:26:98:3d:cd:22:c4:5b:23:84:db: f7:c3:fb:da:a0:3d:e7:61:56:2a:41:dc:02:1b:5a: 6c:59:fa:64:46:4d:2f:4b:84:24:72:71:59:06:48: 1c:0e:87:1e:0e:fb:9a:68:3e:1e:a6:ef:21:c0:0b: e6:3b:9b:12:ce:db:a4:c2:de:b5:f7:ed:12:7f:11: ef:f6:55:1a:61:b7:fe:01:9b:c0:56:9d:65:bd:1f: 97:25:68:98:3f:38:42:e5:a1:fe:ee:28:bc:4e:99: b8:b1:73:3e:3e:46:83:49:a6:ca:6c:b2:7d:24:b5: 89:5c:fb:1f:3d:7e:b2:4b:ff:3f:18:3a:fc:f7:52: d3:a3:61:c8:a5:e4:fc:48:d7:7b:81:42:ae:0b:20: 80:e4:e2:a3:ae:b0:e2:43:cb:cc:d9:7b:dc:37:e0: 15:48:88:d2:c4:37:a6:f8:2c:9e:1e:83:e6:1f:20: 1f:b1:cc:71:35:d6:88:79:f3:bf:16:e5:3b:c4:39: 2a:f2:14:d4:1a:15:27:0b:0b:99:aa:11:a8:23:97: 48:a8:eb:9c:08:ea:a5:0a:d1:b6:3c:be:5b:68:ba: e1:eb:a8:60:1c:83:b4:5a:ea:9d:1e:a5:cb:5f:51: 34:0b:e6:49:87:fc:54:e7:1b:32:42:35:f2:c9:d8: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.250.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:18:e2:44:ce:8b:d9:d8:15:d6:c5:4c:db:da:cb:f3:c2:fc: 95:90:94:5b:78:e5:b9:61:ac:ea:ec:0b:9c:af:89:f4:22:f5: 3e:c8:93:b6:c9:30:5e:2e:72:37:31:55:8e:08:62:14:d0:bc: f7:1c:44:84:0c:28:48:20:f2:05:70:d3:fc:bb:c1:9a:36:03: 4d:53:cc:f1:7c:b7:cd:ed:aa:f5:4b:2d:d9:31:d9:c4:5b:65: 91:30:79:f1:77:e0:6b:da:fd:bf:53:b3:6a:79:3d:3d:90:2e: 53:18:e3:1f:49:c0:f1:94:d8:f6:97:0c:31:37:2f:1b:c3:7c: 1d:06:fe:c7:69:56:c0:10:d8:1d:7b:73:84:14:e7:2f:37:e9: 13:97:aa:f4:00:8f:f8:d0:51:76:0d:44:b5:83:51:2a:84:5f: 0b:ed:4e:4e:f6:e6:5c:2d:8c:3d:73:72:a6:e4:58:42:7e:d2: a2:26:4d:eb:49:b1:a8:4d:47:e4:2c:f9:51:ea:9b:47:96:94: d1:cc:a0:5f:aa:c1:3e:b2:44:c8:5e:3a:0d:0d:5b:6d:9d:bd: 4e:ff:b0:81:e9:b2:66:09:06:33:91:dc:9e:4c:aa:8a:24:31: 45:6a:e4:9b:b6:18:47:dc:44:e6:1c:f8:a9:f3:5d:5e:c0:f2: a6:ca:9a:19 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbuVIt1RZmglz337s0FM4V+9vPU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDQzM1oX DTI3MDUwMjAxNDkzM1owMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5 NTAxQTcyQkYxQ0JDNThERDk3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJaSUvMmmD3NIsRbI4Tb98P72qA952FWKkHcAhtabFn6ZEZNL0uEJHJxWQZI HA6HHg77mmg+HqbvIcAL5jubEs7bpMLetfftEn8R7/ZVGmG3/gGbwFadZb0flyVo mD84QuWh/u4ovE6ZuLFzPj5Gg0mmymyyfSS1iVz7Hz1+skv/Pxg6/PdS06NhyKXk /EjXe4FCrgsggOTio66w4kPLzNl73DfgFUiI0sQ3pvgsnh6D5h8gH7HMcTXWiHnz vxblO8Q5KvIU1BoVJwsLmaoRqCOXSKjrnAjqpQrRtjy+W2i64euoYByDtFrqnR6l y19RNAvmSYf8VOcbMkI18snYpNkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKN24jgsaup/xiWVAacr8cvFjdl3MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JiZWQ2ZGM0LWQzOGItNDRiYS05ZjBiLTQyODQ1NWIyNzZlZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYmVkNmRj NC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC9BMzc2RTIzODJDNkFFQTdG QzYyNTk1MDFBNzJCRjFDQkM1OEREOTc3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBT6MA0GCSqGSIb3DQEBCwUAA4IBAQBeGOJEzovZ2BXWxUzb2svzwvyVkJRb eOW5Yazq7Aucr4n0IvU+yJO2yTBeLnI3MVWOCGIU0Lz3HESEDChIIPIFcNP8u8Ga NgNNU8zxfLfN7ar1Sy3ZMdnEW2WRMHnxd+Br2v2/U7NqeT09kC5TGOMfScDxlNj2 lwwxNy8bw3wdBv7HaVbAENgde3OEFOcvN+kTl6r0AI/40FF2DUS1g1EqhF8L7U5O 9uZcLYw9c3Km5FhCftKiJk3rSbGoTUfkLPlR6ptHlpTRzKBfqsE+skTIXjoNDVtt nb1O/7CB6bJmCQYzkdyeTKqKJDFFauSbthhH3ETmHPip811ewPKmypoZ -----END CERTIFICATE-----Generated at Tue May 12 22:03:45 2026 by rpki-client