$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer File: A7FB244B07B590E887183B90A5F474AF8A740E0D.cer (raw, json) Hash identifier: NATpWl/hk0sghhA6zPCF54ScTqd+OrkENSFzvzFS7PE= Subject key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 61B34187FE3BD76BDF5F2A1AD1B42D5103386FC1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:05:37 +0000 Certificate not after: Sun 02 May 2027 00:10:37 +0000 Subordinate resources: IP: 160.191.64.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b3:41:87:fe:3b:d7:6b:df:5f:2a:1a:d1:b4:2d:51:03:38:6f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:05:37 2026 GMT Not After : May 2 00:10:37 2027 GMT Subject: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:0c:ef:bc:7c:53:5a:11:2e:75:f7:c7:15: a8:16:78:7a:13:de:68:56:ea:d0:fc:79:56:22:8f: 6d:29:3a:41:c0:c0:fb:65:3a:d8:84:9f:ad:b7:74: 29:bb:9e:23:d9:b7:ba:98:eb:b4:16:ef:0e:ca:de: ef:e6:f9:11:d7:a5:6c:b3:50:d7:fa:96:bd:f8:f0: 31:b8:0f:e6:e0:2a:af:c3:04:ae:d4:a7:f7:e4:f7: f2:68:cc:f8:38:c2:57:6f:c0:3f:88:45:62:3c:2d: dc:f2:67:1c:d1:80:76:62:9d:a5:26:42:e0:e7:00: 4c:fc:ba:93:a2:ee:22:a0:46:dd:3c:a9:40:9a:31: c3:bb:80:91:80:32:02:a1:57:0b:d9:21:33:f6:30: 97:8d:7d:ed:93:9e:27:3c:16:ed:46:f4:a1:7f:6d: 85:85:fd:1a:c2:18:9f:fa:d1:f7:96:9c:77:ba:be: 72:9c:0a:fd:11:7d:54:67:2e:ec:36:03:55:7c:27: a3:1f:5e:55:ca:69:8b:68:62:68:df:7b:58:87:f4: 17:1b:d6:ef:64:dc:f1:92:33:b8:46:4e:7c:5c:97: dc:cb:35:d9:05:d1:2b:92:70:40:d6:6c:1e:0a:c4: a9:3b:79:d1:18:9c:1a:bb:87:95:83:cd:d7:2a:c3: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.64.0/23 Signature Algorithm: sha256WithRSAEncryption 57:00:75:54:22:bc:88:5b:e0:56:3c:dd:c0:07:d7:1d:29:75: 77:62:6e:56:94:72:83:4c:31:15:7a:57:f0:b2:85:1e:54:5a: b9:db:cc:d0:d5:fc:7d:ff:f7:ed:14:c3:1c:b3:75:c6:ca:66: fc:77:19:c1:d0:00:2c:4f:d6:d7:e2:6d:97:18:0b:de:93:95: b6:bc:70:8b:54:46:8f:ec:d9:88:d8:5e:3f:61:47:ec:fb:bd: 5e:cd:17:a9:35:b2:a9:9d:ff:ba:1a:eb:31:cf:06:c0:59:38: f4:c0:30:dd:49:e8:94:96:f7:dd:30:bb:67:8d:be:a2:05:63: 62:40:19:71:0a:fb:30:19:78:4d:e2:89:54:37:3a:a4:c5:77: 22:97:34:f3:f6:aa:65:4a:3a:d7:c8:31:33:77:38:f3:e5:d0: 01:a5:99:c5:26:08:6c:00:ae:bb:95:7a:5a:49:ba:08:1f:8a: 7a:06:69:ba:de:26:96:5f:d7:ab:e1:97:f0:c4:02:00:b8:06: 74:d7:6d:d1:27:89:1c:5f:ed:b4:80:21:d6:8a:52:27:68:4b: 79:d2:d3:df:05:07:51:05:a3:bd:40:5e:89:74:7f:e4:0f:53: 75:90:06:09:5c:99:36:2e:21:f6:cd:c8:34:88:5e:79:40:aa: 6f:ab:27:82 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYbNBh/4712vfXyoa0bQtUQM4b8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDUzN1oX DTI3MDUwMjAwMTAzN1owMzExMC8GA1UEAxMoQTdGQjI0NEIwN0I1OTBFODg3MTgz QjkwQTVGNDc0QUY4QTc0MEUwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5BDO+8fFNaES5198cVqBZ4ehPeaFbq0Px5ViKPbSk6QcDA+2U62ISfrbd0 KbueI9m3upjrtBbvDsre7+b5EdelbLNQ1/qWvfjwMbgP5uAqr8MErtSn9+T38mjM +DjCV2/AP4hFYjwt3PJnHNGAdmKdpSZC4OcATPy6k6LuIqBG3TypQJoxw7uAkYAy AqFXC9khM/Ywl4197ZOeJzwW7Ub0oX9thYX9GsIYn/rR95acd7q+cpwK/RF9VGcu 7DYDVXwnox9eVcppi2hiaN97WIf0FxvW72Tc8ZIzuEZOfFyX3Ms12QXRK5JwQNZs HgrEqTt50RicGruHlYPN1yrDXEsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKf7JEsHtZDohxg7kKX0dK+KdA4NMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI4MmE5YmQ5LTE2NmYtNDUzZS1iM2MwLWU2YjNlZjkyYTU0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yODJhOWJk OS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BN0ZCMjQ0QjA3QjU5MEU4 ODcxODNCOTBBNUY0NzRBRjhBNzQwRTBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoL9AMA0GCSqGSIb3DQEBCwUAA4IBAQBXAHVUIryIW+BWPN3AB9cdKXV3Ym5W lHKDTDEVelfwsoUeVFq528zQ1fx9//ftFMMcs3XGymb8dxnB0AAsT9bX4m2XGAve k5W2vHCLVEaP7NmI2F4/YUfs+71ezRepNbKpnf+6GusxzwbAWTj0wDDdSeiUlvfd MLtnjb6iBWNiQBlxCvswGXhN4olUNzqkxXcilzTz9qplSjrXyDEzdzjz5dABpZnF JghsAK67lXpaSboIH4p6Bmm63iaWX9er4ZfwxAIAuAZ0123RJ4kcX+20gCHWilIn aEt50tPfBQdRBaO9QF6JdH/kD1N1kAYJXJk2LiH2zcg0iF55QKpvqyeC -----END CERTIFICATE-----Generated at Tue May 12 22:32:31 2026 by rpki-client