$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer File: AD19D226489003F092B69D57F2AEE4849BC2F21F.cer (raw, json) Hash identifier: c1+tLbc5sBT+qqrZIvQSnRoSRKdEd+NU/o4BQr5jPAU= Subject key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 422CA817CF383A709B5DB1622AA1243FD78B25C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:46:27 +0000 Certificate not after: Sun 02 May 2027 00:51:27 +0000 Subordinate resources: IP: 160.25.52.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2c:a8:17:cf:38:3a:70:9b:5d:b1:62:2a:a1:24:3f:d7:8b:25:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:46:27 2026 GMT Not After : May 2 00:51:27 2027 GMT Subject: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:17:10:b0:2b:bf:20:aa:82:52:21:4d:78: 30:5d:92:53:91:d6:8c:d0:4e:df:2b:c0:dd:00:aa: 28:81:ef:1a:b8:f8:38:a2:f2:46:de:b7:86:d7:6b: 30:62:0f:0d:0d:d4:db:9d:a9:d6:a2:d4:d4:1c:f3: ac:ae:ce:d3:f7:28:47:16:3a:51:b9:74:c2:ef:3a: 92:79:4c:0e:9a:b1:df:e8:68:b2:bf:50:19:65:01: 59:13:b8:21:a8:80:0e:2e:13:7b:7c:ba:11:70:ed: d8:20:00:34:49:f0:e5:f5:fe:dc:d7:b0:f5:31:3e: f4:43:9c:cc:e2:12:f9:eb:c8:db:3f:83:37:81:2b: b3:b4:09:8d:fc:e9:87:ab:37:f1:37:db:17:b1:86: 00:27:5f:b1:c5:8b:83:c4:49:a6:b0:ed:09:4b:dc: 17:f5:6e:43:fa:e7:3f:9d:53:9b:1b:3f:29:0d:f6: a9:f2:0d:d3:40:dd:91:30:8f:4b:a9:f1:a5:87:46: 0a:e6:37:5d:6c:40:61:cb:91:02:3c:7f:4c:b4:90: 78:25:80:4d:3e:a3:30:49:26:4a:0a:91:fe:55:27: 7d:fd:c6:d8:5e:f9:e1:24:39:c7:7d:5e:ab:79:98: 0f:4c:ba:37:17:d4:fa:f1:01:e0:b4:2c:c7:da:94: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.52.0/23 Signature Algorithm: sha256WithRSAEncryption 65:ea:4a:fb:03:fb:bb:e1:25:4f:76:9c:6f:2a:3e:4f:4d:fa: 9b:c6:8a:6f:09:20:1d:70:34:01:02:6b:f7:02:3b:2f:f1:fd: 8d:c5:23:b0:52:8b:1d:7b:e1:7a:78:ee:be:2c:bc:b6:4c:79: a0:9b:25:00:32:fd:ec:98:26:eb:e0:f0:f8:4b:92:8e:36:75: a0:47:9e:25:1c:ba:a3:b8:6a:72:e2:a6:46:7e:a7:11:03:24: dd:65:d4:15:e7:11:61:4e:82:03:24:17:06:90:93:dd:5e:73: ed:e7:60:6c:b1:12:db:bb:50:1b:cb:0e:9c:34:4d:96:ba:c0: f8:9e:f5:63:65:75:8b:31:c5:8f:46:e9:86:ed:ab:57:86:56: 51:08:f0:1a:e8:f9:0f:bf:f2:b6:fd:cc:8b:a5:f7:00:a6:5c: a9:53:12:1e:99:ee:48:cf:c1:95:18:31:1a:9d:ad:9c:0c:52: 44:53:30:fa:62:09:28:cb:cf:f2:0e:8f:00:1a:95:8c:3c:84: aa:a8:cc:58:ae:81:fb:3f:6c:cf:0c:fb:72:d9:90:11:e1:20: 86:61:19:40:15:13:c2:65:ff:2b:55:97:24:94:78:a4:b4:58: 3d:4f:fc:6e:92:94:4f:c4:5b:7b:51:08:87:39:4f:5c:a7:c7: 75:9f:51:59 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQiyoF884OnCbXbFiKqEkP9eLJcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNDYyN1oX DTI3MDUwMjAwNTEyN1owMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5 RDU3RjJBRUU0ODQ5QkMyRjIxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbeFxCwK78gqoJSIU14MF2SU5HWjNBO3yvA3QCqKIHvGrj4OKLyRt63htdr MGIPDQ3U252p1qLU1BzzrK7O0/coRxY6Ubl0wu86knlMDpqx3+hosr9QGWUBWRO4 IaiADi4Te3y6EXDt2CAANEnw5fX+3New9TE+9EOczOIS+evI2z+DN4Ers7QJjfzp h6s38TfbF7GGACdfscWLg8RJprDtCUvcF/VuQ/rnP51Tmxs/KQ32qfIN00DdkTCP S6nxpYdGCuY3XWxAYcuRAjx/TLSQeCWATT6jMEkmSgqR/lUnff3G2F754SQ5x31e q3mYD0y6NxfU+vEB4LQsx9qUngsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK0Z0iZIkAPwkradV/Ku5ISbwvIfMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYzYjE3ODU3LWJlM2QtNDEzMi04ZjE5LTEwODM2ZjQwODU0Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82M2IxNzg1 Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9BRDE5RDIyNjQ4OTAwM0Yw OTJCNjlENTdGMkFFRTQ4NDlCQzJGMjFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBk0MA0GCSqGSIb3DQEBCwUAA4IBAQBl6kr7A/u74SVPdpxvKj5PTfqbxopv CSAdcDQBAmv3Ajsv8f2NxSOwUosde+F6eO6+LLy2THmgmyUAMv3smCbr4PD4S5KO NnWgR54lHLqjuGpy4qZGfqcRAyTdZdQV5xFhToIDJBcGkJPdXnPt52BssRLbu1Ab yw6cNE2WusD4nvVjZXWLMcWPRumG7atXhlZRCPAa6PkPv/K2/cyLpfcAplypUxIe me5Iz8GVGDEana2cDFJEUzD6Ygkoy8/yDo8AGpWMPISqqMxYroH7P2zPDPty2ZAR 4SCGYRlAFRPCZf8rVZcklHiktFg9T/xukpRPxFt7UQiHOU9cp8d1n1FZ -----END CERTIFICATE-----Generated at Tue May 12 22:39:24 2026 by rpki-client