$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer File: B21220A1275D5022DC1E3390AF8C0FB01FC643C1.cer (raw, json) Hash identifier: G55RpVCPJKRHy/rxGFLX5KCQLrVQ7XpAu+Vff7GvkHg= Subject key identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 23A10C4370D6558DEC7FF0CAE33D775F45334366 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:06:05 +0000 Certificate not after: Sun 02 May 2027 01:11:05 +0000 Subordinate resources: IP: 157.20.90.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a1:0c:43:70:d6:55:8d:ec:7f:f0:ca:e3:3d:77:5f:45:33:43:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:06:05 2026 GMT Not After : May 2 01:11:05 2027 GMT Subject: CN=B21220A1275D5022DC1E3390AF8C0FB01FC643C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:16:bc:1e:54:ad:57:fd:f2:d5:d4:e9:f7: 3d:0f:ce:0d:84:32:a5:11:b0:c3:e0:1d:a3:c9:05: 06:df:e7:17:44:5b:2f:8f:90:06:b1:99:bd:40:b0: ab:1e:64:75:4c:9a:f5:93:64:97:dc:70:96:1f:86: c9:a1:7c:6a:e7:6c:ed:0a:b9:e9:1f:02:eb:7b:64: ac:78:d3:a2:f7:25:99:85:63:df:dc:48:5c:f7:5a: 99:66:34:50:b5:2d:65:24:09:63:db:a5:24:f8:ed: a3:03:8d:cc:7b:a8:78:b0:b7:ea:b2:bd:ab:0c:c2: 32:bc:9a:da:52:df:29:a8:09:e1:13:3b:a0:d6:4c: b3:e4:44:0e:22:fd:e5:08:c3:ca:fa:8d:70:ee:d4: ec:c7:c0:0e:15:dd:60:c1:93:d1:d6:89:26:fb:98: 3c:92:55:e3:35:6a:50:62:2b:ed:7a:63:33:4e:da: a1:f8:ef:a0:e1:dd:5c:4f:b7:03:9d:e5:70:f1:99: 06:4d:06:37:50:98:59:6a:17:5f:c8:e5:09:f3:16: 48:0a:21:56:1a:ab:fe:38:0e:ef:63:ca:d6:c0:9d: 42:fe:f2:e7:64:34:e1:13:9f:fc:3c:65:ad:1b:4e: 15:a8:96:b7:23:8d:3d:bf:8e:74:dc:68:c7:64:cb: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:12:20:A1:27:5D:50:22:DC:1E:33:90:AF:8C:0F:B0:1F:C6:43:C1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/B21220A1275D5022DC1E3390AF8C0FB01FC643C1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.90.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:ec:b7:6a:e9:24:90:89:ac:7c:6a:5d:e2:7f:7b:ca:ce:65: 6f:26:76:f8:96:ab:bf:af:57:4b:4f:cf:60:70:52:8f:4d:c6: c3:f3:b2:35:a1:d1:e4:2f:08:3a:53:da:55:18:7d:cb:63:e1: a6:63:21:0e:be:75:d2:27:35:3f:60:01:07:92:d8:3b:77:5a: e3:f1:b4:19:35:39:7d:d7:9f:08:e2:1a:7d:09:8c:fe:21:db: 06:bf:82:4c:38:02:9b:b2:cf:9e:06:93:88:d3:ec:47:df:82: c8:af:8e:a0:ae:bf:20:9d:a7:8d:a5:57:94:a4:cc:fd:74:a2: 5b:40:6f:d3:a0:09:91:de:61:8f:12:6f:ea:7b:1d:83:ab:32: e6:58:65:e6:05:26:17:8c:50:d0:03:69:97:e8:b6:f6:76:3d: d3:bb:8d:a8:29:ef:fd:91:09:1b:a5:33:71:ec:c1:47:bc:23: 21:a6:c8:35:ef:b9:ca:0a:6b:46:f3:f7:99:5c:6b:d5:60:5f: 31:c1:b2:eb:ca:28:44:46:8f:9c:0d:cb:b7:71:c7:b7:f3:45: 88:d9:5d:bc:3d:37:6b:c2:a8:e3:a8:3b:3b:e3:59:61:04:e5: ce:23:22:f4:89:97:1c:41:2e:26:3d:43:e5:f1:ac:5e:8f:84: a1:12:38:48 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUI6EMQ3DWVY3sf/DK4z13X0UzQ2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDYwNVoX DTI3MDUwMjAxMTEwNVowMzExMC8GA1UEAxMoQjIxMjIwQTEyNzVENTAyMkRDMUUz MzkwQUY4QzBGQjAxRkM2NDNDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlBFrweVK1X/fLV1On3PQ/ODYQypRGww+Ado8kFBt/nF0RbL4+QBrGZvUCw qx5kdUya9ZNkl9xwlh+GyaF8auds7Qq56R8C63tkrHjTovclmYVj39xIXPdamWY0 ULUtZSQJY9ulJPjtowONzHuoeLC36rK9qwzCMrya2lLfKagJ4RM7oNZMs+REDiL9 5QjDyvqNcO7U7MfADhXdYMGT0daJJvuYPJJV4zVqUGIr7XpjM07aofjvoOHdXE+3 A53lcPGZBk0GN1CYWWoXX8jlCfMWSAohVhqr/jgO72PK1sCdQv7y52Q04ROf/Dxl rRtOFaiWtyONPb+OdNxox2TLAl0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLISIKEnXVAi3B4zkK+MD7AfxkPBMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwODg2NDhmLTVlMGItNDMzOC05MTFjLTlkNjQ2N2IwMGEzZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MDg4NjQ4 Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC9CMjEyMjBBMTI3NUQ1MDIy REMxRTMzOTBBRjhDMEZCMDFGQzY0M0MxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRRaMA0GCSqGSIb3DQEBCwUAA4IBAQBe7Ldq6SSQiax8al3if3vKzmVvJnb4 lqu/r1dLT89gcFKPTcbD87I1odHkLwg6U9pVGH3LY+GmYyEOvnXSJzU/YAEHktg7 d1rj8bQZNTl9158I4hp9CYz+IdsGv4JMOAKbss+eBpOI0+xH34LIr46grr8gnaeN pVeUpMz9dKJbQG/ToAmR3mGPEm/qex2DqzLmWGXmBSYXjFDQA2mX6Lb2dj3Tu42o Ke/9kQkbpTNx7MFHvCMhpsg177nKCmtG8/eZXGvVYF8xwbLryihERo+cDcu3cce3 80WI2V28PTdrwqjjqDs741lhBOXOIyL0iZccQS4mPUPl8axej4ShEjhI -----END CERTIFICATE-----Generated at Tue May 12 22:02:49 2026 by rpki-client