$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer File: B541FB748CDF5380966403C9C7E8FA328AAC723A.cer (raw, json) Hash identifier: CoStMOLPHTyk3aWmuRQu2eYP2A+mYxBdyGztuZtETD4= Subject key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 789E565D73D21AF8A57C5E106A13D2AF87B3A895 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:21:59 +0000 Certificate not after: Sun 02 May 2027 01:26:59 +0000 Subordinate resources: IP: 160.191.130.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9e:56:5d:73:d2:1a:f8:a5:7c:5e:10:6a:13:d2:af:87:b3:a8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:21:59 2026 GMT Not After : May 2 01:26:59 2027 GMT Subject: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:d4:0f:2d:5f:17:e4:70:30:8b:0e:01:15: 0f:9a:3e:9b:88:9f:01:5a:2d:f3:4f:05:9c:81:1a: 93:c9:85:b1:e4:3a:b4:0d:03:d7:86:16:a2:eb:c7: 6c:6b:0d:0d:13:54:e2:f0:7a:2b:17:63:f7:ec:e7: 4b:b9:46:d5:80:bb:2b:82:6d:be:87:24:47:89:11: c4:9e:0e:d7:63:e6:56:f6:00:7f:92:08:ce:98:cb: a9:98:d2:e4:96:9c:2a:80:40:38:14:69:a0:fd:c8: 73:ce:2b:54:f4:12:cc:cc:e1:f7:53:71:8f:6b:d4: 59:94:8f:d5:0a:b4:4f:f7:f2:1a:d3:f9:fa:99:c5: 3b:c7:27:3f:61:76:47:78:ab:23:40:21:2e:58:30: 76:8f:ed:94:f9:c3:26:4d:09:9c:d1:75:59:75:72: d5:d5:4e:ff:13:ca:85:c7:6e:bd:a3:0b:af:39:69: 70:fc:94:f2:e3:a5:62:32:92:59:4e:3c:c2:f3:7c: a6:fe:2f:93:69:40:33:13:d9:1a:fa:f1:32:6e:f3: c7:ed:2e:58:d4:bd:ad:97:a0:3e:74:13:bc:c7:39: 62:52:e1:ba:6b:1b:24:2a:1f:ae:0f:5f:29:81:0c: cf:09:65:b0:03:c5:fc:63:f6:c3:49:58:41:be:42: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.130.0/23 Signature Algorithm: sha256WithRSAEncryption 61:1e:c1:c8:31:49:06:76:d8:93:c5:a7:26:e5:4b:4b:0e:91: f1:99:45:94:d7:0b:f5:8f:21:90:07:2a:34:28:4d:ed:52:49: 0a:bc:5f:0b:d1:f2:c4:27:1a:d1:f0:7c:56:d2:e6:84:6d:43: 14:e7:1d:a7:41:46:b5:5d:f4:18:53:b9:ee:12:48:96:be:e8: 4e:79:f0:65:4d:ee:43:c4:2e:0c:4b:18:7b:1f:e2:7b:da:1f: 9a:55:55:b9:d4:14:30:75:49:9a:49:0b:cc:95:aa:8b:d3:c7: 33:14:8b:94:4d:2a:d1:40:d5:b4:80:ad:a8:db:bf:72:99:9f: a9:56:7b:5b:6e:98:8c:4e:7d:b5:36:39:30:07:30:24:63:05: fb:f5:0b:c6:f6:a0:16:d7:0a:2e:f6:5a:42:a8:23:af:c4:8f: 8d:87:40:2f:79:c7:bd:39:ab:3a:ad:5e:ea:5c:91:09:2c:e1: 4e:63:66:c1:3b:e3:ac:88:5d:dd:e8:2e:5b:bb:6c:62:43:a9: 3f:34:04:6c:8d:ed:d4:5a:91:a2:e7:0e:9b:fd:c0:1a:da:fa: d4:7e:13:ff:80:a5:96:4f:84:49:71:bb:04:a8:86:46:c6:11: 72:f7:f4:48:b3:23:3c:9e:44:c5:ed:c4:29:26:fd:a2:c9:5b: 1e:1f:32:16 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeJ5WXXPSGvilfF4QahPSr4ezqJUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjE1OVoX DTI3MDUwMjAxMjY1OVowMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQw M0M5QzdFOEZBMzI4QUFDNzIzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJnk1A8tXxfkcDCLDgEVD5o+m4ifAVot808FnIEak8mFseQ6tA0D14YWouvH bGsNDRNU4vB6Kxdj9+znS7lG1YC7K4JtvockR4kRxJ4O12PmVvYAf5IIzpjLqZjS 5JacKoBAOBRpoP3Ic84rVPQSzMzh91Nxj2vUWZSP1Qq0T/fyGtP5+pnFO8cnP2F2 R3irI0AhLlgwdo/tlPnDJk0JnNF1WXVy1dVO/xPKhcduvaMLrzlpcPyU8uOlYjKS WU48wvN8pv4vk2lAMxPZGvrxMm7zx+0uWNS9rZegPnQTvMc5YlLhumsbJCofrg9f KYEMzwllsAPF/GP2w0lYQb5CGlsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLVB+3SM31OAlmQDycfo+jKKrHI6MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk5Mzg5NWUyLTQwMjAtNGMzZi05ODdmLWRhY2RmOGU4ZWEyOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85OTM4OTVl Mi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC9CNTQxRkI3NDhDREY1Mzgw OTY2NDAzQzlDN0U4RkEzMjhBQUM3MjNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoL+CMA0GCSqGSIb3DQEBCwUAA4IBAQBhHsHIMUkGdtiTxacm5UtLDpHxmUWU 1wv1jyGQByo0KE3tUkkKvF8L0fLEJxrR8HxW0uaEbUMU5x2nQUa1XfQYU7nuEkiW vuhOefBlTe5DxC4MSxh7H+J72h+aVVW51BQwdUmaSQvMlaqL08czFIuUTSrRQNW0 gK2o279ymZ+pVntbbpiMTn21NjkwBzAkYwX79QvG9qAW1wou9lpCqCOvxI+Nh0Av ece9Oas6rV7qXJEJLOFOY2bBO+OsiF3d6C5bu2xiQ6k/NARsje3UWpGi5w6b/cAa 2vrUfhP/gKWWT4RJcbsEqIZGxhFy9/RIsyM8nkTF7cQpJv2iyVseHzIW -----END CERTIFICATE-----Generated at Tue May 12 22:02:43 2026 by rpki-client