$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer File: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer (raw, json) Hash identifier: 1zPva3ThFTi0upfvygiqPMoIHvEKOWNRLIF48fiSf/k= Subject key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7FF90A9D41FD9FB9FBC0F3744BDA52E97D024DED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:11:59 +0000 Certificate not after: Sun 02 May 2027 00:16:59 +0000 Subordinate resources: IP: 160.19.86.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f9:0a:9d:41:fd:9f:b9:fb:c0:f3:74:4b:da:52:e9:7d:02:4d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:11:59 2026 GMT Not After : May 2 00:16:59 2027 GMT Subject: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:e9:0d:8a:f1:49:1b:1e:97:c6:60:0f:e2: 12:9f:81:ff:cb:b1:30:59:c4:0d:f0:93:83:a5:bc: f1:6c:2a:a2:be:8c:28:8b:bd:f0:50:45:c8:82:2f: 51:c0:2d:b9:c9:3c:77:96:96:30:4f:34:24:6e:79: 23:06:72:9d:22:51:2e:a5:f5:05:a3:a0:03:84:24: 87:9a:90:3b:6f:d6:88:38:69:5f:d4:32:9b:c2:65: c8:2c:90:f7:86:ad:cd:4f:65:38:39:18:df:73:ed: 19:a7:5d:20:ee:94:39:77:77:b2:91:41:5b:b0:96: 3e:e2:5f:99:27:3f:ac:42:66:fe:26:7b:ed:1b:ce: 2f:76:ca:c1:df:38:d6:db:3f:e6:32:02:53:c8:8b: 64:4a:e3:fe:ab:15:d6:87:13:69:a1:ea:4a:33:9f: f9:ff:b5:d9:c5:33:77:1f:df:9e:f6:7a:69:35:46: f2:4c:96:e3:77:1e:5f:ca:83:cb:3c:64:1c:f6:8e: b0:ad:40:8b:68:16:cd:e9:fe:00:87:82:80:1f:6a: 65:ae:7a:20:67:be:81:58:00:1e:93:44:99:22:37: da:4a:24:3f:a0:73:ca:13:58:b7:22:cf:da:e6:4f: 72:98:08:b3:23:65:50:c7:ac:70:63:f0:79:cf:bd: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.86.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e8:60:9e:ec:d3:5b:f1:8c:69:14:6b:46:e1:d1:0e:8f:fa: e7:a7:11:40:57:5d:e8:9a:25:91:c8:45:b5:ac:75:b0:66:99: cb:a7:54:5f:15:ac:34:87:16:bc:41:34:2d:44:80:f9:ad:50: 70:85:46:c5:f9:93:93:55:2b:89:c9:aa:bc:5b:b9:85:bf:9f: 62:d8:41:c0:8c:07:82:0b:4e:e7:3d:54:f5:57:c4:ff:57:6e: d1:14:b4:4e:dd:6f:75:ff:77:9b:91:87:10:35:5b:71:29:4d: c9:d4:1a:2b:f9:0c:7f:d8:b5:4a:e7:cc:42:70:a3:73:fd:dc: 56:97:6c:80:67:fa:28:a8:27:11:fa:6d:2b:d2:20:31:ce:71: 95:61:97:a7:2a:84:c2:35:2b:d1:1c:2c:d4:4f:dc:bf:88:c2: da:60:ec:40:2c:8b:ec:04:04:e9:80:11:06:7d:1d:4a:34:a0: 47:ba:64:90:8e:70:3e:ea:6b:06:cb:11:4b:af:d0:bb:51:7f: cc:21:dc:98:56:ba:3d:b0:41:36:f3:08:9c:94:06:9d:3f:4b: db:01:e2:3a:0b:a6:28:39:dd:90:ad:f6:0f:9a:57:87:bb:63: 28:ca:2d:02:ff:b7:62:63:ec:f2:8b:fa:4e:a3:de:cc:7b:8d: 90:06:d6:d1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUf/kKnUH9n7n7wPN0S9pS6X0CTe0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMTE1OVoX DTI3MDUwMjAwMTY1OVowMzExMC8GA1UEAxMoQjc1Rjc2RERBMzVBQkZCREJBMzIw M0JFQ0I0RDA4QUE1MjgwMEQyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZZ6Q2K8UkbHpfGYA/iEp+B/8uxMFnEDfCTg6W88Wwqor6MKIu98FBFyIIv UcAtuck8d5aWME80JG55IwZynSJRLqX1BaOgA4Qkh5qQO2/WiDhpX9Qym8JlyCyQ 94atzU9lODkY33PtGaddIO6UOXd3spFBW7CWPuJfmSc/rEJm/iZ77RvOL3bKwd84 1ts/5jICU8iLZErj/qsV1ocTaaHqSjOf+f+12cUzdx/fnvZ6aTVG8kyW43ceX8qD yzxkHPaOsK1Ai2gWzen+AIeCgB9qZa56IGe+gVgAHpNEmSI32kokP6BzyhNYtyLP 2uZPcpgIsyNlUMescGPwec+9InsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLdfdt2jWr+9ujIDvstNCKpSgA0oMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMxNDRkOTdhLWUzZmItNGZmYy1iN2Y3LWY3YjhiNjY1OWFjNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMTQ0ZDk3 YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC9CNzVGNzZEREEzNUFCRkJE QkEzMjAzQkVDQjREMDhBQTUyODAwRDI4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBNWMA0GCSqGSIb3DQEBCwUAA4IBAQCa6GCe7NNb8YxpFGtG4dEOj/rnpxFA V13omiWRyEW1rHWwZpnLp1RfFaw0hxa8QTQtRID5rVBwhUbF+ZOTVSuJyaq8W7mF v59i2EHAjAeCC07nPVT1V8T/V27RFLRO3W91/3ebkYcQNVtxKU3J1Bor+Qx/2LVK 58xCcKNz/dxWl2yAZ/ooqCcR+m0r0iAxznGVYZenKoTCNSvRHCzUT9y/iMLaYOxA LIvsBATpgBEGfR1KNKBHumSQjnA+6msGyxFLr9C7UX/MIdyYVro9sEE28wiclAad P0vbAeI6C6YoOd2QrfYPmleHu2Moyi0C/7diY+zyi/pOo97Me42QBtbR -----END CERTIFICATE-----Generated at Tue May 12 22:10:26 2026 by rpki-client