$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer (raw, json) Hash identifier: ucSaMHR5Hw7f2LC4mZhcVkp9ORNs03awjeFkk38/Cng= Subject key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 30D79A1F2497B6C66C00F970CAF44AE3C39102C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:52 +0000 Certificate not after: Sun 02 May 2027 01:38:52 +0000 Subordinate resources: IP: 160.25.229.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d7:9a:1f:24:97:b6:c6:6c:00:f9:70:ca:f4:4a:e3:c3:91:02:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:33:52 2026 GMT Not After : May 2 01:38:52 2027 GMT Subject: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:66:9d:8f:64:d9:61:46:d1:8d:0e:b6:a8: ea:ce:f3:71:1c:bb:d1:b2:8f:8c:ec:87:62:24:ed: 96:1e:53:3c:37:41:23:d5:31:87:62:bf:b8:04:87: 14:25:9c:3c:12:5d:d2:f0:e1:ed:1b:5d:a4:b8:47: 09:81:fb:72:ce:05:0b:66:50:4d:6c:d2:cb:52:7b: 4e:3e:99:47:7a:f7:4b:8d:86:89:17:95:35:cb:13: cd:50:2d:21:2e:cf:b2:0d:20:22:50:83:b1:39:fa: 5a:d7:1e:0a:c7:d9:93:e4:8c:e2:85:96:42:8e:23: 90:66:70:dd:fe:7a:bf:28:55:a5:cb:d5:79:27:e0: 3f:25:f2:75:eb:81:98:91:f9:e8:10:26:7f:de:d1: 5d:1f:9a:01:5c:b1:a9:e6:9a:28:b6:3d:c8:a8:b3: aa:6e:0a:28:1b:79:ed:11:fd:f4:55:c4:28:ed:82: 4c:07:26:97:e7:cd:04:47:d6:3e:8a:f0:80:8c:5e: 06:01:2e:1f:f6:50:20:5a:22:ea:bb:18:e3:34:06: 80:00:da:5d:da:35:f4:2a:c7:e6:17:fd:b2:d6:ea: 27:3a:50:41:ef:48:2c:60:95:aa:df:18:56:3a:0a: 93:3a:a3:9b:1a:28:8e:05:65:0c:02:55:46:6e:97: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.229.0/24 Signature Algorithm: sha256WithRSAEncryption 39:e0:da:13:02:a6:b8:22:99:8c:d5:e8:80:ef:6d:98:74:15: 37:07:42:d9:c1:b4:1c:dc:b6:99:55:19:05:7d:8c:02:ef:b5: 08:0f:4a:e3:e8:90:d9:82:59:f7:bf:41:28:bc:84:45:ec:90: 01:f6:1d:08:d3:bf:7a:49:b6:b0:f1:81:ff:43:e0:36:cb:ff: 1e:27:47:20:80:54:de:65:46:62:34:d6:ca:4e:93:8d:b2:6d: e4:99:5e:f7:bc:dd:d2:4a:72:a4:0b:e4:9c:42:cf:e9:a2:af: 26:23:23:0d:be:88:95:95:51:1d:be:b7:cf:70:13:1a:75:d7: 73:4d:80:28:23:14:ea:19:c7:b7:96:8c:ab:40:0a:63:f6:ba: fa:ab:27:1d:f2:06:e3:fc:71:7a:0b:4b:a1:b6:df:00:36:76: e5:87:50:88:e7:9f:08:c1:d7:9a:5d:1f:3b:8d:bd:3b:ed:e8: 00:28:26:35:65:3e:6e:81:c8:13:6c:8a:34:23:ee:c3:37:2a: 89:4f:41:16:05:37:52:3d:c8:63:15:2d:20:d5:cf:14:61:3d: 9d:7e:82:cf:af:a0:2a:16:c0:8c:d1:de:a5:1c:95:af:0f:ae: cf:5f:8d:7b:2c:ef:34:9a:94:73:c0:cd:74:c5:92:34:e1:e7: f0:51:a8:39 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMNeaHySXtsZsAPlwyvRK48ORAscwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzM1MloX DTI3MDUwMjAxMzg1MlowMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4 RTVDMjQ1MDE3NkFDNUZBRDI5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMm9Zp2PZNlhRtGNDrao6s7zcRy70bKPjOyHYiTtlh5TPDdBI9Uxh2K/uASH FCWcPBJd0vDh7RtdpLhHCYH7cs4FC2ZQTWzSy1J7Tj6ZR3r3S42GiReVNcsTzVAt IS7Psg0gIlCDsTn6WtceCsfZk+SM4oWWQo4jkGZw3f56vyhVpcvVeSfgPyXydeuB mJH56BAmf97RXR+aAVyxqeaaKLY9yKizqm4KKBt57RH99FXEKO2CTAcml+fNBEfW PorwgIxeBgEuH/ZQIFoi6rsY4zQGgADaXdo19CrH5hf9stbqJzpQQe9ILGCVqt8Y VjoKkzqjmxoojgVlDAJVRm6XBNMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLm4ph2OpVIM8o6OXCRQF2rF+tKaMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FhNDE3NjA4LTE2YjgtNDQ5Ny04MWUzLTk0N2Q3OGRiY2YxMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYTQxNzYw OC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC9COUI4QTYxRDhFQTU1MjBD RjI4RThFNUMyNDUwMTc2QUM1RkFEMjlBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBnlMA0GCSqGSIb3DQEBCwUAA4IBAQA54NoTAqa4IpmM1eiA722YdBU3B0LZ wbQc3LaZVRkFfYwC77UID0rj6JDZgln3v0EovIRF7JAB9h0I0796Sbaw8YH/Q+A2 y/8eJ0cggFTeZUZiNNbKTpONsm3kmV73vN3SSnKkC+ScQs/poq8mIyMNvoiVlVEd vrfPcBMadddzTYAoIxTqGce3loyrQApj9rr6qycd8gbj/HF6C0uhtt8ANnblh1CI 558IwdeaXR87jb077egAKCY1ZT5ugcgTbIo0I+7DNyqJT0EWBTdSPchjFS0g1c8U YT2dfoLPr6AqFsCM0d6lHJWvD67PX417LO80mpRzwM10xZI04efwUag5 -----END CERTIFICATE-----Generated at Tue May 12 22:16:53 2026 by rpki-client