$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer (raw, json) Hash identifier: 1h2hdAI+s2yrHEQyY+eJZ/aQwhxFfphrAY/pWzuEdsI= Subject key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 18D4A7B6A20B5B8A8262CEBC18408C32CD0AD314 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:49:20 +0000 Certificate not after: Sat 01 May 2027 23:54:20 +0000 Subordinate resources: IP: 160.22.22.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d4:a7:b6:a2:0b:5b:8a:82:62:ce:bc:18:40:8c:32:cd:0a:d3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:49:20 2026 GMT Not After : May 1 23:54:20 2027 GMT Subject: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e0:27:97:5c:5c:55:d5:32:50:83:65:b2:13: f6:f7:96:6f:53:c3:2e:b1:60:45:ce:ef:94:3d:47: 6b:35:79:2c:5b:4b:d5:4c:9c:34:02:30:bd:fc:44: 56:39:19:39:55:73:1a:95:d5:3a:70:99:ef:33:46: 30:52:1d:0f:6a:31:5e:16:b4:ae:66:38:61:7c:86: ca:f3:1c:8b:f3:99:84:8a:52:ed:21:41:75:f0:c7: 7b:d7:14:41:93:b2:0c:6c:d9:29:83:2a:f2:86:d0: 7e:64:a7:10:43:5c:ba:0b:8f:fb:c6:22:95:e9:fc: a6:a7:08:bd:fc:10:30:ee:36:48:09:55:d7:b4:b9: 8a:12:a4:ea:34:de:c5:2a:1c:1c:af:a9:f6:44:fb: 50:6c:49:ec:b2:98:94:f8:23:b4:16:8d:26:87:e1: 3c:a7:64:72:2a:5e:20:4a:fc:76:ea:a4:ef:c5:3b: f5:1c:43:aa:9c:3f:04:99:74:f9:86:c5:1c:22:ae: e0:db:14:dd:a2:13:f2:d6:ba:13:83:ef:c4:ce:48: 19:5f:de:1d:a8:02:f5:7f:70:cf:96:21:c3:36:fb: db:ec:4c:d0:a2:66:88:f9:1b:9a:a5:51:9f:6b:2a: 6b:04:22:64:4c:5b:6d:d6:a2:a6:d6:84:86:c7:ae: 07:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.22.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:7e:fb:36:ea:5b:61:a6:26:bb:5d:a8:7c:33:a2:0d:1f:44: 9e:da:61:e6:b7:1f:ca:29:fb:9f:90:b2:99:cd:cc:28:a9:48: 8e:df:9d:98:db:38:03:f5:e1:55:87:86:8c:20:d6:e5:09:0d: df:da:33:fd:a9:6a:4e:a7:bf:ba:11:79:c8:14:04:b8:67:c5: 03:a9:ab:63:11:18:76:64:0c:92:4e:cf:4d:38:e3:e1:96:79: 44:97:fe:d8:33:62:db:01:a0:3d:5e:6e:04:c3:89:b1:e6:6e: 92:9b:c5:f7:44:c1:fd:ea:41:c4:43:a2:6d:0a:1e:98:b6:6c: 8b:54:f5:cf:c9:a4:74:ab:ee:c4:ff:86:2b:82:96:15:1d:73: ec:2a:bb:11:82:96:87:fd:31:8c:d4:64:b9:c9:80:fe:65:3c: ba:cd:c4:44:23:e8:6a:e0:53:d0:97:74:1b:c8:34:28:67:32: 32:5b:32:8a:75:b6:38:fa:6f:84:0a:f7:79:7e:20:de:14:da: 4f:6d:3a:f0:f4:e7:a0:2b:03:65:14:44:81:11:0b:1b:22:6b: 9c:50:20:84:db:cf:46:dd:4a:b7:18:a1:f5:5f:c6:0e:7f:a4: 64:63:bf:58:65:48:c8:d1:e8:ed:66:4e:89:26:bc:0e:88:88: 15:0c:94:3a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGNSntqILW4qCYs68GECMMs0K0xQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNDkyMFoX DTI3MDUwMTIzNTQyMFowMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQz RkY4M0M5ODM0NTI4QTk5RkFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTgJ5dcXFXVMlCDZbIT9veWb1PDLrFgRc7vlD1HazV5LFtL1UycNAIwvfxE VjkZOVVzGpXVOnCZ7zNGMFIdD2oxXha0rmY4YXyGyvMci/OZhIpS7SFBdfDHe9cU QZOyDGzZKYMq8obQfmSnEENcuguP+8Yilen8pqcIvfwQMO42SAlV17S5ihKk6jTe xSocHK+p9kT7UGxJ7LKYlPgjtBaNJofhPKdkcipeIEr8duqk78U79RxDqpw/BJl0 +YbFHCKu4NsU3aIT8ta6E4PvxM5IGV/eHagC9X9wz5Yhwzb72+xM0KJmiPkbmqVR n2sqawQiZExbbdaiptaEhseuB8MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLyTF4Dm8J797W0/+DyYNFKKmfr2MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmN2QyODk0LWMwNzctNDIxYy1iYzFkLTM3ZDZmOWQ5ODk3ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZjdkMjg5 NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CQzkzMTc4MEU2RjA5RUZE RUQ2RDNGRjgzQzk4MzQ1MjhBOTlGQUY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBYWMA0GCSqGSIb3DQEBCwUAA4IBAQCMfvs26lthpia7Xah8M6INH0Se2mHm tx/KKfufkLKZzcwoqUiO352Y2zgD9eFVh4aMINblCQ3f2jP9qWpOp7+6EXnIFAS4 Z8UDqatjERh2ZAySTs9NOOPhlnlEl/7YM2LbAaA9Xm4Ew4mx5m6Sm8X3RMH96kHE Q6JtCh6YtmyLVPXPyaR0q+7E/4YrgpYVHXPsKrsRgpaH/TGM1GS5yYD+ZTy6zcRE I+hq4FPQl3QbyDQoZzIyWzKKdbY4+m+ECvd5fiDeFNpPbTrw9OegKwNlFESBEQsb ImucUCCE289G3Uq3GKH1X8YOf6RkY79YZUjI0ejtZk6JJrwOiIgVDJQ6 -----END CERTIFICATE-----Generated at Tue May 12 22:03:10 2026 by rpki-client