$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer File: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer (raw, json) Hash identifier: UIMh+piLT7TaniDjVzRcFxr1/xMGTcR4TAYBb+IvUuM= Subject key identifier: BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7E5B5E70DCE05F8F223637B965EBC1B8AB2DDCEE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:12:11 +0000 Certificate not after: Sun 02 May 2027 02:17:11 +0000 Subordinate resources: IP: 160.22.91.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5b:5e:70:dc:e0:5f:8f:22:36:37:b9:65:eb:c1:b8:ab:2d:dc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:12:11 2026 GMT Not After : May 2 02:17:11 2027 GMT Subject: CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:6f:db:2e:ad:53:57:aa:85:99:84:62:e6: 3c:bc:75:d4:7d:de:6e:a0:94:e6:d3:6d:62:43:bf: 81:c0:29:52:b1:64:f8:dd:a9:7c:22:2c:97:b7:8e: 7f:fb:45:06:61:f0:aa:9a:da:46:1c:41:9e:b8:cf: 65:5d:b8:42:ee:68:d4:9c:3f:a3:9f:25:72:f7:49: 6c:54:07:44:e6:77:1a:a0:ca:9b:e2:47:fb:50:91: 4c:6e:b7:30:d4:56:38:56:f5:cd:80:f8:46:ee:b5: 5f:b0:33:ae:f9:5f:e5:fc:c4:40:f0:0c:7d:6c:80: ad:63:2d:72:04:0c:e1:04:4b:9d:28:20:2b:7c:ab: 82:3a:08:77:7f:79:b5:25:ce:ab:51:bc:d3:b4:33: 9c:b6:cd:d3:e7:de:b5:69:38:3c:46:c1:ac:e6:6d: 72:5d:9f:5e:a7:fa:cb:0a:09:70:ce:fd:48:ee:4f: 4c:ab:2d:84:eb:41:68:fd:55:59:8b:ae:ec:45:72: 57:ef:66:a0:a0:af:19:8f:6a:8e:b2:cb:55:59:97: 02:20:94:d0:58:7b:36:4d:61:20:48:de:b9:dd:ce: fd:78:7b:81:b5:92:4f:80:b2:d3:58:2b:13:53:ff: 90:e7:f4:81:7e:13:97:32:e4:8f:ce:e1:b4:93:f3: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.91.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:5f:b8:30:c4:6f:c4:0f:36:45:a5:7c:f5:df:ac:f4:25:c2: f0:54:94:e5:2a:0a:0a:9e:2b:de:8a:48:2b:31:5d:f2:75:96: 2a:58:02:f7:8d:2f:99:8b:57:73:62:8e:9b:6f:61:60:3c:ee: 04:d6:6e:2e:35:69:c5:09:b0:6f:2b:73:1b:39:f1:58:fc:b1: 83:74:54:db:07:28:a6:b1:5f:0a:91:3a:2d:c0:ec:88:23:0d: 95:ff:87:4c:dc:c3:8c:77:c0:5f:19:ac:fe:ba:32:ac:16:c7: 86:cc:dd:2c:cc:b0:67:2e:e3:b6:19:06:7a:2e:3b:c1:c5:6c: ab:fe:3e:be:80:50:87:db:36:7d:72:c4:02:13:3c:8d:f0:ae: 5c:70:06:c4:93:49:c9:50:2c:54:1b:18:60:b6:cc:3f:e3:9e: cf:7f:60:e7:f7:70:83:57:f9:5f:80:88:47:ab:ea:10:30:11: b7:0a:30:94:40:2e:7f:c1:25:d0:c1:09:41:7c:d6:2f:04:53: 3b:bd:c0:24:3c:fe:28:a7:1f:49:e3:c4:ac:58:71:3e:94:6f: bc:20:39:62:dd:0b:b8:67:4d:0c:41:dc:e9:d2:f3:45:9a:cc: 3c:7c:9c:17:65:08:8b:33:8b:2d:79:f1:43:c4:d3:03:8a:60: 69:b3:60:5a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfltecNzgX48iNje5ZevBuKst3O4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMTIxMVoX DTI3MDUwMjAyMTcxMVowMzExMC8GA1UEAxMoQkVCNjFEQjFDRTQ3MTBEMjkxQzFC MzIwQzRFNUYxRUFCNERGMDc0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKxb9surVNXqoWZhGLmPLx11H3ebqCU5tNtYkO/gcApUrFk+N2pfCIsl7eO f/tFBmHwqpraRhxBnrjPZV24Qu5o1Jw/o58lcvdJbFQHROZ3GqDKm+JH+1CRTG63 MNRWOFb1zYD4Ru61X7Azrvlf5fzEQPAMfWyArWMtcgQM4QRLnSggK3yrgjoId395 tSXOq1G807QznLbN0+fetWk4PEbBrOZtcl2fXqf6ywoJcM79SO5PTKsthOtBaP1V WYuu7EVyV+9moKCvGY9qjrLLVVmXAiCU0Fh7Nk1hIEjeud3O/Xh7gbWST4Cy01gr E1P/kOf0gX4TlzLkj87htJPzuskCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL62HbHORxDSkcGzIMTl8eq03wdFMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UyODE5YmE5LTVmNDQtNDEyNS04YjhjLWZjMTY0YjU0ZDczYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMjgxOWJh OS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMC9CRUI2MURCMUNFNDcxMEQy OTFDMUIzMjBDNEU1RjFFQUI0REYwNzQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBZbMA0GCSqGSIb3DQEBCwUAA4IBAQB+X7gwxG/EDzZFpXz136z0JcLwVJTl KgoKniveikgrMV3ydZYqWAL3jS+Zi1dzYo6bb2FgPO4E1m4uNWnFCbBvK3MbOfFY /LGDdFTbByimsV8KkTotwOyIIw2V/4dM3MOMd8BfGaz+ujKsFseGzN0szLBnLuO2 GQZ6LjvBxWyr/j6+gFCH2zZ9csQCEzyN8K5ccAbEk0nJUCxUGxhgtsw/457Pf2Dn 93CDV/lfgIhHq+oQMBG3CjCUQC5/wSXQwQlBfNYvBFM7vcAkPP4opx9J48SsWHE+ lG+8IDli3Qu4Z00MQdzp0vNFmsw8fJwXZQiLM4stefFDxNMDimBps2Ba -----END CERTIFICATE-----Generated at Tue May 12 22:46:02 2026 by rpki-client