$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer (raw, json) Hash identifier: gNfNT48MaS7fsSUSz3vtMQIB/Chtcyj1CkdNFNDi6Uc= Subject key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 118AD1A50F56679FAA93974492A1C580327D5E70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:05 +0000 Certificate not after: Sun 02 May 2027 01:45:05 +0000 Subordinate resources: IP: 157.20.178.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8a:d1:a5:0f:56:67:9f:aa:93:97:44:92:a1:c5:80:32:7d:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:40:05 2026 GMT Not After : May 2 01:45:05 2027 GMT Subject: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b6:b6:7a:b3:07:b1:f6:b2:79:7e:fe:7f:9c: 0b:96:a8:a8:52:1f:b8:9c:c8:14:5c:41:99:c9:19: d6:86:df:0f:31:85:07:7e:a0:94:77:ec:ee:0d:b1: a2:fc:47:72:ba:06:83:db:83:86:8e:f4:31:a5:02: 22:8f:2a:53:d2:75:75:4f:7f:e6:8d:5b:c6:2b:7d: c0:77:01:9e:6b:ce:cf:12:a9:86:c4:3d:62:2a:49: 14:a3:e5:c4:84:4b:bf:c0:11:76:86:8d:35:e6:59: 1d:16:0e:53:49:11:fd:b7:79:0d:6e:31:46:9f:dd: 53:28:96:62:c2:fa:92:e7:23:3c:77:f1:14:2c:3d: 69:21:fd:d7:cc:2e:fe:f2:99:32:37:b6:75:c7:01: 75:97:c6:4c:46:03:ec:f9:03:1a:78:ca:5f:0e:f0: 78:3a:03:20:46:b1:61:8d:75:86:76:36:15:fb:3a: 88:2d:cc:6a:e0:84:61:d6:cc:a7:95:87:3d:e4:18: 34:c6:9d:c0:58:d2:08:ea:fa:03:33:3f:2f:5c:72: a1:d9:ae:42:54:f2:04:4b:50:1f:10:59:a6:ea:04: 24:fe:ce:0a:69:e5:02:64:fb:67:04:f0:c2:74:39: c4:20:28:ab:a0:0f:c0:29:e7:e4:0c:e6:aa:0e:01: cd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.178.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:4f:fb:41:4e:1a:76:2e:e9:a8:9f:54:41:1f:0c:e6:51:c0: d2:41:94:18:18:1b:a7:aa:e0:b9:5c:92:fc:25:7e:23:07:84: 84:78:a1:3c:44:4c:4b:0c:65:01:10:ca:1c:7c:d3:de:78:50: 91:42:35:20:25:8e:c6:ab:e5:7a:08:bc:31:5b:96:f8:0c:a0: f7:f2:63:b1:87:da:ab:a0:7f:82:24:6a:04:2e:a4:74:64:af: b0:bf:c2:2a:03:ce:1c:60:02:ce:3f:cb:6c:5c:74:d6:c3:c2: d6:eb:cd:ff:37:c3:5b:77:e9:87:b8:a9:8f:b4:ec:05:25:46: ad:d4:f4:14:98:5d:ed:b5:d0:9b:19:0c:a5:b8:7b:02:a2:7a: 8e:36:e3:1d:69:a6:cb:e7:db:9c:86:68:d9:7f:7e:c9:c6:e7: 55:a4:41:3d:eb:4c:4f:21:87:14:69:66:54:52:9a:2d:41:e7: 17:4c:d6:64:f4:34:4e:34:ee:70:b1:fb:81:a5:b1:95:3f:e0: 8e:4f:e0:9d:06:7e:fd:77:31:ce:05:2a:25:c0:9e:01:7e:5f: 6d:d5:bf:9c:fa:f5:62:58:36:72:a4:8d:97:f2:2a:5a:69:ff: 89:e0:6a:ee:ff:66:8e:c4:2b:ad:4b:9e:86:66:67:d1:cd:62: b0:cc:75:79 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEYrRpQ9WZ5+qk5dEkqHFgDJ9XnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDAwNVoX DTI3MDUwMjAxNDUwNVowMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4 NjY1RjVERjA0NTVCNzYxRDdBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJW2tnqzB7H2snl+/n+cC5aoqFIfuJzIFFxBmckZ1obfDzGFB36glHfs7g2x ovxHcroGg9uDho70MaUCIo8qU9J1dU9/5o1bxit9wHcBnmvOzxKphsQ9YipJFKPl xIRLv8ARdoaNNeZZHRYOU0kR/bd5DW4xRp/dUyiWYsL6kucjPHfxFCw9aSH918wu /vKZMje2dccBdZfGTEYD7PkDGnjKXw7weDoDIEaxYY11hnY2Ffs6iC3MauCEYdbM p5WHPeQYNMadwFjSCOr6AzM/L1xyodmuQlTyBEtQHxBZpuoEJP7OCmnlAmT7ZwTw wnQ5xCAoq6APwCnn5Azmqg4BzQMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL7IKqO7DR+tqpGGZfXfBFW3YdehMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IzNjA2NmU4LThlMTktNGRlNy05NDdiLTk0ZWUzY2QwOWY4NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMzYwNjZl OC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRUM4MkFBM0JCMEQxRkFE QUE5MTg2NjVGNURGMDQ1NUI3NjFEN0ExLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRSyMA0GCSqGSIb3DQEBCwUAA4IBAQB8T/tBThp2Lumon1RBHwzmUcDSQZQY GBunquC5XJL8JX4jB4SEeKE8RExLDGUBEMocfNPeeFCRQjUgJY7Gq+V6CLwxW5b4 DKD38mOxh9qroH+CJGoELqR0ZK+wv8IqA84cYALOP8tsXHTWw8LW683/N8Nbd+mH uKmPtOwFJUat1PQUmF3ttdCbGQyluHsConqONuMdaabL59uchmjZf37JxudVpEE9 60xPIYcUaWZUUpotQecXTNZk9DRONO5wsfuBpbGVP+COT+CdBn79dzHOBSolwJ4B fl9t1b+c+vViWDZypI2X8ipaaf+J4Gru/2aOxCutS56GZmfRzWKwzHV5 -----END CERTIFICATE-----Generated at Tue May 12 22:38:45 2026 by rpki-client