$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer File: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer (raw, json) Hash identifier: 1fwaUqGoZB7HpybqvmgkOj/by/iCzfNk2mCwVCW1zyg= Subject key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 619351B0E25FB258D3A27D7BF01C147D90158D8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:34:40 +0000 Certificate not after: Sun 02 May 2027 01:39:40 +0000 Subordinate resources: IP: 157.15.174.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:93:51:b0:e2:5f:b2:58:d3:a2:7d:7b:f0:1c:14:7d:90:15:8d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:34:40 2026 GMT Not After : May 2 01:39:40 2027 GMT Subject: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:48:76:96:43:97:1b:67:3e:e4:c8:69:9b: b2:74:26:fb:cd:35:a9:89:13:c2:e2:95:03:b2:04: f3:93:72:d4:d5:d1:5b:20:b2:d6:48:42:4c:e8:da: ca:60:1d:21:15:a7:7f:bb:cf:49:ad:8b:f2:fb:7a: fc:8d:e6:83:74:a9:61:2c:6e:e9:96:6d:74:bd:55: cd:54:69:74:3d:10:62:12:5b:5c:d1:37:eb:9c:77: 45:5f:ca:bd:e1:c9:39:d7:84:31:fb:63:b4:93:69: 75:e9:21:8e:5c:e9:08:a1:c3:29:b9:0f:58:c6:a7: 1f:73:5c:9e:e6:a7:d2:f9:e5:38:2a:70:af:64:eb: e8:cc:5a:b0:9c:78:a0:56:e5:81:83:70:17:88:d4: 0d:0d:39:e9:91:66:38:16:bf:7b:92:5f:c8:91:4f: 1b:62:c4:58:b0:b3:4d:c6:24:50:71:b7:bf:41:a3: 02:2b:b3:59:66:f3:bd:6e:7b:ae:26:29:c5:73:e1: e9:be:39:da:11:18:0d:95:18:59:87:c2:d0:e7:1f: 33:0e:12:54:7e:6e:a4:63:7b:96:81:11:41:87:b1: 4c:70:cb:52:28:79:7e:4c:34:3c:24:ff:36:4e:61: 39:50:c4:34:a1:a8:f5:b3:d0:b5:59:18:c4:7b:e0: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.174.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:78:e1:bd:0b:db:34:c5:21:ef:3f:79:1b:8a:b9:29:38:26: 24:6a:d4:31:8a:b8:b3:9f:69:57:02:b4:eb:b9:e1:7c:ee:14: 9b:a7:5f:89:d2:c5:af:ec:2a:af:8b:d6:73:07:c4:9c:f4:91: 37:48:7f:9e:8a:98:db:66:d9:31:6a:b8:b7:67:ec:cd:ec:76: f0:7d:95:d2:3f:18:77:3d:2c:ec:76:af:66:57:a7:77:52:0d: 52:8f:51:a7:8d:52:a9:5b:a5:2a:0f:86:56:23:4e:22:fd:10: 59:77:68:d1:20:c2:36:44:9d:5c:9e:08:bd:12:32:d7:da:2e: 2c:82:e7:c4:6d:14:e0:ee:d7:80:2b:21:d2:25:9c:84:e8:b5: 74:8f:ba:f5:55:bc:67:ba:48:7c:a7:b9:81:c6:50:52:d3:64: 86:d4:e1:0f:fa:7b:7d:ff:ee:a1:af:8c:da:29:98:94:32:a7: 7c:13:ba:f5:17:89:bd:2f:dc:e7:69:67:21:6d:a3:71:ca:ca: ca:78:00:0f:d8:88:2c:31:2f:fb:09:cc:0a:08:aa:52:64:b7: b3:6c:7c:04:b8:d7:65:20:e7:b9:d8:9c:66:dc:42:52:47:89: 8e:8e:4d:31:47:bc:34:a7:f7:21:4f:10:cb:bf:a7:a0:8b:f0: 5f:51:cf:9c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYZNRsOJfsljTon178BwUfZAVjY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzQ0MFoX DTI3MDUwMjAxMzk0MFowMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4 QThFQkREQjY5RjNCNTk5MDcyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ8WSHaWQ5cbZz7kyGmbsnQm+801qYkTwuKVA7IE85Ny1NXRWyCy1khCTOja ymAdIRWnf7vPSa2L8vt6/I3mg3SpYSxu6ZZtdL1VzVRpdD0QYhJbXNE365x3RV/K veHJOdeEMftjtJNpdekhjlzpCKHDKbkPWManH3Ncnuan0vnlOCpwr2Tr6MxasJx4 oFblgYNwF4jUDQ056ZFmOBa/e5JfyJFPG2LEWLCzTcYkUHG3v0GjAiuzWWbzvW57 riYpxXPh6b452hEYDZUYWYfC0OcfMw4SVH5upGN7loERQYexTHDLUih5fkw0PCT/ Nk5hOVDENKGo9bPQtVkYxHvgwxsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMA9XDa6EhQ/YdOKjr3bafO1mQchMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FiMDAyOTkyLWFjYjItNGY3Ny05OTdkLTMyMTdlYWQ5OWJiNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYjAwMjk5 Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC9DMDNENUMzNkJBMTIxNDNG NjFEMzhBOEVCRERCNjlGM0I1OTkwNzIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ+uMA0GCSqGSIb3DQEBCwUAA4IBAQAceOG9C9s0xSHvP3kbirkpOCYkatQx irizn2lXArTrueF87hSbp1+J0sWv7Cqvi9ZzB8Sc9JE3SH+eipjbZtkxari3Z+zN 7HbwfZXSPxh3PSzsdq9mV6d3Ug1Sj1GnjVKpW6UqD4ZWI04i/RBZd2jRIMI2RJ1c ngi9EjLX2i4sgufEbRTg7teAKyHSJZyE6LV0j7r1Vbxnukh8p7mBxlBS02SG1OEP +nt9/+6hr4zaKZiUMqd8E7r1F4m9L9znaWchbaNxysrKeAAP2IgsMS/7CcwKCKpS ZLezbHwEuNdlIOe52Jxm3EJSR4mOjk0xR7w0p/chTxDLv6egi/BfUc+c -----END CERTIFICATE-----Generated at Tue May 12 22:03:52 2026 by rpki-client