$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer File: C09B0826A8950269AAA9592F3B0B65A3232333C5.cer (raw, json) Hash identifier: nVWIht8bIyYd3UORRzDc1ZjJF+TscYtjPYNJt4EKZI0= Subject key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1229B6260814A2D17500DC43A223FC89ADFE2D3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:40:32 +0000 Certificate not after: Sun 02 May 2027 02:45:32 +0000 Subordinate resources: IP: 157.66.54.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:29:b6:26:08:14:a2:d1:75:00:dc:43:a2:23:fc:89:ad:fe:2d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:40:32 2026 GMT Not After : May 2 02:45:32 2027 GMT Subject: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:f8:f7:18:c3:b6:40:49:ac:f1:9b:d3:5d: 02:f9:eb:39:01:c2:64:c4:41:da:c3:04:11:f3:9b: 9b:f2:c8:f2:7f:1c:ab:d5:62:30:f6:ce:f9:89:40: 56:07:28:7a:cf:92:1c:12:3a:f7:6f:04:8a:9f:97: c1:f4:fe:f0:fd:81:4f:00:f6:50:36:12:45:0e:8b: 46:7e:51:62:38:87:33:75:2a:59:d3:95:d7:99:92: f2:b7:0d:6d:05:22:3a:91:61:ba:76:67:d9:17:80: ee:43:48:74:14:3a:b1:f3:ff:00:62:1d:f4:87:a2: 06:db:eb:b9:d9:4c:59:de:a0:f5:82:8a:57:b6:a5: 69:3f:70:90:6c:b5:e5:0e:0e:cb:e7:58:4f:0b:6c: 78:c0:9a:1e:ad:46:16:9a:47:fa:ab:d3:86:9b:01: 14:4b:ee:24:38:c4:e2:af:6c:2a:7f:1b:23:f6:93: 7b:86:3c:db:2d:ea:ff:50:56:67:dc:47:e4:2f:f1: 54:10:53:a5:06:70:07:a8:0b:f1:39:0f:46:71:85: 78:cf:0c:5f:35:89:d6:e6:64:66:3f:cb:79:19:8b: b5:6d:60:de:56:5a:98:44:30:0b:65:0d:7c:e7:78: a4:7f:65:56:40:f9:a9:c0:84:c3:a5:d8:bc:4b:c7: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.54.0/23 Signature Algorithm: sha256WithRSAEncryption a8:6c:e9:2c:78:95:45:49:c1:16:c0:04:14:ba:1c:fb:50:8e: 80:4a:e0:25:83:c9:fe:7c:3d:15:86:86:ec:6f:69:20:4c:42: 08:e5:8c:e9:9e:85:f9:95:43:b6:c5:2b:d3:66:60:59:d7:42: ad:08:33:0d:91:6c:da:b4:a2:2c:b4:43:6a:82:95:95:d0:00: 9e:82:e7:e6:99:00:fc:e5:17:b2:03:60:d7:5d:b0:66:0e:2b: 86:cd:9d:27:ff:be:3f:b4:da:94:9c:49:e7:96:a7:d7:1f:5a: b2:99:06:9c:0d:28:1e:16:ba:0b:31:0d:80:44:40:41:97:80: 1d:a3:ab:a2:e6:d8:f2:79:c0:3d:25:7f:c2:ad:c8:b5:26:d3: 2c:73:7c:91:a3:ca:2f:e2:8f:97:11:4c:56:73:d9:a1:f8:e1: 0c:a3:66:19:57:f6:e6:3c:d0:28:ae:c6:9f:12:62:6c:59:aa: 84:e6:00:c3:d0:19:68:b0:20:e6:8b:7b:9a:ad:f3:72:26:2a: 20:30:89:85:e8:0f:64:1b:a7:f1:39:b0:40:93:ea:07:7d:ed: 62:60:be:dd:5a:21:8e:5c:94:d7:79:63:55:2d:92:37:a2:70: 5d:57:e8:d9:6b:94:50:5d:c2:de:26:2a:1b:a8:ac:d9:6a:07: 7a:27:04:fe -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEim2JggUotF1ANxDoiP8ia3+LTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyNDAzMloX DTI3MDUwMjAyNDUzMlowMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1 OTJGM0IwQjY1QTMyMzIzMzNDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNQ+PcYw7ZASazxm9NdAvnrOQHCZMRB2sMEEfObm/LI8n8cq9ViMPbO+YlA Vgcoes+SHBI6928Eip+XwfT+8P2BTwD2UDYSRQ6LRn5RYjiHM3UqWdOV15mS8rcN bQUiOpFhunZn2ReA7kNIdBQ6sfP/AGId9IeiBtvrudlMWd6g9YKKV7alaT9wkGy1 5Q4Oy+dYTwtseMCaHq1GFppH+qvThpsBFEvuJDjE4q9sKn8bI/aTe4Y82y3q/1BW Z9xH5C/xVBBTpQZwB6gL8TkPRnGFeM8MXzWJ1uZkZj/LeRmLtW1g3lZamEQwC2UN fOd4pH9lVkD5qcCEw6XYvEvHvtUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMCbCCaolQJpqqlZLzsLZaMjIzPFMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y4ZGMwODQ5LTgzZmItNGNjOC04YzIxLWJlNmNhN2EyZWQ4My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mOGRjMDg0 OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC9DMDlCMDgyNkE4OTUwMjY5 QUFBOTU5MkYzQjBCNjVBMzIzMjMzM0M1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUI2MA0GCSqGSIb3DQEBCwUAA4IBAQCobOkseJVFScEWwAQUuhz7UI6ASuAl g8n+fD0Vhobsb2kgTEII5YzpnoX5lUO2xSvTZmBZ10KtCDMNkWzatKIstENqgpWV 0ACegufmmQD85ReyA2DXXbBmDiuGzZ0n/74/tNqUnEnnlqfXH1qymQacDSgeFroL MQ2AREBBl4Ado6ui5tjyecA9JX/Crci1JtMsc3yRo8ov4o+XEUxWc9mh+OEMo2YZ V/bmPNAorsafEmJsWaqE5gDD0BlosCDmi3uarfNyJiogMImF6A9kG6fxObBAk+oH fe1iYL7dWiGOXJTXeWNVLZI3onBdV+jZa5RQXcLeJiobqKzZagd6JwT+ -----END CERTIFICATE-----Generated at Tue May 12 22:16:41 2026 by rpki-client