$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer (raw, json) Hash identifier: k6HAaKnPEf66aYCSDZlKEnLOUnRxzdlwJxTwtP2oV8I= Subject key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6D67270918889978BDABE05AB62AA711CB575042 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:57:09 +0000 Certificate not after: Sun 02 May 2027 02:02:09 +0000 Subordinate resources: IP: 160.22.100.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:27:09:18:88:99:78:bd:ab:e0:5a:b6:2a:a7:11:cb:57:50:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:57:09 2026 GMT Not After : May 2 02:02:09 2027 GMT Subject: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:31:d3:00:98:5e:8d:6d:7d:52:3c:38:e0: a8:8d:7a:b7:ac:0c:b7:ce:21:39:f7:10:e7:7b:f0: 7a:d1:04:27:99:00:ef:c6:ae:cb:70:39:71:44:bc: f8:c4:2b:01:07:1e:37:df:50:4e:6f:15:35:23:22: ae:73:1b:74:5f:62:d1:c9:f2:38:55:0f:98:e4:e9: 1c:d1:ec:f5:73:ae:4a:c6:23:fc:c0:5d:e0:b7:01: 87:7c:69:4b:d2:cb:bf:e0:2a:01:35:b7:b6:a6:18: 9a:7d:45:06:b9:6b:0f:06:4a:cd:80:b9:65:e0:ea: 62:be:2b:2e:36:9c:9d:59:8e:79:58:c3:67:a8:d7: 1e:54:61:a9:a5:64:a0:0c:2c:1b:1d:4d:db:40:75: a7:e7:13:cf:17:5d:6e:a2:8c:a8:f7:ed:2f:d3:3e: a3:02:54:58:d9:89:ce:9e:5d:0f:f2:2e:65:fb:93: 08:3f:18:ae:07:40:69:5e:82:04:a2:00:3b:04:02: 61:dc:7f:ca:a2:c7:d6:6f:23:44:ff:e9:4b:54:b0: f2:3c:8f:09:0e:b5:11:7c:49:6d:e6:f7:d0:33:58: 06:26:70:ab:33:36:bc:c5:5b:1d:9e:8e:29:2d:d0: ff:db:0b:e1:82:0c:ff:4f:23:0f:40:7d:83:78:73: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.100.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:54:7a:ee:e9:78:8d:4b:cf:c5:2c:c8:3a:94:e3:88:15:02: 5a:5d:64:aa:cd:20:25:59:8a:43:c9:2e:41:b4:87:8b:c3:01: 27:9b:76:32:43:ae:96:d1:d2:97:e3:86:da:2d:a6:85:1f:ea: ee:42:16:5a:57:5c:a5:6f:90:27:ac:d7:2a:86:cd:55:d4:f7: c1:c4:09:7c:fc:43:4e:73:2b:50:68:77:d8:13:1f:82:bb:f1: 00:81:3e:c6:8c:9e:f1:36:04:9e:6e:28:a5:fe:8f:88:ce:9a: f3:51:c6:55:7f:3c:c8:3c:5a:2d:ea:62:60:ce:dc:48:a9:b4: dd:01:b7:2c:7c:c1:a1:8b:2d:98:a7:76:1c:c0:bb:a8:63:fa: 46:fb:0f:e5:6a:14:48:0c:60:fd:8a:82:f8:f8:bb:e6:78:df: b9:ab:a1:59:db:7d:90:be:c6:df:03:b8:65:de:46:72:be:60: be:ef:03:e7:89:79:ed:e8:c3:64:7f:fd:a5:c4:08:0f:f1:a3: 2f:d6:c7:fa:fa:40:19:97:46:22:60:b6:4e:23:b7:b9:7e:4a: 4b:9d:7f:7c:76:78:ff:32:1b:6a:ac:56:cc:b2:af:cb:1a:6b: 36:c8:cf:9d:98:97:df:a0:7d:36:00:bf:11:2f:39:48:00:5e: 66:7f:a2:cf -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbWcnCRiImXi9q+BatiqnEctXUEIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTcwOVoX DTI3MDUwMjAyMDIwOVowMzExMC8GA1UEAxMoQzEwNDM3MjEzNzc0QzdDMkJCNUJD OUJBNzY0OUI3MkQ3NjQ2RjgxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC7MdMAmF6NbX1SPDjgqI16t6wMt84hOfcQ53vwetEEJ5kA78auy3A5cUS8 +MQrAQceN99QTm8VNSMirnMbdF9i0cnyOFUPmOTpHNHs9XOuSsYj/MBd4LcBh3xp S9LLv+AqATW3tqYYmn1FBrlrDwZKzYC5ZeDqYr4rLjacnVmOeVjDZ6jXHlRhqaVk oAwsGx1N20B1p+cTzxddbqKMqPftL9M+owJUWNmJzp5dD/IuZfuTCD8YrgdAaV6C BKIAOwQCYdx/yqLH1m8jRP/pS1Sw8jyPCQ61EXxJbeb30DNYBiZwqzM2vMVbHZ6O KS3Q/9sL4YIM/08jD0B9g3hzR1MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMEENyE3dMfCu1vJunZJty12RvgcMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QwYThjZTZjLTgyOTAtNGI5ZC05YWVkLTA3NTRkM2ZkOGQzMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMGE4Y2U2 Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC9DMTA0MzcyMTM3NzRDN0My QkI1QkM5QkE3NjQ5QjcyRDc2NDZGODFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBZkMA0GCSqGSIb3DQEBCwUAA4IBAQCeVHru6XiNS8/FLMg6lOOIFQJaXWSq zSAlWYpDyS5BtIeLwwEnm3YyQ66W0dKX44baLaaFH+ruQhZaV1ylb5AnrNcqhs1V 1PfBxAl8/ENOcytQaHfYEx+Cu/EAgT7GjJ7xNgSebiil/o+IzprzUcZVfzzIPFot 6mJgztxIqbTdAbcsfMGhiy2Yp3YcwLuoY/pG+w/lahRIDGD9ioL4+LvmeN+5q6FZ 232QvsbfA7hl3kZyvmC+7wPniXnt6MNkf/2lxAgP8aMv1sf6+kAZl0YiYLZOI7e5 fkpLnX98dnj/MhtqrFbMsq/LGms2yM+dmJffoH02AL8RLzlIAF5mf6LP -----END CERTIFICATE-----Generated at Tue May 12 22:04:11 2026 by rpki-client