$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer File: C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer (raw, json) Hash identifier: 7SwoZfIPHoWUWtPa71KXW3pdEtjN01FDucJC+Ld/FI4= Subject key identifier: C1:74:65:88:82:12:A3:58:2B:21:0A:DE:FF:A0:5A:3E:B2:D9:9C:F8 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3BCA95535E2B2712F8352CDA0C0DFBAB5380E959 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:49:56 +0000 Certificate not after: Sun 02 May 2027 00:54:56 +0000 Subordinate resources: IP: 160.22.234.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ca:95:53:5e:2b:27:12:f8:35:2c:da:0c:0d:fb:ab:53:80:e9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:49:56 2026 GMT Not After : May 2 00:54:56 2027 GMT Subject: CN=C17465888212A3582B210ADEFFA05A3EB2D99CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:b3:88:bc:1b:3e:1c:bb:93:9d:cd:e0:8c: ef:df:05:1b:ab:b6:33:4d:22:5d:54:52:95:b1:6f: a6:3d:1a:8a:15:b1:48:33:e0:4b:37:65:4c:0c:5e: 83:78:2d:02:fc:e2:f3:02:60:54:c7:ca:2c:33:5a: 9b:ad:75:cb:df:51:fb:e0:12:1f:96:dc:48:08:c8: 69:46:34:a2:76:76:b0:80:d5:13:99:bd:30:06:45: 90:b6:10:92:33:68:a8:f3:66:ed:88:41:19:bf:59: aa:2a:c0:52:7c:e2:f5:2e:03:af:dd:89:4d:f0:63: 30:c6:6a:c0:56:13:91:fa:55:35:4e:11:5a:bd:56: 69:dd:64:97:a7:8e:c5:2b:e1:00:d4:fa:83:2d:b3: 45:0a:be:2b:b5:70:01:df:25:2d:dc:b5:14:36:00: 1b:ba:63:d6:01:7e:16:b5:70:fe:5a:91:65:17:84: 0b:f0:d9:cf:4b:a8:c8:2c:25:b9:91:2e:79:c1:da: 4b:d7:c5:32:11:31:1d:1d:b1:d4:1f:70:56:32:f8: a1:85:11:7a:2d:d7:20:0a:7a:57:db:2b:33:3a:e7: 6e:84:f6:87:ca:3a:a3:0a:df:f8:dc:f0:05:df:20: 73:f0:a1:9b:83:0c:22:45:09:7c:ca:6a:f7:b5:27: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:74:65:88:82:12:A3:58:2B:21:0A:DE:FF:A0:5A:3E:B2:D9:9C:F8 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.234.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d4:cb:61:3a:ab:3b:dd:0e:cc:50:5f:67:f2:20:84:72:89: e8:a1:9b:ab:d4:6a:60:53:fc:68:ac:77:86:94:29:b2:9e:4d: af:0f:85:b0:f0:fd:82:2e:63:22:4e:d6:e0:ed:24:6a:6a:13: 6f:2a:27:15:ab:ad:9f:1e:fb:f2:d5:57:a4:28:28:12:5c:7e: 39:2d:bb:5e:a6:d8:11:0e:a6:cd:a1:0f:ce:c2:95:e0:0c:a2: 6c:47:f1:11:ca:e1:49:b1:af:fb:8e:7c:d6:4f:48:5f:aa:f2: 0d:99:68:9a:26:c3:2f:5e:09:c2:69:bb:2a:d2:91:e2:c9:e8: d9:01:81:be:28:a3:1d:d6:91:b8:0e:c0:8b:f5:b7:a7:af:1a: 24:e4:0b:2e:69:17:f2:ae:63:f6:10:47:fc:e3:59:c4:1f:e6: 59:6c:42:15:e5:15:4a:36:7c:32:5b:b4:2b:e1:2e:5e:f9:28: 11:70:f9:b9:32:6c:8b:5d:43:57:43:69:ab:c5:62:dc:16:42: 0e:dd:b9:9d:d7:3c:b4:f5:8d:33:0c:00:96:c7:e5:77:da:ed: e3:29:b8:c6:0d:6f:11:21:20:34:6a:51:9f:60:87:fd:60:c4: 56:66:4e:99:22:a0:84:70:a3:b3:55:0d:bf:29:87:6f:dc:c2: 88:df:0d:76 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUO8qVU14rJxL4NSzaDA37q1OA6VkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNDk1NloX DTI3MDUwMjAwNTQ1NlowMzExMC8GA1UEAxMoQzE3NDY1ODg4MjEyQTM1ODJCMjEw QURFRkZBMDVBM0VCMkQ5OUNGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ62s4i8Gz4cu5OdzeCM798FG6u2M00iXVRSlbFvpj0aihWxSDPgSzdlTAxe g3gtAvzi8wJgVMfKLDNam611y99R++ASH5bcSAjIaUY0onZ2sIDVE5m9MAZFkLYQ kjNoqPNm7YhBGb9ZqirAUnzi9S4Dr92JTfBjMMZqwFYTkfpVNU4RWr1Wad1kl6eO xSvhANT6gy2zRQq+K7VwAd8lLdy1FDYAG7pj1gF+FrVw/lqRZReEC/DZz0uoyCwl uZEuecHaS9fFMhExHR2x1B9wVjL4oYURei3XIAp6V9srMzrnboT2h8o6owrf+Nzw Bd8gc/Chm4MMIkUJfMpq97Un3KsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMF0ZYiCEqNYKyEK3v+gWj6y2Zz4MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY5YjUzNDIwLThjNTktNDljZi1iM2IyLWY1NWU5ODkwZGRjZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82OWI1MzQy MC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC9DMTc0NjU4ODgyMTJBMzU4 MkIyMTBBREVGRkEwNUEzRUIyRDk5Q0Y4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBbqMA0GCSqGSIb3DQEBCwUAA4IBAQCj1MthOqs73Q7MUF9n8iCEconooZur 1GpgU/xorHeGlCmynk2vD4Ww8P2CLmMiTtbg7SRqahNvKicVq62fHvvy1VekKCgS XH45LbteptgRDqbNoQ/OwpXgDKJsR/ERyuFJsa/7jnzWT0hfqvINmWiaJsMvXgnC absq0pHiyejZAYG+KKMd1pG4DsCL9benrxok5AsuaRfyrmP2EEf841nEH+ZZbEIV 5RVKNnwyW7Qr4S5e+SgRcPm5MmyLXUNXQ2mrxWLcFkIO3bmd1zy09Y0zDACWx+V3 2u3jKbjGDW8RISA0alGfYIf9YMRWZk6ZIqCEcKOzVQ2/KYdv3MKI3w12 -----END CERTIFICATE-----Generated at Tue May 12 22:10:12 2026 by rpki-client