$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer (raw, json) Hash identifier: IvIRb1y0IcZ8KnSfvyO6M8AU8bJ+yoSdX/Oof6/ixNs= Subject key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7C1273BFF66E44D2E5E491BE8AE2090C4838A32F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:28 +0000 Certificate not after: Sun 02 May 2027 01:48:28 +0000 Subordinate resources: IP: 157.10.181.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:12:73:bf:f6:6e:44:d2:e5:e4:91:be:8a:e2:09:0c:48:38:a3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:43:28 2026 GMT Not After : May 2 01:48:28 2027 GMT Subject: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:41:1e:64:44:35:e7:eb:0c:0d:7c:98:30: 0c:d1:40:34:e3:2f:26:ef:f1:bf:27:0d:ee:ca:32: 8e:6f:09:9b:d0:68:17:54:70:e2:2b:6b:33:4d:4f: 68:be:32:03:24:7d:75:83:15:bf:13:3d:9a:33:1f: a1:d7:34:17:f6:4e:88:46:46:91:bf:62:ff:f7:d0: 6b:cd:99:4c:f4:fe:32:14:76:67:71:bd:37:7c:87: 3f:86:7b:e7:67:df:5a:ca:4d:11:b1:31:54:36:44: 71:00:e0:f0:34:fe:d9:fd:63:3a:69:77:60:18:62: 07:03:86:a0:ec:9e:ac:61:bf:c0:d2:33:f4:a1:6a: 03:d4:d9:d0:75:a6:19:74:8c:a6:b9:3c:e0:c7:c4: 12:cd:3d:b1:4f:62:33:83:e7:6e:4e:1a:c1:21:48: 0a:be:7a:2f:02:b6:f1:50:d1:e1:21:7d:2a:3d:30: 14:df:d8:35:95:97:59:59:a1:02:a2:0b:b5:24:05: 93:d2:fe:37:2f:f8:70:56:8c:58:02:8b:97:6e:34: 70:e1:a0:af:3b:8a:6f:8e:c7:40:48:d3:a2:d1:0f: 1a:be:29:8a:30:7a:ff:31:b6:de:9b:4f:b2:93:e0: 71:35:70:ca:3a:3e:10:39:82:a9:ed:df:9a:89:fa: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.181.0/24 Signature Algorithm: sha256WithRSAEncryption 56:9b:79:33:7b:58:5d:85:6a:0c:47:6a:65:0d:f1:dc:09:c9: bf:1a:a7:da:e0:98:e3:a9:8d:d3:62:16:af:09:b4:aa:9d:cf: c8:77:71:de:68:fc:08:be:17:8a:c6:0d:a3:2f:00:24:8d:ff: 7d:65:08:cb:f1:1d:4d:f2:af:85:06:30:14:a5:13:01:83:38: 14:75:05:93:5d:b8:0d:05:3d:ff:26:cf:1c:08:69:35:55:c1: c0:0e:8b:1e:6b:c1:e8:c4:cb:1b:bd:6d:b6:5e:f1:11:8b:f7: 29:40:c9:08:ae:1c:a3:30:70:c3:9e:e9:a5:85:e1:78:0a:bc: e7:b4:41:ac:c0:64:05:6c:96:ae:a5:94:8e:6a:af:23:be:3e: 53:cd:05:f5:da:cc:01:c1:1a:00:80:82:41:36:37:7f:85:59: e8:86:a0:28:cc:b8:08:c6:28:06:b3:27:42:3f:b6:3c:fa:b8: 2d:52:74:ae:f5:d9:b3:76:c2:ec:01:5b:73:0b:76:25:20:42: 6b:d2:ed:d7:fa:6e:53:4a:b6:8c:0e:99:2d:60:ff:1a:dd:ce: 59:db:31:78:1a:76:6c:d4:60:c4:90:f1:f8:57:49:0c:ed:ac: f9:02:b9:b8:26:f0:b4:76:93:5e:e0:be:97:62:ec:a4:22:12: 13:66:f4:ba -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfBJzv/ZuRNLl5JG+iuIJDEg4oy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDMyOFoX DTI3MDUwMjAxNDgyOFowMzExMC8GA1UEAxMoQzIwNDA5NUQwREZBMjlDQTAyMjJG NEMxQkU1RTZBOUM3RkU1QjVDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKi9QR5kRDXn6wwNfJgwDNFANOMvJu/xvycN7soyjm8Jm9BoF1Rw4itrM01P aL4yAyR9dYMVvxM9mjMfodc0F/ZOiEZGkb9i//fQa82ZTPT+MhR2Z3G9N3yHP4Z7 52ffWspNEbExVDZEcQDg8DT+2f1jOml3YBhiBwOGoOyerGG/wNIz9KFqA9TZ0HWm GXSMprk84MfEEs09sU9iM4Pnbk4awSFICr56LwK28VDR4SF9Kj0wFN/YNZWXWVmh AqILtSQFk9L+Ny/4cFaMWAKLl240cOGgrzuKb47HQEjTotEPGr4pijB6/zG23ptP spPgcTVwyjo+EDmCqe3fmon65gsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMIECV0N+inKAiL0wb5eapx/5bXMMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I5MGQwMjY1LTJjYzEtNDYzZC05NDhiLWNkZWQxM2EyMDI5NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iOTBkMDI2 NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9DMjA0MDk1RDBERkEyOUNB MDIyMkY0QzFCRTVFNkE5QzdGRTVCNUNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQq1MA0GCSqGSIb3DQEBCwUAA4IBAQBWm3kze1hdhWoMR2plDfHcCcm/Gqfa 4JjjqY3TYhavCbSqnc/Id3HeaPwIvheKxg2jLwAkjf99ZQjL8R1N8q+FBjAUpRMB gzgUdQWTXbgNBT3/Js8cCGk1VcHADosea8HoxMsbvW22XvERi/cpQMkIrhyjMHDD numlheF4CrzntEGswGQFbJaupZSOaq8jvj5TzQX12swBwRoAgIJBNjd/hVnohqAo zLgIxigGsydCP7Y8+rgtUnSu9dmzdsLsAVtzC3YlIEJr0u3X+m5TSraMDpktYP8a 3c5Z2zF4GnZs1GDEkPH4V0kM7az5Arm4JvC0dpNe4L6XYuykIhITZvS6 -----END CERTIFICATE-----Generated at Tue May 12 22:02:33 2026 by rpki-client