$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer File: CC4A3B86531912A00DCFBF94884369F58244CFCD.cer (raw, json) Hash identifier: h8vjvu8RvuXMGrSRMEyUQIElHUWEW2uk1uRdJJgWOG0= Subject key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 191DC1B9521EE23E97CBA15A16E34005BC7109B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:57:51 +0000 Certificate not after: Sun 02 May 2027 01:02:51 +0000 Subordinate resources: IP: 157.15.77.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1d:c1:b9:52:1e:e2:3e:97:cb:a1:5a:16:e3:40:05:bc:71:09:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:57:51 2026 GMT Not After : May 2 01:02:51 2027 GMT Subject: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:bc:a8:ab:46:1a:e1:ca:10:41:64:cd:36: c7:9d:72:bc:30:0f:a4:2c:21:01:24:84:93:6f:ac: c5:09:61:31:d6:b3:df:55:ae:6f:59:70:ff:b1:94: aa:8b:d5:1e:88:5f:89:e2:4e:d4:de:dd:36:2c:67: b3:4f:14:40:15:71:16:dc:71:07:b0:0a:f7:e3:74: ac:f4:dd:77:06:6e:87:a6:70:2b:42:05:d9:a2:d1: 81:0f:25:5e:ca:0a:06:0f:88:ec:43:79:af:54:66: f4:a1:90:f5:32:80:89:d1:63:1c:f0:3c:8d:17:3f: 78:2c:b5:9e:58:6d:c3:b0:d4:55:48:c6:34:63:65: 85:f0:1d:78:d8:eb:aa:90:65:53:f9:c6:1d:d8:94: 48:35:33:66:e6:3c:f8:71:19:1b:f1:62:a9:81:58: 08:c7:9a:9b:5c:3b:32:8e:fe:aa:6a:2a:f6:0f:15: 14:ec:b7:04:ba:45:88:e8:87:eb:02:e4:c0:06:9b: 96:d8:f4:b7:c6:84:2e:d0:7e:7a:76:a0:ce:2c:d9: c2:50:d1:7f:1d:ee:9d:5d:6a:3d:f8:43:d3:0a:e8: 79:9c:a0:34:bf:c0:75:f8:f1:74:e3:79:c9:91:bf: 7a:11:24:bd:03:50:85:da:0a:13:b0:58:61:f8:50: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.77.0/24 Signature Algorithm: sha256WithRSAEncryption 82:03:dc:81:dd:8c:83:dd:88:10:76:ba:2a:6b:fb:d5:b4:9c: 4e:d8:4a:01:1f:17:0a:2f:ef:2a:a3:e4:89:b0:30:35:e7:ea: a0:52:22:fc:42:9b:33:f9:29:ae:53:7a:25:76:cb:d6:2b:6e: 08:22:3c:40:46:d3:d5:4e:d2:df:b0:66:34:3e:7f:4f:c9:22: 3e:2e:fa:f0:be:f8:08:b6:66:98:42:9a:21:f2:91:27:50:fb: 5f:f0:4b:8f:fe:a5:37:25:23:11:2e:46:68:78:e2:12:8a:d5: bd:9d:08:14:e0:28:0c:04:36:e7:b5:2c:7f:76:2c:88:54:00: ba:b1:91:85:1a:5e:2a:83:2e:4f:f2:01:5b:e5:cf:88:e7:79: 4b:a4:47:d1:0c:6f:0d:c5:66:72:1c:f4:76:6f:6b:59:25:c3: d1:66:31:5b:2f:d7:13:1c:9e:b3:7f:09:97:37:78:2c:b0:5a: f5:be:20:13:88:87:bf:e3:11:f4:f2:62:f0:7a:da:7c:17:87: 93:9b:57:fd:9d:28:01:ec:df:d9:41:04:0a:04:ce:0d:4e:71: 6d:34:40:9f:a5:ac:1b:9a:dd:49:6f:96:52:5d:bb:3d:ea:d3: 9c:47:58:d6:b0:9e:39:4b:48:37:a9:de:c2:a5:62:d9:86:ab: e3:21:57:97 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGR3BuVIe4j6Xy6FaFuNABbxxCbMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNTc1MVoX DTI3MDUwMjAxMDI1MVowMzExMC8GA1UEAxMoQ0M0QTNCODY1MzE5MTJBMDBEQ0ZC Rjk0ODg0MzY5RjU4MjQ0Q0ZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8nvKirRhrhyhBBZM02x51yvDAPpCwhASSEk2+sxQlhMdaz31Wub1lw/7GU qovVHohfieJO1N7dNixns08UQBVxFtxxB7AK9+N0rPTddwZuh6ZwK0IF2aLRgQ8l XsoKBg+I7EN5r1Rm9KGQ9TKAidFjHPA8jRc/eCy1nlhtw7DUVUjGNGNlhfAdeNjr qpBlU/nGHdiUSDUzZuY8+HEZG/FiqYFYCMeam1w7Mo7+qmoq9g8VFOy3BLpFiOiH 6wLkwAabltj0t8aELtB+enagzizZwlDRfx3unV1qPfhD0wroeZygNL/AdfjxdON5 yZG/ehEkvQNQhdoKE7BYYfhQ/McCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMxKO4ZTGRKgDc+/lIhDafWCRM/NMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc1N2UxMWRjLWZmNzEtNGVkNy1hNjk1LTgzNDkyMmUwZTM2MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NTdlMTFk Yy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC9DQzRBM0I4NjUzMTkxMkEw MERDRkJGOTQ4ODQzNjlGNTgyNDRDRkNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQ9NMA0GCSqGSIb3DQEBCwUAA4IBAQCCA9yB3YyD3YgQdroqa/vVtJxO2EoB HxcKL+8qo+SJsDA15+qgUiL8Qpsz+SmuU3oldsvWK24IIjxARtPVTtLfsGY0Pn9P ySI+LvrwvvgItmaYQpoh8pEnUPtf8EuP/qU3JSMRLkZoeOISitW9nQgU4CgMBDbn tSx/diyIVAC6sZGFGl4qgy5P8gFb5c+I53lLpEfRDG8NxWZyHPR2b2tZJcPRZjFb L9cTHJ6zfwmXN3gssFr1viATiIe/4xH08mLwetp8F4eTm1f9nSgB7N/ZQQQKBM4N TnFtNECfpawbmt1Jb5ZSXbs96tOcR1jWsJ45S0g3qd7CpWLZhqvjIVeX -----END CERTIFICATE-----Generated at Tue May 12 22:47:39 2026 by rpki-client