$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer File: D3CDCB356F94C51B241188653C7ADC2C79D79424.cer (raw, json) Hash identifier: W/pN3No+S4r5fkfcko44bdmgZsGr6lOG0f5l56zNbt8= Subject key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 43998B37C89D7963D593A9DFD17306028E806808 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:05 +0000 Certificate not after: Sun 02 May 2027 01:59:05 +0000 Subordinate resources: IP: 160.187.231.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:99:8b:37:c8:9d:79:63:d5:93:a9:df:d1:73:06:02:8e:80:68:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:54:05 2026 GMT Not After : May 2 01:59:05 2027 GMT Subject: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:be:8d:4d:2e:03:b5:41:ae:c4:00:8a:f0:de: 50:cc:e4:73:4b:1f:a9:8b:aa:c4:5e:84:79:19:02: 51:54:a2:a8:63:e4:22:79:92:b4:69:ab:f8:45:84: 7b:9f:fd:f0:90:13:0b:4b:9d:27:28:a9:d5:2a:b0: d3:a4:ce:4c:69:2a:24:b8:59:7a:1c:be:4a:0e:12: 4b:e7:84:d2:49:44:13:3c:e9:0e:69:7d:99:d2:02: 10:ba:73:0a:78:ab:6b:c9:44:3a:cf:aa:5b:86:24: 5b:36:c3:22:2b:0e:e2:19:fd:8d:61:d9:b7:c8:a8: 4d:1d:76:05:fc:a2:03:40:c7:66:17:5c:35:0a:1d: 8f:23:c9:35:33:ad:47:11:92:30:dd:fd:82:9f:7b: db:00:58:35:9b:a9:85:50:c0:53:a6:19:ec:54:84: 29:2d:15:55:7e:5c:cd:3c:50:9c:cb:20:8a:30:1f: 7c:bb:8e:3d:ea:38:90:ba:e4:56:04:d3:a2:6d:c4: 1c:c3:42:6b:04:5c:e4:40:de:00:33:34:af:46:31: b9:35:45:43:ea:fc:11:19:4d:5d:3c:3f:83:c6:03: 85:77:6a:63:e7:73:e8:43:b1:d9:20:7f:22:50:9a: 8c:5e:e5:c9:70:17:13:6e:e9:99:4d:7b:71:fc:95: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.231.0/24 Signature Algorithm: sha256WithRSAEncryption 69:3c:c4:ac:9a:b3:44:d6:58:5b:d7:7f:13:83:a0:59:8e:f6: bf:b7:75:11:d8:30:15:bb:f2:c5:20:f7:26:de:86:4a:c1:8d: 93:d4:85:22:36:90:cf:1c:c7:1a:7e:06:7b:90:54:51:9f:a0: 7c:d6:2f:59:c2:2f:78:c5:d8:08:ce:17:06:34:bf:2d:2c:df: ae:53:e1:96:b0:80:5a:e0:24:dc:a8:5e:54:93:27:0a:b9:b8: 54:7a:78:21:e2:2c:3e:fa:f5:50:bf:85:35:24:62:d8:ea:db: ad:3e:12:6c:84:b4:86:da:40:ab:9c:10:40:a5:33:e5:3d:62: 06:03:cf:27:e0:2f:36:ef:a6:8d:e1:9e:1a:0d:2a:ae:0c:dd: 05:18:05:6e:46:7c:d1:ce:e8:c5:ae:40:e0:a7:ee:1e:a5:34: 69:ea:e5:6d:ea:47:ab:16:f1:d7:5a:05:08:55:59:15:f5:fb: 3d:da:2b:a6:b2:d2:6b:72:11:f3:31:c4:45:ea:84:62:ef:ea: 3c:c2:82:a8:10:fc:b0:8a:89:3f:13:82:19:97:f5:2d:55:ab: 3d:22:92:ac:17:93:85:fb:5d:1b:3c:f3:0f:9c:8a:f2:1b:1e: 86:9c:79:a8:aa:7b:38:1e:92:f3:53:33:c3:f4:05:dd:fb:27: fd:99:7d:28 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQ5mLN8ideWPVk6nf0XMGAo6AaAgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTQwNVoX DTI3MDUwMjAxNTkwNVowMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4 ODY1M0M3QURDMkM3OUQ3OTQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPm+jU0uA7VBrsQAivDeUMzkc0sfqYuqxF6EeRkCUVSiqGPkInmStGmr+EWE e5/98JATC0udJyip1Sqw06TOTGkqJLhZehy+Sg4SS+eE0klEEzzpDml9mdICELpz Cnira8lEOs+qW4YkWzbDIisO4hn9jWHZt8ioTR12BfyiA0DHZhdcNQodjyPJNTOt RxGSMN39gp972wBYNZuphVDAU6YZ7FSEKS0VVX5czTxQnMsgijAffLuOPeo4kLrk VgTTom3EHMNCawRc5EDeADM0r0YxuTVFQ+r8ERlNXTw/g8YDhXdqY+dz6EOx2SB/ IlCajF7lyXAXE27pmU17cfyVT4MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNPNyzVvlMUbJBGIZTx63Cx515QkMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NhZmNiZmJiLWJhM2YtNGQ1My1hMDRmLTE0ZDZmNGJlMGNiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYWZjYmZi Yi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC9EM0NEQ0IzNTZGOTRDNTFC MjQxMTg4NjUzQzdBREMyQzc5RDc5NDI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoLvnMA0GCSqGSIb3DQEBCwUAA4IBAQBpPMSsmrNE1lhb138Tg6BZjva/t3UR 2DAVu/LFIPcm3oZKwY2T1IUiNpDPHMcafgZ7kFRRn6B81i9Zwi94xdgIzhcGNL8t LN+uU+GWsIBa4CTcqF5UkycKubhUengh4iw++vVQv4U1JGLY6tutPhJshLSG2kCr nBBApTPlPWIGA88n4C8276aN4Z4aDSquDN0FGAVuRnzRzujFrkDgp+4epTRp6uVt 6kerFvHXWgUIVVkV9fs92iumstJrchHzMcRF6oRi7+o8woKoEPywiok/E4IZl/Ut Vas9IpKsF5OF+10bPPMPnIryGx6GnHmoqns4HpLzUzPD9AXd+yf9mX0o -----END CERTIFICATE-----Generated at Tue May 12 22:52:52 2026 by rpki-client