$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer File: D441988C2049D77F9D98652623A88108BD7A9AE0.cer (raw, json) Hash identifier: YZv1Cz6gJlf26e9mYMt9bNXnck1YzovQWehOteL/THM= Subject key identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2203FE9A746EB5697ED914CA5100632BEEE85CB4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:20 +0000 Certificate not after: Sun 02 May 2027 00:47:20 +0000 Subordinate resources: IP: 157.20.204.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:03:fe:9a:74:6e:b5:69:7e:d9:14:ca:51:00:63:2b:ee:e8:5c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:42:20 2026 GMT Not After : May 2 00:47:20 2027 GMT Subject: CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:f2:54:50:73:43:b6:89:fb:28:02:3d:63: 0e:86:4b:f2:1f:cc:d7:6c:7c:06:df:9a:ae:ac:b8: d9:17:4c:90:08:e5:36:bf:89:eb:4d:06:e1:d9:3e: dd:86:9f:d0:b3:e9:cb:cb:29:48:a9:9f:34:96:1f: 83:41:e9:03:27:5a:07:58:dd:0c:10:42:f0:a4:48: 59:f1:6e:6b:cf:05:49:54:fc:84:30:d4:d5:76:2b: 5b:27:15:a8:18:3f:12:9d:ba:dc:98:5d:a5:bc:2b: e8:84:22:17:85:19:2a:ea:0b:6a:f3:61:4b:28:09: a1:7f:01:46:de:f4:3c:a3:bb:81:10:a1:3d:dd:26: ed:40:35:77:7d:6e:0d:74:5c:cd:07:9e:96:4c:11: 3f:7d:05:5a:c7:78:7a:49:16:ba:bc:47:77:27:7b: 76:6b:43:67:61:9d:90:70:61:67:4c:01:40:f9:12: a9:de:30:b7:45:f5:67:8a:7d:f5:d5:d7:b4:c0:b2: b2:84:e4:f7:c5:d0:64:41:e2:6c:78:cd:5c:23:75: c9:c3:bc:68:a2:49:92:db:6e:2a:1a:da:b6:fe:f8: e4:83:88:fa:2e:32:fe:28:fa:34:65:d8:b4:7d:76: 4f:3b:fe:9a:c0:77:05:ac:09:c2:57:35:38:4b:e4: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.204.0/23 Signature Algorithm: sha256WithRSAEncryption 19:11:75:41:f2:9e:c7:c7:70:39:3d:7b:8e:e0:9a:be:6a:a3: 7e:78:25:10:b2:c9:2f:75:75:ad:55:c2:98:fc:a7:29:f7:01: 6a:d2:35:55:86:e5:47:bd:aa:ec:35:59:8a:41:53:8f:ae:a2: fa:cb:89:0c:0a:26:b9:d9:f4:f1:eb:42:fb:4a:60:09:38:07: 77:84:da:49:bc:23:08:86:52:92:63:2a:e9:0d:5e:34:26:63: 76:a5:e5:5b:20:ae:c0:a6:0f:77:f8:84:65:e5:1e:89:ef:e0: 90:35:f0:7c:c1:5e:10:c5:96:e5:a1:da:dc:17:e3:e3:b9:9d: 96:a1:d5:4f:22:5f:1b:cb:fd:e9:1c:2f:c9:86:61:70:ef:73: 74:12:34:60:43:d5:1b:83:39:06:7e:77:b7:f9:1e:1d:81:8c: 8e:08:cf:e0:70:86:fb:c1:49:d4:30:d8:8c:11:1d:c2:6a:b0: 40:9e:f6:7f:9d:3f:41:0a:d8:27:21:62:58:8f:3f:fd:b1:da: 2c:e9:a4:c3:37:0e:1e:0a:f2:0b:d2:42:b7:db:da:e3:e3:74: 4c:57:22:65:3e:4e:93:79:f1:ea:06:65:88:c0:8a:1a:36:93: 48:7c:51:4d:f3:45:31:da:6e:de:26:7a:7f:61:82:fa:06:39: 89:b0:e6:c2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIgP+mnRutWl+2RTKUQBjK+7oXLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNDIyMFoX DTI3MDUwMjAwNDcyMFowMzExMC8GA1UEAxMoRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2 NTI2MjNBODgxMDhCRDdBOUFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjk8lRQc0O2ifsoAj1jDoZL8h/M12x8Bt+arqy42RdMkAjlNr+J600G4dk+ 3Yaf0LPpy8spSKmfNJYfg0HpAydaB1jdDBBC8KRIWfFua88FSVT8hDDU1XYrWycV qBg/Ep263Jhdpbwr6IQiF4UZKuoLavNhSygJoX8BRt70PKO7gRChPd0m7UA1d31u DXRczQeelkwRP30FWsd4ekkWurxHdyd7dmtDZ2GdkHBhZ0wBQPkSqd4wt0X1Z4p9 9dXXtMCysoTk98XQZEHibHjNXCN1ycO8aKJJkttuKhratv745IOI+i4y/ij6NGXY tH12Tzv+msB3BawJwlc1OEvkGukCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNRBmIwgSdd/nZhlJiOogQi9eprgMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVkODIzYmIzLTVhMDEtNDY1OC1hNzgzLWY4ZTg5ZmFkY2Y0NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZDgyM2Ji My01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC9ENDQxOTg4QzIwNDlENzdG OUQ5ODY1MjYyM0E4ODEwOEJEN0E5QUUwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnRTMMA0GCSqGSIb3DQEBCwUAA4IBAQAZEXVB8p7Hx3A5PXuO4Jq+aqN+eCUQ sskvdXWtVcKY/Kcp9wFq0jVVhuVHvarsNVmKQVOPrqL6y4kMCia52fTx60L7SmAJ OAd3hNpJvCMIhlKSYyrpDV40JmN2peVbIK7Apg93+IRl5R6J7+CQNfB8wV4QxZbl odrcF+PjuZ2WodVPIl8by/3pHC/JhmFw73N0EjRgQ9UbgzkGfne3+R4dgYyOCM/g cIb7wUnUMNiMER3CarBAnvZ/nT9BCtgnIWJYjz/9sdos6aTDNw4eCvIL0kK329rj 43RMVyJlPk6TefHqBmWIwIoaNpNIfFFN80Ux2m7eJnp/YYL6BjmJsObC -----END CERTIFICATE-----Generated at Wed May 13 01:44:54 2026 by rpki-client