$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer File: D54419983140D3CB73E625681538225CB12E5424.cer (raw, json) Hash identifier: BV7jW1/64Wx+0T5xhJVg4ii7tb0lfcuhjauIvWGD48o= Subject key identifier: D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3FB62BC8D87FECE546FD6BC4F3077191FCE63F5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:34:50 +0000 Certificate not after: Sun 02 May 2027 01:39:50 +0000 Subordinate resources: IP: 157.20.100.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b6:2b:c8:d8:7f:ec:e5:46:fd:6b:c4:f3:07:71:91:fc:e6:3f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:34:50 2026 GMT Not After : May 2 01:39:50 2027 GMT Subject: CN=D54419983140D3CB73E625681538225CB12E5424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:2c:4a:44:5f:ee:20:cd:05:32:46:ec:d5: 72:7f:d9:1c:f0:26:50:46:4a:42:e1:27:12:a3:e0: 78:71:18:db:86:6e:28:b8:18:8d:2d:89:1b:91:99: 94:be:7d:2c:08:a0:ba:49:49:ab:e7:7b:fb:c4:69: 5a:ee:60:1d:a9:f1:4a:cb:1d:ae:86:ee:d3:16:2c: 83:08:8a:30:ae:d8:1f:e0:b1:5a:6f:fd:af:e5:c5: 15:09:8d:00:2d:1d:9f:8d:83:54:f5:6d:d6:34:31: c3:1f:bf:72:0f:f4:ac:d0:fe:56:9c:45:d9:3b:4e: 5b:0b:80:46:4d:7f:a4:3c:85:15:d1:12:b4:5d:bb: 75:06:d3:6a:06:7a:e2:6d:25:ab:eb:9b:09:1a:35: a5:7b:d7:06:5c:90:e2:08:8a:01:57:42:35:1e:fa: c4:ab:d3:7a:15:ec:50:ab:5a:d0:9f:c3:c8:8c:6e: 56:37:97:d4:24:fe:2f:7e:57:6f:cb:04:df:a9:ad: bf:f3:5b:90:9d:a2:cd:dc:c8:73:8e:65:f4:c9:5b: 76:1f:00:ed:a2:5e:aa:7e:6a:e8:dd:5f:83:ee:b6: 7c:c4:67:19:3d:76:42:76:24:99:76:e5:f3:f4:d6: e3:85:c6:f3:f0:3b:43:3a:a2:8e:53:68:ff:bc:f5: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.100.0/24 Signature Algorithm: sha256WithRSAEncryption 33:45:08:5e:b9:86:d6:e4:a5:fa:12:a7:3c:cc:12:1a:96:ae: 9b:91:b9:a0:17:6a:5a:31:fc:b4:b3:31:ee:d6:e9:5b:f3:bf: 3e:d3:09:24:0d:9d:c8:83:74:3f:ff:ce:08:9b:d7:7a:b6:56: 62:8b:b0:d0:6b:54:f8:e2:4c:2d:e9:ec:0c:3b:71:ed:fa:c3: b9:66:e0:13:a5:b2:51:7e:6e:1d:eb:37:ee:cf:a3:33:b7:bb: f6:72:29:e2:1e:e6:60:87:3e:e2:3a:fe:0b:b1:2e:de:1b:84: 8e:eb:15:56:6a:c2:55:2b:73:10:50:73:1f:aa:fc:7a:73:40: 1e:c2:42:61:c6:1f:ff:64:20:d6:b5:21:cd:58:8a:36:48:69: 45:08:b3:28:dc:d2:43:99:50:84:9b:a3:48:53:33:79:ed:54: a5:f8:f5:20:5b:6d:a4:c9:9c:06:57:32:8d:c1:e7:4f:2b:71: 4b:1a:1c:21:3c:30:35:a1:81:96:bd:0a:de:0f:9b:4f:4a:1d: 5d:21:3e:d0:55:fb:de:8a:3f:bb:49:a7:12:99:26:46:bb:43: b8:ea:56:98:89:7f:fe:57:12:85:51:17:ea:a2:f4:00:03:80: 2a:2d:a6:5c:29:72:fe:00:0d:59:a8:5c:fc:a4:1a:4e:4b:9c: bb:67:e6:cd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUP7YryNh/7OVG/WvE8wdxkfzmP1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzQ1MFoX DTI3MDUwMjAxMzk1MFowMzExMC8GA1UEAxMoRDU0NDE5OTgzMTQwRDNDQjczRTYy NTY4MTUzODIyNUNCMTJFNTQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJInLEpEX+4gzQUyRuzVcn/ZHPAmUEZKQuEnEqPgeHEY24ZuKLgYjS2JG5GZ lL59LAiguklJq+d7+8RpWu5gHanxSssdrobu0xYsgwiKMK7YH+CxWm/9r+XFFQmN AC0dn42DVPVt1jQxwx+/cg/0rND+VpxF2TtOWwuARk1/pDyFFdEStF27dQbTagZ6 4m0lq+ubCRo1pXvXBlyQ4giKAVdCNR76xKvTehXsUKta0J/DyIxuVjeX1CT+L35X b8sE36mtv/NbkJ2izdzIc45l9Mlbdh8A7aJeqn5q6N1fg+62fMRnGT12QnYkmXbl 8/TW44XG8/A7QzqijlNo/7z1UEECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNVEGZgxQNPLc+YlaBU4IlyxLlQkMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FiODhkMmNhLTIyOWItNGFhYy05YjVjLTQyYzE1MTA1YmI4Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYjg4ZDJj YS0yMjliLTRhYWMtOWI1Yy00MmMxNTEwNWJiODIvMC9ENTQ0MTk5ODMxNDBEM0NC NzNFNjI1NjgxNTM4MjI1Q0IxMkU1NDI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnRRkMA0GCSqGSIb3DQEBCwUAA4IBAQAzRQheuYbW5KX6Eqc8zBIalq6bkbmg F2paMfy0szHu1ulb878+0wkkDZ3Ig3Q//84Im9d6tlZii7DQa1T44kwt6ewMO3Ht +sO5ZuATpbJRfm4d6zfuz6Mzt7v2ciniHuZghz7iOv4LsS7eG4SO6xVWasJVK3MQ UHMfqvx6c0AewkJhxh//ZCDWtSHNWIo2SGlFCLMo3NJDmVCEm6NIUzN57VSl+PUg W22kyZwGVzKNwedPK3FLGhwhPDA1oYGWvQreD5tPSh1dIT7QVfveij+7SacSmSZG u0O46laYiX/+VxKFURfqovQAA4AqLaZcKXL+AA1ZqFz8pBpOS5y7Z+bN -----END CERTIFICATE-----Generated at Wed May 13 02:37:06 2026 by rpki-client