$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer (raw, json) Hash identifier: 1rWk5TworZUZIxEhhHM4/i1NbeAsT+h1mLJ8ep7w5mU= Subject key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6719BCFA0F7D60FC8608B0C89363B54912A79CEB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:06 +0000 Certificate not after: Sun 02 May 2027 02:04:06 +0000 Subordinate resources: IP: 160.19.144.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:19:bc:fa:0f:7d:60:fc:86:08:b0:c8:93:63:b5:49:12:a7:9c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:59:06 2026 GMT Not After : May 2 02:04:06 2027 GMT Subject: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:df:33:4c:73:af:2c:a3:fc:73:2b:c9:4c: d1:48:3e:01:5b:80:35:75:85:9e:fc:f3:61:f1:30: cf:e6:ef:85:31:58:8e:ed:7e:8f:7d:3f:f2:9c:9f: b2:8f:d8:6c:87:e7:e6:ae:55:aa:95:c6:4d:53:65: 34:c8:2d:53:99:3d:19:41:d8:eb:af:2c:81:9f:ea: f9:45:7e:11:d1:fa:30:06:96:68:b5:bb:a2:13:35: 42:e8:14:18:81:a5:18:3c:6f:25:95:4f:25:ad:33: da:8c:2a:95:a6:61:ff:1c:bd:82:d8:69:68:6c:60: ab:e5:77:33:bc:6b:d2:30:df:78:e5:b6:14:f7:b1: 5e:48:7e:cc:29:ca:ce:5f:7a:f3:c7:8c:50:63:b8: 5f:e0:b1:b5:79:32:74:b9:44:98:fc:96:ac:78:8b: b8:49:60:a4:4c:59:ea:ac:82:0d:ad:d2:1d:56:e9: 31:7d:5c:7d:02:2f:50:34:89:ec:19:a1:c0:d9:03: 73:af:65:3b:6c:20:8a:19:c2:59:1f:63:2d:33:44: f9:e1:e0:10:cf:e3:74:67:70:3f:5a:f4:91:1b:e7: f3:c7:08:c1:7b:ed:d0:f2:20:9f:c8:a8:81:e2:c5: e9:7b:f8:4e:ac:9f:90:57:b2:88:ea:4a:99:3e:c2: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.144.0/23 Signature Algorithm: sha256WithRSAEncryption 63:12:1d:a0:17:ab:4c:5e:eb:70:16:a8:be:8d:50:84:c3:37: 8f:7b:02:c6:bc:94:c4:e5:0a:1b:d6:0a:f5:82:50:1a:46:a7: 92:61:e8:a2:08:2b:d4:cb:e0:31:61:20:6b:36:de:de:13:37: 34:0e:04:8a:7e:a2:97:42:cd:fd:20:a7:43:66:4b:ed:02:0e: 95:f8:26:82:42:42:84:d0:b6:db:4e:21:68:a2:2c:0f:b0:7d: 90:28:7c:98:ae:06:a4:6b:e0:8e:11:69:9d:d0:a1:b4:08:31: 81:f9:7a:8c:46:0c:2b:bb:fa:b6:e1:a0:e7:5e:11:b1:b3:66: 95:a9:7c:29:db:08:8d:19:ae:3c:98:b2:99:86:72:78:9a:cd: 4f:e0:c6:38:6a:ac:c2:1b:b3:01:bd:3e:80:f2:26:7e:55:7b: fb:74:c1:cc:23:2d:e6:21:bf:dd:eb:b6:fa:71:60:63:17:e9: 03:e8:b2:8a:58:c5:ef:a1:dc:00:56:5d:1f:2c:56:f9:44:2a: 3d:8a:d8:f6:dd:b4:1d:a4:d8:6d:9c:30:06:a2:cc:52:36:84: 93:85:37:f6:a2:3f:22:82:c5:3d:ba:a4:6b:c1:3f:6b:8e:50: ea:74:bb:ad:a8:02:c6:03:2b:13:fe:fb:66:88:f7:78:4e:9b: 2d:b0:f5:c0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZxm8+g99YPyGCLDIk2O1SRKnnOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTkwNloX DTI3MDUwMjAyMDQwNlowMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2 NzhFRkY4RDI3MUExNEVBRDhBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOn3zNMc68so/xzK8lM0Ug+AVuANXWFnvzzYfEwz+bvhTFYju1+j30/8pyf so/YbIfn5q5VqpXGTVNlNMgtU5k9GUHY668sgZ/q+UV+EdH6MAaWaLW7ohM1QugU GIGlGDxvJZVPJa0z2owqlaZh/xy9gthpaGxgq+V3M7xr0jDfeOW2FPexXkh+zCnK zl9688eMUGO4X+CxtXkydLlEmPyWrHiLuElgpExZ6qyCDa3SHVbpMX1cfQIvUDSJ 7BmhwNkDc69lO2wgihnCWR9jLTNE+eHgEM/jdGdwP1r0kRvn88cIwXvt0PIgn8io geLF6Xv4TqyfkFeyiOpKmT7ClTECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNVR1Y8odrvanDZnjv+NJxoU6tijMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q0MGJkNmU0LWI0ZmItNGY0OC1iODNhLWFjYjhmMmQ3NDU4My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNDBiZDZl NC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC9ENTUxRDU4RjI4NzZCQkRB OUMzNjY3OEVGRjhEMjcxQTE0RUFEOEEzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBOQMA0GCSqGSIb3DQEBCwUAA4IBAQBjEh2gF6tMXutwFqi+jVCEwzePewLG vJTE5Qob1gr1glAaRqeSYeiiCCvUy+AxYSBrNt7eEzc0DgSKfqKXQs39IKdDZkvt Ag6V+CaCQkKE0LbbTiFooiwPsH2QKHyYrgaka+COEWmd0KG0CDGB+XqMRgwru/q2 4aDnXhGxs2aVqXwp2wiNGa48mLKZhnJ4ms1P4MY4aqzCG7MBvT6A8iZ+VXv7dMHM Iy3mIb/d67b6cWBjF+kD6LKKWMXvodwAVl0fLFb5RCo9itj23bQdpNhtnDAGosxS NoSThTf2oj8igsU9uqRrwT9rjlDqdLutqALGAysT/vtmiPd4TpstsPXA -----END CERTIFICATE-----Generated at Tue May 12 22:03:15 2026 by rpki-client