$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer File: D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer (raw, json) Hash identifier: 0Xjq74lRM9D3Fr5NY2JiyVbKL+eIkR1AFoI09IiUwZk= Subject key identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6AF277F60273F85B59B543898887A0E197265D63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:59 +0000 Certificate not after: Sun 02 May 2027 01:28:59 +0000 Subordinate resources: IP: 157.66.174.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f2:77:f6:02:73:f8:5b:59:b5:43:89:88:87:a0:e1:97:26:5d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:23:59 2026 GMT Not After : May 2 01:28:59 2027 GMT Subject: CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:48:a4:09:68:83:3e:cb:ad:8a:bd:db:21: ed:bb:73:d9:34:63:4f:e2:88:8e:24:21:06:c6:9b: 3a:a8:fc:86:3b:a7:73:84:e4:e9:42:80:49:01:e8: df:7d:26:ef:b9:f9:ae:ef:18:46:be:10:a0:e0:2b: be:73:51:b9:35:34:4e:fc:ba:00:f7:09:dc:9c:ed: 10:4c:aa:05:58:9a:3d:47:bb:3a:9a:32:90:81:7a: a4:44:9f:9a:38:99:0b:77:ee:21:d6:af:1a:3b:54: 36:13:ca:b4:0c:8c:91:0d:97:69:64:0a:a6:84:c6: 0e:8f:fd:4c:94:be:db:1e:e0:9e:26:7c:39:90:13: 92:f1:fa:1a:82:ae:a6:75:e6:b3:7b:5a:60:b9:bb: 35:67:3e:59:30:73:b5:cd:f1:a4:f7:41:1c:43:c3: 1a:47:eb:32:82:f5:6d:42:78:dd:93:e6:17:19:f2: 93:44:73:d5:d4:f2:0c:52:21:89:2b:32:ae:30:e6: 9f:6f:be:38:5e:c0:9d:64:fc:b4:05:dd:ba:07:59: f9:b6:5e:4b:9e:49:1f:18:06:c1:00:da:09:55:4d: 7a:ec:f4:e6:be:07:ed:49:27:27:b2:b4:2a:df:28: d5:45:75:d6:eb:9c:42:b4:21:2a:24:5b:74:b2:25: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.174.0/23 Signature Algorithm: sha256WithRSAEncryption 51:2c:5d:bd:8f:6a:25:a3:22:4f:37:f0:f1:db:bd:2f:a3:d0: 23:e5:d5:77:cb:68:57:ae:03:c4:e0:69:f2:69:6b:09:11:b6: c4:45:06:28:0d:d4:3a:f6:f7:65:2c:d6:58:fe:c0:b1:16:4f: 5a:a9:cc:3d:18:29:32:48:13:25:05:25:8f:65:39:01:8b:23: b8:e7:2f:29:16:7a:36:80:09:1a:88:ad:3a:6b:af:24:64:8d: a1:63:21:d3:a6:64:ad:4e:75:6c:c4:c2:b4:68:c3:67:50:dc: 06:0c:80:c7:86:12:6f:88:44:1e:3d:44:6d:0a:0a:01:23:3d: 9e:e0:31:aa:fe:a1:4e:3f:9c:59:07:0a:b3:b0:f1:bf:69:a6: 31:e5:0b:34:b6:77:76:b3:7b:f5:8c:ba:98:cb:a5:ee:38:6b: 6f:cd:38:9a:04:c9:a3:c6:85:66:3c:82:30:a3:07:c5:58:2e: 74:e8:97:73:96:f4:91:64:df:1b:2a:bc:0e:9d:88:1f:00:33: c0:e0:d8:8b:fe:7b:7e:c5:d9:86:4b:f8:ca:ea:56:31:2f:71: cf:e9:e1:a9:f5:7a:1d:3e:fb:d0:c4:2b:87:22:74:fa:42:a1: fd:97:72:6f:7f:19:cf:b2:fe:ac:81:65:70:20:81:9a:61:ff: 24:20:81:6e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUavJ39gJz+FtZtUOJiIeg4ZcmXWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjM1OVoX DTI3MDUwMjAxMjg1OVowMzExMC8GA1UEAxMoRDc2MUM0NEFCRTlBQTk4OUY3MDQ4 QjREM0U1NjE0ODlDNERBODI4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYtSKQJaIM+y62Kvdsh7btz2TRjT+KIjiQhBsabOqj8hjunc4Tk6UKASQHo 330m77n5ru8YRr4QoOArvnNRuTU0Tvy6APcJ3JztEEyqBViaPUe7OpoykIF6pESf mjiZC3fuIdavGjtUNhPKtAyMkQ2XaWQKpoTGDo/9TJS+2x7gniZ8OZATkvH6GoKu pnXms3taYLm7NWc+WTBztc3xpPdBHEPDGkfrMoL1bUJ43ZPmFxnyk0Rz1dTyDFIh iSsyrjDmn2++OF7AnWT8tAXdugdZ+bZeS55JHxgGwQDaCVVNeuz05r4H7UknJ7K0 Kt8o1UV11uucQrQhKiRbdLIlGX8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNdhxEq+mqmJ9wSLTT5WFInE2oKAMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzliNzMzZGNmLTlmNWUtNDc3NS05Y2U3LTlkZDUyNWI0NGI4Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YjczM2Rj Zi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC9ENzYxQzQ0QUJFOUFBOTg5 RjcwNDhCNEQzRTU2MTQ4OUM0REE4MjgwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUKuMA0GCSqGSIb3DQEBCwUAA4IBAQBRLF29j2oloyJPN/Dx270vo9Aj5dV3 y2hXrgPE4GnyaWsJEbbERQYoDdQ69vdlLNZY/sCxFk9aqcw9GCkySBMlBSWPZTkB iyO45y8pFno2gAkaiK06a68kZI2hYyHTpmStTnVsxMK0aMNnUNwGDIDHhhJviEQe PURtCgoBIz2e4DGq/qFOP5xZBwqzsPG/aaYx5Qs0tnd2s3v1jLqYy6XuOGtvzTia BMmjxoVmPIIwowfFWC506JdzlvSRZN8bKrwOnYgfADPA4NiL/nt+xdmGS/jK6lYx L3HP6eGp9XodPvvQxCuHInT6QqH9l3JvfxnPsv6sgWVwIIGaYf8kIIFu -----END CERTIFICATE-----Generated at Tue May 12 22:47:31 2026 by rpki-client