$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer File: D769452C15749C457029AB81E06B7D36C9F48804.cer (raw, json) Hash identifier: OQZAdSZnMwedtJGUC3jqjGRC7zLSv72h+P/dBk8ZrvQ= Subject key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0D6BAA5AEE0E6315804B4B769202A2A218C55258 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:52:42 +0000 Certificate not after: Sun 02 May 2027 01:57:42 +0000 Subordinate resources: IP: 160.25.244.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6b:aa:5a:ee:0e:63:15:80:4b:4b:76:92:02:a2:a2:18:c5:52:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:52:42 2026 GMT Not After : May 2 01:57:42 2027 GMT Subject: CN=D769452C15749C457029AB81E06B7D36C9F48804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:4a:f6:03:b0:e4:3c:71:95:13:97:d7:8b: 1d:7c:05:56:90:98:53:ed:c3:6a:51:6e:22:67:53: 5d:0c:b3:43:e2:81:6f:e8:77:cb:b5:63:84:5e:e2: 4a:6f:b1:a8:64:67:10:75:7a:b9:c0:b0:1c:8d:2a: 5e:c3:ec:e4:8e:40:e4:31:f9:ba:e5:5e:51:29:dd: d1:89:d0:53:e0:61:50:fa:79:92:88:c2:bc:1c:7d: 8e:27:2f:62:48:9d:63:c7:bd:0f:3e:48:aa:cb:82: f6:a9:f1:a1:7f:a3:f1:7b:16:8d:81:54:71:51:af: 27:b8:51:25:06:a7:95:06:30:f0:b8:83:89:c4:4b: 55:e8:66:32:fa:36:b8:c2:69:41:8e:c9:29:c7:60: 21:39:73:d5:93:0f:39:a6:69:58:18:9d:42:84:5e: 98:3b:e3:93:2c:d8:12:e4:f8:3e:1f:f8:b6:0a:56: 44:90:07:87:b3:79:fb:95:f9:7d:03:32:73:72:0d: d2:3b:d3:6d:97:c6:46:0e:99:b2:94:3b:bc:89:03: 5e:48:7c:2e:af:2c:9e:59:00:ad:14:99:e7:8d:2f: d4:00:77:7f:66:3c:4d:80:b1:56:f6:41:41:c3:af: 15:4a:aa:2b:63:54:32:d5:9b:e1:6a:74:76:19:1d: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.244.0/23 Signature Algorithm: sha256WithRSAEncryption a5:2e:6c:e4:46:64:12:aa:71:a7:5a:27:85:40:2b:4f:85:9b: ad:bb:47:6c:d1:c6:40:a8:84:f7:d4:a9:a9:14:ee:16:d2:ac: dd:3d:b3:9c:cb:3a:29:eb:75:ed:d4:b5:32:4d:57:8a:71:9c: eb:a0:a8:0e:d2:5f:8c:24:23:97:c5:45:36:7d:a3:ed:71:be: a6:dc:3c:25:6c:b0:14:a9:74:2d:06:e3:4c:69:56:dd:46:7e: 04:77:82:6f:16:74:8d:55:19:ea:94:64:b2:de:05:ff:c1:16: 6d:5f:42:09:41:65:f4:c1:75:42:52:f4:13:ce:75:13:2c:c3: 6f:ad:d5:c8:2a:ff:ef:f9:d2:19:ee:76:be:5b:df:65:fe:84: e6:56:73:11:02:07:39:72:01:d1:7c:48:53:a3:a9:02:c7:8e: c1:92:e6:35:cf:51:15:ac:b7:b1:c6:11:ec:e4:9a:33:a9:f5: eb:26:3d:bd:17:36:89:40:c1:2f:0c:a9:c6:42:8a:9c:33:bb: 12:e4:18:90:4d:9c:60:be:61:a6:e8:5a:81:93:41:02:b9:a1: 7f:4e:21:31:a3:92:28:b4:9e:87:36:ec:b1:b4:29:aa:31:67: 4c:ad:81:67:19:dd:d7:64:02:03:8b:fd:38:ca:38:3d:7c:bd: 83:6c:dd:3a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDWuqWu4OYxWAS0t2kgKiohjFUlgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTI0MloX DTI3MDUwMjAxNTc0MlowMzExMC8GA1UEAxMoRDc2OTQ1MkMxNTc0OUM0NTcwMjlB QjgxRTA2QjdEMzZDOUY0ODgwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxaSvYDsOQ8cZUTl9eLHXwFVpCYU+3DalFuImdTXQyzQ+KBb+h3y7VjhF7i Sm+xqGRnEHV6ucCwHI0qXsPs5I5A5DH5uuVeUSnd0YnQU+BhUPp5kojCvBx9jicv YkidY8e9Dz5IqsuC9qnxoX+j8XsWjYFUcVGvJ7hRJQanlQYw8LiDicRLVehmMvo2 uMJpQY7JKcdgITlz1ZMPOaZpWBidQoRemDvjkyzYEuT4Ph/4tgpWRJAHh7N5+5X5 fQMyc3IN0jvTbZfGRg6ZspQ7vIkDXkh8Lq8snlkArRSZ540v1AB3f2Y8TYCxVvZB QcOvFUqqK2NUMtWb4Wp0dhkdOhsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNdpRSwVdJxFcCmrgeBrfTbJ9IgEMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M4Y2MxYzdlLWRhNzQtNGIxMS1iNjdhLWQ1ZjI3ZDk4MTc1Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jOGNjMWM3 ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC9ENzY5NDUyQzE1NzQ5QzQ1 NzAyOUFCODFFMDZCN0QzNkM5RjQ4ODA0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBn0MA0GCSqGSIb3DQEBCwUAA4IBAQClLmzkRmQSqnGnWieFQCtPhZutu0ds 0cZAqIT31KmpFO4W0qzdPbOcyzop63Xt1LUyTVeKcZzroKgO0l+MJCOXxUU2faPt cb6m3DwlbLAUqXQtBuNMaVbdRn4Ed4JvFnSNVRnqlGSy3gX/wRZtX0IJQWX0wXVC UvQTznUTLMNvrdXIKv/v+dIZ7na+W99l/oTmVnMRAgc5cgHRfEhTo6kCx47BkuY1 z1EVrLexxhHs5JozqfXrJj29FzaJQMEvDKnGQoqcM7sS5BiQTZxgvmGm6FqBk0EC uaF/TiExo5IotJ6HNuyxtCmqMWdMrYFnGd3XZAIDi/04yjg9fL2DbN06 -----END CERTIFICATE-----Generated at Tue May 12 22:02:44 2026 by rpki-client