$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer (raw, json) Hash identifier: ddi/CN15HL9jnoV28dZql981EyS+5As6YeaznhaRrGQ= Subject key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 570541685A477D89C95392B2048EC2AE2A0B6521 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:05 +0000 Certificate not after: Sun 02 May 2027 01:06:05 +0000 Subordinate resources: IP: 160.22.192.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:05:41:68:5a:47:7d:89:c9:53:92:b2:04:8e:c2:ae:2a:0b:65:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:01:05 2026 GMT Not After : May 2 01:06:05 2027 GMT Subject: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:4c:96:1e:39:ea:2b:51:f9:cd:65:b1:1b: 92:84:f4:fc:3e:2f:5f:2e:61:b7:7f:64:70:45:de: c1:99:cf:84:35:0e:e1:54:1f:4f:6d:0a:fe:f8:33: 97:68:5e:cb:05:fd:5d:07:82:d5:77:b9:eb:e9:38: 3a:8d:24:84:1b:c6:2b:1b:22:0b:9b:f4:b6:e1:e1: 8b:80:95:82:3f:d6:7b:92:93:6b:c8:8a:72:11:a4: 1a:1e:16:72:4d:0b:a4:7f:d5:49:e8:7f:85:c7:bf: 09:99:9f:89:11:25:51:8a:ba:f2:2e:84:0a:31:72: 01:44:d1:6a:cf:fc:3d:f4:9c:f4:fe:e7:b8:87:3b: d0:97:2d:26:68:58:9d:83:07:6a:ba:ed:d6:05:08: 40:c0:b1:97:2f:09:51:86:fa:c5:ba:2a:73:ce:c1: 9a:58:0a:43:90:d0:25:97:9a:c0:4c:e5:91:ae:40: e0:4f:f3:f9:bc:33:14:71:9f:31:34:f2:07:2f:8a: 5b:1d:34:46:00:26:5b:cb:96:f7:b3:96:5f:93:c5: ec:f4:0e:24:20:b8:28:34:eb:f9:dd:35:16:b4:e9: 2e:9d:fc:1c:be:1f:41:6f:50:ea:91:34:e8:f9:64: d1:31:d5:09:ea:0c:d1:2c:48:f4:cb:46:ac:05:87: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.192.0/23 Signature Algorithm: sha256WithRSAEncryption 14:ca:fe:ca:31:00:cb:6a:e0:16:89:50:16:2f:11:1a:ba:59: 94:d8:24:c6:d1:c6:64:da:e6:1c:25:a6:2e:7b:5a:88:d5:3e: 0e:b9:21:4c:0d:b8:05:74:58:e1:d0:f8:25:35:71:56:d3:47: a9:c9:d5:21:78:a8:44:5b:3d:bd:2d:5b:c8:00:d1:2b:6e:2b: b0:38:08:8e:95:5b:31:6a:c4:f4:53:0b:bb:16:08:4d:43:8e: 87:f5:3b:57:93:be:e6:73:42:77:a6:31:86:76:4f:e1:64:cb: 29:a9:b3:96:b0:c3:dd:cb:b4:5b:fe:5d:08:a2:d9:39:67:0e: f6:17:54:f7:af:65:16:15:22:b9:7e:46:37:36:56:c6:99:19: 0f:2d:b9:1b:21:94:59:36:ac:6c:b1:30:61:82:56:59:02:21: 28:ef:30:1f:82:95:47:cf:98:13:01:0d:cb:e9:8a:ce:bb:ce: 4a:8c:df:25:b2:9a:b1:44:f1:19:01:62:25:a9:ad:4e:73:f1: 9f:dc:71:e8:f8:b5:71:c0:cd:4a:04:8e:99:30:3a:fe:1e:a4: e9:36:d3:62:13:66:92:21:27:a9:7e:44:a5:42:71:82:de:89: eb:1e:84:21:9e:f7:0a:6e:e9:39:38:96:e4:3b:ba:0c:b0:ea: cd:35:ef:88 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVwVBaFpHfYnJU5KyBI7CrioLZSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDEwNVoX DTI3MDUwMjAxMDYwNVowMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERD QkQ2RUIwNUMwOUEyRjgxNUMwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJeTJYeOeorUfnNZbEbkoT0/D4vXy5ht39kcEXewZnPhDUO4VQfT20K/vgz l2heywX9XQeC1Xe56+k4Oo0khBvGKxsiC5v0tuHhi4CVgj/We5KTa8iKchGkGh4W ck0LpH/VSeh/hce/CZmfiRElUYq68i6ECjFyAUTRas/8PfSc9P7nuIc70JctJmhY nYMHarrt1gUIQMCxly8JUYb6xboqc87BmlgKQ5DQJZeawEzlka5A4E/z+bwzFHGf MTTyBy+KWx00RgAmW8uW97OWX5PF7PQOJCC4KDTr+d01FrTpLp38HL4fQW9Q6pE0 6Plk0THVCeoM0SxI9MtGrAWHQI0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNiOAG0hlzDFLd3L1usFwJovgVwDMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdhMDIxMGIzLWNjYTItNDNjNS04OWY5LTVhOTA4NmE2MDcwMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YTAyMTBi My1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC9EODhFMDA2RDIxOTczMEM1 MkRERENCRDZFQjA1QzA5QTJGODE1QzAzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBbAMA0GCSqGSIb3DQEBCwUAA4IBAQAUyv7KMQDLauAWiVAWLxEaulmU2CTG 0cZk2uYcJaYue1qI1T4OuSFMDbgFdFjh0PglNXFW00epydUheKhEWz29LVvIANEr biuwOAiOlVsxasT0Uwu7FghNQ46H9TtXk77mc0J3pjGGdk/hZMspqbOWsMPdy7Rb /l0Iotk5Zw72F1T3r2UWFSK5fkY3NlbGmRkPLbkbIZRZNqxssTBhglZZAiEo7zAf gpVHz5gTAQ3L6YrOu85KjN8lspqxRPEZAWIlqa1Oc/Gf3HHo+LVxwM1KBI6ZMDr+ HqTpNtNiE2aSISepfkSlQnGC3onrHoQhnvcKbuk5OJbkO7oMsOrNNe+I -----END CERTIFICATE-----Generated at Tue May 12 22:52:34 2026 by rpki-client