$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer (raw, json) Hash identifier: 6kdR+np9LgDnuDuET6uH+0V6jZv957GNLJDKmPNwT6Q= Subject key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2742C8130976D9813D0176F7AFD0B7C520B03F08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:00:38 +0000 Certificate not after: Sun 02 May 2027 00:05:38 +0000 Subordinate resources: IP: 160.191.26.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:42:c8:13:09:76:d9:81:3d:01:76:f7:af:d0:b7:c5:20:b0:3f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:00:38 2026 GMT Not After : May 2 00:05:38 2027 GMT Subject: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:16:03:8e:c4:03:2f:b4:1a:8b:2d:af:db: 52:51:d9:6c:59:3d:0a:88:ee:3c:53:46:f0:db:e1: e2:c5:2f:d8:c5:8c:76:85:9c:5e:a9:de:2e:8c:c3: 3b:6b:7d:c5:fc:57:9a:8d:9d:c7:b6:2a:e3:19:b1: 74:42:94:d4:96:59:3b:95:91:51:e0:9c:ee:2d:65: 12:ae:43:49:9e:81:d2:9f:97:fd:4c:fe:77:d9:0f: 69:b7:fc:a7:f2:59:0b:52:04:a5:fd:e6:30:ff:aa: 3e:3f:44:35:45:f9:78:62:2c:5f:68:a9:65:f1:87: 9c:56:7a:3f:25:20:ae:a0:02:7a:dc:2e:2f:c4:89: 3e:97:a3:f4:b9:75:d0:7f:e0:32:e2:8a:27:cc:bd: 0a:16:d3:0f:c1:df:a9:38:b1:b1:d7:14:80:81:b3: e4:b5:ed:a1:43:33:9d:4d:d8:cf:27:60:81:17:dc: 28:65:64:fd:ad:28:37:46:ce:ca:62:8d:79:c2:97: 67:d3:be:53:16:76:61:53:2d:42:e5:f4:b6:50:b7: 62:ab:eb:de:62:d6:d5:f4:6f:03:9b:b2:6a:ac:1b: 08:2b:60:24:7a:87:5d:2c:48:d8:45:1c:81:ed:85: 23:9d:59:ff:f9:df:f9:32:4a:24:c3:f6:5f:d8:4c: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.26.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:1b:77:ae:7c:43:d6:b2:06:dc:a2:94:dd:a6:02:a8:e0:bb: 60:69:47:2c:17:70:99:7f:af:79:10:87:c3:6e:bf:2b:72:79: 30:c2:b8:70:9c:e9:ee:e1:71:a5:ad:f8:6c:10:27:e4:24:3d: 36:7e:16:09:c6:bd:70:9d:19:e0:e2:1a:51:61:00:06:e6:b2: bd:72:d1:2b:f5:73:9b:8b:6f:80:9b:fb:ce:81:8a:8e:0a:c5: 8d:c3:29:e3:3a:74:0c:db:4e:fb:a7:7b:ca:84:a0:2e:1d:3d: ca:ef:6e:a3:8d:e3:be:3a:41:3a:6e:1b:45:91:76:62:18:92: 6b:50:b5:65:7b:a9:c5:e4:c4:05:dc:1f:91:e1:13:51:77:3d: 5c:ff:45:60:b8:d2:84:83:a5:1e:fa:2e:3a:c4:59:fe:ca:09: 34:a3:09:79:e7:1e:e9:bb:d4:04:c4:39:a0:82:3f:53:35:73: cc:10:1d:08:47:ee:a5:5d:b9:a6:b2:c4:4c:bb:71:2c:26:af: 97:72:c4:3a:00:23:7e:46:3c:3c:be:7e:48:7d:8e:4d:a5:b5: 89:8c:a4:e6:8d:84:db:ca:a4:0b:be:2c:bd:c8:bb:ef:05:c6: bc:42:2a:10:aa:8c:66:a7:a6:18:70:8e:92:f2:48:92:12:5f: 15:8d:f3:42 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJ0LIEwl22YE9AXb3r9C3xSCwPwgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDAzOFoX DTI3MDUwMjAwMDUzOFowMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJB MURFRTdDRTdCRURBNDMwODJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvbFgOOxAMvtBqLLa/bUlHZbFk9CojuPFNG8Nvh4sUv2MWMdoWcXqneLozD O2t9xfxXmo2dx7Yq4xmxdEKU1JZZO5WRUeCc7i1lEq5DSZ6B0p+X/Uz+d9kPabf8 p/JZC1IEpf3mMP+qPj9ENUX5eGIsX2ipZfGHnFZ6PyUgrqACetwuL8SJPpej9Ll1 0H/gMuKKJ8y9ChbTD8HfqTixsdcUgIGz5LXtoUMznU3YzydggRfcKGVk/a0oN0bO ymKNecKXZ9O+UxZ2YVMtQuX0tlC3Yqvr3mLW1fRvA5uyaqwbCCtgJHqHXSxI2EUc ge2FI51Z//nf+TJKJMP2X9hMvt0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNi/dZDEDecxb1Kh3ufOe+2kMILDMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIwMzk2Mzg4LTJkNmItNDc2ZS05NjNkLTFjYzM4MTM3NGIxYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMDM5NjM4 OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC9EOEJGNzU5MEM0MERFNzMx NkY1MkExREVFN0NFN0JFREE0MzA4MkMzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoL8aMA0GCSqGSIb3DQEBCwUAA4IBAQCdG3eufEPWsgbcopTdpgKo4LtgaUcs F3CZf695EIfDbr8rcnkwwrhwnOnu4XGlrfhsECfkJD02fhYJxr1wnRng4hpRYQAG 5rK9ctEr9XObi2+Am/vOgYqOCsWNwynjOnQM2077p3vKhKAuHT3K726jjeO+OkE6 bhtFkXZiGJJrULVle6nF5MQF3B+R4RNRdz1c/0VguNKEg6Ue+i46xFn+ygk0owl5 5x7pu9QExDmggj9TNXPMEB0IR+6lXbmmssRMu3EsJq+XcsQ6ACN+Rjw8vn5IfY5N pbWJjKTmjYTbyqQLviy9yLvvBca8QioQqoxmp6YYcI6S8kiSEl8VjfNC -----END CERTIFICATE-----Generated at Tue May 12 22:03:26 2026 by rpki-client