$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer File: DA20692305010D31E154AE60F41C822DD2D6CECC.cer (raw, json) Hash identifier: b8Oe/Ba7Nbgv0EXSRuN6siJcHf2BWF5KQPdU8fUBaI0= Subject key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4E4AAA2FC65C92C1C67FA201F4E49F5401722A3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:44 +0000 Certificate not after: Sun 02 May 2027 01:04:44 +0000 Subordinate resources: IP: 157.66.40.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4a:aa:2f:c6:5c:92:c1:c6:7f:a2:01:f4:e4:9f:54:01:72:2a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:59:44 2026 GMT Not After : May 2 01:04:44 2027 GMT Subject: CN=DA20692305010D31E154AE60F41C822DD2D6CECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:7a:63:ae:35:1d:11:c2:a8:23:9c:98:a6: 16:13:00:3e:88:c2:19:b4:c6:e3:4e:52:cd:94:08: 31:96:48:57:ba:07:a0:98:aa:6e:45:3b:53:66:19: 56:4f:fe:9f:b7:96:1c:c9:3e:c3:cd:ca:f6:6c:cf: 63:37:2e:1d:7d:6c:97:94:61:92:11:fe:33:a4:f4: fa:cf:4d:b6:05:55:d6:95:50:c1:d9:65:1b:44:fb: be:b0:57:67:01:c3:b2:c7:61:a2:14:fd:c1:3b:c9: 0b:8c:6b:c7:51:33:43:b1:9a:6f:45:0e:7c:5d:fd: 02:ef:76:5c:f9:b4:72:6f:f1:4f:73:a6:55:8a:5f: 7c:f6:db:7f:2c:49:c0:98:14:c7:3f:78:cf:50:a1: 09:a6:f6:38:e9:ab:96:97:47:81:3c:f5:b4:dc:a0: 8e:2c:07:68:85:79:10:87:39:8a:ae:e6:7e:f9:6b: b8:87:eb:df:d8:0e:0a:ad:1b:47:03:aa:78:b3:ef: cb:d9:3b:20:79:9b:85:16:c1:43:0c:a1:8c:53:8e: 59:ef:e1:ea:fb:bb:f1:44:4e:c5:a3:c0:76:56:08: fc:a9:e3:d0:b3:53:1e:41:ef:55:71:bc:07:c2:29: 3d:d9:1e:27:06:44:4c:b3:ac:d3:cb:6d:ac:ca:05: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.40.0/23 Signature Algorithm: sha256WithRSAEncryption 35:69:ae:b3:1f:23:26:c1:94:f2:9f:3c:b0:03:97:5e:97:c3: 5f:f1:6e:55:1c:d8:3f:75:c7:3b:42:9f:cf:98:63:b4:b5:be: f3:38:86:51:7a:26:ee:2a:23:b7:31:5d:05:f3:7d:c4:9a:35: ff:9a:4b:65:6d:98:db:8c:73:3c:5e:82:70:d4:ca:24:1d:6a: 86:bc:ce:8f:83:c9:d5:9e:38:92:7a:cc:e5:21:09:37:cf:fd: 86:37:85:55:12:65:d1:63:c1:e8:56:3a:e5:77:4a:98:2b:80: 11:6c:33:2e:89:1c:42:f6:3a:34:8d:59:f8:bf:f4:e5:86:09: 3e:80:5a:79:19:e7:b3:c0:94:6f:02:21:ce:4a:25:4a:79:1f: a9:90:d1:c6:32:78:9f:a8:f2:12:9c:2c:15:41:8d:d8:7f:bb: 46:30:9d:96:7a:5b:1e:9b:13:6f:46:52:85:ee:d1:19:41:72: b8:b5:e9:31:63:60:e2:95:db:9c:d5:44:ea:66:f9:5e:31:52: b0:bf:6b:84:80:aa:d1:6c:7d:e1:48:25:fa:da:4d:34:20:ab: f5:64:60:91:b2:d8:8a:0f:dd:e1:25:41:41:c7:d5:fc:c3:44: 62:0d:e5:dc:44:93:e2:7d:f8:c6:52:f3:40:92:7f:b3:4d:6a: dd:38:7b:db -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTkqqL8ZcksHGf6IB9OSfVAFyKjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNTk0NFoX DTI3MDUwMjAxMDQ0NFowMzExMC8GA1UEAxMoREEyMDY5MjMwNTAxMEQzMUUxNTRB RTYwRjQxQzgyMkREMkQ2Q0VDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdOemOuNR0RwqgjnJimFhMAPojCGbTG405SzZQIMZZIV7oHoJiqbkU7U2YZ Vk/+n7eWHMk+w83K9mzPYzcuHX1sl5RhkhH+M6T0+s9NtgVV1pVQwdllG0T7vrBX ZwHDssdhohT9wTvJC4xrx1EzQ7Gab0UOfF39Au92XPm0cm/xT3OmVYpffPbbfyxJ wJgUxz94z1ChCab2OOmrlpdHgTz1tNygjiwHaIV5EIc5iq7mfvlruIfr39gOCq0b RwOqeLPvy9k7IHmbhRbBQwyhjFOOWe/h6vu78UROxaPAdlYI/Knj0LNTHkHvVXG8 B8IpPdkeJwZETLOs08ttrMoF07sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNogaSMFAQ0x4VSuYPQcgi3S1s7MMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc3ZjJjMTkwLTMwZjUtNGYxOS1iZmNhLTBiOTg3YTUyZmQ1NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83N2YyYzE5 MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9EQTIwNjkyMzA1MDEwRDMx RTE1NEFFNjBGNDFDODIyREQyRDZDRUNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUIoMA0GCSqGSIb3DQEBCwUAA4IBAQA1aa6zHyMmwZTynzywA5del8Nf8W5V HNg/dcc7Qp/PmGO0tb7zOIZReibuKiO3MV0F833EmjX/mktlbZjbjHM8XoJw1Mok HWqGvM6Pg8nVnjiSeszlIQk3z/2GN4VVEmXRY8HoVjrld0qYK4ARbDMuiRxC9jo0 jVn4v/Tlhgk+gFp5GeezwJRvAiHOSiVKeR+pkNHGMnifqPISnCwVQY3Yf7tGMJ2W elsemxNvRlKF7tEZQXK4tekxY2Dilduc1UTqZvleMVKwv2uEgKrRbH3hSCX62k00 IKv1ZGCRstiKD93hJUFBx9X8w0RiDeXcRJPiffjGUvNAkn+zTWrdOHvb -----END CERTIFICATE-----Generated at Tue May 12 22:52:44 2026 by rpki-client