$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer (raw, json) Hash identifier: XeisDKscphfc7l6Phbp05go8UhRgWS60ZmZYn5JKQO4= Subject key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 26FBD5F3D263B2EDB69B6B60F1347B9B46B459C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:09:27 +0000 Certificate not after: Sun 02 May 2027 01:14:27 +0000 Subordinate resources: IP: 160.19.184.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fb:d5:f3:d2:63:b2:ed:b6:9b:6b:60:f1:34:7b:9b:46:b4:59:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:09:27 2026 GMT Not After : May 2 01:14:27 2027 GMT Subject: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:a6:54:7a:21:65:04:78:71:ff:88:bc:6a: cb:22:45:c1:58:d4:cd:d4:b9:3c:3c:df:e9:4b:7b: 12:93:c4:13:94:b5:4a:67:53:e6:22:14:64:9f:1e: d4:ba:e0:74:a9:35:dd:0e:1e:5a:2e:40:97:9f:2e: 91:74:2a:af:ad:5d:75:e5:fa:14:e8:e4:ad:aa:89: 52:d5:d7:6a:27:0c:2a:59:cd:15:54:74:d5:ee:9b: 42:82:38:c6:91:43:24:e8:1e:4d:81:d2:39:1f:eb: aa:be:04:fa:96:34:7e:1a:ce:75:0b:9a:e5:01:2d: 7b:df:f6:1a:51:84:0b:7e:6b:aa:3a:a4:ec:00:4f: ea:98:a7:59:02:8d:2b:85:aa:de:50:74:65:9b:9e: 60:38:f1:b8:19:45:f6:ca:68:9c:3e:ef:c6:fa:8a: 28:5d:af:0c:0a:9e:04:d4:4d:84:83:32:67:16:0d: 40:ea:96:a3:8d:ef:9b:e4:31:b6:57:92:48:cd:3f: f2:72:19:cb:21:a6:df:db:0e:0d:bb:b6:b8:56:dd: f2:71:2b:d3:67:b4:c2:13:78:72:cb:b1:09:1b:c5: 29:5b:89:52:1b:3f:a9:01:0a:70:5a:1e:3a:27:4d: d3:64:bb:de:f0:f2:65:dc:7e:4f:8d:54:28:c2:40: 79:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.184.0/23 Signature Algorithm: sha256WithRSAEncryption 18:d2:c0:ed:11:b0:83:1a:ec:24:6d:14:c2:83:07:29:62:f1: 45:17:e9:1d:c3:16:b2:aa:14:dc:84:72:96:67:62:6f:e6:0a: 9e:8f:22:87:e1:7c:53:bd:c7:66:c1:b9:5f:3d:53:ff:b2:0b: f8:9d:e3:1a:5e:52:39:e7:ff:b7:bc:89:e6:ae:d9:4d:39:5c: 10:42:0c:b3:e7:ad:4b:d2:2a:1f:94:5a:54:02:94:86:b5:52: 8c:e6:56:46:77:70:f8:24:12:68:a6:b2:af:30:48:22:11:5e: f8:f2:e7:44:9a:24:be:47:09:c8:20:20:b8:c4:a9:fa:af:e3: 63:91:3c:a1:57:ce:f3:e0:b0:d4:97:06:8a:7e:0e:c0:f0:5b: 9c:d8:61:95:d2:09:1e:1f:cb:dc:7a:ff:c0:7b:c1:54:3f:8d: e0:ad:df:a5:43:08:0e:0d:2a:ed:31:2f:b1:06:88:43:68:03: 56:73:c7:cf:c8:64:f4:37:3b:5c:96:17:fd:95:2e:f0:b2:9b: 0f:a8:ff:71:29:01:69:7a:97:8a:20:4f:66:20:7c:f2:0d:6b: ea:3b:22:d7:b2:f5:10:33:f8:5f:61:df:a4:c5:bb:f0:03:98: c1:dd:2c:1f:f1:9a:ee:6f:6d:b7:7f:57:4e:36:96:91:62:57: 10:eb:90:27 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJvvV89Jjsu22m2tg8TR7m0a0WcUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDkyN1oX DTI3MDUwMjAxMTQyN1owMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUy QzkzMkQ4NjJGM0MxRkM4MUNFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMXplR6IWUEeHH/iLxqyyJFwVjUzdS5PDzf6Ut7EpPEE5S1SmdT5iIUZJ8e 1LrgdKk13Q4eWi5Al58ukXQqr61ddeX6FOjkraqJUtXXaicMKlnNFVR01e6bQoI4 xpFDJOgeTYHSOR/rqr4E+pY0fhrOdQua5QEte9/2GlGEC35rqjqk7ABP6pinWQKN K4Wq3lB0ZZueYDjxuBlF9sponD7vxvqKKF2vDAqeBNRNhIMyZxYNQOqWo43vm+Qx tleSSM0/8nIZyyGm39sODbu2uFbd8nEr02e0whN4csuxCRvFKVuJUhs/qQEKcFoe OidN02S73vDyZdx+T41UKMJAedcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNpDtc6zhOO6e+4sky2GLzwfyBzmMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg1Y2Q0NWNiLThkOWYtNDM1OS05NmMwLTY0Y2YyMmE1YjBmZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NWNkNDVj Yi04ZDlmLTQzNTktOTZjMC02NGNmMjJhNWIwZmYvMC9EQTQzQjVDRUIzODRFM0JB N0JFRTJDOTMyRDg2MkYzQzFGQzgxQ0U2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBO4MA0GCSqGSIb3DQEBCwUAA4IBAQAY0sDtEbCDGuwkbRTCgwcpYvFFF+kd wxayqhTchHKWZ2Jv5gqejyKH4XxTvcdmwblfPVP/sgv4neMaXlI55/+3vInmrtlN OVwQQgyz561L0ioflFpUApSGtVKM5lZGd3D4JBJoprKvMEgiEV748udEmiS+RwnI ICC4xKn6r+NjkTyhV87z4LDUlwaKfg7A8Fuc2GGV0gkeH8vcev/Ae8FUP43grd+l QwgODSrtMS+xBohDaANWc8fPyGT0Nztclhf9lS7wspsPqP9xKQFpepeKIE9mIHzy DWvqOyLXsvUQM/hfYd+kxbvwA5jB3Swf8Zrub223f1dONpaRYlcQ65An -----END CERTIFICATE-----Generated at Tue May 12 22:10:32 2026 by rpki-client