$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer File: E161BF656F0149CB290354E631915A62950E0DF7.cer (raw, json) Hash identifier: tDBzNEaKaX4rdPWQv265S3d4C2g85yxXBzbKmQWy6So= Subject key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 41F2FD9412DCEDC84734486679055BB130BFB0C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:58:37 +0000 Certificate not after: Sun 02 May 2027 01:03:37 +0000 Subordinate resources: IP: 157.66.66.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f2:fd:94:12:dc:ed:c8:47:34:48:66:79:05:5b:b1:30:bf:b0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:58:37 2026 GMT Not After : May 2 01:03:37 2027 GMT Subject: CN=E161BF656F0149CB290354E631915A62950E0DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:8e:09:d5:87:6e:06:fd:82:85:92:81:90: 5d:7c:1d:b3:5d:f4:26:03:ce:66:dd:07:e3:51:f8: cb:19:08:04:aa:97:d0:57:f0:64:82:a3:2a:97:59: 8c:45:bf:45:df:39:30:e2:2c:d7:60:96:a5:59:25: bb:b8:54:7c:85:6a:47:74:dc:ec:8c:ef:3a:11:f4: 45:33:24:0b:9d:06:dd:57:cf:f7:b8:be:45:07:30: 61:95:17:19:ba:6e:71:20:39:8d:99:ba:56:37:42: cf:16:ad:26:16:61:23:47:13:d7:f4:b9:2c:e1:ce: 3e:3c:63:7d:55:7e:35:ce:a2:48:d6:35:3a:68:96: dc:dc:d6:84:89:ea:5e:60:52:ed:48:6f:fe:4c:cc: bf:35:16:ea:a9:77:96:a1:0a:eb:65:cd:b1:42:2f: 24:91:2e:d4:ab:5a:b4:76:1e:e5:23:c3:d0:c6:9e: b5:db:78:ea:bb:58:19:4c:c5:0e:59:d4:5e:38:15: 69:b6:10:39:07:71:ab:a9:95:e8:37:07:19:f2:16: a8:67:93:be:c4:d6:6e:2c:61:3f:a3:26:9b:87:25: bf:e4:d6:30:94:95:15:cd:d6:9b:77:66:ac:93:56: bf:c7:53:ad:d1:b9:45:7c:9f:c4:93:ad:2a:ef:84: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.66.0/23 Signature Algorithm: sha256WithRSAEncryption 94:ec:8a:d2:eb:f0:b9:7d:82:c1:59:dc:6c:49:f6:70:9c:4b: b8:9c:ec:db:a3:22:68:4c:b5:bd:e3:42:b2:50:66:7d:d3:37: 98:ab:b4:33:f9:16:22:4a:3b:08:0c:f6:8c:18:41:1b:d7:0a: d2:14:df:41:b1:2f:9c:43:aa:2c:58:e3:b1:31:98:a4:87:58: a3:02:62:7a:25:34:0c:48:ec:45:ae:e5:e9:e8:ba:71:23:3f: 97:6f:e1:6f:ee:6c:ec:35:f1:bb:dc:25:6b:b6:fe:5b:14:dd: 6d:35:29:77:ab:04:f2:ed:bb:d7:28:34:1e:3f:50:3f:49:fa: 30:6a:f6:5c:99:38:e0:0e:09:0d:d5:c2:20:77:97:47:bf:b4: c8:53:59:45:f8:f3:5b:33:23:b7:22:81:04:fd:00:a6:60:87: 72:21:b2:89:bf:67:d9:0b:de:0d:5f:90:6e:e7:b6:4c:8e:d6: 75:d2:16:b7:12:b4:b1:6e:21:ab:4c:43:01:8c:89:10:35:28: 95:11:35:90:17:a3:e4:34:03:ed:53:17:5e:3a:19:1b:33:31: 2f:8c:70:c5:d5:8b:c0:5e:6a:16:6e:19:72:93:55:ce:51:9e: 15:d0:82:64:b2:c0:07:a2:98:6d:21:99:c8:27:a1:d9:6e:01: 39:61:e1:b6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQfL9lBLc7chHNEhmeQVbsTC/sMMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNTgzN1oX DTI3MDUwMjAxMDMzN1owMzExMC8GA1UEAxMoRTE2MUJGNjU2RjAxNDlDQjI5MDM1 NEU2MzE5MTVBNjI5NTBFMERGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOFjgnVh24G/YKFkoGQXXwds130JgPOZt0H41H4yxkIBKqX0FfwZIKjKpdZ jEW/Rd85MOIs12CWpVklu7hUfIVqR3Tc7IzvOhH0RTMkC50G3VfP97i+RQcwYZUX GbpucSA5jZm6VjdCzxatJhZhI0cT1/S5LOHOPjxjfVV+Nc6iSNY1OmiW3NzWhInq XmBS7Uhv/kzMvzUW6ql3lqEK62XNsUIvJJEu1KtatHYe5SPD0Maetdt46rtYGUzF DlnUXjgVabYQOQdxq6mV6DcHGfIWqGeTvsTWbixhP6Mmm4clv+TWMJSVFc3Wm3dm rJNWv8dTrdG5RXyfxJOtKu+ENKECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOFhv2VvAUnLKQNU5jGRWmKVDg33MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc2NzBhZTc2LTk1OTQtNDk4MC1iNDEwLTQ5MWE2MzE5ZmYzYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NjcwYWU3 Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC9FMTYxQkY2NTZGMDE0OUNC MjkwMzU0RTYzMTkxNUE2Mjk1MEUwREY3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUJCMA0GCSqGSIb3DQEBCwUAA4IBAQCU7IrS6/C5fYLBWdxsSfZwnEu4nOzb oyJoTLW940KyUGZ90zeYq7Qz+RYiSjsIDPaMGEEb1wrSFN9BsS+cQ6osWOOxMZik h1ijAmJ6JTQMSOxFruXp6LpxIz+Xb+Fv7mzsNfG73CVrtv5bFN1tNSl3qwTy7bvX KDQeP1A/SfowavZcmTjgDgkN1cIgd5dHv7TIU1lF+PNbMyO3IoEE/QCmYIdyIbKJ v2fZC94NX5Bu57ZMjtZ10ha3ErSxbiGrTEMBjIkQNSiVETWQF6PkNAPtUxdeOhkb MzEvjHDF1YvAXmoWbhlyk1XOUZ4V0IJkssAHophtIZnIJ6HZbgE5YeG2 -----END CERTIFICATE-----Generated at Wed May 13 02:13:23 2026 by rpki-client