$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer (raw, json) Hash identifier: FJ/dMfVHKlWsU5/meuZ6ORgCh7cV4zTsmnQxxQ2cFYk= Subject key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 558186BCB1644E5E279B0305A869980E5CEA56DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:18:40 +0000 Certificate not after: Sun 02 May 2027 00:23:40 +0000 Subordinate resources: IP: 160.187.136.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:81:86:bc:b1:64:4e:5e:27:9b:03:05:a8:69:98:0e:5c:ea:56:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:18:40 2026 GMT Not After : May 2 00:23:40 2027 GMT Subject: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:9c:98:b4:23:2b:57:0d:a0:5e:04:42:e3: a8:e5:e0:90:44:bf:49:52:e1:e0:45:57:9b:d0:25: 2f:dc:4e:b4:a2:12:9b:8c:2e:e2:2e:e1:34:57:0d: 32:ed:83:b8:96:9e:6b:1a:e4:18:83:fe:74:2f:9f: 3b:24:ed:7f:c7:36:06:a5:3e:00:78:d0:6e:7f:43: f8:29:3f:21:d4:2e:09:f8:ec:2f:ad:af:50:c6:a4: 34:ad:44:33:03:e5:73:53:84:8f:d3:87:27:8e:73: 2d:66:ae:e5:e4:e5:b8:58:a2:3f:94:c6:de:cd:62: 2c:1f:d3:b9:e6:3a:58:7b:7c:0a:fe:d8:7a:02:d2: 26:56:82:b7:ee:0c:6e:2d:e9:5f:de:da:09:a6:2e: 83:6a:43:c4:88:48:dd:9d:e4:f7:66:4d:6a:16:c7: fe:2e:74:b3:79:1f:9d:e5:96:eb:a3:b1:9d:db:f5: 2f:3b:6b:9a:62:6c:72:f0:34:d5:a1:7e:b3:78:36: a9:76:29:36:43:1a:89:98:29:00:38:9e:ea:7d:71: 2d:13:88:ca:ac:97:44:ff:6c:b8:2f:8f:91:65:ad: 79:03:4b:a1:81:a2:74:d9:d0:17:53:cf:e3:7b:eb: ad:2f:a6:a9:3d:db:cf:36:8e:ea:b8:3f:3e:bf:f8: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.136.0/23 Signature Algorithm: sha256WithRSAEncryption 48:bb:4b:ed:88:36:4c:d9:71:de:a2:8d:93:81:f9:8a:7c:09: 43:8b:34:70:c2:63:6f:68:ce:fd:43:5f:2a:79:38:5e:20:97: 01:a2:1d:3c:ab:c9:1f:22:2f:3a:a8:dc:fd:03:c3:cc:73:5b: 70:2d:dd:b3:6b:1b:c8:5b:5f:67:c4:5e:09:e4:f5:f9:45:c9: 84:60:3e:63:fe:e6:32:57:c4:96:1f:f5:e5:1a:72:17:16:ae: 6c:d6:d8:ab:21:e6:7a:ca:d0:76:c9:5f:63:ca:c4:ab:c6:7f: 88:5f:29:45:be:01:f9:ad:19:29:ea:08:f3:0f:73:22:2e:c3: b7:06:cb:7c:88:10:4e:95:98:56:8e:6f:5b:17:90:df:d1:d4: 20:2e:1c:8e:5e:ab:23:be:1d:91:42:ce:12:74:86:fa:56:f8: f6:8e:8b:60:9f:93:9e:36:fd:6e:9a:26:37:17:35:ce:8e:05: 1f:dc:48:39:32:b3:08:2a:35:84:98:7d:db:87:20:c6:96:44: 24:ec:7d:44:d8:15:4a:cd:70:60:ca:53:fe:70:96:1f:e8:6b: d7:c4:0d:1c:73:d5:08:7e:5c:ba:32:2b:db:d3:95:32:d7:19: 95:cd:8a:35:6b:6d:c3:03:40:16:a0:80:30:61:75:e4:40:74: af:1a:59:b9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVYGGvLFkTl4nmwMFqGmYDlzqVtswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMTg0MFoX DTI3MDUwMjAwMjM0MFowMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5 MTgyQkJBOTJEQzM1NERGRDFFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIknnJi0IytXDaBeBELjqOXgkES/SVLh4EVXm9AlL9xOtKISm4wu4i7hNFcN Mu2DuJaeaxrkGIP+dC+fOyTtf8c2BqU+AHjQbn9D+Ck/IdQuCfjsL62vUMakNK1E MwPlc1OEj9OHJ45zLWau5eTluFiiP5TG3s1iLB/TueY6WHt8Cv7YegLSJlaCt+4M bi3pX97aCaYug2pDxIhI3Z3k92ZNahbH/i50s3kfneWW66Oxndv1LztrmmJscvA0 1aF+s3g2qXYpNkMaiZgpADie6n1xLROIyqyXRP9suC+PkWWteQNLoYGidNnQF1PP 43vrrS+mqT3bzzaO6rg/Pr/402kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPOisjR2hYovIfyRgrupLcNU39HpMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNhOTIzMzk3LThjZjgtNGNlZi04ODU2LTBkMjY4ZDczZWRiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYTkyMzM5 Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC9GM0EyQjIzNDc2ODU4QTJG MjFGQzkxODJCQkE5MkRDMzU0REZEMUU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoLuIMA0GCSqGSIb3DQEBCwUAA4IBAQBIu0vtiDZM2XHeoo2TgfmKfAlDizRw wmNvaM79Q18qeTheIJcBoh08q8kfIi86qNz9A8PMc1twLd2zaxvIW19nxF4J5PX5 RcmEYD5j/uYyV8SWH/XlGnIXFq5s1tirIeZ6ytB2yV9jysSrxn+IXylFvgH5rRkp 6gjzD3MiLsO3Bst8iBBOlZhWjm9bF5Df0dQgLhyOXqsjvh2RQs4SdIb6Vvj2jotg n5OeNv1umiY3FzXOjgUf3Eg5MrMIKjWEmH3bhyDGlkQk7H1E2BVKzXBgylP+cJYf 6GvXxA0cc9UIfly6Mivb05Uy1xmVzYo1a23DA0AWoIAwYXXkQHSvGlm5 -----END CERTIFICATE-----Generated at Tue May 12 22:39:22 2026 by rpki-client