$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer File: F61FC33006E4D563052A74A3344CBDB712A9CE42.cer (raw, json) Hash identifier: AbKNFOXuf+PRa9qVFfng/S6lkpB5FHY7g4k4j6B1xf4= Subject key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 45D52B59041F45895E6DDEFEB3F6E2FBE3F22DF8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft caRepository: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:05:39 +0000 Certificate not after: Sun 02 May 2027 00:10:39 +0000 Subordinate resources: IP: 160.20.36.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d5:2b:59:04:1f:45:89:5e:6d:de:fe:b3:f6:e2:fb:e3:f2:2d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:05:39 2026 GMT Not After : May 2 00:10:39 2027 GMT Subject: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:64:0b:6d:e4:00:5f:05:a0:61:e8:ba:92: d0:5d:92:1a:66:77:1d:3d:90:19:75:38:f0:93:f0: 36:07:4c:dc:fa:62:3f:97:d2:0a:4e:c5:11:69:50: d1:4d:6f:6e:72:91:c1:ea:85:53:11:9f:5b:46:d2: c7:a0:67:45:d5:a3:73:46:c5:69:37:f8:d1:cf:3e: 03:84:f5:90:63:6b:2d:1f:20:e7:a7:ef:59:b1:ca: 45:f7:15:06:2b:45:ec:7e:97:62:8d:86:46:a3:a4: 5e:e1:2d:37:21:19:79:77:67:cc:40:57:84:9f:86: 86:9c:f0:91:08:d5:5f:ea:19:8d:32:05:a1:30:0f: da:f6:3e:26:eb:b7:7a:c7:29:a8:9b:24:e4:84:25: 11:ac:04:84:c4:83:42:cb:82:ae:11:e5:9e:6b:00: 81:7a:19:d0:11:ed:d3:26:e1:97:f7:c0:a1:42:fa: f5:b0:1e:ba:c1:d0:41:e8:be:72:59:af:95:b2:90: 47:e8:10:91:53:11:d2:42:fd:54:10:0f:58:3c:14: 49:53:2a:77:bb:13:33:80:bf:1c:0d:ac:46:00:d5: 92:e2:d6:9a:41:da:64:35:3a:a7:d2:45:5c:e2:b9: 81:d9:73:32:a5:02:22:f9:41:ae:9c:09:12:8e:93: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.36.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:ec:41:29:98:98:3e:b6:cc:0f:bb:a0:10:ef:85:9b:57:71: ff:a4:53:5f:ce:76:32:f5:95:80:34:d0:2e:39:1f:73:55:b1: 6a:a9:5c:d8:94:52:d1:5c:a0:22:0e:8a:2f:d7:03:9d:5d:1c: 7c:06:6d:18:28:7f:29:90:49:a6:21:95:dc:ce:93:1d:a5:bb: ad:d0:4e:9c:dc:a5:50:d4:2b:71:e5:91:55:04:34:f7:9a:45: 65:a9:df:c6:c7:59:56:12:6f:66:3a:8e:d1:ec:b4:98:f6:89: 09:97:ee:08:37:a8:46:da:22:ac:f2:65:a3:c6:5e:0a:30:b2: 94:e0:68:4e:10:47:86:b4:d8:36:a6:b6:13:19:55:e6:5a:d9: fa:2f:46:25:03:ef:41:e4:7a:10:90:fe:f1:6a:53:8f:ae:e8: 63:42:69:9e:b8:93:9b:87:d1:1c:c2:55:a9:7a:cc:23:37:10: 5a:ad:06:60:6c:c5:17:79:c1:aa:ac:1e:1a:69:f1:08:87:4f: 97:01:8a:9d:f4:dc:c3:49:83:54:28:59:9b:2a:12:90:73:05: c1:53:4d:af:12:5b:44:c7:e5:f6:fe:82:61:c0:6e:d8:4e:1c: 00:a9:97:43:c5:a8:19:31:36:f5:c7:f7:7c:d1:76:32:8b:01: 3d:33:e0:eb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURdUrWQQfRYlebd7+s/bi++PyLfgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDUzOVoX DTI3MDUwMjAwMTAzOVowMzExMC8GA1UEAxMoRjYxRkMzMzAwNkU0RDU2MzA1MkE3 NEEzMzQ0Q0JEQjcxMkE5Q0U0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlpZAtt5ABfBaBh6LqS0F2SGmZ3HT2QGXU48JPwNgdM3PpiP5fSCk7FEWlQ 0U1vbnKRweqFUxGfW0bSx6BnRdWjc0bFaTf40c8+A4T1kGNrLR8g56fvWbHKRfcV BitF7H6XYo2GRqOkXuEtNyEZeXdnzEBXhJ+GhpzwkQjVX+oZjTIFoTAP2vY+Juu3 escpqJsk5IQlEawEhMSDQsuCrhHlnmsAgXoZ0BHt0ybhl/fAoUL69bAeusHQQei+ clmvlbKQR+gQkVMR0kL9VBAPWDwUSVMqd7sTM4C/HA2sRgDVkuLWmkHaZDU6p9JF XOK5gdlzMqUCIvlBrpwJEo6TQmkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPYfwzAG5NVjBSp0ozRMvbcSqc5CMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI4MWVmNDQwLTVhNWYtNGE0Zi1iNTA5LWIxMDMyNDVjNWNmMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yODFlZjQ0 MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9GNjFGQzMzMDA2RTRENTYz MDUyQTc0QTMzNDRDQkRCNzEyQTlDRTQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBQkMA0GCSqGSIb3DQEBCwUAA4IBAQB67EEpmJg+tswPu6AQ74WbV3H/pFNf znYy9ZWANNAuOR9zVbFqqVzYlFLRXKAiDoov1wOdXRx8Bm0YKH8pkEmmIZXczpMd pbut0E6c3KVQ1Ctx5ZFVBDT3mkVlqd/Gx1lWEm9mOo7R7LSY9okJl+4IN6hG2iKs 8mWjxl4KMLKU4GhOEEeGtNg2prYTGVXmWtn6L0YlA+9B5HoQkP7xalOPruhjQmme uJObh9EcwlWpeswjNxBarQZgbMUXecGqrB4aafEIh0+XAYqd9NzDSYNUKFmbKhKQ cwXBU02vEltEx+X2/oJhwG7YThwAqZdDxagZMTb1x/d80XYyiwE9M+Dr -----END CERTIFICATE-----Generated at Tue May 12 22:45:27 2026 by rpki-client