$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer File: 175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer (raw, json) Hash identifier: 4el3+s1upcZDzLF+FXy1quDtKr2gm2TA8jNrdOtla+Y= Subject key identifier: 17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 27BB82256D691EB9A68958F4750B9737BEB1CC57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:21 +0000 Certificate not after: Sun 02 May 2027 02:09:21 +0000 Subordinate resources: IP: 202.43.64.0/23 IP: 202.90.194.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bb:82:25:6d:69:1e:b9:a6:89:58:f4:75:0b:97:37:be:b1:cc:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:21 2026 GMT Not After : May 2 02:09:21 2027 GMT Subject: CN=175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:d0:0c:2a:2c:0a:39:f9:2c:43:4a:0b:ba: 5e:55:f3:c9:8d:c6:9a:ab:e2:fd:8c:1d:cb:a5:22: 61:44:c0:0e:94:25:79:99:9e:9e:9a:03:7e:49:b7: 9e:23:62:bb:eb:a4:a9:cf:4e:a2:30:47:a7:fc:bc: d6:e6:61:e9:a7:a9:49:cc:27:0b:bb:76:ec:d6:71: 36:01:3a:52:eb:12:89:f5:37:b4:07:3c:13:c0:dc: 7a:67:45:db:4e:29:89:9d:ae:7d:5d:53:00:96:8a: 74:e5:22:25:13:0e:0c:a8:8f:c4:65:ed:a2:3d:db: 6d:4b:49:ca:fc:59:76:fb:dd:96:c5:b9:1c:ca:4c: 0e:cf:35:86:71:0a:86:85:9d:4c:c5:ab:19:63:3a: 8f:66:dc:54:df:47:b3:ac:d6:a5:50:9d:c8:c5:2b: eb:bb:10:9f:73:75:d7:af:01:f8:05:29:33:e8:ad: 3e:8a:73:af:d3:8a:5b:e9:57:a1:25:8d:a9:df:46: 11:71:2a:20:12:e9:26:c9:6c:a8:08:91:19:ad:3f: e9:db:f8:ef:41:df:40:23:cf:c5:93:d7:3c:f9:44: 1f:8b:99:09:d6:bb:54:9d:3b:7f:11:7b:6e:ea:6f: 89:ab:f9:3a:19:d5:98:0c:0f:d9:71:c3:6d:a6:64: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.64.0/23 202.90.194.0/23 Signature Algorithm: sha256WithRSAEncryption 08:1c:a8:bc:ea:e8:9b:b2:0e:f9:f3:98:e0:f2:2d:76:32:a8: 8b:1b:19:52:59:68:44:b0:d5:05:72:e6:b8:bf:b0:b6:00:e6: 5d:e9:c0:8e:4e:2f:bd:3b:f9:5e:9b:5e:01:62:ae:cb:49:e6: d8:fd:54:0f:73:c7:6c:e1:b5:f0:b9:fd:0a:c9:b1:60:bb:b3: 9b:4d:6f:61:f6:e5:ce:c8:43:3b:88:89:16:b1:70:3a:e9:13: 51:d9:62:50:93:e1:8d:4a:21:cf:a8:1b:7b:dc:1b:ad:6b:62: 19:a3:cd:0a:c2:35:bc:f2:d8:b1:38:28:96:02:47:a7:ad:1d: da:85:1c:da:87:ac:95:3c:84:18:4b:47:d3:a3:8e:05:0c:39: 78:15:54:b3:76:90:5b:79:32:e7:b3:fd:3e:54:e7:97:1b:9e: ad:7a:19:b0:20:ad:3d:f5:6b:e7:82:e2:ea:f8:80:1a:7e:26: 95:59:d9:20:d4:34:e3:6f:6a:a1:04:60:96:e7:9e:5b:be:e4: 9c:ac:0b:69:3a:69:d0:92:80:4f:22:14:50:87:c6:0d:02:51: b0:65:ae:56:01:9e:b1:bc:18:55:de:06:0e:c3:83:6b:f1:93: fa:3f:b5:41:17:09:c4:e8:76:f6:75:c8:35:a5:12:ea:5a:8a: f0:88:e7:5d -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUJ7uCJW1pHrmmiVj0dQuXN76xzFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQyMVoX DTI3MDUwMjAyMDkyMVowMzExMC8GA1UEAxMoMTc1RjRCOTRGRTYwOENBRjNBREUy RkI2QzVFNzU0NTNBQjJERDAyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcu0AwqLAo5+SxDSgu6XlXzyY3Gmqvi/Ywdy6UiYUTADpQleZmenpoDfkm3 niNiu+ukqc9OojBHp/y81uZh6aepScwnC7t27NZxNgE6UusSifU3tAc8E8DcemdF 204piZ2ufV1TAJaKdOUiJRMODKiPxGXtoj3bbUtJyvxZdvvdlsW5HMpMDs81hnEK hoWdTMWrGWM6j2bcVN9Hs6zWpVCdyMUr67sQn3N1168B+AUpM+itPopzr9OKW+lX oSWNqd9GEXEqIBLpJslsqAiRGa0/6dv470HfQCPPxZPXPPlEH4uZCda7VJ07fxF7 bupviav5OhnVmAwP2XHDbaZksg8CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBdfS5T+YIyvOt4vtsXnVFOrLdAkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RjZjAwZjhhLTVjYmQtNDYwZi1iZmM2LWJkODk0MmI2NTM3Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kY2YwMGY4 YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC8xNzVGNEI5NEZFNjA4Q0FG M0FERTJGQjZDNUU3NTQ1M0FCMkREMDI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQByitAAwQBylrCMA0GCSqGSIb3DQEBCwUAA4IBAQAIHKi86uibsg7585jg8i12 MqiLGxlSWWhEsNUFcua4v7C2AOZd6cCOTi+9O/lem14BYq7LSebY/VQPc8ds4bXw uf0KybFgu7ObTW9h9uXOyEM7iIkWsXA66RNR2WJQk+GNSiHPqBt73Buta2IZo80K wjW88tixOCiWAkenrR3ahRzah6yVPIQYS0fTo44FDDl4FVSzdpBbeTLns/0+VOeX G56tehmwIK099WvnguLq+IAafiaVWdkg1DTjb2qhBGCW555bvuScrAtpOmnQkoBP IhRQh8YNAlGwZa5WAZ6xvBhV3gYOw4Nr8ZP6P7VBFwnE6Hb2dcg1pRLqWorwiOdd -----END CERTIFICATE-----Generated at Tue May 12 22:10:42 2026 by rpki-client