$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer File: 579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer (raw, json) Hash identifier: qgObu6Nk8yNbdePC80lBOMukV2l4LmqDBpW+M10KxCI= Subject key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 02E5AB903906657D52822BE70C693401DB0CB600 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:19:31 +0000 Certificate not after: Sun 02 May 2027 00:24:31 +0000 Subordinate resources: IP: 66.96.224.0/19 IP: 158.140.160.0/19 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e5:ab:90:39:06:65:7d:52:82:2b:e7:0c:69:34:01:db:0c:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:19:31 2026 GMT Not After : May 2 00:24:31 2027 GMT Subject: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5f:51:3e:2e:e1:d1:a9:41:86:3d:80:45:53: 7f:6e:b0:20:0a:a6:47:7b:d3:1c:61:f7:54:9f:fb: 9a:2d:4e:43:95:2c:8b:d6:1d:cb:72:d9:90:fc:07: fa:f9:1c:09:20:ce:7f:ff:0b:5a:a0:c3:7b:5a:40: d0:5d:6b:aa:d6:a0:ce:2d:b5:30:53:ea:76:63:06: 91:62:de:6f:d3:01:12:60:df:32:fa:bd:c7:1e:df: e9:19:e9:0b:c3:3e:3a:00:54:df:c5:33:a6:7b:62: aa:07:ad:35:bb:5e:37:87:12:a8:2a:a9:b8:ea:ec: fd:d5:8c:ca:24:60:27:67:4b:32:ba:b2:b3:38:05: 5d:4d:f3:96:f5:d3:67:89:2c:9f:b2:6a:a7:00:a1: bc:fd:c4:ea:15:36:7a:3a:ea:29:6e:63:4e:b5:6e: fd:fa:8d:64:b7:a7:a0:a6:57:ec:3c:23:56:4d:11: d0:2d:83:38:04:58:97:1f:fa:24:28:d2:b6:f4:11: 14:7c:2d:00:16:3c:41:5b:ac:bd:73:c0:6a:c1:83: 44:18:21:17:f6:5c:fb:39:82:fd:00:a5:25:4a:65: 20:d2:d3:73:84:77:1c:f9:32:30:66:17:2a:4b:de: 9f:23:46:83:40:36:62:75:ea:f2:fc:50:c4:2b:4c: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.224.0/19 158.140.160.0/19 Signature Algorithm: sha256WithRSAEncryption 16:37:e0:b0:11:25:29:52:39:67:fc:d7:b1:43:12:1c:11:ae: eb:6e:36:7e:4b:c4:d1:b4:61:fa:da:70:c6:5f:ca:50:42:18: 84:83:6f:8a:5a:1b:c2:c8:25:26:ed:f1:27:c3:70:5b:9a:42: 0e:05:1c:45:f6:1e:d5:69:e9:19:9f:dc:45:f5:03:ad:32:51: f1:69:7b:82:bb:31:da:c0:40:d0:ef:8b:07:0d:74:4e:25:08: 9d:f1:af:67:00:bc:ab:ad:e5:86:3b:9a:7e:e5:97:4c:32:bf: 4a:15:e5:9c:dd:11:89:b7:84:42:62:0c:9c:a3:f3:ef:16:89: 9c:df:72:27:ec:6e:20:5e:88:b3:74:b2:7e:eb:aa:c5:ac:ea: 4f:0f:e3:78:ec:b6:3a:4f:c3:76:05:5d:65:ca:27:90:da:d5: 0a:ce:11:79:a3:f5:f1:d8:ea:71:43:2c:64:e3:98:76:c1:9f: f7:63:51:e0:54:99:4f:21:8e:9f:6f:ff:00:3c:46:3b:9a:13: b2:ac:75:0c:bd:56:50:ea:48:62:d9:9d:b3:11:13:29:bd:71: 91:6a:3c:fd:06:bf:34:85:96:ca:34:56:36:16:44:e6:a6:f4: 33:7b:02:0a:3f:8f:cf:8f:34:92:71:dc:d6:86:ec:6f:c5:29: 2a:b9:f7:c6 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUAuWrkDkGZX1SgivnDGk0AdsMtgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMTkzMVoX DTI3MDUwMjAwMjQzMVowMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5 RjBDRTdEMUM0ODlENzEwNkI5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOdfUT4u4dGpQYY9gEVTf26wIAqmR3vTHGH3VJ/7mi1OQ5Usi9Ydy3LZkPwH +vkcCSDOf/8LWqDDe1pA0F1rqtagzi21MFPqdmMGkWLeb9MBEmDfMvq9xx7f6Rnp C8M+OgBU38UzpntiqgetNbteN4cSqCqpuOrs/dWMyiRgJ2dLMrqyszgFXU3zlvXT Z4ksn7JqpwChvP3E6hU2ejrqKW5jTrVu/fqNZLenoKZX7DwjVk0R0C2DOARYlx/6 JCjStvQRFHwtABY8QVusvXPAasGDRBghF/Zc+zmC/QClJUplINLTc4R3HPkyMGYX KkvenyNGg0A2YnXq8vxQxCtMDg0CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFecKWz70TszzSSfDOfRxInXEGuXMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNiYmIyNzM0LWU1ZmEtNDBlYi04NTk4LWI3Y2QxMDEzNDNjYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYmJiMjcz NC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC81NzlDMjk2Q0ZCRDEzQjMz Q0QyNDlGMENFN0QxQzQ4OUQ3MTA2Qjk3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQFQmDgAwQFnoygMA0GCSqGSIb3DQEBCwUAA4IBAQAWN+CwESUpUjln/NexQxIc Ea7rbjZ+S8TRtGH62nDGX8pQQhiEg2+KWhvCyCUm7fEnw3BbmkIOBRxF9h7VaekZ n9xF9QOtMlHxaXuCuzHawEDQ74sHDXROJQid8a9nALyrreWGO5p+5ZdMMr9KFeWc 3RGJt4RCYgyco/PvFomc33In7G4gXoizdLJ+66rFrOpPD+N47LY6T8N2BV1lyieQ 2tUKzhF5o/Xx2OpxQyxk45h2wZ/3Y1HgVJlPIY6fb/8APEY7mhOyrHUMvVZQ6khi 2Z2zERMpvXGRajz9Br80hZbKNFY2FkTmpvQzewIKP4/PjzSScdzWhuxvxSkquffG -----END CERTIFICATE-----Generated at Wed May 13 23:54:46 2026 by rpki-client