$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer (raw, json) Hash identifier: LYrMAEpSRYdqTzMETiknRTX139/o83ZwC85VfQ/bTo4= Subject key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3D5BB3FC8FD7A8353503ED26B95D890440605A4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft caRepository: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:07:39 +0000 Certificate not after: Sun 02 May 2027 01:12:39 +0000 Subordinate resources: IP: 157.66.128.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5b:b3:fc:8f:d7:a8:35:35:03:ed:26:b9:5d:89:04:40:60:5a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:07:39 2026 GMT Not After : May 2 01:12:39 2027 GMT Subject: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:20:75:d0:e2:03:c6:d1:e6:48:dd:5f:5a: 28:56:6b:63:8d:83:36:e6:9e:f9:eb:69:4b:f4:2a: 0d:81:c8:98:37:42:ee:44:69:a7:bb:a6:3e:7a:82: 88:23:fa:5f:72:9b:ef:85:7d:57:91:b1:ec:57:6a: c6:79:16:d0:c5:65:4b:de:d5:11:5f:4d:b3:f8:12: 5a:b3:6e:c8:82:35:6b:7e:b3:98:e2:ba:16:7d:77: d4:7f:c4:da:dd:3b:7c:33:8a:a5:8c:19:20:71:7e: 0f:b5:2d:97:e8:2a:2b:06:ce:f8:9b:ac:0f:37:a0: 20:f2:b5:8c:fb:cd:1c:8c:34:01:ad:f8:cc:f2:0e: 58:62:16:0e:d8:52:fd:5f:e5:9a:7a:64:d3:30:26: 5c:ee:4d:66:92:f8:29:26:d3:65:b1:09:2d:20:14: dd:f5:7a:c2:9c:05:c4:c3:42:6c:c1:86:3c:e6:75: 6a:ff:e5:45:4f:fb:fd:d7:e1:e8:ff:31:59:5b:6a: 2c:64:ae:e1:19:5e:b5:45:34:2f:17:f2:17:f2:d6: e4:ba:ff:12:86:50:73:03:f2:f7:6f:f6:9e:14:40: 73:b7:dc:b0:91:1a:0b:56:7b:6e:08:03:78:f0:44: 99:5c:d1:b1:a6:7f:4c:24:cb:a1:72:35:be:13:dc: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.128.0/23 Signature Algorithm: sha256WithRSAEncryption 17:9d:f2:91:ca:40:0b:96:dd:16:6f:27:a9:9f:ef:eb:05:1e: 25:e1:d5:c0:8a:bc:b8:63:7a:a7:86:53:1a:d4:ce:4a:70:4f: 1a:1d:79:6f:09:18:14:45:68:1b:e4:45:56:db:98:2d:e7:f9: d2:f2:ac:ab:85:fa:1a:b6:58:00:2d:70:3b:84:95:19:45:6a: 5c:b7:e8:77:26:07:03:be:f6:5e:18:0e:95:47:75:23:66:8b: d4:b5:9f:1e:bd:6a:1a:6f:dc:d5:47:47:21:f4:1f:df:b6:77: df:6e:98:2f:e8:2b:a8:9b:e1:39:79:df:76:6e:b6:ab:2d:ae: 84:70:4e:40:4a:a5:dc:82:c9:7c:e1:b1:04:b5:3b:5d:df:57: e6:f8:83:a8:e8:18:94:f5:04:68:e8:2a:8d:d4:51:27:44:b6: 50:cc:fb:f5:ff:52:86:1e:49:67:e3:c4:04:f2:32:18:65:d8: f3:af:3d:26:c9:f6:0a:f4:08:ee:ec:e3:c5:6c:bd:2a:21:d4: 62:46:65:05:a4:e4:c6:ae:5c:20:d8:90:02:73:e3:90:c0:b4: 18:f9:42:ff:31:09:51:7b:45:55:fe:e6:3d:a1:d3:70:c9:b9: 91:b6:6e:38:dc:ba:de:03:eb:f9:2b:ce:11:1c:13:69:9f:34: f3:05:c5:a4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPVuz/I/XqDU1A+0muV2JBEBgWk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDczOVoX DTI3MDUwMjAxMTIzOVowMzExMC8GA1UEAxMoNzdCRTFBNEYzNDdGQTMxQTVDRkM0 NjFGNkE1RDNDMTlFNDE1OEY4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvXIHXQ4gPG0eZI3V9aKFZrY42DNuae+etpS/QqDYHImDdC7kRpp7umPnqC iCP6X3Kb74V9V5Gx7FdqxnkW0MVlS97VEV9Ns/gSWrNuyII1a36zmOK6Fn131H/E 2t07fDOKpYwZIHF+D7Utl+gqKwbO+JusDzegIPK1jPvNHIw0Aa34zPIOWGIWDthS /V/lmnpk0zAmXO5NZpL4KSbTZbEJLSAU3fV6wpwFxMNCbMGGPOZ1av/lRU/7/dfh 6P8xWVtqLGSu4RletUU0LxfyF/LW5Lr/EoZQcwPy92/2nhRAc7fcsJEaC1Z7bggD ePBEmVzRsaZ/TCTLoXI1vhPcEjMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHe+Gk80f6MaXPxGH2pdPBnkFY+GMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgyNGQxZWJiLWFlZWItNDk0NS05ZWYyLTMyYWQ5YmZkZWIxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MjRkMWVi Yi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC83N0JFMUE0RjM0N0ZBMzFB NUNGQzQ2MUY2QTVEM0MxOUU0MTU4Rjg2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUKAMA0GCSqGSIb3DQEBCwUAA4IBAQAXnfKRykALlt0Wbyepn+/rBR4l4dXA iry4Y3qnhlMa1M5KcE8aHXlvCRgURWgb5EVW25gt5/nS8qyrhfoatlgALXA7hJUZ RWpct+h3JgcDvvZeGA6VR3UjZovUtZ8evWoab9zVR0ch9B/ftnffbpgv6Cuom+E5 ed92brarLa6EcE5ASqXcgsl84bEEtTtd31fm+IOo6BiU9QRo6CqN1FEnRLZQzPv1 /1KGHkln48QE8jIYZdjzrz0myfYK9Aju7OPFbL0qIdRiRmUFpOTGrlwg2JACc+OQ wLQY+UL/MQlRe0VV/uY9odNwybmRtm443LreA+v5K84RHBNpnzTzBcWk -----END CERTIFICATE-----Generated at Tue May 5 14:12:10 2026 by rpki-client