$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer (raw, json) Hash identifier: 4chPlJCS5tv2jVHpl4IAEO/8bEck4j0VqO47ztGUA3c= Subject key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 4F9ED89E9F4C2A6E1AF5FC6145B1A638C671115F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:12 +0000 Certificate not after: Sun 02 May 2027 01:52:12 +0000 Subordinate resources: IP: 151.158.239.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 14:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9e:d8:9e:9f:4c:2a:6e:1a:f5:fc:61:45:b1:a6:38:c6:71:11:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: May 3 01:47:12 2026 GMT Not After : May 2 01:52:12 2027 GMT Subject: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:5a:9c:a8:fe:e0:e8:33:b8:a3:b9:2b:ad: eb:6c:75:42:ce:9d:0e:d1:29:2b:ca:3d:81:0a:7b: b7:ba:9c:b6:78:a5:80:88:b5:01:68:ba:21:77:ad: 6c:bd:1e:2d:06:cb:38:84:ed:45:76:c8:b2:b0:b2: 3b:2f:5b:7d:7b:9e:a2:c7:67:11:87:9f:5c:1d:d5: ec:80:3d:b1:19:63:7a:32:f6:99:87:7f:be:c7:f3: ed:18:e6:ea:e5:f6:16:19:0e:f4:bb:e6:d6:46:36: fc:01:8f:49:68:b7:b1:af:0b:dd:9d:60:db:5b:ac: 77:25:f9:0a:fd:cc:12:48:a3:24:01:3c:7f:fb:0c: 41:47:d8:5c:3f:dc:39:a4:02:a9:02:11:ff:5f:43: be:7d:28:62:b9:56:b7:f1:ad:58:ad:2e:61:9a:18: f6:94:9b:cd:fb:f8:94:d4:94:59:9e:19:62:e5:98: 31:62:73:9c:01:af:2a:e3:3b:7f:3e:15:31:4c:5c: e7:8f:f8:2a:cc:f2:de:40:53:41:13:8c:69:d9:51: 9a:a0:1e:1e:d5:74:2c:61:1c:a3:75:c3:f4:e5:ec: 4e:bc:bf:52:53:00:30:4e:8b:c0:2a:37:2a:04:96: 68:e2:a8:ba:bd:75:00:51:e3:c1:63:3c:04:92:16: 41:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.239.0/24 Signature Algorithm: sha256WithRSAEncryption a0:b5:00:e1:3c:27:de:f8:0d:f0:27:3c:36:db:b4:ce:d8:cb: c8:03:c8:0d:bd:f3:7f:f8:06:b2:b9:5f:50:dd:9f:73:01:ce: 61:1d:56:70:d4:dc:ff:d5:53:7c:3e:80:81:6c:68:93:ef:78: 5c:90:49:8c:e0:c7:d7:37:65:44:a3:09:65:48:75:8b:14:22: 6a:5d:26:c3:7f:e0:7d:6c:84:96:02:8f:96:34:29:16:88:b8: 05:42:32:ad:b8:5a:88:7e:50:e8:d1:fd:62:37:4a:ce:ef:e9: 83:b5:34:27:ae:64:8b:3f:51:ba:55:3f:04:5d:6b:1d:59:46: e7:d2:7e:5d:d9:ad:9a:87:b0:2c:fb:81:3b:53:d9:6b:e8:58: a8:55:da:b5:9e:47:51:3a:16:ad:40:14:9e:38:06:74:1c:99: 66:e3:ba:29:ef:ef:c9:e2:e5:ae:5d:84:0b:9f:e0:f8:fb:b2: b1:fe:e8:ab:1f:c3:f2:65:f6:fd:04:07:02:31:33:c0:58:c7: 44:b5:4e:be:58:45:6d:bd:1f:61:38:82:29:b2:2d:18:bd:3c: 25:3b:70:ad:b8:47:f0:04:0c:47:3e:33:be:28:25:ca:2c:79: 7f:38:47:bd:8e:a5:30:b2:d6:f5:b6:3e:76:39:41:25:cf:f5: 13:b2:b1:f9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUT57Ynp9MKm4a9fxhRbGmOMZxEV8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMzAxNDcxMloX DTI3MDUwMjAxNTIxMlowMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1 MkE3MzZFQjMxQzYyQjA2QzhGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2oWpyo/uDoM7ijuSut62x1Qs6dDtEpK8o9gQp7t7qctnilgIi1AWi6IXet bL0eLQbLOITtRXbIsrCyOy9bfXueosdnEYefXB3V7IA9sRljejL2mYd/vsfz7Rjm 6uX2FhkO9Lvm1kY2/AGPSWi3sa8L3Z1g21usdyX5Cv3MEkijJAE8f/sMQUfYXD/c OaQCqQIR/19Dvn0oYrlWt/GtWK0uYZoY9pSbzfv4lNSUWZ4ZYuWYMWJznAGvKuM7 fz4VMUxc54/4Kszy3kBTQROMadlRmqAeHtV0LGEco3XD9OXsTry/UlMAME6LwCo3 KgSWaOKour11AFHjwWM8BJIWQfkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAJLa3QHuXt2V91SpzbrMcYrBsjwMB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MwNjg1MzA3LTg0ZWEtNGZlMy1iYjdjLWZiMjg5NTM3ODc0Mi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMDY4NTMw Ny04NGVhLTRmZTMtYmI3Yy1mYjI4OTUzNzg3NDIvMS8wMjRCNkI3NDA3Qjk3Qjc2 NTdERDUyQTczNkVCMzFDNjJCMDZDOEYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAl57vMA0GCSqGSIb3DQEBCwUAA4IBAQCgtQDhPCfe+A3wJzw227TO2MvIA8gN vfN/+AayuV9Q3Z9zAc5hHVZw1Nz/1VN8PoCBbGiT73hckEmM4MfXN2VEowllSHWL FCJqXSbDf+B9bISWAo+WNCkWiLgFQjKtuFqIflDo0f1iN0rO7+mDtTQnrmSLP1G6 VT8EXWsdWUbn0n5d2a2ah7As+4E7U9lr6FioVdq1nkdROhatQBSeOAZ0HJlm47op 7+/J4uWuXYQLn+D4+7Kx/uirH8PyZfb9BAcCMTPAWMdEtU6+WEVtvR9hOIIpsi0Y vTwlO3CtuEfwBAxHPjO+KCXKLHl/OEe9jqUwstb1tj52OUElz/UTsrH5 -----END CERTIFICATE-----Generated at Tue May 5 14:55:25 2026 by rpki-client