$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer File: 10B2C61A3BF002D69AD557B8392E1F340162A168.cer (raw, json) Hash identifier: fyrSVzmnddMaAd+arHcofsdcWO4KTqfA8zZGEF0lCrY= Subject key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 1C3557EA54C29796FC7AE17680DD53AAC2DB1355 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:30:32 +0000 Certificate not after: Sun 02 May 2027 00:35:32 +0000 Subordinate resources: IP: 151.158.150.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 14:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:35:57:ea:54:c2:97:96:fc:7a:e1:76:80:dd:53:aa:c2:db:13:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: May 3 00:30:32 2026 GMT Not After : May 2 00:35:32 2027 GMT Subject: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:20:c6:03:c0:eb:17:f9:ff:cd:e6:99:ca: 6e:c5:43:63:a5:6b:31:bd:38:c8:d2:e8:b7:b8:84: be:67:24:92:e2:b7:ad:79:63:9e:e1:6d:15:87:79: 91:e5:a6:78:9b:8d:db:bf:67:51:53:3e:f8:9c:41: 48:99:f8:00:87:36:06:79:b4:25:e1:20:73:2b:b9: e5:00:cf:a0:92:2e:2d:40:c6:6b:78:8c:de:dc:c9: 4e:e0:2f:14:47:8e:6a:35:c7:8a:c4:f1:bf:5c:f5: 33:10:75:f6:7f:4f:02:2f:9d:27:d7:65:0e:98:64: c1:fd:40:33:f2:0d:b5:dd:96:17:05:5a:ff:82:f9: 16:b2:c9:b0:36:b5:0b:21:4d:5a:4f:17:fc:36:68: ff:ac:dd:27:40:a8:3d:97:c9:f7:70:c7:8e:d4:f0: 83:ae:dd:a3:f0:db:49:9f:44:b6:9d:41:2f:fc:c8: 2b:0e:f9:26:37:67:c8:01:12:74:f9:f3:4f:a1:e4: 54:20:ec:de:0f:3c:89:4a:08:d7:98:83:2d:2b:9e: 6d:81:51:4a:98:30:cd:9a:74:c7:3a:24:8d:65:ec: 1e:63:25:02:23:4e:5e:b8:b3:54:6a:a1:92:8b:16: b8:29:f1:eb:a5:3f:da:94:2b:f7:0c:ec:91:b6:1f: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.150.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:ac:25:9e:cb:db:50:90:fe:7a:12:c8:e2:a5:6b:e6:fb:96: 16:b2:ef:29:9f:17:12:ea:7d:d2:fb:2f:61:e2:f6:2e:51:11: 4e:ba:e5:87:5f:8f:36:6e:59:91:5b:74:f6:c8:38:99:56:f2: f6:03:c0:b9:5a:06:41:6a:a8:41:85:f6:c3:64:d2:78:66:4a: e1:f8:6d:33:37:00:e9:31:6b:9d:ed:e5:e8:22:33:5e:97:ca: 36:b2:58:0c:76:2d:40:32:cf:cc:80:48:8d:d9:65:df:03:c5: b9:27:ef:10:5a:51:0f:fc:31:ef:ef:66:92:e4:2f:4c:46:2b: 21:6d:fc:08:f3:7a:f8:a0:8e:fc:54:e8:a0:47:41:1e:f9:44: e4:f2:b1:fe:35:54:39:97:f0:43:fa:1c:81:8b:cf:e2:b7:1d: 6f:37:2b:14:b7:0b:9b:29:08:7e:86:a6:5b:cc:20:42:c7:b3: f3:88:bc:d9:34:8f:19:55:88:e3:a2:75:a4:be:93:c2:31:06: 5e:3d:8a:b0:ee:46:07:dd:9e:4f:d0:d6:9c:b9:d3:10:b8:18: 76:20:96:fa:d7:1a:8f:cf:14:fb:fb:cf:14:cc:07:f8:57:68: 01:b6:e7:4f:64:d8:4f:0b:45:43:e2:38:5f:3f:43:31:b3:15: 9d:0c:c0:c2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHDVX6lTCl5b8euF2gN1TqsLbE1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMzAwMzAzMloX DTI3MDUwMjAwMzUzMlowMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1 N0I4MzkyRTFGMzQwMTYyQTE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5dIMYDwOsX+f/N5pnKbsVDY6VrMb04yNLot7iEvmckkuK3rXljnuFtFYd5 keWmeJuN279nUVM++JxBSJn4AIc2Bnm0JeEgcyu55QDPoJIuLUDGa3iM3tzJTuAv FEeOajXHisTxv1z1MxB19n9PAi+dJ9dlDphkwf1AM/INtd2WFwVa/4L5FrLJsDa1 CyFNWk8X/DZo/6zdJ0CoPZfJ93DHjtTwg67do/DbSZ9Etp1BL/zIKw75JjdnyAES dPnzT6HkVCDs3g88iUoI15iDLSuebYFRSpgwzZp0xzokjWXsHmMlAiNOXrizVGqh kosWuCnx66U/2pQr9wzskbYfLOECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBCyxho78ALWmtVXuDkuHzQBYqFoMB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRkNWEwM2ViLWEzZTEtNDg3OS04NWJmLTJiZWEwMzU1NThkZC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZDVhMDNl Yi1hM2UxLTQ4NzktODViZi0yYmVhMDM1NTU4ZGQvMS8xMEIyQzYxQTNCRjAwMkQ2 OUFENTU3QjgzOTJFMUYzNDAxNjJBMTY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBl56WMA0GCSqGSIb3DQEBCwUAA4IBAQBdrCWey9tQkP56EsjipWvm+5YWsu8p nxcS6n3S+y9h4vYuURFOuuWHX482blmRW3T2yDiZVvL2A8C5WgZBaqhBhfbDZNJ4 Zkrh+G0zNwDpMWud7eXoIjNel8o2slgMdi1AMs/MgEiN2WXfA8W5J+8QWlEP/DHv 72aS5C9MRishbfwI83r4oI78VOigR0Ee+UTk8rH+NVQ5l/BD+hyBi8/itx1vNysU twubKQh+hqZbzCBCx7PziLzZNI8ZVYjjonWkvpPCMQZePYqw7kYH3Z5P0NacudMQ uBh2IJb61xqPzxT7+88UzAf4V2gBtudPZNhPC0VD4jhfP0MxsxWdDMDC -----END CERTIFICATE-----Generated at Tue May 5 14:55:34 2026 by rpki-client