$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer (raw, json) Hash identifier: akz8cOkupMnRthI9XgGjwyJVDXEBd1lUSYg8gBZ8c+Y= Subject key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 3C316146CDA8F745BE3B208FE87AA44FD3945789 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Manifest: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:16:51 +0000 Certificate not after: Sun 02 May 2027 01:21:51 +0000 Subordinate resources: IP: 151.158.10.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 14:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:31:61:46:cd:a8:f7:45:be:3b:20:8f:e8:7a:a4:4f:d3:94:57:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: May 3 01:16:51 2026 GMT Not After : May 2 01:21:51 2027 GMT Subject: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:3f:f9:e3:7d:71:20:03:68:e1:44:1e:c7: 3f:42:fd:99:ec:13:3d:87:eb:36:5d:04:e1:f1:ab: 57:ca:52:4b:9e:e0:a3:81:46:3a:dc:34:ea:a2:c8: 5a:d0:73:bf:59:3a:52:35:92:70:77:c7:b4:2d:cf: 82:bb:17:d4:5b:b4:34:9f:c9:f3:d3:1c:50:b8:74: cd:7f:c3:49:20:6b:a6:d7:b5:86:d7:b3:cc:80:de: 32:d0:34:c3:1c:a8:6c:87:3b:8b:05:1b:0e:4d:f7: 0a:58:69:8d:3c:b2:10:69:65:34:60:31:99:24:f2: dd:04:b1:34:e2:85:16:56:a3:cc:c5:53:db:92:19: 2e:5d:a0:ab:cf:0a:52:77:cf:0a:b1:cf:22:be:c0: a6:8a:17:89:ed:b4:75:41:51:c8:76:2c:f0:6e:6d: 62:6f:ee:6a:e7:25:82:2a:2f:b1:34:3d:5a:e7:96: 10:26:97:33:43:b1:c5:5f:1c:e7:e1:fa:d8:66:85: 14:e0:70:7f:c6:21:2a:45:c3:82:9c:65:bb:2a:64: 60:70:71:ba:a6:d2:ab:50:d1:91:c8:00:e7:b4:21: f3:fb:b9:c4:ff:54:cd:40:8a:f1:ec:32:e9:0c:44: 6f:22:8c:3a:f0:04:af:d6:22:0b:cb:e5:73:1a:75: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.10.0/23 Signature Algorithm: sha256WithRSAEncryption a9:4d:c9:fc:0a:33:12:73:ff:96:36:6c:87:f0:c3:11:f7:7c: 0e:07:33:a5:f3:24:7c:5c:af:10:ff:cd:53:a2:cf:d6:7c:1f: 8e:fe:73:e8:d0:50:20:4e:4b:80:92:2a:4b:9d:f0:0d:40:2b: 72:e5:e1:48:79:78:8a:a4:23:f7:cc:ba:8f:8e:3f:97:63:b3: 9c:ce:5f:27:43:8e:f2:e0:e3:d4:dc:60:ff:a0:c2:4c:ec:0c: 0f:d8:51:2a:db:ac:78:b3:06:48:61:8b:36:e4:62:f2:46:1b: 2d:8d:2c:6a:06:d3:ca:e0:ad:e9:a1:0d:7b:a8:ed:e9:43:3b: 00:87:f2:df:41:c2:c4:77:b4:f1:de:1c:74:db:66:9a:1f:d9: 68:21:3a:7f:d6:49:ed:99:56:0b:84:a8:09:54:95:a3:1e:08: fd:e3:83:17:9a:0d:f6:21:d9:3d:4b:ff:44:d6:0d:58:5e:be: 8d:94:fa:87:0e:ba:01:af:9f:d6:7d:f8:e4:ac:01:c8:08:85: 5d:8f:2c:a1:78:69:d9:72:6a:20:02:8e:45:88:fc:23:07:a9: 2f:ac:69:ec:e2:3d:17:6e:fb:25:f0:37:28:94:d0:ae:73:99: 2d:fc:60:71:e5:76:e1:45:c5:e6:cf:24:2f:15:42:3f:eb:f5: 0f:4b:f8:c2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPDFhRs2o90W+OyCP6HqkT9OUV4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMzAxMTY1MVoX DTI3MDUwMjAxMjE1MVowMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZB REVEQjlERDQ2Mzk3QjMxMzVBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCsP/njfXEgA2jhRB7HP0L9mewTPYfrNl0E4fGrV8pSS57go4FGOtw06qLI WtBzv1k6UjWScHfHtC3PgrsX1Fu0NJ/J89McULh0zX/DSSBrpte1htezzIDeMtA0 wxyobIc7iwUbDk33ClhpjTyyEGllNGAxmSTy3QSxNOKFFlajzMVT25IZLl2gq88K UnfPCrHPIr7ApooXie20dUFRyHYs8G5tYm/uauclgiovsTQ9WueWECaXM0OxxV8c 5+H62GaFFOBwf8YhKkXDgpxluypkYHBxuqbSq1DRkcgA57Qh8/u5xP9UzUCK8ewy 6QxEbyKMOvAEr9YiC8vlcxp1dTsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHD0y9X0elNY53+t7bndRjl7MTWqMB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkwNjQ5ZWY1LWM0ODQtNGY0MS1hMDU0LWQ2Y2UzOWMxZjUwNi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MDY0OWVm NS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMS83MEY0Q0JENUY0N0E1MzU4 RTc3RkFERURCOURENDYzOTdCMzEzNUFBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBl54KMA0GCSqGSIb3DQEBCwUAA4IBAQCpTcn8CjMSc/+WNmyH8MMR93wOBzOl 8yR8XK8Q/81Tos/WfB+O/nPo0FAgTkuAkipLnfANQCty5eFIeXiKpCP3zLqPjj+X Y7Oczl8nQ47y4OPU3GD/oMJM7AwP2FEq26x4swZIYYs25GLyRhstjSxqBtPK4K3p oQ17qO3pQzsAh/LfQcLEd7Tx3hx022aaH9loITp/1kntmVYLhKgJVJWjHgj944MX mg32Idk9S/9E1g1YXr6NlPqHDroBr5/WffjkrAHICIVdjyyheGnZcmogAo5FiPwj B6kvrGns4j0Xbvsl8DcolNCuc5kt/GBx5XbhRcXmzyQvFUI/6/UPS/jC -----END CERTIFICATE-----Generated at Tue May 5 14:55:34 2026 by rpki-client