$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer File: A65A7370A28DA71B1C11B89E09D51753C498246D.cer (raw, json) Hash identifier: hD5ahI6OlNIrBidjDo0DQ9XivTLjzAFH4lRCuMtEAR4= Subject key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 5786C868C94F6C42C977E58C8E3877ED838E1EE1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:10:40 +0000 Certificate not after: Sun 02 May 2027 00:15:40 +0000 Subordinate resources: IP: 151.158.74.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 14:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:86:c8:68:c9:4f:6c:42:c9:77:e5:8c:8e:38:77:ed:83:8e:1e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: May 3 00:10:40 2026 GMT Not After : May 2 00:15:40 2027 GMT Subject: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:4a:5e:6e:3d:ad:03:ca:86:ee:7a:03:66: 88:05:b8:b4:12:49:aa:61:71:e3:96:ff:79:87:57: 5c:09:68:ab:87:f7:8e:ba:fc:ba:56:d7:2e:d8:3c: 2a:5a:45:ce:8d:3c:28:8b:ef:30:f4:56:09:a1:4f: 61:df:d9:81:75:4e:c8:05:73:97:73:43:97:60:a5: 77:01:44:9e:fe:03:21:23:a4:a9:4d:e7:6e:5e:b3: 34:0c:9b:1d:0d:90:02:62:68:b9:cf:28:76:ae:df: 2e:3d:a1:66:c0:56:28:91:13:e9:65:aa:8f:ac:64: 91:a6:6b:8b:a5:62:56:e9:93:99:e0:31:11:28:e0: cf:15:7c:6a:4f:66:cd:a3:a0:53:b1:e7:2b:ef:db: d4:5c:45:90:95:64:bc:fe:6b:a6:c9:27:5f:b9:a6: b4:08:07:99:94:31:c6:ea:9a:66:70:ed:de:98:ae: ce:25:f9:eb:bd:27:1b:a5:79:28:39:68:74:bf:2d: 87:39:63:5e:05:90:29:29:36:39:8b:8c:0c:cf:bc: c6:86:5f:3b:27:08:72:88:c5:38:e7:09:d9:05:43: 55:29:da:fe:35:16:7f:d8:90:9f:a8:78:e4:65:cb: ee:be:8e:94:f8:c9:07:a5:e7:97:07:d6:e7:dc:3b: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.74.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:e0:62:db:d5:60:a9:d2:d1:48:60:a2:f7:d2:59:d0:c6:f6: 96:83:07:b9:8d:ca:62:3d:7c:93:2b:2b:8d:78:eb:6b:aa:33: f7:25:a6:df:63:65:e4:08:ce:8d:84:ab:91:b3:41:51:1f:83: 32:21:f0:f0:b6:e9:4e:11:d9:56:64:49:a4:91:f4:7d:bd:0f: cf:5a:37:71:73:34:e0:7b:1e:b2:29:ed:60:a7:d8:78:49:db: f2:0e:fd:75:fb:0e:ff:0f:5b:94:28:54:71:f2:8d:b0:11:ad: dd:56:95:74:24:a7:1b:2d:7d:ce:0f:c1:e4:ee:b7:54:d5:d2: d6:8b:71:6e:3f:d9:bb:41:fc:b0:96:e8:d7:4d:3e:9b:8c:94: 16:70:09:9c:e6:7e:f3:63:af:60:9b:20:fb:b0:41:2a:20:6c: dc:01:7d:2e:3e:cd:3b:63:66:99:b5:79:d4:85:69:d5:c7:f1: 61:48:38:26:bb:33:6c:7e:76:fa:f2:10:08:ce:a8:19:f8:52: 1c:88:5f:58:51:9a:f0:3e:82:1f:89:f0:f5:ef:9b:08:79:3d: 73:84:02:06:a4:fb:cc:29:c0:c6:49:38:6b:b9:9b:c0:f4:0c: 25:96:36:2d:b9:ab:ad:4b:be:87:98:2a:f5:92:62:99:20:47: e8:df:81:50 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUV4bIaMlPbELJd+WMjjh37YOOHuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMzAwMTA0MFoX DTI3MDUwMjAwMTU0MFowMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFC ODlFMDlENTE3NTNDNDk4MjQ2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNrSl5uPa0DyobuegNmiAW4tBJJqmFx45b/eYdXXAloq4f3jrr8ulbXLtg8 KlpFzo08KIvvMPRWCaFPYd/ZgXVOyAVzl3NDl2CldwFEnv4DISOkqU3nbl6zNAyb HQ2QAmJouc8odq7fLj2hZsBWKJET6WWqj6xkkaZri6ViVumTmeAxESjgzxV8ak9m zaOgU7HnK+/b1FxFkJVkvP5rpsknX7mmtAgHmZQxxuqaZnDt3piuziX5670nG6V5 KDlodL8thzljXgWQKSk2OYuMDM+8xoZfOycIcojFOOcJ2QVDVSna/jUWf9iQn6h4 5GXL7r6OlPjJB6XnlwfW59w7SX0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKZac3CijacbHBG4ngnVF1PEmCRtMB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJlZjE2ZjMxLTYwY2UtNDdhNy1hZThkLTVhMjhjNTExYzk0Ny8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZWYxNmYz MS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMS9BNjVBNzM3MEEyOERBNzFC MUMxMUI4OUUwOUQ1MTc1M0M0OTgyNDZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBl55KMA0GCSqGSIb3DQEBCwUAA4IBAQB64GLb1WCp0tFIYKL30lnQxvaWgwe5 jcpiPXyTKyuNeOtrqjP3JabfY2XkCM6NhKuRs0FRH4MyIfDwtulOEdlWZEmkkfR9 vQ/PWjdxczTgex6yKe1gp9h4SdvyDv11+w7/D1uUKFRx8o2wEa3dVpV0JKcbLX3O D8Hk7rdU1dLWi3FuP9m7QfywlujXTT6bjJQWcAmc5n7zY69gmyD7sEEqIGzcAX0u Ps07Y2aZtXnUhWnVx/FhSDgmuzNsfnb68hAIzqgZ+FIciF9YUZrwPoIfifD175sI eT1zhAIGpPvMKcDGSThruZvA9AwlljYtuautS76HmCr1kmKZIEfo34FQ -----END CERTIFICATE-----Generated at Tue May 5 14:55:44 2026 by rpki-client