$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/13E54012E6F655E86F06520A89313738550A03EF.cer File: 13E54012E6F655E86F06520A89313738550A03EF.cer (raw, json) Hash identifier: 8pCiNwNCmyhqZRJLNfE8Q1MJvXyfUxQJks9pMSSP4ns= Subject key identifier: 13:E5:40:12:E6:F6:55:E8:6F:06:52:0A:89:31:37:38:55:0A:03:EF Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0EC3985ABA4C542D65170A37992B81BFC14D9802 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/13E54012E6F655E86F06520A89313738550A03EF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:51:25 +0000 Certificate not after: Sat 01 May 2027 23:56:25 +0000 Subordinate resources: IP: 160.19.156.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c3:98:5a:ba:4c:54:2d:65:17:0a:37:99:2b:81:bf:c1:4d:98:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:51:25 2026 GMT Not After : May 1 23:56:25 2027 GMT Subject: CN=13E54012E6F655E86F06520A89313738550A03EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:b6:ad:3a:bc:8d:0f:b9:0f:2e:d6:50:cd: 3a:eb:33:05:68:21:76:ce:86:4c:ae:86:15:6d:e0: a6:ec:63:77:8e:74:c4:0e:86:b0:38:ea:a7:38:8a: 7f:ba:93:5e:51:35:1e:0b:10:58:0c:63:b1:81:b7: 7c:e4:c3:93:a7:c5:1b:7d:c0:af:d8:be:24:b8:c8: 8b:77:ec:8b:0e:ea:92:3b:1a:2f:1d:4d:53:4d:11: a2:4c:73:02:ae:98:fa:0e:06:08:e5:70:5d:18:97: 03:10:21:fc:27:8e:4d:14:27:91:31:7d:4e:77:b6: 07:b4:01:d1:21:a0:aa:12:7a:4f:f2:3b:14:dc:71: 67:7c:ff:ee:6b:5a:08:aa:8a:d8:d0:50:64:5a:a9: 37:c4:26:02:fb:c3:c7:a5:73:10:6c:57:c9:88:a4: d6:c6:64:ce:b3:00:b3:07:3c:f3:7a:e3:9a:fa:32: 9e:49:c7:e1:19:b5:09:88:5f:bb:8a:d0:ff:9f:9c: 51:19:64:d5:25:39:95:99:e9:1c:6b:35:58:25:43: 2a:c4:2e:94:73:9a:6c:52:64:74:93:43:09:b9:98: bb:bf:5d:b3:6d:10:7f:8a:0f:57:8e:0c:0c:ac:db: 42:23:7e:98:02:87:6c:6f:d0:03:25:c7:70:2c:a5: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:E5:40:12:E6:F6:55:E8:6F:06:52:0A:89:31:37:38:55:0A:03:EF X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/13E54012E6F655E86F06520A89313738550A03EF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.156.0/23 Signature Algorithm: sha256WithRSAEncryption 51:7f:20:20:fb:ff:80:0c:22:63:ce:b2:f3:c0:e1:d8:08:ed: 86:f0:df:99:31:2b:fb:98:a3:d9:44:13:d5:95:d7:c0:07:6b: 95:ec:ef:61:e6:83:08:24:fb:06:82:0c:db:d7:b4:f7:a4:62: 64:17:84:ca:18:f7:cc:c1:69:c7:90:30:36:0b:24:8b:02:c7: ab:14:ac:88:db:52:99:42:88:47:4d:26:d5:bc:e4:dd:0a:1f: 1c:6b:e3:c9:ee:05:61:66:bc:c0:90:a9:ce:de:d3:69:36:3d: ac:5e:4f:05:9a:e2:53:0d:15:f3:d4:c8:67:db:59:ca:31:cd: 02:41:4d:b5:03:62:a0:fb:66:ca:9e:51:b0:76:4d:08:e5:d9: 80:ad:39:a8:02:02:25:97:e4:74:d8:51:40:92:d2:5a:da:86: 9c:1f:88:c9:3a:f0:79:f3:0a:67:a1:b9:cb:b4:97:6f:f3:19: 26:2a:17:d4:8e:44:83:7f:75:99:20:76:8b:b0:15:b8:ca:41: 4a:cd:14:45:e4:cb:5c:4a:46:5d:b6:0e:48:d9:cb:5a:0f:a0: 54:9f:a6:4c:a1:65:de:51:7d:04:c9:0e:c6:a4:f4:74:4a:ee: 84:95:9a:67:63:3e:92:01:97:ec:b2:62:4f:95:2c:29:46:5e: 24:5e:9a:a0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDsOYWrpMVC1lFwo3mSuBv8FNmAIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNTEyNVoX DTI3MDUwMTIzNTYyNVowMzExMC8GA1UEAxMoMTNFNTQwMTJFNkY2NTVFODZGMDY1 MjBBODkzMTM3Mzg1NTBBMDNFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC7tq06vI0PuQ8u1lDNOuszBWghds6GTK6GFW3gpuxjd450xA6GsDjqpziK f7qTXlE1HgsQWAxjsYG3fOTDk6fFG33Ar9i+JLjIi3fsiw7qkjsaLx1NU00Rokxz Aq6Y+g4GCOVwXRiXAxAh/CeOTRQnkTF9Tne2B7QB0SGgqhJ6T/I7FNxxZ3z/7mta CKqK2NBQZFqpN8QmAvvDx6VzEGxXyYik1sZkzrMAswc883rjmvoynknH4Rm1CYhf u4rQ/5+cURlk1SU5lZnpHGs1WCVDKsQulHOabFJkdJNDCbmYu79ds20Qf4oPV44M DKzbQiN+mAKHbG/QAyXHcCylhMsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBPlQBLm9lXobwZSCokxNzhVCgPvMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEyZjgwOGE0LTlkYjMtNDY5OC1hMDdiLTQ3NjlkY2UxOGVjNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMmY4MDhh NC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8xM0U1NDAxMkU2RjY1NUU4 NkYwNjUyMEE4OTMxMzczODU1MEEwM0VGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBOcMA0GCSqGSIb3DQEBCwUAA4IBAQBRfyAg+/+ADCJjzrLzwOHYCO2G8N+Z MSv7mKPZRBPVldfAB2uV7O9h5oMIJPsGggzb17T3pGJkF4TKGPfMwWnHkDA2CySL AserFKyI21KZQohHTSbVvOTdCh8ca+PJ7gVhZrzAkKnO3tNpNj2sXk8FmuJTDRXz 1Mhn21nKMc0CQU21A2Kg+2bKnlGwdk0I5dmArTmoAgIll+R02FFAktJa2oacH4jJ OvB58wpnobnLtJdv8xkmKhfUjkSDf3WZIHaLsBW4ykFKzRRF5MtcSkZdtg5I2cta D6BUn6ZMoWXeUX0EyQ7GpPR0Su6ElZpnYz6SAZfssmJPlSwpRl4kXpqg -----END CERTIFICATE-----Generated at Wed May 13 00:33:54 2026 by rpki-client