$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer (raw, json) Hash identifier: y155JHzkVWlaO0T68fQhS9ZBXW9kVS46U/T/4tyj7O4= Subject key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3217FA376BC3D34039890A3D390346E95EDD4166 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:29:50 +0000 Certificate not after: Sun 02 May 2027 00:34:50 +0000 Subordinate resources: IP: 140.213.0.0/16 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:17:fa:37:6b:c3:d3:40:39:89:0a:3d:39:03:46:e9:5e:dd:41:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:29:50 2026 GMT Not After : May 2 00:34:50 2027 GMT Subject: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:74:28:36:29:76:e4:6e:a6:40:7a:e6:88:00: 39:91:97:69:44:f1:ec:99:72:30:7b:5e:96:ea:7a: c5:2e:21:fa:e9:e0:87:ff:99:a1:31:f1:22:b5:e0: aa:16:9c:ba:8e:39:a4:2f:36:9d:93:d4:80:11:5b: 0a:52:c4:11:07:30:6a:4a:f5:bd:ae:46:97:8b:1b: 17:1c:a3:fe:b9:4a:81:91:b3:13:5c:75:a3:a4:dc: f0:28:71:47:d6:49:7f:6f:59:e0:0b:8a:56:9b:bd: 33:13:3c:ca:0a:8d:82:b6:f2:80:aa:5b:ee:03:36: a3:b1:10:cd:05:34:27:07:cb:48:52:c9:57:b7:89: ce:9c:c1:1a:a2:02:b3:19:93:64:05:cf:35:8f:c4: fe:cb:95:fc:f4:e5:68:3d:f4:24:62:d2:40:cf:41: 48:e3:66:57:37:1b:6d:2d:4b:87:83:16:ad:c1:cb: 1e:bb:4f:12:29:e5:c3:db:4d:a7:49:80:59:9e:79: 0c:de:e1:66:63:29:fd:20:1b:ed:68:65:55:d0:c8: c6:66:a4:98:7e:52:0c:a1:41:ad:2c:13:3b:11:3b: 22:4f:66:b0:96:19:a6:2d:bb:3a:ef:12:9f:8c:1d: 47:01:92:57:73:5b:fa:95:44:a4:76:24:2f:cf:68: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:48:dd:76:ef:f3:cc:2a:23:3e:3e:1e:9c:f4:03:88:8a:c7: 57:e7:4a:db:65:30:21:ba:cb:39:0f:59:0f:37:71:78:a4:45: ee:71:06:d9:a9:e8:53:a4:7b:e4:07:53:bb:9b:9f:4a:9b:b8: 8d:30:f5:6e:46:29:5e:11:64:e9:20:09:21:87:9f:80:88:53: 38:00:08:4c:ca:65:15:05:ac:7d:ea:55:d4:ec:77:7c:81:2b: 92:bb:89:f9:78:8c:08:c8:f0:30:bb:07:c0:9a:2d:c6:4a:22: c7:54:b7:09:05:b5:04:4d:9a:8e:ef:8f:00:b6:34:09:e6:6c: 9e:4d:4a:ac:69:13:c5:ec:1d:cd:1e:7a:0d:4b:83:38:5c:15: 7d:60:9c:5e:f2:21:56:be:ec:d4:a0:d2:b8:da:4d:2c:77:3b: 9c:e5:98:64:af:98:af:2a:61:82:a0:a7:77:2a:07:99:aa:af: 5b:28:1d:8b:e6:d7:39:9c:4e:b1:a0:0a:c1:2c:1b:8f:37:d1: f5:7c:3e:4e:d2:75:74:fa:a7:8f:6d:ad:09:8e:58:95:4e:1e: c5:9c:c8:5d:b6:ed:d0:81:fa:59:e7:26:1c:21:d7:5c:60:6c: b5:e5:8d:55:ab:5b:f4:a2:37:10:7f:22:7a:f9:d9:7b:3e:03: 09:36:aa:ce -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMhf6N2vD00A5iQo9OQNG6V7dQWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjk1MFoX DTI3MDUwMjAwMzQ1MFowMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkw MjU1NDFGQjZEQUM4RjlEMDA3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO90KDYpduRupkB65ogAOZGXaUTx7JlyMHtelup6xS4h+ungh/+ZoTHxIrXg qhacuo45pC82nZPUgBFbClLEEQcwakr1va5Gl4sbFxyj/rlKgZGzE1x1o6Tc8Chx R9ZJf29Z4AuKVpu9MxM8ygqNgrbygKpb7gM2o7EQzQU0JwfLSFLJV7eJzpzBGqIC sxmTZAXPNY/E/suV/PTlaD30JGLSQM9BSONmVzcbbS1Lh4MWrcHLHrtPEinlw9tN p0mAWZ55DN7hZmMp/SAb7WhlVdDIxmakmH5SDKFBrSwTOxE7Ik9msJYZpi27Ou8S n4wdRwGSV3Nb+pVEpHYkL89oFD8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB4MCtgKZB4ogvkCVUH7bayPnQBxMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRiZGIxZTBhLWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmRiMWUw YS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC8xRTBDMEFEODBBNjQxRTI4 ODJGOTAyNTU0MUZCNkRBQzhGOUQwMDcxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAjNUwDQYJKoZIhvcNAQELBQADggEBACBI3Xbv88wqIz4+Hpz0A4iKx1fnSttl MCG6yzkPWQ83cXikRe5xBtmp6FOke+QHU7ubn0qbuI0w9W5GKV4RZOkgCSGHn4CI UzgACEzKZRUFrH3qVdTsd3yBK5K7ifl4jAjI8DC7B8CaLcZKIsdUtwkFtQRNmo7v jwC2NAnmbJ5NSqxpE8XsHc0eeg1LgzhcFX1gnF7yIVa+7NSg0rjaTSx3O5zlmGSv mK8qYYKgp3cqB5mqr1soHYvm1zmcTrGgCsEsG4830fV8Pk7SdXT6p49trQmOWJVO HsWcyF227dCB+lnnJhwh11xgbLXljVWrW/SiNxB/Inr52Xs+Awk2qs4= -----END CERTIFICATE-----Generated at Tue May 12 22:04:12 2026 by rpki-client