$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer (raw, json) Hash identifier: xvnu/bnfxUJeWDx0bo+aLCg5qFP68G565vmqQnk0Nbg= Subject key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4A8667BCD4350DCBF0CD5597E451DDD300B1F75B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:11 +0000 Certificate not after: Sun 02 May 2027 01:44:11 +0000 Subordinate resources: IP: 192.135.98.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:86:67:bc:d4:35:0d:cb:f0:cd:55:97:e4:51:dd:d3:00:b1:f7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:39:11 2026 GMT Not After : May 2 01:44:11 2027 GMT Subject: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:42:a3:58:74:0e:0a:67:e6:5c:27:18:fc: 13:5e:77:7e:e3:ba:c2:c4:dd:60:63:29:67:2d:41: 80:51:f0:5b:08:63:2d:11:f3:3f:2f:04:d4:69:e3: ad:8b:e9:96:9f:99:bc:d2:27:31:63:c3:8f:d0:0a: b4:e0:17:ca:f1:9a:33:75:f3:86:a6:13:5e:61:9d: f6:6b:52:4d:23:6d:ff:5f:8d:66:17:2c:00:64:a6: 85:ed:6e:00:40:cf:c8:f4:88:ee:39:3a:79:02:ff: ae:69:a3:3f:71:74:a6:56:46:00:49:d2:ce:a0:4b: 9c:21:ee:c2:a6:83:64:cb:71:15:f1:39:52:14:4a: fe:8a:d2:dd:59:fb:06:f3:25:c0:5b:bf:83:c4:1f: db:45:6d:39:91:5f:0b:31:ea:f9:b1:a3:e4:68:e7: 1f:bc:e5:08:85:e4:01:a2:9e:64:cd:ab:68:bb:48: 85:36:fa:e8:17:a6:ca:0c:69:0b:2d:0f:17:c2:a1: 81:23:3b:db:7a:2b:6a:c3:e1:4c:1b:3a:2b:04:99: 03:e2:55:24:7e:b8:95:09:8f:1f:20:69:81:de:e7: 9b:56:2a:d9:19:1c:de:60:f8:96:43:96:05:13:a2: a3:80:28:b1:ff:01:57:e8:4e:83:11:d1:ca:45:66: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.135.98.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:d1:d8:57:7f:3b:2a:5e:d1:6d:2c:fe:58:48:cf:cf:5e:b6: f6:d7:0f:65:57:77:d5:83:0b:8d:5f:37:d9:a1:4c:e0:15:c4: 17:a3:e5:78:2f:66:33:1b:00:05:d7:73:8a:71:85:a3:26:bb: 62:dd:3f:cc:d3:38:e3:fc:06:ad:85:5a:29:fa:c2:67:b2:47: b2:97:31:d5:af:63:bc:66:ad:89:07:7c:0c:c6:08:d1:34:9a: 29:47:f7:b4:de:d6:ab:1c:77:f8:a1:61:28:af:28:3a:e1:79: 1f:35:f8:84:41:ac:84:da:51:94:68:99:e9:5c:a1:8d:9b:d9: 08:75:df:86:b2:f8:7f:49:ec:e4:b3:87:4c:13:27:0e:78:41: f0:8a:85:1e:1f:83:36:3f:4d:ea:0e:42:21:09:f2:1a:08:cc: e6:e0:31:81:a3:fb:dd:88:7a:4e:38:d2:be:d3:5e:9b:7a:af: c1:6b:66:e6:98:d3:f7:c3:4a:9c:5d:62:72:2c:87:51:47:f0: 84:11:50:f3:e5:1f:49:e9:0a:89:80:f6:0f:67:d8:71:22:b0: 29:0b:f2:73:92:83:05:9b:8e:87:af:28:1c:ad:c9:d1:f3:6c: 95:72:bd:91:00:9f:2f:18:4e:7d:3d:93:d6:77:f7:cd:e1:5b: c3:7b:f8:73 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSoZnvNQ1DcvwzVWX5FHd0wCx91swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzkxMVoX DTI3MDUwMjAxNDQxMVowMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYz OTNENDNCODA2NkJCOEY5MkEzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdyQqNYdA4KZ+ZcJxj8E153fuO6wsTdYGMpZy1BgFHwWwhjLRHzPy8E1Gnj rYvplp+ZvNInMWPDj9AKtOAXyvGaM3XzhqYTXmGd9mtSTSNt/1+NZhcsAGSmhe1u AEDPyPSI7jk6eQL/rmmjP3F0plZGAEnSzqBLnCHuwqaDZMtxFfE5UhRK/orS3Vn7 BvMlwFu/g8Qf20VtOZFfCzHq+bGj5GjnH7zlCIXkAaKeZM2raLtIhTb66Bemygxp Cy0PF8KhgSM723orasPhTBs6KwSZA+JVJH64lQmPHyBpgd7nm1Yq2Rkc3mD4lkOW BROio4Aosf8BV+hOgxHRykVm7w8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNvVmOG7dJeC3eY5PUO4Bmu4+So+MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyMzhlNTZlLWVkYTUtNDA1YS1hYmJmLTQyZmUyN2I1YmEwMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjM4ZTU2 ZS1lZGE1LTQwNWEtYWJiZi00MmZlMjdiNWJhMDAvMC9EQkQ1OThFMUJCNzQ5Nzgy RERFNjM5M0Q0M0I4MDY2QkI4RjkyQTNFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAwIdiMA0GCSqGSIb3DQEBCwUAA4IBAQAs0dhXfzsqXtFtLP5YSM/PXrb21w9l V3fVgwuNXzfZoUzgFcQXo+V4L2YzGwAF13OKcYWjJrti3T/M0zjj/AathVop+sJn skeylzHVr2O8Zq2JB3wMxgjRNJopR/e03tarHHf4oWEoryg64XkfNfiEQayE2lGU aJnpXKGNm9kIdd+Gsvh/Sezks4dMEycOeEHwioUeH4M2P03qDkIhCfIaCMzm4DGB o/vdiHpOONK+016beq/Ba2bmmNP3w0qcXWJyLIdRR/CEEVDz5R9J6QqJgPYPZ9hx IrApC/JzkoMFm46HrygcrcnR82yVcr2RAJ8vGE59PZPWd/fN4VvDe/hz -----END CERTIFICATE-----Generated at Tue May 12 22:42:41 2026 by rpki-client