$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer File: 000F2B21BC5C00475E698BA18880BB67B774EC97.cer (raw, json) Hash identifier: L5t9VyvHd9APkujUeNia7reCBbpLcgP6tsDccrE1LBQ= Subject key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37D8EEF88E5AE112DF27036ED79F28315C9D1D69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft caRepository: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:35 +0000 Certificate not after: Sun 02 May 2027 00:50:35 +0000 Subordinate resources: IP: 103.80.188.0/22 IP: 115.85.64.0/19 IP: 180.92.212.0/22 IP: 202.72.208.0/20 IP: 2400:5740::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d8:ee:f8:8e:5a:e1:12:df:27:03:6e:d7:9f:28:31:5c:9d:1d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:35 2026 GMT Not After : May 2 00:50:35 2027 GMT Subject: CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b3:4c:a0:5d:95:75:2f:78:56:38:c1:5c:ca: 6a:fb:f4:e2:a1:89:b6:1f:f4:a5:b1:05:ae:9b:18: 38:42:7e:c3:c2:f1:99:82:a5:2f:23:b7:24:bf:3e: 60:17:ac:69:89:d2:6f:9f:e3:15:06:e5:ee:bb:99: cf:53:36:2d:fa:c3:bd:63:b2:77:f0:1f:e9:d4:14: e6:6b:e1:e8:8f:79:ef:ed:df:53:13:cf:dc:6f:bf: 29:7f:39:8e:71:a3:3a:79:d8:18:c2:53:ae:76:36: 52:a7:66:4a:ba:50:6c:7c:5a:14:fd:07:f9:6f:cc: a0:9b:d6:20:22:90:ab:4d:6e:27:d2:4c:1e:99:e5: 8e:06:fa:fc:f8:ab:95:d8:84:ca:08:d0:be:c4:2f: fd:a8:dc:71:84:c1:d2:d2:46:73:1a:43:37:5a:92: e6:7e:8c:22:bb:33:e9:e0:93:64:e1:fa:f6:99:98: a4:f1:04:60:7d:ac:4a:aa:24:5e:60:24:c7:c7:d9: 7d:0c:04:a2:8c:5c:7d:c0:ad:93:98:da:1f:b7:f1: 0f:13:c2:3e:67:54:c9:ba:4e:0b:52:1a:21:ff:e1: d4:d8:1b:4c:54:1f:ab:68:b5:aa:e9:b9:79:69:49: e9:a4:90:70:fe:87:af:e2:36:60:36:e8:e5:d2:71: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.188.0/22 115.85.64.0/19 180.92.212.0/22 202.72.208.0/20 IPv6: 2400:5740::/32 Signature Algorithm: sha256WithRSAEncryption a2:9d:9d:52:fb:9f:04:9b:c3:dd:74:ad:ea:97:4c:67:da:74: f6:9d:c9:7e:93:7c:66:c1:b4:c1:5d:fc:0e:3f:e7:b9:8b:f2: 38:d8:f8:12:78:52:51:be:85:a9:58:36:9f:29:28:7a:e5:45: f9:66:18:0c:db:f2:8a:80:5d:e3:a9:fe:31:56:f7:2c:e4:61: fb:ac:17:d0:32:a4:f5:8d:45:68:ed:2f:7c:42:07:af:04:c0: fc:ff:35:fe:33:91:0d:c4:0a:97:fe:de:92:f4:64:47:12:a9: cc:06:63:fb:23:a3:22:8b:be:8e:08:a4:5f:61:fb:43:87:ce: f6:0d:8f:ab:29:63:7f:8c:e1:32:ef:93:8c:c4:91:16:99:19: 2e:fa:61:7d:a5:e2:35:3e:7c:81:4c:2d:51:75:b4:15:cf:3f: 5c:9a:92:92:31:94:89:02:9b:64:76:23:d5:bf:5d:6d:29:19: 9d:97:ce:af:f2:27:e4:1c:f0:df:d3:21:ce:a7:b5:2f:57:df: b0:d6:fb:d6:d9:94:1d:75:c7:92:3d:27:90:e5:a4:6b:16:f6: 01:98:78:38:0d:05:53:d0:7e:d1:36:59:4d:94:4f:17:ce:7f: 7c:4a:ac:b4:a6:6e:4b:06:0e:e3:0f:20:82:89:53:58:e7:9f: 74:28:57:27 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUN9ju+I5a4RLfJwNu158oMVydHWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDUzNVoX DTI3MDUwMjAwNTAzNVowMzExMC8GA1UEAxMoMDAwRjJCMjFCQzVDMDA0NzVFNjk4 QkExODg4MEJCNjdCNzc0RUM5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmzTKBdlXUveFY4wVzKavv04qGJth/0pbEFrpsYOEJ+w8LxmYKlLyO3JL8+ YBesaYnSb5/jFQbl7ruZz1M2LfrDvWOyd/Af6dQU5mvh6I957+3fUxPP3G+/KX85 jnGjOnnYGMJTrnY2UqdmSrpQbHxaFP0H+W/MoJvWICKQq01uJ9JMHpnljgb6/Pir ldiEygjQvsQv/ajccYTB0tJGcxpDN1qS5n6MIrsz6eCTZOH69pmYpPEEYH2sSqok XmAkx8fZfQwEooxcfcCtk5jaH7fxDxPCPmdUybpOC1IaIf/h1NgbTFQfq2i1qum5 eWlJ6aSQcP6Hr+I2YDbo5dJxuG0CAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAAPKyG8XABHXmmLoYiAu2e3dOyXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYyNjI1YmYyLWYzYjYtNGU5Yy04NWIwLTU1ZTNjNTQ2N2Y5Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MjYyNWJm Mi1mM2I2LTRlOWMtODViMC01NWUzYzU0NjdmOWMvMC8wMDBGMkIyMUJDNUMwMDQ3 NUU2OThCQTE4ODgwQkI2N0I3NzRFQzk3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQCZ1C8AwQFc1VAAwQCtFzUAwQEykjQMA0EAgACMAcDBQAkAFdAMA0GCSqGSIb3 DQEBCwUAA4IBAQCinZ1S+58Em8PddK3ql0xn2nT2ncl+k3xmwbTBXfwOP+e5i/I4 2PgSeFJRvoWpWDafKSh65UX5ZhgM2/KKgF3jqf4xVvcs5GH7rBfQMqT1jUVo7S98 QgevBMD8/zX+M5ENxAqX/t6S9GRHEqnMBmP7I6Mii76OCKRfYftDh872DY+rKWN/ jOEy75OMxJEWmRku+mF9peI1PnyBTC1RdbQVzz9cmpKSMZSJAptkdiPVv11tKRmd l86v8ifkHPDf0yHOp7UvV9+w1vvW2ZQddceSPSeQ5aRrFvYBmHg4DQVT0H7RNllN lE8Xzn98Sqy0pm5LBg7jDyCCiVNY5590KFcn -----END CERTIFICATE-----Generated at Tue May 12 22:16:24 2026 by rpki-client