$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer File: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer (raw, json) Hash identifier: 0OY8AILiYh35srPX9h8Fnku5CcmM6ViDbPiqVe4GkKQ= Subject key identifier: 04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 652E041DEA45CBDBB999B62940F84B61F173917D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:50:14 +0000 Certificate not after: Sun 02 May 2027 01:55:14 +0000 Subordinate resources: IP: 122.129.200.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2e:04:1d:ea:45:cb:db:b9:99:b6:29:40:f8:4b:61:f1:73:91:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:50:14 2026 GMT Not After : May 2 01:55:14 2027 GMT Subject: CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:82:b0:c7:20:03:c2:a2:95:0e:52:f1:86: 4c:06:98:57:5b:2e:2b:88:f1:cf:65:36:6d:db:d7: d3:2d:27:b7:49:99:04:21:73:d1:96:45:f6:26:93: 7a:3c:60:62:10:7f:c5:f8:8f:78:b4:8b:f2:49:f5: fc:00:be:c5:ea:62:ec:4f:83:42:c7:8a:eb:3c:14: 1f:94:aa:81:dc:3a:9d:c7:1c:5f:78:c0:39:9d:86: 96:e9:b1:48:8a:ef:e6:5c:b4:50:7f:86:b3:23:2b: 00:b4:e3:ef:6a:ca:37:55:c8:c2:2f:73:60:8a:b3: 32:eb:4c:31:42:a7:09:34:ce:20:9b:3e:a3:f8:79: 90:cc:bf:a0:ef:51:e2:0c:39:f3:f1:98:3f:9c:32: c3:39:8f:9d:97:fb:92:c4:64:e8:e0:e4:d5:44:0f: 74:82:12:d9:b0:b5:19:f3:98:06:cb:ac:d8:05:df: 9a:bf:4a:8d:a1:c5:c3:76:ae:ec:a8:e6:94:de:43: ea:60:5d:14:49:18:86:8a:75:ee:6b:0a:36:a4:d3: 7d:52:90:f4:a6:d6:83:7e:9e:af:cd:67:28:c9:a0: 49:de:5b:2f:85:25:f6:f1:70:fb:75:ce:30:fc:05: 69:f3:1f:5a:8b:03:1a:93:18:09:aa:9a:91:3a:e3: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.129.200.0/21 Signature Algorithm: sha256WithRSAEncryption 09:e1:7e:fb:a7:0a:9b:20:30:10:72:14:87:42:9c:29:5a:c6: 2c:26:b6:95:cb:87:de:7d:42:e3:38:16:b1:6d:af:be:52:96: d7:af:7a:00:1e:a9:a2:1b:d9:59:a8:cd:60:0b:4d:e6:09:dd: 92:a3:27:94:75:0b:7b:0c:85:9e:d0:fc:d0:2c:6f:e7:07:a6: 7b:a6:26:f4:32:18:56:ec:3e:7d:36:5b:c3:fb:7b:84:07:93: d7:ca:44:bb:3e:70:ee:85:92:f7:c7:51:36:e2:a2:d0:80:3f: cd:d2:d1:cb:ad:71:3e:47:80:7f:22:0c:72:d5:60:0a:e0:93: 12:35:1c:43:ba:02:5e:b8:32:df:d4:96:76:98:6a:46:92:cd: f0:3a:0f:89:7d:db:41:c6:79:d3:43:db:5e:01:77:6a:5d:77: 27:1a:49:9b:cc:a6:74:fc:5a:85:1a:c7:1c:8c:52:7d:5f:56: 5e:89:37:41:5c:5b:39:e2:5b:db:47:75:2a:4e:cf:0d:56:ed: df:68:33:03:24:c1:f9:35:43:7e:99:4e:dd:74:f3:b3:73:15: 54:4a:40:7f:45:2a:cd:b3:d1:17:e2:a9:8f:e7:0e:b3:e2:58: 6e:75:74:d3:78:88:cc:49:da:46:df:2a:f4:81:06:41:0b:5b: 9f:52:18:0e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZS4EHepFy9u5mbYpQPhLYfFzkX0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTAxNFoX DTI3MDUwMjAxNTUxNFowMzExMC8GA1UEAxMoMDQ1RDlFNDZFRTZFNkJCRDJBRkVF NDc3OTY0QzZEOUJBOUJDMURENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALb5grDHIAPCopUOUvGGTAaYV1suK4jxz2U2bdvX0y0nt0mZBCFz0ZZF9iaT ejxgYhB/xfiPeLSL8kn1/AC+xepi7E+DQseK6zwUH5Sqgdw6ncccX3jAOZ2Glumx SIrv5ly0UH+GsyMrALTj72rKN1XIwi9zYIqzMutMMUKnCTTOIJs+o/h5kMy/oO9R 4gw58/GYP5wywzmPnZf7ksRk6ODk1UQPdIIS2bC1GfOYBsus2AXfmr9KjaHFw3au 7KjmlN5D6mBdFEkYhop17msKNqTTfVKQ9KbWg36er81nKMmgSd5bL4Ul9vFw+3XO MPwFafMfWosDGpMYCaqakTrjDIsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFARdnkbubmu9Kv7kd5ZMbZupvB3UMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M0ZjlmOWExLTRhZDgtNDljZS05ZmE5LWQ0NzY1NzNhZjUwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNGY5Zjlh MS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8wNDVEOUU0NkVFNkU2QkJE MkFGRUU0Nzc5NjRDNkQ5QkE5QkMxREQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDeoHIMA0GCSqGSIb3DQEBCwUAA4IBAQAJ4X77pwqbIDAQchSHQpwpWsYsJraV y4fefULjOBaxba++UpbXr3oAHqmiG9lZqM1gC03mCd2SoyeUdQt7DIWe0PzQLG/n B6Z7pib0MhhW7D59NlvD+3uEB5PXykS7PnDuhZL3x1E24qLQgD/N0tHLrXE+R4B/ Igxy1WAK4JMSNRxDugJeuDLf1JZ2mGpGks3wOg+JfdtBxnnTQ9teAXdqXXcnGkmb zKZ0/FqFGsccjFJ9X1ZeiTdBXFs54lvbR3UqTs8NVu3faDMDJMH5NUN+mU7ddPOz cxVUSkB/RSrNs9EX4qmP5w6z4lhudXTTeIjMSdpG3yr0gQZBC1ufUhgO -----END CERTIFICATE-----Generated at Tue May 12 22:45:37 2026 by rpki-client