$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.cer (raw, json) Hash identifier: I5VzEjNNeMITdI9VfELzil8POgywrOml8OCGie1fc2E= Subject key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5287DC1B02A809A55AF2F45469C705C8BD132862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:40 +0000 Certificate not after: Sun 02 May 2027 00:07:40 +0000 Subordinate resources: IP: 45.117.132.0/23 IP: 2001:df3:34c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:87:dc:1b:02:a8:09:a5:5a:f2:f4:54:69:c7:05:c8:bd:13:28:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:40 2026 GMT Not After : May 2 00:07:40 2027 GMT Subject: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:fe:de:1b:25:b0:1d:c0:30:a1:70:e0:ee: 44:5f:42:e0:af:c9:32:90:02:5c:c0:73:1a:de:ac: 45:b8:11:55:c8:11:7d:a9:ea:ce:08:c4:50:9c:ad: 12:80:b7:e2:07:5d:fa:7f:dd:f8:1b:63:34:ab:bb: 47:ef:cc:5c:91:ed:18:6a:5d:ca:ea:76:3e:89:32: 50:74:e2:85:48:d8:6b:25:81:1a:82:7e:1d:f0:83: 6e:e4:28:ca:da:d5:e5:90:fd:9f:a6:bf:7f:7d:35: 41:9d:bb:97:e9:dc:08:b5:c6:7f:c5:c4:65:98:28: 82:d3:c6:80:2a:56:11:65:b9:21:86:36:92:07:72: 1a:a3:27:23:b0:d6:44:8a:30:46:a3:57:be:02:67: cb:69:ce:d9:79:ed:4c:d3:8e:f6:4f:9c:46:9e:5b: f7:15:c4:87:18:14:33:58:6b:a1:ce:b2:85:34:86: 2c:fc:10:39:5c:c1:d8:22:ec:1b:35:9a:fd:7c:99: f5:02:3e:1d:c7:41:c3:00:60:fc:95:fc:e8:cb:a1: f3:99:ee:88:f1:5d:05:fa:df:71:b7:02:7a:8a:9b: a7:bb:c1:70:1b:f9:07:1a:86:ce:1b:d0:76:c1:ce: 0c:d0:c3:33:20:05:61:7b:79:30:e5:c9:e1:fc:a3: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.132.0/23 IPv6: 2001:df3:34c0::/48 Signature Algorithm: sha256WithRSAEncryption 4c:e4:e3:fc:7d:d3:67:26:2e:eb:2b:88:e8:99:30:18:35:bc: 40:7b:0f:cc:3a:9d:9e:db:fe:24:33:36:7f:e4:55:ec:dd:0f: 2d:87:2d:f4:13:1e:8b:f3:9b:f6:0f:84:f4:24:ba:e9:35:fd: 92:f2:e7:6f:03:e4:f6:dc:08:7e:19:f7:b2:54:82:10:b5:ab: f1:92:0f:b3:36:79:28:32:c8:1a:7b:d2:ff:59:68:d4:dc:4e: 34:c0:e6:70:1f:26:38:4f:9c:da:99:41:af:45:f6:ef:8e:af: f3:d3:ae:8c:8f:e6:a7:12:9e:e7:23:65:73:c8:e0:5a:3a:20: a7:c7:22:0f:fc:1f:fd:9a:ea:5e:b3:81:26:52:bc:62:33:b2: d2:58:a7:30:8a:c0:3e:e5:62:a0:fa:8d:08:9c:36:b6:e9:6f: 7c:1e:52:7a:18:1c:f4:96:d7:ff:7b:05:89:7f:f2:8a:35:79: bc:66:0f:00:7f:cc:cb:fb:a4:0b:c4:00:91:1c:2d:8a:c1:fd: 45:40:80:7b:7d:8d:aa:a7:cb:d7:ec:34:8a:51:52:0b:f5:60: aa:5d:c9:71:1a:1d:00:4f:99:ac:70:4c:2d:d9:71:fc:9d:64: ca:7e:68:1b:44:f4:6e:c2:cc:6e:f8:58:ea:a3:15:06:4e:cc: b7:d6:c4:07 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUUofcGwKoCaVa8vRUaccFyL0TKGIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDI0MFoX DTI3MDUwMjAwMDc0MFowMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1 NDBDREVGQjdBMDc2QzM2QkZFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOfA/t4bJbAdwDChcODuRF9C4K/JMpACXMBzGt6sRbgRVcgRfanqzgjEUJyt EoC34gdd+n/d+BtjNKu7R+/MXJHtGGpdyup2PokyUHTihUjYayWBGoJ+HfCDbuQo ytrV5ZD9n6a/f301QZ27l+ncCLXGf8XEZZgogtPGgCpWEWW5IYY2kgdyGqMnI7DW RIowRqNXvgJny2nO2XntTNOO9k+cRp5b9xXEhxgUM1hroc6yhTSGLPwQOVzB2CLs GzWa/XyZ9QI+HcdBwwBg/JX86Muh85nuiPFdBfrfcbcCeoqbp7vBcBv5BxqGzhvQ dsHODNDDMyAFYXt5MOXJ4fyj/gECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAaJhC5LVgJvpQZUDN77egdsNr/oMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIyZTY0YjBkLTY0NmMtNGNlYy05NDFmLTc0M2IyZDFiY2U0ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMmU2NGIw ZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC8wNjg5ODQyRTRCNTYwMjZG QTUwNjU0MENERUZCN0EwNzZDMzZCRkU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBLXWEMA8EAgACMAkDBwAgAQ3zNMAwDQYJKoZIhvcNAQELBQADggEBAEzk4/x9 02cmLusriOiZMBg1vEB7D8w6nZ7b/iQzNn/kVezdDy2HLfQTHovzm/YPhPQkuuk1 /ZLy528D5PbcCH4Z97JUghC1q/GSD7M2eSgyyBp70v9ZaNTcTjTA5nAfJjhPnNqZ Qa9F9u+Or/PTroyP5qcSnucjZXPI4Fo6IKfHIg/8H/2a6l6zgSZSvGIzstJYpzCK wD7lYqD6jQicNrbpb3weUnoYHPSW1/97BYl/8oo1ebxmDwB/zMv7pAvEAJEcLYrB /UVAgHt9jaqny9fsNIpRUgv1YKpdyXEaHQBPmaxwTC3ZcfydZMp+aBtE9G7CzG74 WOqjFQZOzLfWxAc= -----END CERTIFICATE-----Generated at Tue May 12 22:32:34 2026 by rpki-client