$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer (raw, json) Hash identifier: 1Z50xB/3mGGINLOfBt74//SJPqDX6B7vzZoouFunTDc= Subject key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 50FDA8400FEBC54310807D37C9199CE29C7B7DC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:00 +0000 Certificate not after: Sun 02 May 2027 00:36:00 +0000 Subordinate resources: IP: 27.124.74.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fd:a8:40:0f:eb:c5:43:10:80:7d:37:c9:19:9c:e2:9c:7b:7d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:31:00 2026 GMT Not After : May 2 00:36:00 2027 GMT Subject: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:e6:a6:db:ea:8a:03:1b:e6:54:7c:a8:2d: 8b:d4:36:d2:d9:39:ec:b2:40:4e:77:fe:7a:d9:c2: 8a:ec:fd:ed:1d:31:73:f8:92:5d:a4:10:59:b3:e2: 16:1c:64:3a:5d:e0:28:ba:de:50:5b:28:77:ed:c6: e1:e8:c1:05:6e:74:78:4b:c4:04:e2:66:ad:ed:10: 30:02:10:c0:9e:cc:eb:8e:62:21:07:5e:6c:74:ee: d3:67:6b:d5:09:73:e6:44:7b:53:fe:1e:be:d9:31: a4:61:e4:89:16:01:9a:d3:42:f0:fe:e7:8d:7a:28: 3b:d6:75:68:7b:39:c7:1e:14:58:cf:f8:40:7b:8b: d4:c4:67:69:2f:96:00:2b:1e:17:6c:e9:d4:60:91: 8c:d2:0f:6a:fb:1f:7e:36:b3:83:4a:e3:3b:3d:d8: 66:1b:f8:4a:77:b8:2c:6b:af:4e:57:75:0b:5e:8a: c0:46:ba:ef:70:c9:1c:ca:6f:e3:90:b9:17:f9:f0: 93:5b:91:34:a3:18:54:1f:f4:f2:73:77:59:fe:f2: 39:5f:f5:ff:32:b8:43:7e:f4:a9:52:26:a7:8f:b5: 7f:7c:62:bd:e7:2d:94:81:dd:72:71:a2:b1:6c:20: 50:23:bd:e8:8b:f0:b3:8c:f7:d8:54:c1:cd:fa:4d: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.74.0/23 Signature Algorithm: sha256WithRSAEncryption 48:e8:41:91:2a:62:da:a5:63:fe:87:b6:c1:59:5a:23:e4:7c: 59:74:57:94:27:4c:68:bd:ce:08:5b:02:c9:7d:86:36:aa:7c: 10:fa:f3:ff:12:be:b4:06:63:59:ba:3c:e7:6a:7d:bf:ad:f3: 8b:a5:26:60:7f:58:10:6c:09:cb:b1:8e:e0:44:6a:5e:37:2e: 45:21:89:31:47:c2:3a:b0:7b:89:cd:33:3f:9a:19:5b:37:f9: 5b:40:55:18:ff:3f:56:be:d3:65:3b:96:e6:d6:69:a7:2c:47: 23:99:60:8b:00:7a:83:ee:24:0d:73:b8:f7:14:94:26:dd:bb: 25:06:31:d9:67:e3:db:91:ec:81:d4:de:bc:3e:43:0b:a7:09: 45:93:10:fd:c9:44:5e:89:05:f1:ec:73:31:91:e9:5c:d2:29: e2:8e:03:e2:d4:a3:cf:66:1e:fe:cf:38:8d:51:23:55:d4:4e: 22:5a:94:73:5b:f8:e6:cc:43:6b:e4:48:db:a0:ce:5d:1e:7e: da:b6:9f:d3:f1:31:29:5c:87:f0:1e:3d:07:5e:29:91:93:1d: 21:2e:59:5d:68:e5:ea:9a:53:77:bf:1c:bf:a2:7d:50:5d:0b: 04:97:6d:58:70:fc:74:a9:23:61:06:5d:7b:19:6a:69:65:3e: 51:f6:5f:e6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUP2oQA/rxUMQgH03yRmc4px7fcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzEwMFoX DTI3MDUwMjAwMzYwMFowMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5 MEFGMzZCQkZCRDlCNzU1RTRGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANL95qbb6ooDG+ZUfKgti9Q20tk57LJATnf+etnCiuz97R0xc/iSXaQQWbPi FhxkOl3gKLreUFsod+3G4ejBBW50eEvEBOJmre0QMAIQwJ7M645iIQdebHTu02dr 1Qlz5kR7U/4evtkxpGHkiRYBmtNC8P7njXooO9Z1aHs5xx4UWM/4QHuL1MRnaS+W ACseF2zp1GCRjNIPavsffjazg0rjOz3YZhv4Sne4LGuvTld1C16KwEa673DJHMpv 45C5F/nwk1uRNKMYVB/08nN3Wf7yOV/1/zK4Q370qVImp4+1f3xivectlIHdcnGi sWwgUCO96Ivws4z32FTBzfpNou0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA32hBpF5/TD6MyQrza7+9m3VeT6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRkYWY5ZjBmLTRmYjEtNDBjMC1iMzgwLTU5YTM4ZGJjOWExNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZGFmOWYw Zi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8wREY2ODQxQTQ1RTdGNEMz RThDQzkwQUYzNkJCRkJEOUI3NTVFNEZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBG3xKMA0GCSqGSIb3DQEBCwUAA4IBAQBI6EGRKmLapWP+h7bBWVoj5HxZdFeU J0xovc4IWwLJfYY2qnwQ+vP/Er60BmNZujznan2/rfOLpSZgf1gQbAnLsY7gRGpe Ny5FIYkxR8I6sHuJzTM/mhlbN/lbQFUY/z9WvtNlO5bm1mmnLEcjmWCLAHqD7iQN c7j3FJQm3bslBjHZZ+PbkeyB1N68PkMLpwlFkxD9yUReiQXx7HMxkelc0inijgPi 1KPPZh7+zziNUSNV1E4iWpRzW/jmzENr5EjboM5dHn7atp/T8TEpXIfwHj0HXimR kx0hLlldaOXqmlN3vxy/on1QXQsEl21YcPx0qSNhBl17GWppZT5R9l/m -----END CERTIFICATE-----Generated at Tue May 12 22:03:32 2026 by rpki-client