$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer File: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer (raw, json) Hash identifier: lrV+etUqCMAGUDy3XFIT8lNHMA4b3xOCdTpombdIoCg= Subject key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3E34D4D51884B38BCFBFE72A3D516B949D32EA39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:03:09 +0000 Certificate not after: Sun 02 May 2027 00:08:09 +0000 Subordinate resources: IP: 2001:df4:c40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:34:d4:d5:18:84:b3:8b:cf:bf:e7:2a:3d:51:6b:94:9d:32:ea:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:03:09 2026 GMT Not After : May 2 00:08:09 2027 GMT Subject: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:12:e0:d1:ee:e5:69:c5:8a:4c:b9:e1:ed: c0:7d:2c:9d:ef:64:dd:e6:44:15:b6:e1:fa:5a:d0: d4:06:3c:1e:e1:8a:35:e6:c5:83:d8:40:0b:8d:73: 1a:13:9f:4d:79:d3:9e:28:ec:2d:79:09:7a:8e:32: 3e:0c:ba:aa:f7:46:8c:3b:ea:b9:1d:82:74:43:8b: a9:df:e1:fd:dc:83:56:6a:7d:0e:9b:e3:b5:84:50: 62:fd:85:04:48:d5:bf:c2:df:12:89:70:20:2c:25: cb:fa:f8:70:1c:a9:0d:fc:51:9d:67:81:56:33:5b: 0c:6c:d0:28:16:60:4f:cd:38:6c:4b:52:2f:29:0b: 96:51:5b:7f:f9:b6:80:cf:ae:82:0e:7f:e0:bb:00: bc:0b:f1:3c:5a:75:d4:20:46:e4:c4:cb:da:a3:cc: 30:ed:02:1f:fb:c8:63:95:40:1e:33:19:b1:ec:48: a7:e3:08:0d:b6:a3:f4:64:e7:96:15:32:ab:87:e7: ba:f4:4f:5d:eb:f8:ae:8a:c4:c6:b3:44:18:65:2c: 6d:2d:b5:b9:4d:b3:19:b9:24:e3:a5:12:75:6f:4f: 30:97:8a:a7:37:5d:24:42:a6:5b:50:c8:51:f8:70: 31:74:81:64:13:2f:43:6d:1c:20:f7:51:91:bf:d5: e5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:c40::/48 Signature Algorithm: sha256WithRSAEncryption 48:ca:81:ba:73:c4:01:b3:d7:61:4e:40:f4:3c:17:72:ad:c1: 71:94:30:21:ec:45:cb:49:bc:0f:46:4b:08:98:d9:1e:63:dc: 1d:1c:b7:09:bd:b6:c8:95:e4:01:e3:85:fb:20:53:fb:7b:cb: 96:86:bc:33:c0:c4:a6:17:32:12:d8:02:bc:0d:b6:fc:f9:7a: 96:9b:42:a9:45:0a:53:9e:72:01:0e:2d:f4:7c:69:08:f8:57: 78:16:32:26:cf:b7:bb:ad:c2:73:ab:fd:47:22:d9:d9:b3:1d: 57:ce:67:78:12:4f:0e:19:05:18:08:ab:06:84:c0:09:3a:99: 65:85:1c:29:d5:06:6b:fe:f1:0d:67:03:8c:b1:17:20:2d:04: d9:8b:92:d1:70:63:75:0b:bd:98:3b:82:c8:34:4b:0b:97:8b: ab:f0:24:33:1c:4f:fb:85:c2:a9:0c:91:9e:31:f7:a4:a7:5b: 1d:14:fa:b4:79:4d:90:d9:57:07:69:2a:b6:79:ff:11:00:6a: f3:eb:5d:23:a7:43:8b:d9:52:7e:85:8b:7c:36:84:e5:c9:e5: ea:c9:b8:7d:fe:e6:07:c6:09:55:96:2c:5d:e7:dc:55:8f:8e: d3:81:d0:c9:f3:8e:72:0a:bc:36:af:06:ec:05:be:52:70:ab: 23:1b:df:45 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPjTU1RiEs4vPv+cqPVFrlJ0y6jkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDMwOVoX DTI3MDUwMjAwMDgwOVowMzExMC8GA1UEAxMoMTAwRTVBNDA4NjU4NDFENTZDNUFC OUQwQ0VFNzIxODgwNzdFRkFBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsBEuDR7uVpxYpMueHtwH0sne9k3eZEFbbh+lrQ1AY8HuGKNebFg9hAC41z GhOfTXnTnijsLXkJeo4yPgy6qvdGjDvquR2CdEOLqd/h/dyDVmp9DpvjtYRQYv2F BEjVv8LfEolwICwly/r4cBypDfxRnWeBVjNbDGzQKBZgT804bEtSLykLllFbf/m2 gM+ugg5/4LsAvAvxPFp11CBG5MTL2qPMMO0CH/vIY5VAHjMZsexIp+MIDbaj9GTn lhUyq4fnuvRPXev4rorExrNEGGUsbS21uU2zGbkk46USdW9PMJeKpzddJEKmW1DI UfhwMXSBZBMvQ20cIPdRkb/V5cECAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBAOWkCGWEHVbFq50M7nIYgHfvqjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIzNjU2MWQ0LTIzYzgtNGM5Yi04OTBlLTRmMjYzMmU1MmM5Ny8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMzY1NjFk NC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS8xMDBFNUE0MDg2NTg0MUQ1 NkM1QUI5RDBDRUU3MjE4ODA3N0VGQUEzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9AxAMA0GCSqGSIb3DQEBCwUAA4IBAQBIyoG6c8QBs9dhTkD0PBdyrcFx lDAh7EXLSbwPRksImNkeY9wdHLcJvbbIleQB44X7IFP7e8uWhrwzwMSmFzIS2AK8 Dbb8+XqWm0KpRQpTnnIBDi30fGkI+Fd4FjImz7e7rcJzq/1HItnZsx1Xzmd4Ek8O GQUYCKsGhMAJOpllhRwp1QZr/vENZwOMsRcgLQTZi5LRcGN1C72YO4LINEsLl4ur 8CQzHE/7hcKpDJGeMfekp1sdFPq0eU2Q2VcHaSq2ef8RAGrz610jp0OL2VJ+hYt8 NoTlyeXqybh9/uYHxglVlixd59xVj47TgdDJ845yCrw2rwbsBb5ScKsjG99F -----END CERTIFICATE-----Generated at Tue May 12 22:16:45 2026 by rpki-client