$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.cer (raw, json) Hash identifier: t26b6uRg17VplblUnyP/LRNQcbdCPeh8iko8N/myBuY= Subject key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5C3A70DCD1EDAFFB9FDD8D7186C2CFDF5B7DCCE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:31 +0000 Certificate not after: Sun 02 May 2027 00:44:31 +0000 Subordinate resources: IP: 103.85.4.0/22 IP: 2400:a640::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3a:70:dc:d1:ed:af:fb:9f:dd:8d:71:86:c2:cf:df:5b:7d:cc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:31 2026 GMT Not After : May 2 00:44:31 2027 GMT Subject: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:05:27:bf:34:b9:18:63:4a:32:09:3d:bf: 9e:ae:6a:49:3e:d8:12:5d:5e:1e:cc:10:5d:e6:bc: 36:96:aa:5e:5b:70:04:af:04:60:31:7c:8a:f8:3a: 0c:96:bf:76:ae:38:d6:ba:ef:f7:9a:bc:50:4e:a0: 7f:9a:f9:70:99:7b:bc:0f:88:4a:70:76:9d:b7:96: 15:a0:12:0f:66:bd:6c:f4:38:d1:60:4f:be:9a:98: e4:11:97:71:fe:f4:2c:be:a6:04:e7:db:f7:96:7e: 9d:51:34:8a:4b:58:ab:5e:c3:fe:b7:ec:10:93:e3: 22:e5:23:f0:65:f9:76:ca:4a:b2:53:5e:46:25:a0: 19:76:bb:76:35:a5:0e:27:ad:85:08:4e:99:5f:70: fc:b0:0e:90:7c:92:cf:d7:3b:14:90:88:2c:d3:33: c6:2b:05:f3:1a:9c:16:c8:b4:03:82:c2:49:58:25: 31:b5:df:7b:e4:b7:2f:2a:2e:b3:90:dd:0d:c0:86: 48:47:89:73:f8:f1:bb:49:f7:0e:ad:f7:69:81:53: 0a:ca:4f:6c:55:38:1c:8a:f2:8d:ef:d2:11:67:26: c2:64:ee:c5:c7:ab:88:c7:ed:ed:10:4c:a5:80:ff: 69:2f:0d:5b:07:ff:22:1d:c2:75:77:49:29:8e:bf: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.4.0/22 IPv6: 2400:a640::/32 Signature Algorithm: sha256WithRSAEncryption 7e:d1:79:f7:62:b6:7c:06:23:16:d8:c3:b0:2c:9f:c6:ef:3c: be:17:d7:f4:8c:4c:71:27:fc:46:0e:52:a3:c1:aa:54:3b:ca: ba:f5:1f:ff:58:9d:6d:84:75:45:d2:fd:67:81:03:1a:97:3c: 7a:80:24:e6:80:52:7f:93:4c:36:70:34:c9:9d:3d:9a:b0:df: 4a:13:19:46:a5:67:1f:92:e5:70:bc:23:21:d3:d7:be:ec:f1: cd:2e:74:06:7f:d2:f3:b0:4a:0f:b3:37:be:38:2e:be:12:61: 5d:94:70:da:7e:43:57:16:87:8f:6f:f9:0c:23:1a:9e:fa:9b: f7:b7:64:ab:51:42:ac:31:85:73:c8:39:3b:02:b2:37:bf:d4: 2b:b6:24:6c:51:f7:8e:bb:15:16:6a:aa:6b:c6:f5:a2:d7:b9: b0:c8:c9:99:e9:88:6b:c6:88:f6:76:ab:49:98:17:56:3d:08: 8a:79:02:35:21:94:cb:d8:30:37:7f:29:e1:de:8a:64:47:64: 4e:2c:f7:60:9e:9f:1d:8d:6d:75:ce:bd:1d:60:b0:af:1a:94: aa:53:4a:ec:07:44:37:34:e6:80:95:89:2b:74:dd:b8:00:60: b9:09:3e:6c:c4:3c:ca:b0:8f:54:a3:95:8b:4b:77:18:74:8e: 09:33:5c:22 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUXDpw3NHtr/uf3Y1xhsLP31t9zOYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzkzMVoX DTI3MDUwMjAwNDQzMVowMzExMC8GA1UEAxMoMTIzNkUzOTQyMjlCQzYyM0M4OTBD QzVBQjE3OEI0QkZDOTZEQ0U2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPKBSe/NLkYY0oyCT2/nq5qST7YEl1eHswQXea8NpaqXltwBK8EYDF8ivg6 DJa/dq441rrv95q8UE6gf5r5cJl7vA+ISnB2nbeWFaASD2a9bPQ40WBPvpqY5BGX cf70LL6mBOfb95Z+nVE0iktYq17D/rfsEJPjIuUj8GX5dspKslNeRiWgGXa7djWl DiethQhOmV9w/LAOkHySz9c7FJCILNMzxisF8xqcFsi0A4LCSVglMbXfe+S3Lyou s5DdDcCGSEeJc/jxu0n3Dq33aYFTCspPbFU4HIryje/SEWcmwmTuxceriMft7RBM pYD/aS8NWwf/Ih3CdXdJKY6/T98CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBI245Qim8YjyJDMWrF4tL/Jbc5mMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVhMWU2YWM0LWEyYzQtNDFhNy1iMGRiLTZmYTc4YjBjYThiMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YTFlNmFj NC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC8xMjM2RTM5NDIyOUJDNjIz Qzg5MENDNUFCMTc4QjRCRkM5NkRDRTY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ1UEMA0EAgACMAcDBQAkAKZAMA0GCSqGSIb3DQEBCwUAA4IBAQB+0Xn3YrZ8 BiMW2MOwLJ/G7zy+F9f0jExxJ/xGDlKjwapUO8q69R//WJ1thHVF0v1ngQMalzx6 gCTmgFJ/k0w2cDTJnT2asN9KExlGpWcfkuVwvCMh09e+7PHNLnQGf9LzsEoPsze+ OC6+EmFdlHDafkNXFoePb/kMIxqe+pv3t2SrUUKsMYVzyDk7ArI3v9QrtiRsUfeO uxUWaqprxvWi17mwyMmZ6Yhrxoj2dqtJmBdWPQiKeQI1IZTL2DA3fynh3opkR2RO LPdgnp8djW11zr0dYLCvGpSqU0rsB0Q3NOaAlYkrdN24AGC5CT5sxDzKsI9Uo5WL S3cYdI4JM1wi -----END CERTIFICATE-----Generated at Tue May 12 22:47:31 2026 by rpki-client