$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer File: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer (raw, json) Hash identifier: b1tRtIWGxsNkGnR+nAEBowyPmAYEYVS2TXOV/77Kfyk= Subject key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 647B0FC2A3773FF34F789B4F7EEA5816CB5F5ACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:04:27 +0000 Certificate not after: Sun 02 May 2027 01:09:27 +0000 Subordinate resources: IP: 103.37.224.0/22 IP: 203.99.96.0/19 IP: 2406:7a00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7b:0f:c2:a3:77:3f:f3:4f:78:9b:4f:7e:ea:58:16:cb:5f:5a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:04:27 2026 GMT Not After : May 2 01:09:27 2027 GMT Subject: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:db:a7:c6:25:b3:eb:56:f9:db:cc:e2:75: 48:14:48:e8:22:9a:ca:57:6f:a7:b3:e1:64:bf:06: f2:af:af:22:1b:2e:16:80:dc:60:ff:1d:a3:1e:f7: 93:75:0f:24:bc:6a:a4:f7:97:7b:5d:a7:5f:1c:b3: df:7e:3b:83:32:72:11:bc:a9:a0:69:29:b4:ab:be: 2b:96:7e:95:44:d5:81:73:88:84:2c:36:1f:cf:62: b6:72:c9:58:1e:07:2f:f9:d6:f3:50:7f:6f:ee:f5: cb:57:52:e8:7b:85:19:84:f1:23:6c:a4:a3:61:d3: b7:3c:19:bd:2b:0c:f5:78:1d:2c:cf:d0:79:31:3b: 2b:26:ec:af:96:85:6b:dc:37:0a:39:81:e6:7c:5e: eb:f8:aa:78:54:d1:c7:9b:d0:30:f7:ff:6d:b5:bc: d9:e0:bb:f9:26:5c:fa:20:ac:8f:22:f4:dc:58:78: c0:65:63:27:c3:a0:e4:27:77:5a:0e:cd:e6:d3:98: 7a:e9:43:5c:17:4e:e3:2c:49:2e:e0:a4:62:94:00: fd:0c:c1:78:24:36:c6:4f:33:f8:6f:dc:58:73:38: c5:f2:2a:61:58:49:7f:42:9b:1d:e9:12:cd:64:c3: 0d:cf:b1:a5:6c:d5:fd:d3:8c:cf:ca:fe:bf:71:a0: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.224.0/22 203.99.96.0/19 IPv6: 2406:7a00::/32 Signature Algorithm: sha256WithRSAEncryption 13:42:0f:61:84:55:da:f5:c5:ad:d6:24:4a:e6:0b:63:4f:d9: 24:9c:28:23:5e:d7:72:dc:3b:ca:01:9c:0c:8d:bd:b9:92:89: f2:aa:be:0b:3b:b4:ae:99:7f:1e:01:81:1f:86:85:82:5e:7b: 8c:83:ee:55:19:dd:bb:cc:b1:95:c9:34:b9:ac:d5:d5:8a:1d: 54:8d:38:50:69:71:c4:97:38:96:1f:6b:6d:cc:15:f3:37:6a: 79:14:e0:28:17:f5:ae:58:e3:ef:58:2f:22:66:57:b8:1f:f3: 06:cb:3f:45:98:37:c9:a5:91:09:8f:02:0f:58:41:51:10:35: 26:b7:d8:0a:10:99:2a:ba:59:54:1c:fb:73:70:a5:44:87:8d: a9:5d:dc:45:6f:26:4f:89:b5:b1:b3:3f:f9:68:f4:01:14:2c: 1d:7e:e3:d1:37:1e:e9:54:30:ad:7d:b5:f6:84:4d:86:27:d9: 81:a3:f0:00:ae:4f:00:ad:b0:c7:fc:05:9e:17:08:6a:1c:3f: 08:15:7b:e5:b4:55:33:09:b0:b2:6f:6a:8e:c3:ea:35:0a:a5: 4f:b1:70:62:22:56:9b:a7:8e:6e:9f:d2:ee:aa:03:cb:d3:1d: 98:6b:0c:07:a1:9a:bb:b5:c3:a3:d1:03:4e:c8:46:a7:a2:4e: 37:50:05:4b -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUZHsPwqN3P/NPeJtPfupYFstfWs0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDQyN1oX DTI3MDUwMjAxMDkyN1owMzExMC8GA1UEAxMoMTJCRDVGM0Y2QzVBQjFBOUY0RTMx MkE3REFGQUFDQkMyMjIyOTQ2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZ426fGJbPrVvnbzOJ1SBRI6CKayldvp7PhZL8G8q+vIhsuFoDcYP8dox73 k3UPJLxqpPeXe12nXxyz3347gzJyEbypoGkptKu+K5Z+lUTVgXOIhCw2H89itnLJ WB4HL/nW81B/b+71y1dS6HuFGYTxI2yko2HTtzwZvSsM9XgdLM/QeTE7Kybsr5aF a9w3CjmB5nxe6/iqeFTRx5vQMPf/bbW82eC7+SZc+iCsjyL03Fh4wGVjJ8Og5Cd3 Wg7N5tOYeulDXBdO4yxJLuCkYpQA/QzBeCQ2xk8z+G/cWHM4xfIqYVhJf0KbHekS zWTDDc+xpWzV/dOMz8r+v3Gg1yECAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBK9Xz9sWrGp9OMSp9r6rLwiIpRtMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlNTlkYjdlLTk0ZjYtNDAwMi05OWVmLTVlOTZkOGUzN2U1MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZTU5ZGI3 ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC8xMkJENUYzRjZDNUFCMUE5 RjRFMzEyQTdEQUZBQUNCQzIyMjI5NDZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZyXgAwQFy2NgMA0EAgACMAcDBQAkBnoAMA0GCSqGSIb3DQEBCwUAA4IBAQAT Qg9hhFXa9cWt1iRK5gtjT9kknCgjXtdy3DvKAZwMjb25konyqr4LO7SumX8eAYEf hoWCXnuMg+5VGd27zLGVyTS5rNXVih1UjThQaXHElziWH2ttzBXzN2p5FOAoF/Wu WOPvWC8iZle4H/MGyz9FmDfJpZEJjwIPWEFREDUmt9gKEJkqullUHPtzcKVEh42p XdxFbyZPibWxsz/5aPQBFCwdfuPRNx7pVDCtfbX2hE2GJ9mBo/AArk8ArbDH/AWe FwhqHD8IFXvltFUzCbCyb2qOw+o1CqVPsXBiIlabp45un9LuqgPL0x2YawwHoZq7 tcOj0QNOyEanok43UAVL -----END CERTIFICATE-----Generated at Tue May 12 22:04:03 2026 by rpki-client