$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer File: 13E8109758E3F09B256C9654C5812DA9993E9D23.cer (raw, json) Hash identifier: dN7TAVGgh0VPNHf9kR4aPxp1nFWOpxRuZvmsBkoLLdg= Subject key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2AB94EB8B420DA5E78ED3CBE616221C737BB8C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:10 +0000 Certificate not after: Sun 02 May 2027 02:09:10 +0000 Subordinate resources: IP: 2001:df3:94c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b9:4e:b8:b4:20:da:5e:78:ed:3c:be:61:62:21:c7:37:bb:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:10 2026 GMT Not After : May 2 02:09:10 2027 GMT Subject: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:fe:99:0f:14:d9:8b:43:71:58:35:81:e1: e2:ae:16:59:02:dc:3f:17:57:52:b2:8e:9d:41:38: d4:e7:0a:88:b8:51:46:d8:0d:a2:bc:29:f8:20:2a: 31:39:c5:ce:88:c5:90:96:ae:1e:5b:8c:cb:8b:86: 01:1d:fc:e5:98:3c:00:4f:e6:77:39:06:77:a1:0e: 5d:ae:20:59:bc:10:0b:1c:4d:54:f8:a7:be:25:7a: 9c:8a:36:71:8c:cb:b0:e3:2a:27:5d:e4:ad:2b:66: 2a:b2:33:35:d6:bc:6c:ac:d4:9d:ce:8f:fe:68:a7: 43:e0:c3:a7:b9:ff:10:36:d0:f3:45:ff:39:5b:fb: cb:73:d8:00:f3:7d:2a:89:a3:d2:b0:43:39:d8:22: e3:59:10:e6:a3:ce:77:4e:41:dc:38:fd:be:ce:5f: 2e:2e:5c:51:a2:52:41:3b:b9:fc:6c:c6:c7:80:27: 47:8b:d1:52:57:47:cc:82:57:89:dd:25:1a:50:28: f3:53:b7:bc:5f:ae:d1:a2:6a:a0:5b:e3:2e:29:98: 95:92:61:a6:f7:2e:d7:1c:02:14:1d:7f:45:dc:cd: b4:7d:db:39:4a:38:3d:99:d5:8c:06:8c:b5:e3:9d: 3b:42:c1:1e:e1:53:90:95:e7:f4:62:f1:b8:fe:79: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:94c0::/48 Signature Algorithm: sha256WithRSAEncryption 2c:c7:2e:fa:57:0f:fb:73:a0:22:71:e6:08:8d:7a:00:38:2b: 71:ae:f0:50:c7:2b:02:ef:0a:0f:a4:9e:c5:b8:78:e5:44:ae: 89:25:ac:12:5a:7e:bb:f7:2c:7d:09:f7:e0:f1:d5:e5:1d:22: 01:0c:fe:b1:00:dc:81:87:68:3f:5a:6e:d8:31:90:b3:13:95: a9:18:cc:9e:50:3d:9f:d6:b0:5a:49:02:49:00:1a:2d:65:d0: 3e:37:46:1a:4b:bc:32:2f:81:44:7d:75:03:2b:30:02:e7:79: 6b:b7:b7:83:e0:d8:1c:fd:d9:8f:61:0f:5e:dc:f5:ab:c4:57: de:a9:94:44:0e:5c:51:a4:90:82:60:d7:0c:4a:8b:2e:cf:af: 1c:6b:89:c5:ba:36:3f:53:48:bb:19:e4:23:6c:40:d6:8b:47: c2:b0:63:14:b4:3b:d4:32:da:94:70:a6:4d:0f:51:f1:71:26: 5f:0f:91:f6:5e:57:00:a3:f8:0e:89:db:87:c0:25:7d:89:70: 9e:73:d1:4c:b3:10:cb:f6:f1:ae:26:55:f2:17:f0:43:bd:42: c0:ad:03:8c:1b:07:87:02:f1:8c:f1:31:32:15:32:1c:f1:2b: 18:c0:ae:4c:98:0a:0e:0f:ff:cc:48:84:9f:37:27:75:fc:13: c9:2e:29:a7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKrlOuLQg2l547Ty+YWIhxze7jGAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQxMFoX DTI3MDUwMjAyMDkxMFowMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5 NjU0QzU4MTJEQTk5OTNFOUQyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL82/pkPFNmLQ3FYNYHh4q4WWQLcPxdXUrKOnUE41OcKiLhRRtgNorwp+CAq MTnFzojFkJauHluMy4uGAR385Zg8AE/mdzkGd6EOXa4gWbwQCxxNVPinviV6nIo2 cYzLsOMqJ13krStmKrIzNda8bKzUnc6P/minQ+DDp7n/EDbQ80X/OVv7y3PYAPN9 Komj0rBDOdgi41kQ5qPOd05B3Dj9vs5fLi5cUaJSQTu5/GzGx4AnR4vRUldHzIJX id0lGlAo81O3vF+u0aJqoFvjLimYlZJhpvcu1xwCFB1/RdzNtH3bOUo4PZnVjAaM teOdO0LBHuFTkJXn9GLxuP55iuECAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBPoEJdY4/CbJWyWVMWBLamZPp0jMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RjNDA5NGQyLWUxOGQtNDg0MC04NGZhLWM1NzU3YWY1ODBmMS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYzQwOTRk Mi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xM0U4MTA5NzU4RTNGMDlC MjU2Qzk2NTRDNTgxMkRBOTk5M0U5RDIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN85TAMA0GCSqGSIb3DQEBCwUAA4IBAQAsxy76Vw/7c6AiceYIjXoAOCtx rvBQxysC7woPpJ7FuHjlRK6JJawSWn679yx9Cffg8dXlHSIBDP6xANyBh2g/Wm7Y MZCzE5WpGMyeUD2f1rBaSQJJABotZdA+N0YaS7wyL4FEfXUDKzAC53lrt7eD4Ngc /dmPYQ9e3PWrxFfeqZREDlxRpJCCYNcMSosuz68ca4nFujY/U0i7GeQjbEDWi0fC sGMUtDvUMtqUcKZND1HxcSZfD5H2XlcAo/gOiduHwCV9iXCec9FMsxDL9vGuJlXy F/BDvULArQOMGweHAvGM8TEyFTIc8SsYwK5MmAoOD//MSISfNyd1/BPJLimn -----END CERTIFICATE-----Generated at Wed May 13 00:44:47 2026 by rpki-client