$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer File: 1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer (raw, json) Hash identifier: 9tYha6NV+IXmX5KaUJDsJXxJoQycpQnyXK/XsY2ukcc= Subject key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4CD4A364C568CDEBDB9E63419B6CA2B28B0881D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:20 +0000 Certificate not after: Sun 02 May 2027 00:20:20 +0000 Subordinate resources: IP: 117.74.112.0/21 IP: 2401:2c40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d4:a3:64:c5:68:cd:eb:db:9e:63:41:9b:6c:a2:b2:8b:08:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:20 2026 GMT Not After : May 2 00:20:20 2027 GMT Subject: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:b2:8a:02:e6:f6:6b:bd:a1:34:66:0e:40: 42:88:a4:0f:ed:2b:2f:89:81:38:2e:c2:b1:a4:95: 5c:9f:75:95:2e:16:d1:1c:ab:ee:31:4b:41:99:53: cc:16:55:23:0d:62:9c:b4:7a:f7:30:d4:42:e7:1c: e1:61:48:0e:e3:b0:38:34:33:58:13:eb:f2:98:9f: 3f:5b:d2:ba:10:8a:41:6f:44:e7:36:91:3d:19:27: a1:d8:5d:c9:04:14:64:98:ad:7f:ae:3d:4f:bf:a9: df:06:8d:e8:ac:b5:a5:b9:66:eb:0f:29:73:c7:1d: ea:1a:de:f2:82:33:bc:ab:cb:a5:46:90:f2:c3:5b: 18:88:e4:89:0c:57:8f:fc:09:5c:62:22:2a:0a:82: 8e:c2:05:5c:cb:86:7a:a5:4e:2d:3a:be:c3:28:24: 00:45:2d:71:a4:55:48:06:25:53:54:6a:df:13:1b: 02:20:1f:11:1d:93:73:0a:fb:e2:7f:03:2f:1c:c3: 9f:be:c7:35:bf:f2:1b:40:9e:85:12:67:e1:e5:d1: e1:1a:6b:45:5c:21:31:ff:4b:1e:63:7a:45:18:19: 94:0e:0a:ff:db:57:44:b2:80:72:d6:5a:0c:6d:2a: e0:54:17:40:6e:eb:0c:9b:81:7c:63:c8:f3:20:92: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.112.0/21 IPv6: 2401:2c40::/32 Signature Algorithm: sha256WithRSAEncryption a8:19:38:83:08:9e:7d:63:7b:f5:08:25:ed:5d:64:ef:77:80: 9a:15:6a:8e:5b:64:33:8f:d0:1a:d0:d0:d5:f1:05:b4:48:84: 59:be:03:c2:41:fd:2a:13:ea:72:87:9d:4a:19:04:63:21:f0: c3:2d:2c:b8:3b:08:1e:48:c6:b5:e8:6f:f5:72:56:04:21:cd: 41:2b:22:e0:f8:e8:a1:62:c2:cb:29:b6:d6:ac:e5:fa:e9:60: cb:89:0a:cb:14:39:3d:68:0e:6f:4f:d0:39:7a:a9:b7:25:fa: 06:5e:50:66:c6:15:04:14:65:a8:90:fb:2b:3c:ee:3e:12:a2: 04:28:8e:3a:9b:11:49:00:19:b5:8a:98:fb:53:2c:10:9f:c5: be:6d:26:fd:fd:94:b7:87:91:d7:a2:a4:0b:95:0f:bb:34:9a: c6:ed:a2:a4:2e:e6:90:ba:db:4f:54:96:9c:a7:ac:ee:bf:9e: d5:08:3b:1b:90:09:b2:06:03:fb:ed:d4:b3:58:56:e6:e0:f2: c0:ff:3d:fc:e7:8c:41:24:9a:3e:8c:5f:6b:5f:f3:23:1c:3a: 8d:22:86:66:af:ab:47:78:4b:15:ee:e6:66:3c:fe:91:9c:68: ba:0f:15:c3:d2:c2:62:1e:e4:17:aa:d3:e0:95:45:c1:4b:92: d9:b4:63:f9 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUTNSjZMVozevbnmNBm2yisosIgdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTUyMFoX DTI3MDUwMjAwMjAyMFowMzExMC8GA1UEAxMoMUE0NTMxNTc0RkVGRkQ5RTIyMURF MEQ4MkNFNjU3ODUzRTRDRUUzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRRsooC5vZrvaE0Zg5AQoikD+0rL4mBOC7CsaSVXJ91lS4W0Ryr7jFLQZlT zBZVIw1inLR69zDUQucc4WFIDuOwODQzWBPr8pifP1vSuhCKQW9E5zaRPRknodhd yQQUZJitf649T7+p3waN6Ky1pblm6w8pc8cd6hre8oIzvKvLpUaQ8sNbGIjkiQxX j/wJXGIiKgqCjsIFXMuGeqVOLTq+wygkAEUtcaRVSAYlU1Rq3xMbAiAfER2Tcwr7 4n8DLxzDn77HNb/yG0CehRJn4eXR4RprRVwhMf9LHmN6RRgZlA4K/9tXRLKActZa DG0q4FQXQG7rDJuBfGPI8yCSQpsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBpFMVdP7/2eIh3g2CzmV4U+TO46MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM1NWExYTQ0LTMzN2QtNGRiNC05MGQ3LTViZDRmMzcyMTRiOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNTVhMWE0 NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQTQ1MzE1NzRGRUZGRDlF MjIxREUwRDgyQ0U2NTc4NTNFNENFRTNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDdUpwMA0EAgACMAcDBQAkASxAMA0GCSqGSIb3DQEBCwUAA4IBAQCoGTiDCJ59 Y3v1CCXtXWTvd4CaFWqOW2Qzj9Aa0NDV8QW0SIRZvgPCQf0qE+pyh51KGQRjIfDD LSy4OwgeSMa16G/1clYEIc1BKyLg+OihYsLLKbbWrOX66WDLiQrLFDk9aA5vT9A5 eqm3JfoGXlBmxhUEFGWokPsrPO4+EqIEKI46mxFJABm1ipj7UywQn8W+bSb9/ZS3 h5HXoqQLlQ+7NJrG7aKkLuaQuttPVJacp6zuv57VCDsbkAmyBgP77dSzWFbm4PLA /z3854xBJJo+jF9rX/MjHDqNIoZmr6tHeEsV7uZmPP6RnGi6DxXD0sJiHuQXqtPg lUXBS5LZtGP5 -----END CERTIFICATE-----Generated at Tue May 12 22:33:03 2026 by rpki-client