$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer File: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer (raw, json) Hash identifier: 8r0M6U6BSa2NSGI7PND+3ywo/T1FVoKCRMEQs78g3oE= Subject key identifier: 1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 617485395EE5451D5F0B12F0DD45ACA7D4F771F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:21:18 +0000 Certificate not after: Sun 02 May 2027 01:26:18 +0000 Subordinate resources: IP: 2001:df4:5d40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:74:85:39:5e:e5:45:1d:5f:0b:12:f0:dd:45:ac:a7:d4:f7:71:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:21:18 2026 GMT Not After : May 2 01:26:18 2027 GMT Subject: CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:79:2d:b3:ef:80:d5:64:a0:40:44:3e:94: 7f:bd:58:d4:dc:f7:78:59:b6:4f:f9:c0:5d:ad:b0: b7:5a:74:3a:93:5f:ac:3c:3f:27:ef:2a:bb:a8:10: 5d:16:58:6f:84:f0:de:ae:67:29:b2:3b:58:c4:ed: 13:48:06:94:1f:aa:86:72:bc:9a:ad:f0:d6:ae:ae: 41:7b:09:40:29:ad:e1:0f:4d:4f:ff:61:4d:c4:c2: 8b:3d:7f:1b:2d:ea:cb:ba:58:ec:76:b6:07:e8:0a: 3e:61:49:f0:14:e0:90:b8:ce:52:92:88:ba:87:f3: 8c:e9:27:76:35:64:43:b3:fe:e7:a0:ef:93:3d:0c: 5c:1e:25:83:d8:92:88:2d:05:0b:aa:5f:05:cc:91: 68:d7:aa:0f:10:17:e5:9b:3e:1f:c5:69:f8:12:ec: 3e:47:76:40:d5:c4:05:80:d1:0d:bb:4e:ad:7a:a0: 52:52:74:ca:e7:87:0b:8c:ef:38:f3:07:85:ec:e8: ca:62:2d:60:d5:ab:0a:2d:b5:0a:68:37:82:6b:7e: 80:54:26:49:43:b8:05:11:9d:7e:bb:1f:52:4f:ec: 43:4a:e0:e9:d9:fe:81:62:33:18:69:7f:7b:0e:04: 12:2a:2c:4b:f1:0a:ef:59:9f:8f:30:79:b6:24:b5: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:5d40::/48 Signature Algorithm: sha256WithRSAEncryption 23:58:4d:37:6c:df:79:cc:f8:6f:5c:6b:31:ce:2a:6d:2e:68: 99:29:db:ad:65:b1:02:6a:17:45:96:dc:26:1c:d5:28:ef:1e: 52:64:6e:d0:3b:9c:bf:3b:3b:6d:90:78:91:fd:96:de:0b:89: d6:4b:4e:08:26:ed:c3:8f:1d:e9:39:4f:bd:1a:57:6c:57:63: 14:2e:10:c4:42:fd:2e:df:d6:9e:9f:28:e9:16:e8:16:49:11: 09:00:1a:19:76:2a:c8:f5:ce:87:27:95:f9:3e:df:ae:42:70: 7b:bf:95:e3:3b:fd:d7:bb:a3:fe:b9:d4:51:c8:e2:56:f2:b2: 36:45:ad:5e:7b:de:b3:c2:b5:1b:e3:b4:2f:29:3d:b3:81:07: 6d:1e:37:01:9d:76:83:cb:37:f6:3b:77:09:4a:6e:a4:f9:82: e5:f4:d6:6d:64:c6:90:96:40:12:aa:5f:59:1e:85:6f:11:e0: 25:5b:64:c8:8c:ba:8a:1b:34:72:4a:c9:7c:4a:d3:ca:0d:fe: 24:b1:4e:31:b6:cd:3d:da:f1:ff:c7:c8:73:33:a7:2d:ae:86: 7d:12:7c:db:ff:97:51:fa:1b:fe:5b:b9:82:b3:2e:50:3d:6f: ad:c5:44:26:51:c9:bc:5c:eb:64:c5:e9:ee:5b:1f:1b:55:31: 6f:b0:36:69 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYXSFOV7lRR1fCxLw3UWsp9T3cfcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjExOFoX DTI3MDUwMjAxMjYxOFowMzExMC8GA1UEAxMoMUI1NDYwODA3RkNBRTkzMjRCMUY5 RTZFRTMzQkMxRTFDMkE4QjZEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5DeS2z74DVZKBARD6Uf71Y1Nz3eFm2T/nAXa2wt1p0OpNfrDw/J+8qu6gQ XRZYb4Tw3q5nKbI7WMTtE0gGlB+qhnK8mq3w1q6uQXsJQCmt4Q9NT/9hTcTCiz1/ Gy3qy7pY7Ha2B+gKPmFJ8BTgkLjOUpKIuofzjOkndjVkQ7P+56Dvkz0MXB4lg9iS iC0FC6pfBcyRaNeqDxAX5Zs+H8Vp+BLsPkd2QNXEBYDRDbtOrXqgUlJ0yueHC4zv OPMHhezoymItYNWrCi21Cmg3gmt+gFQmSUO4BRGdfrsfUk/sQ0rg6dn+gWIzGGl/ ew4EEiosS/EK71mfjzB5tiS1JukCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBtUYIB/yukySx+ebuM7weHCqLbQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk4ODUzYWFiLThkNmMtNDU3Zi05ZDU3LTQ4NGFjYWNlYTlkOC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ODg1M2Fh Yi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS8xQjU0NjA4MDdGQ0FFOTMy NEIxRjlFNkVFMzNCQzFFMUMyQThCNkQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9F1AMA0GCSqGSIb3DQEBCwUAA4IBAQAjWE03bN95zPhvXGsxziptLmiZ KdutZbECahdFltwmHNUo7x5SZG7QO5y/OzttkHiR/ZbeC4nWS04IJu3Djx3pOU+9 GldsV2MULhDEQv0u39aenyjpFugWSREJABoZdirI9c6HJ5X5Pt+uQnB7v5XjO/3X u6P+udRRyOJW8rI2Ra1ee96zwrUb47QvKT2zgQdtHjcBnXaDyzf2O3cJSm6k+YLl 9NZtZMaQlkASql9ZHoVvEeAlW2TIjLqKGzRySsl8StPKDf4ksU4xts092vH/x8hz M6ctroZ9Enzb/5dR+hv+W7mCsy5QPW+txUQmUcm8XOtkxenuWx8bVTFvsDZp -----END CERTIFICATE-----Generated at Tue May 12 22:16:33 2026 by rpki-client