$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer File: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer (raw, json) Hash identifier: aVsCMHby5Alo9bEtidlCIg9KqW+4HRnse51n4w6g+lg= Subject key identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A54BF2B97E038978DE8077613CC5C1889D73048 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:43:53 +0000 Certificate not after: Sat 01 May 2027 23:48:53 +0000 Subordinate resources: IP: 2001:df3:c340::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:54:bf:2b:97:e0:38:97:8d:e8:07:76:13:cc:5c:18:89:d7:30:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:43:53 2026 GMT Not After : May 1 23:48:53 2027 GMT Subject: CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:cb:e8:17:29:dc:c2:99:35:7c:51:77:db: e4:3f:5c:4c:22:63:67:c3:31:cb:4c:55:1d:71:31: 9c:73:8c:dd:43:1c:f9:22:7d:a8:bb:ad:d2:30:6a: e3:39:44:2b:51:51:a5:68:73:9d:7a:53:73:55:d5: 2c:27:fd:56:18:7b:07:ab:55:8a:d5:39:3e:dd:b5: a9:db:ae:39:ba:82:d4:99:22:5c:26:01:78:c7:ce: 94:c3:f9:86:21:15:d1:e9:31:d3:53:97:b9:29:85: 9f:a9:a6:97:1f:fc:02:bf:37:42:3b:50:d8:6b:a1: c3:61:c0:41:1a:9e:e6:c6:8a:21:d1:c0:f8:21:7b: df:a7:2a:36:63:df:cb:c0:03:38:b5:c9:72:d0:8f: a4:73:de:de:b5:0d:52:1d:99:bb:0d:1e:d2:db:92: e2:83:8b:8a:97:c7:36:10:c2:13:a3:a8:f6:22:79: c6:f5:aa:4e:86:8d:9a:ba:ff:9c:29:95:6b:d9:1c: d3:8c:52:bc:3d:c4:4e:71:9e:ff:7d:e4:57:ee:22: 3b:15:83:93:6f:19:fe:12:47:7c:a2:3c:ed:64:9c: aa:cf:d6:4b:0d:97:3f:4b:54:88:c4:12:b1:78:09: 7b:bb:89:1e:b8:66:1f:a4:04:65:76:07:8a:31:c0: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:c340::/48 Signature Algorithm: sha256WithRSAEncryption 72:16:c7:74:78:91:02:f9:15:d0:1b:d8:70:c5:b9:eb:1c:8a: 1c:f1:bb:62:ef:49:44:da:f9:db:9c:ea:a4:73:2b:7d:37:43: 4f:01:cb:6e:a9:5f:0d:61:45:5c:fc:dc:1f:f5:5b:d4:d7:51: 5f:b0:0f:81:1b:28:69:f1:c2:d8:1b:4c:b9:1d:95:60:ce:9b: db:31:cb:fe:53:45:35:19:6c:a9:f4:9f:57:9f:ae:4c:30:56: f8:09:95:58:e1:7e:27:76:61:cf:aa:3c:d2:f1:14:c0:69:27: dd:ae:31:3a:67:b7:62:77:eb:6f:e6:34:4d:3b:76:94:7c:39: 9e:d9:b2:64:75:a9:23:f6:24:97:a0:5c:46:ae:8c:7e:1e:9f: db:f7:90:0d:3a:8e:36:14:70:8d:3c:d2:7b:45:d1:68:d1:bf: ba:fb:72:e3:22:3d:e6:5c:4a:35:3a:e1:97:db:13:98:ab:ee: d1:c2:2d:eb:19:35:8d:fd:5e:7c:26:3a:94:6d:05:02:ce:a9: 69:53:b9:86:d3:9e:05:2c:25:95:63:7a:53:72:67:d2:a1:cc: e6:75:60:de:86:c6:d9:38:63:5c:ff:ee:0b:8d:c4:08:2b:47: ca:44:1d:be:16:51:4a:fc:fe:8e:db:a1:cf:68:d9:47:17:c8: e1:26:d0:75 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUelS/K5fgOJeN6Ad2E8xcGInXMEgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDM1M1oX DTI3MDUwMTIzNDg1M1owMzExMC8GA1UEAxMoMUREMERFOTAxOThGOUQxQTI4RTQ1 N0VFNTc4OEU3RDEzNTQ3Q0I5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMhy+gXKdzCmTV8UXfb5D9cTCJjZ8Mxy0xVHXExnHOM3UMc+SJ9qLut0jBq 4zlEK1FRpWhznXpTc1XVLCf9Vhh7B6tVitU5Pt21qduuObqC1JkiXCYBeMfOlMP5 hiEV0ekx01OXuSmFn6mmlx/8Ar83QjtQ2Guhw2HAQRqe5saKIdHA+CF736cqNmPf y8ADOLXJctCPpHPe3rUNUh2Zuw0e0tuS4oOLipfHNhDCE6Oo9iJ5xvWqToaNmrr/ nCmVa9kc04xSvD3ETnGe/33kV+4iOxWDk28Z/hJHfKI87WScqs/WSw2XP0tUiMQS sXgJe7uJHrhmH6QEZXYHijHAZuMCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB3Q3pAZj50aKORX7leI59E1R8uRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA1ODhkZmY3LTZhOTItNDI5My04ODAwLWI1M2UyYTkxOGFjYS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNTg4ZGZm Ny02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS8xREQwREU5MDE5OEY5RDFB MjhFNDU3RUU1Nzg4RTdEMTM1NDdDQjkxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN88NAMA0GCSqGSIb3DQEBCwUAA4IBAQByFsd0eJEC+RXQG9hwxbnrHIoc 8bti70lE2vnbnOqkcyt9N0NPActuqV8NYUVc/Nwf9VvU11FfsA+BGyhp8cLYG0y5 HZVgzpvbMcv+U0U1GWyp9J9Xn65MMFb4CZVY4X4ndmHPqjzS8RTAaSfdrjE6Z7di d+tv5jRNO3aUfDme2bJkdakj9iSXoFxGrox+Hp/b95ANOo42FHCNPNJ7RdFo0b+6 +3LjIj3mXEo1OuGX2xOYq+7Rwi3rGTWN/V58JjqUbQUCzqlpU7mG054FLCWVY3pT cmfSoczmdWDehsbZOGNc/+4LjcQIK0fKRB2+FlFK/P6O26HPaNlHF8jhJtB1 -----END CERTIFICATE-----Generated at Wed May 13 03:16:49 2026 by rpki-client