$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer (raw, json) Hash identifier: T48mYj66/TLH9DCZ4Rgopnok69wb045PnsaeD9kEArY= Subject key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4878658EDCF83C8D2605CDCF0FDBD3CCBAF002A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:46:07 +0000 Certificate not after: Sat 01 May 2027 23:51:07 +0000 Subordinate resources: IP: 163.61.6.0/23 IP: 2001:df4:ff40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:78:65:8e:dc:f8:3c:8d:26:05:cd:cf:0f:db:d3:cc:ba:f0:02:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:46:07 2026 GMT Not After : May 1 23:51:07 2027 GMT Subject: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:96:41:bd:a8:53:12:9e:71:ee:13:da:51: ef:7b:89:84:a1:00:eb:db:2a:69:95:8e:1c:fa:67: 64:00:3a:0b:e6:b2:b2:42:88:32:32:6f:76:ea:b4: 88:4e:79:f7:47:40:d1:a7:77:56:53:86:7d:ea:d8: fe:a2:d7:8a:b8:dc:82:88:13:19:fb:dc:12:6a:73: 66:06:58:ec:90:53:76:39:e8:bd:ed:73:a6:b5:dc: 58:90:d3:10:b6:9e:42:23:81:e3:06:3a:33:61:08: 0b:de:65:90:65:69:15:20:dc:a7:26:19:0f:dc:b0: 84:58:47:42:6e:56:2a:bc:1e:69:2e:1b:91:03:23: 49:bb:66:82:72:cd:16:23:9a:09:15:b2:3b:b3:94: 2a:59:6a:e8:ed:9a:f8:db:da:18:da:98:56:f8:22: 8f:23:ab:5e:05:1c:c9:33:0b:2c:a8:e1:0c:56:72: 6e:37:8e:61:52:65:e6:e8:48:81:9b:df:fb:ab:a2: 10:58:6b:96:f3:60:47:06:84:04:b1:ed:f2:e4:e1: 6b:51:a0:9b:83:3a:3e:96:49:c5:c4:6c:97:48:9c: db:0f:4c:f8:8b:e2:af:d8:dd:ac:bd:45:df:9f:b9: 32:fc:3a:1f:11:70:5c:83:46:a3:c0:3f:e5:e8:d8: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.6.0/23 IPv6: 2001:df4:ff40::/48 Signature Algorithm: sha256WithRSAEncryption 55:65:e3:4c:07:d7:9c:a1:a9:84:f7:01:2a:df:f6:27:ae:f8: 72:61:c4:87:ab:f7:e1:ae:e4:c4:b0:63:40:11:72:f1:d6:cd: 0e:c8:ee:b4:03:4a:b1:86:81:ca:15:d0:dc:9e:3b:a7:4d:74: a7:fc:4d:40:4f:46:62:45:a2:00:df:d3:21:47:9c:78:af:6d: 13:7f:73:c3:14:3d:83:40:fd:a5:6e:ac:9b:ec:1f:66:e7:04: 46:91:2c:a3:79:3c:1e:1d:a1:b8:13:06:3a:ee:88:9f:2c:60: 80:37:b7:48:a0:e7:c7:ae:ea:6a:77:97:29:9f:23:1e:e1:64: 70:e0:08:b4:c3:da:02:a8:a2:42:11:4f:9f:0e:80:f6:b5:8d: 2f:ab:f4:6f:1e:59:75:63:7d:c3:11:57:b6:1a:9b:44:fd:71: 25:36:2c:5e:06:06:3b:22:8e:58:5a:4b:6a:2e:b4:f2:61:20: ac:1c:aa:c0:b2:2b:d5:3d:a8:ff:7a:29:e0:62:ed:40:2a:f2: 3a:8c:99:55:a5:75:a0:c4:eb:71:2c:cc:62:e2:32:0d:de:af: 4f:92:13:91:e2:d8:43:95:f8:82:ea:af:05:af:98:0c:bb:55: 35:30:98:68:93:16:87:3b:83:b4:45:27:90:0a:cd:42:11:c1: 98:39:08:ba -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSHhljtz4PI0mBc3PD9vTzLrwAqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDYwN1oX DTI3MDUwMTIzNTEwN1owMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBD RDYzRjU3OEJCMjEyOTEyQTFDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEXlkG9qFMSnnHuE9pR73uJhKEA69sqaZWOHPpnZAA6C+ayskKIMjJvduq0 iE5590dA0ad3VlOGferY/qLXirjcgogTGfvcEmpzZgZY7JBTdjnove1zprXcWJDT ELaeQiOB4wY6M2EIC95lkGVpFSDcpyYZD9ywhFhHQm5WKrweaS4bkQMjSbtmgnLN FiOaCRWyO7OUKllq6O2a+NvaGNqYVvgijyOrXgUcyTMLLKjhDFZybjeOYVJl5uhI gZvf+6uiEFhrlvNgRwaEBLHt8uTha1Ggm4M6PpZJxcRsl0ic2w9M+Ivir9jdrL1F 35+5Mvw6HxFwXINGo8A/5ejYM2MCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB6Xr73SqcfkZdDNY/V4uyEpEqHKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA5NjMyM2RjLWFiMjYtNDlkZC04YjJjLTMwNmU1MGVlMjNhMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wOTYzMjNk Yy1hYjI2LTQ5ZGQtOGIyYy0zMDZlNTBlZTIzYTMvMC8xRTk3QUZCREQyQTlDN0U0 NjVEMENENjNGNTc4QkIyMTI5MTJBMUNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBoz0GMA8EAgACMAkDBwAgAQ30/0AwDQYJKoZIhvcNAQELBQADggEBAFVl40wH 15yhqYT3ASrf9ieu+HJhxIer9+Gu5MSwY0ARcvHWzQ7I7rQDSrGGgcoV0NyeO6dN dKf8TUBPRmJFogDf0yFHnHivbRN/c8MUPYNA/aVurJvsH2bnBEaRLKN5PB4dobgT BjruiJ8sYIA3t0ig58eu6mp3lymfIx7hZHDgCLTD2gKookIRT58OgPa1jS+r9G8e WXVjfcMRV7Yam0T9cSU2LF4GBjsijlhaS2outPJhIKwcqsCyK9U9qP96KeBi7UAq 8jqMmVWldaDE63EszGLiMg3er0+SE5Hi2EOV+ILqrwWvmAy7VTUwmGiTFoc7g7RF J5AKzUIRwZg5CLo= -----END CERTIFICATE-----Generated at Wed May 13 02:40:19 2026 by rpki-client