$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer File: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer (raw, json) Hash identifier: ooXgUZsqWoPSBlwzv82ZOZUowIyjN4XYkSFEZi9q1EY= Subject key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0B8A40C25D6A974120B2F2220972B78E76A78765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:33:06 +0000 Certificate not after: Sun 02 May 2027 00:38:06 +0000 Subordinate resources: IP: 2001:df3:72c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8a:40:c2:5d:6a:97:41:20:b2:f2:22:09:72:b7:8e:76:a7:87:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:33:06 2026 GMT Not After : May 2 00:38:06 2027 GMT Subject: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:e9:9c:7d:26:95:a9:a4:6d:fa:dd:04:64: 03:2d:14:cc:cf:ce:aa:76:db:c1:fe:fc:a6:59:e7: 8f:71:4e:0e:1c:17:18:ab:89:4f:a8:e8:9e:c5:a1: cb:95:b8:c9:d9:b6:52:11:43:1c:f9:1c:b5:49:13: f8:c3:b4:76:c0:1d:90:05:db:17:41:fe:2f:2c:1a: 0b:1d:6e:c0:9d:2c:75:c5:bc:50:34:b3:41:cf:7a: 57:22:9b:ca:62:00:24:bf:a4:df:87:f2:90:db:cb: 97:22:c7:79:9b:b9:43:fa:af:6f:5d:8b:8b:28:a8: 59:bb:b8:b1:43:62:6c:b2:2f:f1:b7:61:d1:9a:4f: e3:48:c0:0c:1c:ef:af:91:43:cf:3f:dc:93:03:23: 5e:5b:21:47:e1:35:bd:2e:14:c5:c2:f0:78:2d:8f: 3c:ef:25:0f:52:c4:df:a0:f1:e4:c7:0e:38:a9:d2: 90:96:a8:85:3b:f6:7a:7c:cf:54:a4:b5:fb:80:b1: 73:06:ae:60:f1:2d:85:bb:dc:65:db:f1:3a:93:05: 5d:46:74:87:35:ac:99:d6:94:1b:38:02:3e:05:72: 88:02:5c:c2:92:7e:35:f5:46:5e:40:cb:c1:9f:07: ee:6c:03:57:c2:5d:cf:7b:27:51:6d:3d:17:0c:a5: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:72c0::/48 Signature Algorithm: sha256WithRSAEncryption a2:44:5f:68:ac:15:5b:25:26:eb:58:11:44:b3:c3:5d:fb:8a: 40:c5:e3:13:56:4f:93:db:c5:e5:8e:01:51:70:f3:64:bc:ed: 6e:f1:f1:05:2e:f3:52:21:1a:59:5a:25:d0:89:3a:60:71:7a: d8:51:06:04:7b:6f:27:d3:06:dc:75:38:1e:2d:17:64:0c:bd: 7a:f9:42:c8:30:93:23:19:cf:8d:7b:aa:e2:d9:da:69:cd:ca: c8:46:23:04:f7:42:be:52:ce:c6:ca:27:37:60:46:55:6b:fb: 2e:e7:d4:c5:32:2f:9f:11:76:14:da:db:af:fd:73:0e:53:7d: f6:e5:ce:aa:f8:72:ae:7c:0f:26:de:16:75:75:ea:00:b9:f6: c0:a0:2d:16:e0:46:7a:5b:f6:6a:d2:1b:00:07:b9:d6:e0:43: f7:d0:95:68:98:20:04:5f:c7:f9:e1:d0:73:4f:90:1b:bf:4f: 6a:d1:88:1f:13:64:b3:91:43:7d:97:14:ce:c1:80:97:09:e3: 93:e0:03:70:bc:86:6f:9e:57:33:7e:d5:df:95:04:8d:34:d8: 44:c9:3c:b8:23:26:42:fe:3d:36:a8:0c:01:b1:0f:c1:fa:86: 6e:01:29:68:fd:f4:64:bd:19:f3:78:66:ef:41:43:58:23:6f: de:d8:bd:79 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC4pAwl1ql0EgsvIiCXK3jnanh2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzMwNloX DTI3MDUwMjAwMzgwNlowMzExMC8GA1UEAxMoMjAzMDIxOUFDMkQ4QkRFNTQwQjNB MDZCM0UyMjBDQzYyQjZCMzc0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbq6Zx9JpWppG363QRkAy0UzM/Oqnbbwf78plnnj3FODhwXGKuJT6jonsWh y5W4ydm2UhFDHPkctUkT+MO0dsAdkAXbF0H+LywaCx1uwJ0sdcW8UDSzQc96VyKb ymIAJL+k34fykNvLlyLHeZu5Q/qvb12LiyioWbu4sUNibLIv8bdh0ZpP40jADBzv r5FDzz/ckwMjXlshR+E1vS4UxcLweC2PPO8lD1LE36Dx5McOOKnSkJaohTv2enzP VKS1+4CxcwauYPEthbvcZdvxOpMFXUZ0hzWsmdaUGzgCPgVyiAJcwpJ+NfVGXkDL wZ8H7mwDV8Jdz3snUW09FwyltkECAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCAwIZrC2L3lQLOgaz4iDMYrazdOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUxMjM0YzRhLWE4ZmYtNDAzNi04NDIwLWRhODE2MjExMTgwNi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MTIzNGM0 YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8yMDMwMjE5QUMyRDhCREU1 NDBCM0EwNkIzRTIyMENDNjJCNkIzNzRFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN83LAMA0GCSqGSIb3DQEBCwUAA4IBAQCiRF9orBVbJSbrWBFEs8Nd+4pA xeMTVk+T28XljgFRcPNkvO1u8fEFLvNSIRpZWiXQiTpgcXrYUQYEe28n0wbcdTge LRdkDL16+ULIMJMjGc+Ne6ri2dppzcrIRiME90K+Us7Gyic3YEZVa/su59TFMi+f EXYU2tuv/XMOU3325c6q+HKufA8m3hZ1deoAufbAoC0W4EZ6W/Zq0hsAB7nW4EP3 0JVomCAEX8f54dBzT5Abv09q0YgfE2SzkUN9lxTOwYCXCeOT4ANwvIZvnlczftXf lQSNNNhEyTy4IyZC/j02qAwBsQ/B+oZuASlo/fRkvRnzeGbvQUNYI2/e2L15 -----END CERTIFICATE-----Generated at Wed May 13 02:12:06 2026 by rpki-client