$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2262EFB3F18BE267390F7ED6201C9FA1EC5671D5.cer File: 2262EFB3F18BE267390F7ED6201C9FA1EC5671D5.cer (raw, json) Hash identifier: d3PtQeVzLCfKPuNcaIM1cAM2t6T4p1fiF/oXXsBCDu8= Subject key identifier: 22:62:EF:B3:F1:8B:E2:67:39:0F:7E:D6:20:1C:9F:A1:EC:56:71:D5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 11BC67D634155A61B803543D4BCBAFED4D182F18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/2262EFB3F18BE267390F7ED6201C9FA1EC5671D5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:47:26 +0000 Certificate not after: Sun 02 May 2027 00:52:26 +0000 Subordinate resources: IP: 202.61.124.0/23 IP: 2001:df0:2a4::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bc:67:d6:34:15:5a:61:b8:03:54:3d:4b:cb:af:ed:4d:18:2f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:47:26 2026 GMT Not After : May 2 00:52:26 2027 GMT Subject: CN=2262EFB3F18BE267390F7ED6201C9FA1EC5671D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:6e:23:7b:42:e3:9d:8a:62:0f:85:53:ef: e5:3f:47:d5:72:d2:80:ab:b6:df:f7:32:28:72:e0: e7:f1:da:ef:c0:a1:37:1d:6a:57:67:a6:ec:68:c7: 58:97:38:c3:9e:fe:f7:fb:4e:5f:e5:d3:84:d9:b3: 5d:4f:96:41:5c:7d:e6:46:dd:5f:a1:a1:bd:17:3e: 61:1b:0d:bb:bf:e2:28:9e:0a:7f:f0:32:5f:43:2e: 99:be:c0:24:0a:1a:df:ec:8c:b2:6c:c3:e8:80:d3: 8e:99:d8:91:23:7f:c2:11:ae:af:4a:4b:52:23:19: 9c:22:93:1c:71:74:d9:2c:62:ba:42:ed:b9:d6:3a: 59:63:09:f0:7c:ff:28:c6:9a:81:13:a9:71:f0:ba: 53:c6:c9:cb:89:2f:4d:e0:71:f1:0d:f6:40:39:6b: ff:78:d8:20:5d:e9:ad:21:2c:51:7e:45:e6:7c:ee: 4c:be:54:22:5f:18:db:1f:2a:82:08:2a:10:14:0b: 15:d2:69:c1:52:3c:71:19:40:d9:8e:91:32:4a:b9: 68:fc:a8:b2:b6:6d:6d:b1:2a:5a:f5:63:2b:9b:ba: c7:ad:ed:26:30:23:1d:a7:68:7d:5d:5f:d9:e7:39: 69:3a:4a:0b:2c:65:58:45:a8:98:4e:ec:25:0d:e4: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:62:EF:B3:F1:8B:E2:67:39:0F:7E:D6:20:1C:9F:A1:EC:56:71:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/2262EFB3F18BE267390F7ED6201C9FA1EC5671D5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.61.124.0/23 IPv6: 2001:df0:2a4::/48 Signature Algorithm: sha256WithRSAEncryption 8c:80:67:77:c2:d6:e0:fe:cd:0a:53:c2:7a:33:c1:ac:58:bc: 30:9b:d7:b6:f7:91:5f:83:ac:8e:d8:12:fc:05:95:71:5e:cf: 3b:63:68:b7:42:34:cf:c7:55:20:82:be:1a:65:6b:90:53:5e: e2:39:2f:bb:e2:6b:47:b0:34:d5:74:ff:10:cc:70:33:3c:54: 42:bc:0a:da:af:2c:e3:79:f0:29:a9:ab:83:41:4a:8c:d2:3e: b7:2e:43:07:90:47:11:b6:66:99:c0:7f:8e:d4:de:3f:4c:aa: ad:16:61:d3:15:fb:67:94:04:70:6a:36:8c:81:d1:95:36:9c: 53:a0:de:02:8b:d2:fd:e8:1e:d8:86:54:52:04:fa:95:09:e7: 04:38:a6:c7:ae:d5:86:77:52:a5:ca:07:01:65:df:00:cd:9b: d5:5a:aa:47:9d:76:86:6a:e2:56:e0:e4:22:a9:00:67:47:da: f8:f6:e4:30:25:9e:bd:ae:4d:65:54:34:74:be:32:8f:56:37: 07:df:f6:6e:92:7b:45:2a:52:21:26:ab:73:fd:a6:80:39:9c: a8:24:b2:1d:43:8a:aa:c0:10:70:98:f4:b8:fa:65:71:97:f5: e9:a9:f0:d1:58:d4:83:63:0a:42:4f:ea:dc:f7:cc:9b:02:4d: 27:83:b4:57 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUEbxn1jQVWmG4A1Q9S8uv7U0YLxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDcyNloX DTI3MDUwMjAwNTIyNlowMzExMC8GA1UEAxMoMjI2MkVGQjNGMThCRTI2NzM5MEY3 RUQ2MjAxQzlGQTFFQzU2NzFENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyabiN7QuOdimIPhVPv5T9H1XLSgKu23/cyKHLg5/Ha78ChNx1qV2em7GjH WJc4w57+9/tOX+XThNmzXU+WQVx95kbdX6GhvRc+YRsNu7/iKJ4Kf/AyX0Mumb7A JAoa3+yMsmzD6IDTjpnYkSN/whGur0pLUiMZnCKTHHF02SxiukLtudY6WWMJ8Hz/ KMaagROpcfC6U8bJy4kvTeBx8Q32QDlr/3jYIF3prSEsUX5F5nzuTL5UIl8Y2x8q gggqEBQLFdJpwVI8cRlA2Y6RMkq5aPyosrZtbbEqWvVjK5u6x63tJjAjHadofV1f 2ec5aTpKCyxlWEWomE7sJQ3k9fMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJi77Pxi+JnOQ9+1iAcn6HsVnHVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY0YzI4MjkzLWI2ZmItNGZmNC05Y2UyLTA2NjYzY2JlNjgxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NGMyODI5 My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC8yMjYyRUZCM0YxOEJFMjY3 MzkwRjdFRDYyMDFDOUZBMUVDNTY3MUQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQByj18MA8EAgACMAkDBwAgAQ3wAqQwDQYJKoZIhvcNAQELBQADggEBAIyAZ3fC 1uD+zQpTwnozwaxYvDCb17b3kV+DrI7YEvwFlXFezztjaLdCNM/HVSCCvhpla5BT XuI5L7via0ewNNV0/xDMcDM8VEK8CtqvLON58Cmpq4NBSozSPrcuQweQRxG2ZpnA f47U3j9Mqq0WYdMV+2eUBHBqNoyB0ZU2nFOg3gKL0v3oHtiGVFIE+pUJ5wQ4pseu 1YZ3UqXKBwFl3wDNm9VaqkeddoZq4lbg5CKpAGdH2vj25DAlnr2uTWVUNHS+Mo9W Nwff9m6Se0UqUiEmq3P9poA5nKgksh1DiqrAEHCY9Lj6ZXGX9emp8NFY1INjCkJP 6tz3zJsCTSeDtFc= -----END CERTIFICATE-----Generated at Tue May 12 22:10:05 2026 by rpki-client