$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer (raw, json) Hash identifier: IConW64A8GgdszRVSwUg4l+0jH0VQsrFDwxSyldInjQ= Subject key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 48428BFB9D83F13537D72168D31E6035648CFE70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:44 +0000 Certificate not after: Sun 02 May 2027 01:38:44 +0000 Subordinate resources: AS: 152799 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:42:8b:fb:9d:83:f1:35:37:d7:21:68:d3:1e:60:35:64:8c:fe:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:44 2026 GMT Not After : May 2 01:38:44 2027 GMT Subject: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:9c:8c:41:ed:f5:8b:5c:45:db:2e:f8:05: 0a:f0:02:d7:17:d0:58:42:c0:22:e8:f8:a7:be:f4: 29:5d:02:e2:e7:80:84:3f:ff:74:94:c5:c9:be:85: 6f:1c:c1:da:2e:06:72:d0:5a:b6:7b:fb:42:29:59: 75:aa:cd:6e:e8:f1:f8:2d:2b:c5:00:78:0f:4c:3b: 50:e9:4a:ef:3f:db:e6:df:97:da:01:3f:f0:cf:18: 66:d5:b5:9c:5d:b4:d1:c7:d1:ce:56:39:a6:37:9c: b4:29:88:b7:9c:79:00:e8:bc:28:ea:0f:86:50:cc: 04:b6:e7:17:f9:a4:55:49:7f:f5:b1:a4:6b:bc:92: 6a:7c:0f:8f:a2:49:2c:f9:f9:a3:fd:ae:0e:f9:5e: 25:ac:36:a7:11:95:67:8a:a1:9b:31:60:f0:81:b0: ed:c4:62:33:d9:d6:e9:bf:cb:cb:67:69:fb:58:bf: 57:f7:62:70:e9:5d:8f:42:f1:1d:f9:83:66:30:95: cc:13:e6:fe:08:26:5e:28:88:55:5b:e5:99:da:7c: 10:71:92:d6:fd:4d:3e:5f:02:99:41:6f:44:f1:64: 5a:a6:9d:89:3d:5a:12:6b:96:fb:f9:d7:77:f3:54: 28:70:71:bb:1d:e2:9a:bd:76:ab:bb:88:91:ee:bd: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 152799 Signature Algorithm: sha256WithRSAEncryption 7b:2d:66:d3:6f:b4:18:0d:ec:2f:19:82:44:58:30:6f:b7:af: 51:8c:06:24:82:b0:28:cc:d8:0d:f6:15:76:27:35:a3:cd:89: 13:b8:ca:67:fb:48:cf:c4:44:55:5c:1c:72:8e:2b:e4:fd:e0: 6c:03:1a:1f:ea:d3:5e:82:0a:72:0f:d0:70:de:e1:ee:d7:a1: e8:d7:02:57:97:47:a1:b7:82:b9:f7:15:bd:f7:c4:54:ac:9b: 96:52:be:53:d1:64:f3:03:0c:8c:27:4a:95:d3:93:ec:64:f8: 50:05:23:6f:68:e4:aa:7b:6e:20:8e:bd:ba:85:b9:73:48:c7: 39:31:02:69:c8:4a:00:21:f4:3c:ee:02:e4:d5:99:5b:24:b7: 94:b5:e2:fd:10:dd:47:fd:80:52:09:3c:15:4a:97:46:06:c4: 38:c3:b7:c8:e1:46:d4:52:de:1b:52:62:82:2c:48:d3:24:8e: e7:e1:7a:f2:38:ea:7c:c5:53:3f:9f:db:48:46:20:b1:b2:ff: 5e:46:fc:74:28:75:d1:fb:2f:e0:09:4e:95:74:db:18:3f:5c: cf:d0:35:d7:2b:2f:4b:d3:d5:84:ef:72:56:8e:33:0b:39:c7: 43:56:d2:c9:ac:39:dd:87:80:e1:c3:87:1d:4d:a8:cb:f4:6b: 34:ee:0b:8c -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIUSEKL+52D8TU31yFo0x5gNWSM/nAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzM0NFoX DTI3MDUwMjAxMzg0NFowMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEy Rjk0Q0NBOUM4RjlBNDExNjJDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4HnIxB7fWLXEXbLvgFCvAC1xfQWELAIuj4p770KV0C4ueAhD//dJTFyb6F bxzB2i4GctBatnv7QilZdarNbujx+C0rxQB4D0w7UOlK7z/b5t+X2gE/8M8YZtW1 nF200cfRzlY5pjectCmIt5x5AOi8KOoPhlDMBLbnF/mkVUl/9bGka7ySanwPj6JJ LPn5o/2uDvleJaw2pxGVZ4qhmzFg8IGw7cRiM9nW6b/Ly2dp+1i/V/dicOldj0Lx HfmDZjCVzBPm/ggmXiiIVVvlmdp8EHGS1v1NPl8CmUFvRPFkWqadiT1aEmuW+/nX d/NUKHBxux3imr12q7uIke69EbECAwEAAaOCArQwggKwMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDEm/IbFsHVBc+ovlMypyPmkEWLEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E5YjgxNTJlLWFhODYtNGQ4YS04MWRhLWU3MTA4NmIyOTU2Yy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOWI4MTUy ZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMS8zMTI2RkM4NkM1QjA3NTQx NzNFQTJGOTRDQ0E5QzhGOUE0MTE2MkM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJU 3zANBgkqhkiG9w0BAQsFAAOCAQEAey1m02+0GA3sLxmCRFgwb7evUYwGJIKwKMzY DfYVdic1o82JE7jKZ/tIz8REVVwcco4r5P3gbAMaH+rTXoIKcg/QcN7h7teh6NcC V5dHobeCufcVvffEVKybllK+U9Fk8wMMjCdKldOT7GT4UAUjb2jkqntuII69uoW5 c0jHOTECachKACH0PO4C5NWZWyS3lLXi/RDdR/2AUgk8FUqXRgbEOMO3yOFG1FLe G1JigixI0ySO5+F68jjqfMVTP5/bSEYgsbL/Xkb8dCh10fsv4AlOlXTbGD9cz9A1 1ysvS9PVhO9yVo4zCznHQ1bSyaw53YeA4cOHHU2oy/RrNO4LjA== -----END CERTIFICATE-----Generated at Tue May 12 22:03:02 2026 by rpki-client