$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer File: 34617F5B566204A91A2C21380B5E25F66A437892.cer (raw, json) Hash identifier: Hgo7UnppknGS6xSoePCXnY7QeB9jclUVjcjpQVV4peA= Subject key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1407FA34E248DD5EF71C5264C36D68D19A7B414B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:57:46 +0000 Certificate not after: Sun 02 May 2027 00:02:46 +0000 Subordinate resources: IP: 27.124.66.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:07:fa:34:e2:48:dd:5e:f7:1c:52:64:c3:6d:68:d1:9a:7b:41:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:57:46 2026 GMT Not After : May 2 00:02:46 2027 GMT Subject: CN=34617F5B566204A91A2C21380B5E25F66A437892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:c3:9d:0c:c1:37:36:84:91:4e:4c:de:48: e3:c9:b1:66:e5:f1:3b:76:d3:40:be:94:4a:bd:2c: 86:c7:7c:dc:4c:58:41:02:66:46:af:94:17:24:8f: c7:5b:6a:10:c6:99:d4:8c:89:7a:91:5a:55:54:96: ad:14:cc:0b:3d:64:fc:c4:7b:a1:be:86:60:98:45: 9a:e4:9b:eb:af:8d:5e:86:52:17:e6:71:63:15:2f: 65:c8:ed:c6:17:ce:22:ea:8c:23:3f:51:7c:ef:55: 5b:65:04:e8:f9:d8:c2:ba:e7:06:b2:99:72:c5:86: 85:28:88:84:da:64:ed:fc:05:7e:eb:8b:b0:78:57: fc:6a:68:01:49:59:38:92:ae:39:e8:39:45:71:8e: 21:f0:17:74:fe:8e:20:3e:1a:15:67:f2:c3:5f:3d: d6:d1:ee:2f:10:43:5b:c8:61:94:f8:d2:ae:ae:a1: 07:3d:b0:db:41:83:46:84:61:c1:02:73:9b:24:c9: 9c:db:f2:4c:96:b7:79:55:1f:23:6f:e4:20:76:3e: 48:a6:7a:18:9d:74:ac:52:f4:40:4e:ac:37:be:cd: 6b:c5:16:d4:04:ab:02:91:39:19:7e:ce:0b:62:76: 2f:0a:81:63:d5:42:25:f6:e3:61:58:28:cf:4c:be: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.66.0/23 Signature Algorithm: sha256WithRSAEncryption 16:7c:aa:9c:1b:a0:c4:53:cc:4b:7e:a5:5d:a9:8b:e0:35:95: 86:c5:bb:7c:1e:0f:b8:7d:11:20:4b:bc:4b:d3:07:05:4e:bc: ba:e8:42:dd:ee:bb:04:8f:f8:50:c3:7a:b5:c9:ce:c4:16:b6: db:56:c4:09:12:0c:8a:5c:b2:f0:61:16:2f:9c:05:b0:ef:cc: 03:b1:95:85:4b:1e:94:69:0e:0f:b8:08:d5:bc:54:64:d4:28: 48:ef:b1:64:2c:70:80:64:6b:a3:5c:ae:3a:48:e1:ec:11:c4: 9d:27:c8:ed:11:a2:bf:06:8c:d5:25:ac:8c:05:c5:5a:c2:36: 08:d2:2d:a5:fa:f9:f7:c5:9b:c8:91:2c:f0:05:43:1d:7f:46: 3c:bc:0b:36:0f:d3:37:0d:58:0b:b6:f4:c0:a4:2c:41:e6:48: 80:a9:cd:f9:98:6d:f0:50:0b:d9:cb:18:a4:f5:91:f6:2f:d4: 32:cf:7a:ee:30:39:75:94:38:09:a9:6f:fd:25:b5:0c:48:5b: 23:29:b4:f9:fa:58:80:d6:31:24:db:83:65:fe:c3:c1:d2:f7: 8f:7c:5e:ba:26:4e:fd:00:61:e5:67:79:a7:3d:9e:6b:24:1f: 3c:95:1c:be:b7:c6:5f:7c:e9:66:1f:3f:e1:90:4e:d9:5f:f0: 22:fd:df:16 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFAf6NOJI3V73HFJkw21o0Zp7QUswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTc0NloX DTI3MDUwMjAwMDI0NlowMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMy MTM4MEI1RTI1RjY2QTQzNzg5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFIw50MwTc2hJFOTN5I48mxZuXxO3bTQL6USr0shsd83ExYQQJmRq+UFySP x1tqEMaZ1IyJepFaVVSWrRTMCz1k/MR7ob6GYJhFmuSb66+NXoZSF+ZxYxUvZcjt xhfOIuqMIz9RfO9VW2UE6PnYwrrnBrKZcsWGhSiIhNpk7fwFfuuLsHhX/GpoAUlZ OJKuOeg5RXGOIfAXdP6OID4aFWfyw1891tHuLxBDW8hhlPjSrq6hBz2w20GDRoRh wQJzmyTJnNvyTJa3eVUfI2/kIHY+SKZ6GJ10rFL0QE6sN77Na8UW1ASrApE5GX7O C2J2LwqBY9VCJfbjYVgoz0y+lRECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDRhf1tWYgSpGiwhOAteJfZqQ3iSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiN2UwYmMwLTc2MWItNGVjMy04ZjQyLTgyOTgxYjkxYTk3YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYjdlMGJj MC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8zNDYxN0Y1QjU2NjIwNEE5 MUEyQzIxMzgwQjVFMjVGNjZBNDM3ODkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBG3xCMA0GCSqGSIb3DQEBCwUAA4IBAQAWfKqcG6DEU8xLfqVdqYvgNZWGxbt8 Hg+4fREgS7xL0wcFTry66ELd7rsEj/hQw3q1yc7EFrbbVsQJEgyKXLLwYRYvnAWw 78wDsZWFSx6UaQ4PuAjVvFRk1ChI77FkLHCAZGujXK46SOHsEcSdJ8jtEaK/BozV JayMBcVawjYI0i2l+vn3xZvIkSzwBUMdf0Y8vAs2D9M3DVgLtvTApCxB5kiAqc35 mG3wUAvZyxik9ZH2L9Qyz3ruMDl1lDgJqW/9JbUMSFsjKbT5+liA1jEk24Nl/sPB 0vePfF66Jk79AGHlZ3mnPZ5rJB88lRy+t8ZffOlmHz/hkE7ZX/Ai/d8W -----END CERTIFICATE-----Generated at Tue May 12 22:33:21 2026 by rpki-client