$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer (raw, json) Hash identifier: BTzMUNUXZKKhblS5YBFYAKgEMNAkpNPETu8NKDpy6xA= Subject key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 104EEC874A4883AFB9C6D3A84D08D129BF1CE2A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:01:53 +0000 Certificate not after: Sun 02 May 2027 00:06:53 +0000 Subordinate resources: IP: 2001:df4:58c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4e:ec:87:4a:48:83:af:b9:c6:d3:a8:4d:08:d1:29:bf:1c:e2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:01:53 2026 GMT Not After : May 2 00:06:53 2027 GMT Subject: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:14:94:67:0f:c2:a4:68:f4:05:de:26:9d: 75:41:2c:ad:46:31:b6:6a:e0:9a:48:1f:5b:b1:9f: 2a:e0:4c:f0:59:ac:ea:02:b2:17:07:69:c6:83:70: 35:5b:8b:06:09:cf:fb:cd:40:d8:2b:85:2f:64:14: 59:fc:c1:d8:66:18:e6:09:90:a5:d8:5e:2a:bd:f8: ec:52:44:d9:6d:9f:f2:44:92:5a:ed:ae:87:69:a0: 86:59:66:75:ff:f9:ae:28:0a:1e:ac:be:c8:46:ad: da:47:bc:fa:fc:02:81:23:57:f7:28:c9:5d:39:a8: 07:27:23:ee:9b:89:cd:83:21:64:1f:39:d1:f9:60: ca:e6:0c:52:e5:c3:fb:09:6b:bc:51:9f:dc:f1:4e: 64:8f:10:af:19:08:04:70:33:5c:f9:bc:b2:99:06: ac:c2:6c:90:33:28:0b:a3:12:b2:52:e5:d1:8f:53: e3:57:a3:80:76:48:49:00:4b:94:9f:95:1f:78:c5: ab:06:ac:ef:07:54:8a:25:97:b9:4c:05:95:55:7d: 7c:8c:b1:6d:d2:84:35:1b:d1:e3:17:80:92:1f:35: 88:b0:6e:d8:f1:88:1b:9a:ac:3b:95:b1:04:18:a0: 3e:41:08:70:3d:bc:8e:d5:87:14:0e:b7:8e:7f:f4: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:58c0::/48 Signature Algorithm: sha256WithRSAEncryption 96:a8:1b:5e:c1:f1:48:0b:23:af:41:79:4c:90:33:07:eb:44: 9d:ae:6d:f2:56:ec:b8:a5:7f:4d:92:b6:1e:4c:38:52:c9:cf: ea:c5:08:3d:dc:d3:bb:53:78:30:2c:ea:83:e2:18:a8:8d:33: f6:cd:8e:e7:54:13:89:a1:fb:18:80:b9:29:4e:fb:73:42:2b: bb:b5:dc:6a:a9:65:56:30:b7:19:b5:d2:52:c6:76:d3:d6:91: 1b:79:06:34:0b:3c:00:cc:65:a7:cc:33:dd:cf:9b:90:99:9f: ae:70:1b:f4:65:76:79:32:58:53:91:1f:62:c6:2e:b2:23:df: c2:35:0e:61:68:c5:77:39:8a:49:d1:af:df:0d:1a:fb:ab:3b: 01:64:b2:af:21:8c:71:f5:ee:e8:ab:4f:37:84:99:36:8b:55: c6:70:82:22:5a:3e:b9:e0:f8:39:fa:23:5b:23:ca:51:c0:f1: 12:0c:ea:10:70:2f:8f:1a:e7:b1:79:6a:48:05:e3:9d:8e:46: cb:63:69:c2:73:c1:1d:01:16:a4:61:3f:97:f3:6e:09:4e:53: 39:24:31:50:5e:f7:a5:31:0a:6f:81:2f:ab:8a:a3:e4:ec:04: 56:c3:26:a7:41:98:dd:5e:46:98:b5:01:22:98:24:e8:41:2b: 15:fc:97:48 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEE7sh0pIg6+5xtOoTQjRKb8c4qQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDE1M1oX DTI3MDUwMjAwMDY1M1owMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0 MThEQjJGNDFDMzgxN0Y3REIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGZFJRnD8KkaPQF3iaddUEsrUYxtmrgmkgfW7GfKuBM8Fms6gKyFwdpxoNw NVuLBgnP+81A2CuFL2QUWfzB2GYY5gmQpdheKr347FJE2W2f8kSSWu2uh2mghllm df/5rigKHqy+yEat2ke8+vwCgSNX9yjJXTmoBycj7puJzYMhZB850flgyuYMUuXD +wlrvFGf3PFOZI8QrxkIBHAzXPm8spkGrMJskDMoC6MSslLl0Y9T41ejgHZISQBL lJ+VH3jFqwas7wdUiiWXuUwFlVV9fIyxbdKENRvR4xeAkh81iLBu2PGIG5qsO5Wx BBigPkEIcD28jtWHFA63jn/0cQ8CAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDtobLx5Q8sO6XFBjbL0HDgX99sLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIxZDk3YjQwLWMwMzEtNGU1Yi05YjQyLWQyYWUxYzljZjk4Ny8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMWQ5N2I0 MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8zQjY4NkNCQzc5NDNDQjBF RTk3MTQxOERCMkY0MUMzODE3RjdEQjBCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9FjAMA0GCSqGSIb3DQEBCwUAA4IBAQCWqBtewfFICyOvQXlMkDMH60Sd rm3yVuy4pX9NkrYeTDhSyc/qxQg93NO7U3gwLOqD4hiojTP2zY7nVBOJofsYgLkp TvtzQiu7tdxqqWVWMLcZtdJSxnbT1pEbeQY0CzwAzGWnzDPdz5uQmZ+ucBv0ZXZ5 MlhTkR9ixi6yI9/CNQ5haMV3OYpJ0a/fDRr7qzsBZLKvIYxx9e7oq083hJk2i1XG cIIiWj654Pg5+iNbI8pRwPESDOoQcC+PGuexeWpIBeOdjkbLY2nCc8EdARakYT+X 824JTlM5JDFQXvelMQpvgS+riqPk7ARWwyanQZjdXkaYtQEimCToQSsV/JdI -----END CERTIFICATE-----Generated at Tue May 12 22:10:44 2026 by rpki-client