$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer File: 405E6B7463BC0531CCD985CD4D468E60B5078B16.cer (raw, json) Hash identifier: EJYioB+trhz6V5XltnWgWy/a6D2yOeBVz/4gf1JLOnI= Subject key identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 772FA3FE0D7AECD873ACC9B71B18E9DFF107CE1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:39 +0000 Certificate not after: Sun 02 May 2027 01:32:39 +0000 Subordinate resources: IP: 61.247.0.0/18 IP: 103.21.212.0/22 IP: 111.94.0.0/15 IP: 118.136.0.0/15 IP: 202.73.96.0/19 IP: 2404:5600::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2f:a3:fe:0d:7a:ec:d8:73:ac:c9:b7:1b:18:e9:df:f1:07:ce:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:27:39 2026 GMT Not After : May 2 01:32:39 2027 GMT Subject: CN=405E6B7463BC0531CCD985CD4D468E60B5078B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:64:a8:dc:c2:89:f2:41:1d:c4:0f:02:ca:80: 3d:98:5c:35:6a:07:37:22:ec:fb:53:2a:81:ab:86: 75:76:1d:f1:88:59:85:55:86:61:ee:ef:e5:79:0c: 5f:e6:da:a0:4d:b0:2f:24:8c:c7:1f:bc:1e:06:09: bf:b0:95:10:37:e8:51:b6:c3:1f:2a:81:e0:b7:e3: fe:b4:fd:43:de:9e:9c:9b:a8:1f:8a:9f:53:59:6c: ee:1b:ac:53:5d:bf:6a:a8:59:9d:58:e5:00:bd:32: 2b:5b:1f:c4:20:9a:ae:e8:4a:5e:dd:93:0c:77:d7: 8c:c2:bf:ef:f0:a4:aa:1b:11:d1:fb:f9:37:37:f8: 96:e2:cc:52:73:f1:ee:93:6e:df:58:87:d1:01:84: 97:95:92:01:8f:7a:8d:a2:9a:30:59:a4:c7:e0:fa: a6:93:bf:35:98:ea:b9:5d:19:69:d4:be:33:48:fd: 67:65:8f:81:b9:c2:01:e4:5b:6f:07:0d:25:6d:91: 8c:d6:a5:f5:ee:fb:9a:dc:5b:89:64:63:28:db:84: c7:25:51:80:c4:ba:f7:b7:4e:6c:31:ec:07:0b:d4: a1:42:8f:1c:c7:2d:a1:da:41:54:46:02:73:30:07: 5e:14:2a:19:f6:83:ba:00:4b:ca:e8:ad:8c:d2:c8: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.247.0.0/18 103.21.212.0/22 111.94.0.0/15 118.136.0.0/15 202.73.96.0/19 IPv6: 2404:5600::/32 Signature Algorithm: sha256WithRSAEncryption 71:6c:26:e3:36:34:81:3f:96:b7:b8:c3:8c:b8:a6:0a:78:6d: 0f:a5:26:bc:e3:22:5c:6d:78:57:7b:53:5f:21:20:69:68:09: 45:ae:d3:1b:07:c6:14:db:f8:64:1b:53:37:69:67:c8:77:18: 68:a9:eb:0b:18:ac:38:be:91:89:da:86:ec:59:82:8f:7c:5c: c9:75:e7:d4:a2:9f:dc:99:1c:09:04:cb:a4:de:ac:a9:c0:84: 66:92:97:fd:a8:c6:64:0a:e2:9b:83:63:5e:05:8b:70:da:b6: 92:4e:b6:fd:09:96:fd:52:e7:94:5a:78:0d:b2:db:8c:10:fe: 66:4a:ec:83:2f:42:19:98:58:91:9e:5a:92:72:d0:19:8b:97: b1:62:ad:02:69:68:e7:5d:3d:1d:bc:8d:c7:96:9e:b0:71:9b: 6b:04:6d:16:ee:c8:e9:e3:54:28:56:2a:cc:08:26:1a:b3:ca: e1:43:47:cb:9a:2f:0e:3a:7b:06:23:99:2e:dc:81:30:86:79: 29:8f:0e:c8:71:8f:eb:08:f3:52:5e:e6:23:43:3b:82:1f:7d: e6:08:d3:62:97:d2:79:5e:9c:53:43:f7:ac:9f:eb:0c:b2:e5: ad:37:59:83:ba:37:f2:71:39:6b:83:f7:92:8e:b5:c0:d0:25: 3b:0e:aa:76 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIUdy+j/g167NhzrMm3Gxjp3/EHzhswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjczOVoX DTI3MDUwMjAxMzIzOVowMzExMC8GA1UEAxMoNDA1RTZCNzQ2M0JDMDUzMUNDRDk4 NUNENEQ0NjhFNjBCNTA3OEIxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVkqNzCifJBHcQPAsqAPZhcNWoHNyLs+1MqgauGdXYd8YhZhVWGYe7v5XkM X+baoE2wLySMxx+8HgYJv7CVEDfoUbbDHyqB4Lfj/rT9Q96enJuoH4qfU1ls7hus U12/aqhZnVjlAL0yK1sfxCCaruhKXt2TDHfXjMK/7/CkqhsR0fv5Nzf4luLMUnPx 7pNu31iH0QGEl5WSAY96jaKaMFmkx+D6ppO/NZjquV0ZadS+M0j9Z2WPgbnCAeRb bwcNJW2RjNal9e77mtxbiWRjKNuExyVRgMS697dObDHsBwvUoUKPHMctodpBVEYC czAHXhQqGfaDugBLyuitjNLIrAkCAwEAAaOCAt4wggLaMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEBea3RjvAUxzNmFzU1GjmC1B4sWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ExM2RlM2VjLTRkM2MtNDQwMi1hN2I4LThhMWI5NjIyNmU3NS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMTNkZTNl Yy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS80MDVFNkI3NDYzQkMwNTMx Q0NEOTg1Q0Q0RDQ2OEU2MEI1MDc4QjE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAiBAIAATAc AwQGPfcAAwQCZxXUAwMBb14DAwF2iAMEBcpJYDANBAIAAjAHAwUAJARWADANBgkq hkiG9w0BAQsFAAOCAQEAcWwm4zY0gT+Wt7jDjLimCnhtD6UmvOMiXG14V3tTXyEg aWgJRa7TGwfGFNv4ZBtTN2lnyHcYaKnrCxisOL6RidqG7FmCj3xcyXXn1KKf3Jkc CQTLpN6sqcCEZpKX/ajGZArim4NjXgWLcNq2kk62/QmW/VLnlFp4DbLbjBD+Zkrs gy9CGZhYkZ5aknLQGYuXsWKtAmlo5109HbyNx5aesHGbawRtFu7I6eNUKFYqzAgm GrPK4UNHy5ovDjp7BiOZLtyBMIZ5KY8OyHGP6wjzUl7mI0M7gh995gjTYpfSeV6c U0P3rJ/rDLLlrTdZg7o38nE5a4P3ko61wNAlOw6qdg== -----END CERTIFICATE-----Generated at Tue May 12 22:03:09 2026 by rpki-client