$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer (raw, json) Hash identifier: rSQ1ArxTKQBtYcMvn9400wZg7NNBYOb0PtVKMjt4yUg= Subject key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1F9F4429D589A9D06B8E031D0F7F6AA8A60C975B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:03 +0000 Certificate not after: Sun 02 May 2027 01:45:03 +0000 Subordinate resources: IP: 202.58.160.0 -- 202.58.183.255 IP: 2402:da00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9f:44:29:d5:89:a9:d0:6b:8e:03:1d:0f:7f:6a:a8:a6:0c:97:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:03 2026 GMT Not After : May 2 01:45:03 2027 GMT Subject: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:22:5d:09:cd:09:3b:68:2c:d2:b7:9b:6c: 10:90:96:8d:b8:c3:68:2b:2d:52:d5:3c:15:bf:67: e0:38:04:d3:73:c5:d6:9d:13:71:72:fd:3e:17:ea: a6:4a:fb:1e:b2:05:a6:b7:92:db:c3:75:ca:f4:e9: b8:f0:2e:1f:80:ee:ff:ba:e6:f3:78:b4:51:d4:d8: 6a:7a:ec:f5:57:2f:22:3f:90:f4:b5:95:8a:89:0a: 63:18:be:96:65:6f:fa:9a:8b:b8:58:ef:e2:e4:e3: dc:c1:a4:45:6d:32:c8:c2:34:32:43:7d:78:04:38: ed:ae:4f:77:c4:e6:11:db:3b:3b:3b:a9:21:d9:80: 94:56:e2:06:16:78:84:68:ff:3f:b9:a9:11:00:84: 3b:a9:33:2b:64:ce:a6:b2:85:98:c6:a1:a4:96:75: b7:04:8d:a1:c5:37:07:c1:99:97:d5:a0:a4:a7:8d: b8:fd:5f:cb:5f:3c:1a:30:55:36:18:50:99:ed:d8: 6f:ba:b8:e3:11:1d:2a:0c:e9:bb:0d:b1:be:85:7d: 2c:05:6d:77:d2:3e:91:41:2f:4d:95:3e:72:c7:2d: 9b:a7:c3:84:2e:1e:ed:56:2c:5e:bd:c6:1f:68:0d: e6:f9:6e:a1:22:f3:41:3f:41:03:64:8c:20:78:c9: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.160.0-202.58.183.255 IPv6: 2402:da00::/32 Signature Algorithm: sha256WithRSAEncryption 4b:0b:7a:d4:29:c5:87:74:4a:b4:b8:b9:5d:e3:1d:7b:19:9e: 7f:b1:4a:99:0b:70:34:4d:45:f5:f3:34:4c:f0:17:1a:f9:f9: 21:7e:97:d8:25:86:af:95:23:ba:90:2f:3f:8e:66:1a:d9:74: 4a:e3:ac:a4:9f:e0:3e:8f:c3:8d:e5:3e:32:10:c7:9b:a8:c0: 5f:da:96:b9:2a:53:46:cd:c4:b4:d8:83:ae:7f:9d:aa:2a:a6: 06:60:9e:88:61:55:cb:ac:2b:51:ef:28:97:96:3f:e0:58:86: 22:48:4f:b6:68:91:52:16:c9:71:4d:91:e0:44:2c:c2:da:5f: b3:a4:c1:24:b1:38:86:94:36:e4:24:ff:e0:a6:01:f6:eb:71: 73:78:8a:02:99:14:f3:32:a0:fd:6a:49:b2:d3:70:9c:bb:de: 42:6d:f0:a9:94:d3:43:00:fd:9e:20:0e:9e:d2:df:d9:e3:d1: 0b:a4:dd:3c:e6:e6:b0:45:aa:57:19:03:c5:fa:e0:c7:c0:af: 5b:84:fb:f7:00:e5:b0:90:1a:26:b0:4c:1e:10:2f:f1:02:63: 71:a0:59:0a:03:c1:4f:f1:53:29:de:6f:66:ac:ac:a0:04:8c: b6:f7:50:02:c5:e3:06:d9:ee:0d:8b:9f:47:3e:df:dd:73:c0: 3c:b2:68:18 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUH59EKdWJqdBrjgMdD39qqKYMl1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDAwM1oX DTI3MDUwMjAxNDUwM1owMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3 NUQ1Mjk3MkI2OTYwNTU0MkVFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANG1Il0JzQk7aCzSt5tsEJCWjbjDaCstUtU8Fb9n4DgE03PF1p0TcXL9Phfq pkr7HrIFpreS28N1yvTpuPAuH4Du/7rm83i0UdTYanrs9VcvIj+Q9LWViokKYxi+ lmVv+pqLuFjv4uTj3MGkRW0yyMI0MkN9eAQ47a5Pd8TmEds7OzupIdmAlFbiBhZ4 hGj/P7mpEQCEO6kzK2TOprKFmMahpJZ1twSNocU3B8GZl9WgpKeNuP1fy188GjBV NhhQme3Yb7q44xEdKgzpuw2xvoV9LAVtd9I+kUEvTZU+csctm6fDhC4e7VYsXr3G H2gN5vluoSLzQT9BA2SMIHjJsaECAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFED65ajscS2ebbV11SlytpYFVC7sMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IzNTEyOWU0LTIzMjgtNDNkMi1hNDU4LTlkMzgyOTYxNDgxNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMzUxMjll NC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC80MEZBRTVBOEVDNzEyRDlF NkRCNTc1RDUyOTcyQjY5NjA1NTQyRUVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAO MAwDBAXKOqADBAPKOrAwDQQCAAIwBwMFACQC2gAwDQYJKoZIhvcNAQELBQADggEB AEsLetQpxYd0SrS4uV3jHXsZnn+xSpkLcDRNRfXzNEzwFxr5+SF+l9glhq+VI7qQ Lz+OZhrZdErjrKSf4D6Pw43lPjIQx5uowF/alrkqU0bNxLTYg65/naoqpgZgnohh VcusK1HvKJeWP+BYhiJIT7ZokVIWyXFNkeBELMLaX7OkwSSxOIaUNuQk/+CmAfbr cXN4igKZFPMyoP1qSbLTcJy73kJt8KmU00MA/Z4gDp7S39nj0Quk3Tzm5rBFqlcZ A8X64MfAr1uE+/cA5bCQGiawTB4QL/ECY3GgWQoDwU/xUyneb2asrKAEjLb3UALF 4wbZ7g2Ln0c+391zwDyyaBg= -----END CERTIFICATE-----Generated at Tue May 12 22:03:32 2026 by rpki-client