$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer File: 4C5D523097061FD420EF89872EF55D7D42F9D537.cer (raw, json) Hash identifier: 51mKXGYQAV0TpVHuIH0l14r11gIfhqV1YjeVsNcnH8M= Subject key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E5FB6E625524564FE795A4517D6DEFDF8DF2663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft caRepository: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:54:05 +0000 Certificate not after: Sat 01 May 2027 23:59:05 +0000 Subordinate resources: IP: 27.123.220.0/22 IP: 45.112.124.0/22 IP: 103.4.164.0/22 IP: 116.197.128.0/21 IP: 2403:fd80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5f:b6:e6:25:52:45:64:fe:79:5a:45:17:d6:de:fd:f8:df:26:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:54:05 2026 GMT Not After : May 1 23:59:05 2027 GMT Subject: CN=4C5D523097061FD420EF89872EF55D7D42F9D537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:81:3b:d1:a4:b9:82:75:97:e4:b6:ad:78:c6: 5a:68:b8:fe:c1:d3:03:fd:40:62:36:a6:8d:5a:5c: 73:20:80:2a:4d:4e:5f:db:98:80:f8:65:30:0b:04: ab:c4:d6:7a:89:ba:73:b0:2f:1a:66:34:74:42:e2: b3:8e:49:46:d0:cf:12:4c:68:72:c0:38:91:49:24: 97:44:ff:36:90:26:86:7b:4a:ea:19:66:bf:65:be: d0:90:14:1d:e8:22:64:bb:5c:8e:18:28:6c:9c:59: e3:69:62:fc:b2:4a:41:3e:28:e2:f5:f0:28:c1:b1: 79:0f:ce:d7:75:de:89:2c:58:fe:46:b7:02:ee:0b: f8:75:10:40:30:6e:16:a9:c9:b3:98:e1:45:62:16: c6:7b:28:2f:2b:fc:bf:ce:22:d9:f4:a3:e2:52:94: 98:e8:3f:9e:0f:1e:30:e1:25:8e:bb:ce:a5:6a:6d: f1:ce:63:5f:60:95:1c:00:56:a3:c2:c0:8e:d3:c1: c6:de:84:4f:0b:09:d3:b0:9c:7f:1a:b4:c1:f8:e4: 82:6a:00:84:82:21:80:80:4c:be:3a:74:7f:5e:75: 31:59:5a:6c:b2:38:3c:49:1c:41:ef:cb:63:d5:8c: 92:82:9e:79:6b:8f:fe:df:18:02:93:05:88:54:84: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.123.220.0/22 45.112.124.0/22 103.4.164.0/22 116.197.128.0/21 IPv6: 2403:fd80::/32 Signature Algorithm: sha256WithRSAEncryption 16:23:86:c9:fd:4d:98:ee:96:48:86:93:0f:99:31:3f:fd:6e: 24:e8:0d:7e:c0:c1:4c:45:0f:b4:2d:cf:12:d0:ca:58:58:a6: 91:c7:86:44:95:87:83:62:3a:23:31:38:17:f0:2d:bf:eb:a5: 55:67:90:f6:67:41:84:6f:76:8d:96:ca:a6:69:eb:09:e8:0e: 75:c9:31:db:3b:b9:05:01:30:ba:bc:e5:20:8e:22:1a:1f:a1: 26:c5:d3:cf:be:32:84:04:f2:1a:62:c8:01:91:b7:54:81:75: 30:d8:8b:30:ce:23:31:63:64:ed:ca:4e:77:c1:24:71:74:c0: be:d8:ac:0b:8b:ec:46:f4:64:99:b2:24:43:0a:5d:4f:92:f9: b3:bd:88:07:96:95:a7:1c:0d:f3:ad:ac:af:71:a0:c7:bd:18: f9:44:d7:33:93:d1:76:5b:24:30:df:02:49:83:cc:81:e4:98: 82:8e:f7:b2:fa:85:36:26:60:20:2d:49:df:ac:85:0d:8c:1e: 8b:9a:84:47:97:cd:95:3e:50:9c:9d:65:28:20:7d:c4:74:10: 45:34:b8:4f:d4:36:02:63:f8:b5:31:82:e3:4e:94:79:09:5e: df:e0:b3:7f:ae:cb:64:66:57:7b:d7:4c:cf:0d:f2:26:97:02: d4:8a:16:5b -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUXl+25iVSRWT+eVpFF9be/fjfJmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTQwNVoX DTI3MDUwMTIzNTkwNVowMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4 OTg3MkVGNTVEN0Q0MkY5RDUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyBO9GkuYJ1l+S2rXjGWmi4/sHTA/1AYjamjVpccyCAKk1OX9uYgPhlMAsE q8TWeom6c7AvGmY0dELis45JRtDPEkxocsA4kUkkl0T/NpAmhntK6hlmv2W+0JAU HegiZLtcjhgobJxZ42li/LJKQT4o4vXwKMGxeQ/O13XeiSxY/ka3Au4L+HUQQDBu FqnJs5jhRWIWxnsoLyv8v84i2fSj4lKUmOg/ng8eMOEljrvOpWpt8c5jX2CVHABW o8LAjtPBxt6ETwsJ07Ccfxq0wfjkgmoAhIIhgIBMvjp0f151MVlabLI4PEkcQe/L Y9WMkoKeeWuP/t8YApMFiFSEuYkCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFExdUjCXBh/UIO+Jhy71XX1C+dU3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE2YTgxMTgyLTdjZWItNDY1Yy1hNWI1LWExNGVjNzM5YmY5OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNmE4MTE4 Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC80QzVENTIzMDk3MDYxRkQ0 MjBFRjg5ODcyRUY1NUQ3RDQyRjlENTM3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQCG3vcAwQCLXB8AwQCZwSkAwQDdMWAMA0EAgACMAcDBQAkA/2AMA0GCSqGSIb3 DQEBCwUAA4IBAQAWI4bJ/U2Y7pZIhpMPmTE//W4k6A1+wMFMRQ+0Lc8S0MpYWKaR x4ZElYeDYjojMTgX8C2/66VVZ5D2Z0GEb3aNlsqmaesJ6A51yTHbO7kFATC6vOUg jiIaH6EmxdPPvjKEBPIaYsgBkbdUgXUw2IswziMxY2Ttyk53wSRxdMC+2KwLi+xG 9GSZsiRDCl1PkvmzvYgHlpWnHA3zrayvcaDHvRj5RNczk9F2WyQw3wJJg8yB5JiC jvey+oU2JmAgLUnfrIUNjB6LmoRHl82VPlCcnWUoIH3EdBBFNLhP1DYCY/i1MYLj TpR5CV7f4LN/rstkZld710zPDfImlwLUihZb -----END CERTIFICATE-----Generated at Tue May 12 22:03:34 2026 by rpki-client