$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/50F39EE0481167BB02849ECE0B582720A2A20AB1.cer File: 50F39EE0481167BB02849ECE0B582720A2A20AB1.cer (raw, json) Hash identifier: iKK6IkdbPeWvzp8X2242ewIE1PppHKXWn6FW9lO57Ts= Subject key identifier: 50:F3:9E:E0:48:11:67:BB:02:84:9E:CE:0B:58:27:20:A2:A2:0A:B1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3E645C3ECF31434688A494A459D681781D9C8251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/50F39EE0481167BB02849ECE0B582720A2A20AB1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:09 +0000 Certificate not after: Sun 02 May 2027 01:44:09 +0000 Subordinate resources: IP: 2001:df5:eac0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:64:5c:3e:cf:31:43:46:88:a4:94:a4:59:d6:81:78:1d:9c:82:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:39:09 2026 GMT Not After : May 2 01:44:09 2027 GMT Subject: CN=50F39EE0481167BB02849ECE0B582720A2A20AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:96:a8:f5:20:b0:8d:a6:b2:68:ec:57:fb: 95:47:36:12:e0:32:4b:a1:de:4d:f8:80:06:3c:27: 3f:bd:39:c7:9c:e0:1c:37:ac:39:99:b3:38:5a:f7: cc:b5:7b:2e:50:ea:d7:43:2c:4c:ca:66:95:94:d4: 1b:44:d1:b6:c3:2e:6c:97:f8:7e:b6:aa:f6:65:ee: 63:87:68:16:2d:e0:f8:b7:fb:7f:28:c4:33:1b:1b: 8a:f3:f4:6f:a8:3f:35:12:46:17:6e:f2:36:46:d9: 43:e3:be:f4:e0:cb:cd:ea:06:6f:44:ab:5b:63:2e: 20:11:d6:ec:2d:5c:db:2e:16:b6:27:60:fa:6a:cb: b1:38:33:85:f3:c7:d6:08:6b:6a:97:8f:dc:5c:17: 8b:1d:1a:3e:0a:b5:25:04:91:b8:29:4e:a0:51:40: dd:27:d3:8c:b4:88:9e:c6:c1:23:a7:68:43:c2:32: 9f:05:3e:62:78:99:90:d1:eb:f6:07:56:9c:6a:5d: ec:cb:d7:f8:1e:20:fc:bd:1d:e7:6d:19:f4:64:72: 8b:ba:ed:b4:f0:85:8a:61:b0:f5:53:a1:8d:6d:b6: e7:45:cc:21:aa:70:05:a4:87:94:34:f3:0e:a3:32: 11:77:2f:17:75:6c:e3:af:73:82:df:e6:e0:0c:d2: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:F3:9E:E0:48:11:67:BB:02:84:9E:CE:0B:58:27:20:A2:A2:0A:B1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/50F39EE0481167BB02849ECE0B582720A2A20AB1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:eac0::/48 Signature Algorithm: sha256WithRSAEncryption 83:aa:1b:0b:12:97:25:3b:b5:cb:ff:8b:e6:31:43:39:bc:e8: 01:23:8f:a9:30:02:12:1d:24:fb:50:69:46:a8:53:d5:8d:30: 95:38:73:e7:4a:53:f4:65:8c:85:99:15:75:7b:9d:34:bb:64: af:10:fd:72:a1:af:fd:fe:83:c6:38:1a:f0:1e:c0:6c:8f:dd: be:6f:be:68:e4:7d:6d:eb:21:e7:e8:6f:be:62:78:31:f2:0b: b4:73:ef:8e:a2:71:07:5b:67:19:3c:67:d7:10:68:33:06:89: 81:2d:88:d3:c0:03:48:1a:c2:e3:72:c4:8f:b2:dc:0c:bb:37: a1:4e:ad:52:1c:f1:09:73:0a:52:28:c4:71:67:fd:88:5c:2d: 88:e1:84:58:90:6a:90:56:45:9d:19:9f:74:83:bf:05:d0:23: 3e:d9:cf:af:e8:73:19:78:33:97:6b:e9:20:88:02:54:59:87: 6c:82:8f:8e:d3:41:51:3f:5e:04:00:a8:af:5d:40:ca:0f:c3: 97:d8:6a:02:f3:95:4a:e0:be:44:65:0d:b6:45:e3:3b:bc:d1: 9c:5b:1e:d8:96:ef:b6:e3:f6:99:86:75:5d:63:da:ad:bb:c4: 61:10:39:cd:4a:79:4d:35:9c:36:3f:7d:c4:70:89:f5:83:e8: 04:35:b9:73 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPmRcPs8xQ0aIpJSkWdaBeB2cglEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzkwOVoX DTI3MDUwMjAxNDQwOVowMzExMC8GA1UEAxMoNTBGMzlFRTA0ODExNjdCQjAyODQ5 RUNFMEI1ODI3MjBBMkEyMEFCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR8lqj1ILCNprJo7Ff7lUc2EuAyS6HeTfiABjwnP705x5zgHDesOZmzOFr3 zLV7LlDq10MsTMpmlZTUG0TRtsMubJf4fraq9mXuY4doFi3g+Lf7fyjEMxsbivP0 b6g/NRJGF27yNkbZQ+O+9ODLzeoGb0SrW2MuIBHW7C1c2y4Wtidg+mrLsTgzhfPH 1ghrapeP3FwXix0aPgq1JQSRuClOoFFA3SfTjLSInsbBI6doQ8IynwU+YniZkNHr 9gdWnGpd7MvX+B4g/L0d520Z9GRyi7rttPCFimGw9VOhjW2250XMIapwBaSHlDTz DqMyEXcvF3Vs469zgt/m4AzSvekCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFDznuBIEWe7AoSezgtYJyCiogqxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyMzhlNTZlLWVkYTUtNDA1YS1hYmJmLTQyZmUyN2I1YmEwMC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjM4ZTU2 ZS1lZGE1LTQwNWEtYWJiZi00MmZlMjdiNWJhMDAvMS81MEYzOUVFMDQ4MTE2N0JC MDI4NDlFQ0UwQjU4MjcyMEEyQTIwQUIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9erAMA0GCSqGSIb3DQEBCwUAA4IBAQCDqhsLEpclO7XL/4vmMUM5vOgB I4+pMAISHST7UGlGqFPVjTCVOHPnSlP0ZYyFmRV1e500u2SvEP1yoa/9/oPGOBrw HsBsj92+b75o5H1t6yHn6G++Yngx8gu0c++OonEHW2cZPGfXEGgzBomBLYjTwANI GsLjcsSPstwMuzehTq1SHPEJcwpSKMRxZ/2IXC2I4YRYkGqQVkWdGZ90g78F0CM+ 2c+v6HMZeDOXa+kgiAJUWYdsgo+O00FRP14EAKivXUDKD8OX2GoC85VK4L5EZQ22 ReM7vNGcWx7Ylu+24/aZhnVdY9qtu8RhEDnNSnlNNZw2P33EcIn1g+gENblz -----END CERTIFICATE-----Generated at Wed May 13 00:44:49 2026 by rpki-client