$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer File: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer (raw, json) Hash identifier: ckRH/g81NHrTjaT8QAf4f1jqxAL7Rh0iRC8IpOIkmVI= Subject key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E5D66D76626CDB53AAC868824DE22D6A4C330B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:37:43 +0000 Certificate not after: Sun 02 May 2027 01:42:43 +0000 Subordinate resources: IP: 27.121.80.0/21 IP: 2404:5a00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5d:66:d7:66:26:cd:b5:3a:ac:86:88:24:de:22:d6:a4:c3:30:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:37:43 2026 GMT Not After : May 2 01:42:43 2027 GMT Subject: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f6:d7:fc:11:a2:9e:27:19:26:47:4c:85:ad: 08:87:7e:ee:04:70:bd:32:2b:af:45:58:ab:7e:58: 87:c4:62:63:34:e7:5d:ac:5e:53:48:d8:30:43:37: d4:20:42:31:83:17:a4:0f:54:80:e1:5b:b4:26:1b: a1:c9:fb:79:1e:ff:90:4a:3d:bc:bf:b5:42:16:18: e2:7f:62:29:ee:1a:41:0b:b8:ed:a5:30:95:e6:31: b6:80:73:df:00:4f:2b:0b:dd:66:d6:d5:0f:24:49: 5b:67:2f:8b:3c:7b:df:73:49:19:f0:84:0c:a8:ca: cd:c9:56:2c:cc:85:d1:0d:be:ec:3c:4b:24:74:08: ea:a7:68:91:a3:6d:65:a9:cc:94:33:71:9e:8d:be: 11:fa:54:64:8c:b6:63:2e:f7:1d:5f:02:47:b0:9e: cf:c1:19:3e:f9:b2:29:29:e9:92:9e:89:52:ec:cf: bc:b3:f7:17:25:dd:61:58:f2:4f:8d:d8:7c:3c:44: 8c:13:ee:4a:94:5c:eb:5e:52:c6:35:eb:58:b0:9b: 6f:63:86:1d:0e:bb:cc:3b:d6:50:77:a1:86:02:db: c6:77:2d:1d:d6:be:99:e1:e4:26:cc:62:7e:1d:ed: 81:e7:2d:85:fd:85:1c:f6:76:cc:6c:e6:a9:37:dc: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.80.0/21 IPv6: 2404:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 32:01:76:dc:93:85:0a:ef:f3:a8:1b:4f:d2:98:43:36:a8:51: 0d:84:c1:3b:49:b9:e8:2d:64:ef:e8:ee:52:83:09:1b:31:36: c4:34:22:e1:59:b3:69:98:c3:ed:4e:d1:ed:f4:12:9b:30:2b: 35:e2:28:0d:0e:87:12:57:a1:42:10:7f:5d:c8:97:e1:53:14: fe:d6:cf:4d:1f:96:41:3b:94:31:cd:ed:97:cb:b0:f1:27:9d: b8:95:d4:de:80:37:6a:df:8f:47:a1:49:5b:50:5d:0c:85:de: 78:4d:71:48:ae:d3:bb:7e:e4:a7:e8:58:9d:e9:02:bf:f6:f4: 2b:6a:16:d0:e9:ea:dd:0d:6e:ad:7c:ac:b9:6b:18:80:84:99: ad:b3:ab:4e:9a:56:41:95:51:f0:b7:27:3b:3e:f0:c0:b5:8b: c8:f7:94:09:4d:b3:ed:d8:a3:f1:37:6e:7c:19:9c:2e:a2:ee: f8:4e:27:79:2d:cb:62:55:72:e2:e8:97:b3:be:b0:b8:57:dc: 86:0d:8a:e3:88:05:6b:a5:82:ad:7d:a1:3c:b7:a7:13:e7:e9: 6b:b3:50:f8:86:ac:84:30:88:46:06:2a:02:4e:77:32:31:58: d1:60:93:e6:88:0a:ed:b1:6d:90:ca:df:e2:f5:bb:8a:03:45: b6:da:9f:92 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUTl1m12YmzbU6rIaIJN4i1qTDMLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzc0M1oX DTI3MDUwMjAxNDI0M1owMzExMC8GA1UEAxMoNTFGNTExRTQ1NkI0Q0E5OUNBN0JE MUM5MUI2NTFGRERDNUMwMjY4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIr21/wRop4nGSZHTIWtCId+7gRwvTIrr0VYq35Yh8RiYzTnXaxeU0jYMEM3 1CBCMYMXpA9UgOFbtCYbocn7eR7/kEo9vL+1QhYY4n9iKe4aQQu47aUwleYxtoBz 3wBPKwvdZtbVDyRJW2cvizx733NJGfCEDKjKzclWLMyF0Q2+7DxLJHQI6qdokaNt ZanMlDNxno2+EfpUZIy2Yy73HV8CR7Cez8EZPvmyKSnpkp6JUuzPvLP3FyXdYVjy T43YfDxEjBPuSpRc615SxjXrWLCbb2OGHQ67zDvWUHehhgLbxnctHda+meHkJsxi fh3tgecthf2FHPZ2zGzmqTfcb1cCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFH1EeRWtMqZynvRyRtlH93FwCaPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FmNjI4MDljLWJmYjYtNGZlNy04ZGQ2LWNhNjAyMmNkZDU0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZjYyODA5 Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC81MUY1MTFFNDU2QjRDQTk5 Q0E3QkQxQzkxQjY1MUZEREM1QzAyNjhGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDG3lQMA0EAgACMAcDBQAkBFoAMA0GCSqGSIb3DQEBCwUAA4IBAQAyAXbck4UK 7/OoG0/SmEM2qFENhME7SbnoLWTv6O5SgwkbMTbENCLhWbNpmMPtTtHt9BKbMCs1 4igNDocSV6FCEH9dyJfhUxT+1s9NH5ZBO5Qxze2Xy7DxJ524ldTegDdq349HoUlb UF0Mhd54TXFIrtO7fuSn6Fid6QK/9vQrahbQ6erdDW6tfKy5axiAhJmts6tOmlZB lVHwtyc7PvDAtYvI95QJTbPt2KPxN258GZwuou74Tid5LctiVXLi6JezvrC4V9yG DYrjiAVrpYKtfaE8t6cT5+lrs1D4hqyEMIhGBioCTncyMVjRYJPmiArtsW2Qyt/i 9buKA0W22p+S -----END CERTIFICATE-----Generated at Tue May 12 22:47:29 2026 by rpki-client