$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer File: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer (raw, json) Hash identifier: pPk6btP91E1vN/FcuZ9oW3cxkOXuNmzF1o1VElxmmSo= Subject key identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03C315D265B34E0F9CA708571238152AB257C9CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:10:42 +0000 Certificate not after: Sun 02 May 2027 00:15:42 +0000 Subordinate resources: IP: 2001:df6:9f40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c3:15:d2:65:b3:4e:0f:9c:a7:08:57:12:38:15:2a:b2:57:c9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:10:42 2026 GMT Not After : May 2 00:15:42 2027 GMT Subject: CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:1b:4a:83:98:c2:fa:a7:44:10:4d:32:97: ea:c8:e0:ce:94:26:9e:c8:49:e8:4e:5a:67:41:a8: bf:98:a1:7b:8c:62:13:d0:48:53:98:17:de:f5:ea: 61:4a:22:47:3b:ae:aa:66:be:a4:04:f4:ae:f1:a4: 02:13:22:cc:29:c3:45:14:fb:1b:e8:cf:ae:ce:01: 95:11:51:4d:2e:56:0d:d1:b9:7a:5e:19:fd:60:ac: 5b:b5:ab:c0:a1:24:fd:ac:ef:ac:21:67:1c:7d:f8: db:58:b5:9c:c5:33:c0:2e:ac:1c:f5:0a:af:0e:d0: 7b:a8:1b:3e:c0:c1:0d:2a:53:ee:f8:72:09:55:24: 36:50:19:a5:39:92:68:a7:b8:1f:aa:b9:f5:00:91: 4d:03:cc:95:6a:14:0d:44:ac:08:e8:78:25:86:2b: 67:e9:1f:e5:d1:0b:18:f3:68:ad:57:73:5c:44:86: 73:30:2c:a3:ec:48:f6:83:37:ea:d1:4f:69:dd:ab: 04:5d:eb:c8:31:c2:ac:a4:24:0d:80:12:52:06:6c: ec:a1:a4:af:ea:bc:bc:cd:3f:c8:8a:49:3f:cc:ad: 06:e2:06:84:85:8c:ce:55:15:2a:7a:4e:dc:35:c1: 97:23:7d:d4:aa:92:4d:58:ee:5e:54:2c:6a:8d:72: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9f40::/48 Signature Algorithm: sha256WithRSAEncryption 17:7e:bb:44:67:9a:ad:c5:ea:d4:02:7b:31:22:e0:9f:31:81: 19:ca:ab:cc:ba:e2:65:64:41:25:30:d9:6a:17:a6:d4:0e:cd: 67:c1:bb:92:0d:78:0b:de:a5:21:63:29:ed:32:86:9e:26:94: f9:41:bb:9a:87:24:83:39:6a:0e:a9:b1:37:e3:31:37:5a:00: a6:48:f9:e6:5c:06:ba:1e:a7:1a:fa:a1:62:1c:05:f2:d0:84: 89:11:52:43:46:7b:66:cc:61:89:80:cc:77:cb:dc:92:04:a6: 21:15:f1:80:91:c5:f0:21:35:5c:d9:d4:d7:f0:91:f8:5d:5b: d0:9d:0d:7b:43:34:ea:2a:b6:b3:b7:6a:f2:2d:81:23:49:fc: df:ca:16:90:08:47:2b:ef:6d:62:61:36:ce:de:37:d1:ab:fd: 15:9f:fd:fc:9e:1a:8f:8d:97:20:d0:c0:15:ed:be:53:56:bf: 30:25:ab:8d:1b:66:3f:6a:ec:6c:a1:a1:ec:a7:ce:ec:96:22: f6:02:08:02:e6:3f:1d:48:98:fb:cb:02:9b:4e:93:06:ac:43: 76:f7:0c:2c:12:42:09:ec:11:60:2f:2d:53:f4:56:93:cf:ee: 0d:f4:30:bb:cb:f8:2a:d4:03:81:3b:5f:15:80:69:6a:9c:a0: 73:03:ee:9d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUA8MV0mWzTg+cpwhXEjgVKrJXycwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTA0MloX DTI3MDUwMjAwMTU0MlowMzExMC8GA1UEAxMoNTNBN0MxRUZENzMzQUM1RjVCRkY5 MEQzRkQ2QUMwOENBMzBGN0I2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKp3G0qDmML6p0QQTTKX6sjgzpQmnshJ6E5aZ0Gov5ihe4xiE9BIU5gX3vXq YUoiRzuuqma+pAT0rvGkAhMizCnDRRT7G+jPrs4BlRFRTS5WDdG5el4Z/WCsW7Wr wKEk/azvrCFnHH3421i1nMUzwC6sHPUKrw7Qe6gbPsDBDSpT7vhyCVUkNlAZpTmS aKe4H6q59QCRTQPMlWoUDUSsCOh4JYYrZ+kf5dELGPNorVdzXESGczAso+xI9oM3 6tFPad2rBF3ryDHCrKQkDYASUgZs7KGkr+q8vM0/yIpJP8ytBuIGhIWMzlUVKnpO 3DXBlyN91KqSTVjuXlQsao1y9KkCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFOnwe/XM6xfW/+Q0/1qwIyjD3tmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJlZjE2ZjMxLTYwY2UtNDdhNy1hZThkLTVhMjhjNTExYzk0Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZWYxNmYz MS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMC81M0E3QzFFRkQ3MzNBQzVG NUJGRjkwRDNGRDZBQzA4Q0EzMEY3QjY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9p9AMA0GCSqGSIb3DQEBCwUAA4IBAQAXfrtEZ5qtxerUAnsxIuCfMYEZ yqvMuuJlZEElMNlqF6bUDs1nwbuSDXgL3qUhYyntMoaeJpT5QbuahySDOWoOqbE3 4zE3WgCmSPnmXAa6Hqca+qFiHAXy0ISJEVJDRntmzGGJgMx3y9ySBKYhFfGAkcXw ITVc2dTX8JH4XVvQnQ17QzTqKrazt2ryLYEjSfzfyhaQCEcr721iYTbO3jfRq/0V n/38nhqPjZcg0MAV7b5TVr8wJauNG2Y/auxsoaHsp87sliL2AggC5j8dSJj7ywKb TpMGrEN29wwsEkIJ7BFgLy1T9FaTz+4N9DC7y/gq1AOBO18VgGlqnKBzA+6d -----END CERTIFICATE-----Generated at Tue May 12 22:32:13 2026 by rpki-client