$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer File: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer (raw, json) Hash identifier: hiUNIUiCaiqG6UTMHRiI83elRTbm0UbU47L7gIxwqHQ= Subject key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6DE209841E661652F17EA30C3790BECB78858137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:49:21 +0000 Certificate not after: Sun 02 May 2027 02:54:21 +0000 Subordinate resources: IP: 45.123.140.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e2:09:84:1e:66:16:52:f1:7e:a3:0c:37:90:be:cb:78:85:81:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:49:21 2026 GMT Not After : May 2 02:54:21 2027 GMT Subject: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:26:40:0a:a6:a1:f6:ad:6c:b0:46:19:c3: 6b:fd:0a:f7:83:98:4e:73:02:c9:b9:70:53:b9:c3: 87:46:29:9a:c7:24:56:74:51:ef:81:14:fe:3a:42: eb:83:e9:d0:52:9b:17:8c:4b:44:a8:74:52:86:7d: 26:a9:18:11:3b:41:18:b3:2e:43:f2:59:59:2e:90: 43:da:b1:34:bb:81:11:db:c0:cf:a2:38:7b:f7:d6: 84:de:6f:ae:17:32:d1:50:2b:33:e6:80:5b:57:f1: 79:e6:a3:39:7f:b5:53:69:2a:6d:95:3c:03:d0:c1: 5a:67:95:aa:7f:30:2f:69:08:be:47:17:eb:2e:09: dd:a4:7d:44:11:da:1b:b7:42:39:68:22:1e:e7:07: 0f:4a:14:9e:0c:da:77:d1:ee:18:81:cb:67:d5:fa: bf:01:b0:99:29:7d:33:0d:1e:1b:ec:86:8f:9f:91: 39:00:77:f4:f1:68:78:da:b2:f9:98:58:fb:a2:8c: 3e:98:a9:04:a6:f8:d7:65:aa:22:c7:4d:28:41:80: 37:cf:4f:bd:b6:cc:23:81:02:8d:1f:e5:96:e4:1f: f6:db:ed:c8:7b:23:e6:7d:bd:3d:1f:03:b8:42:33: ec:28:ff:99:c9:95:7d:5a:9c:38:8d:30:f2:d5:46: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.140.0/23 Signature Algorithm: sha256WithRSAEncryption 58:6c:e8:69:ac:04:a1:3a:25:0f:78:e1:ed:e4:4a:d3:fd:c8: 19:4d:7d:4e:fe:c6:7b:86:b4:a9:90:4c:63:59:db:ef:2b:11: e9:da:6f:36:4f:f9:c9:b7:a6:85:a5:42:87:ac:fb:c7:96:86: f9:0b:ab:c4:53:20:d7:24:50:48:00:49:1e:47:b8:45:1a:4c: f9:a1:1f:62:58:7d:93:0b:44:67:b7:b3:a9:27:5a:8b:ce:3a: a7:7f:96:49:71:42:c8:41:c1:bb:66:fc:69:67:23:b5:a0:cd: 10:7d:c5:ac:6f:6c:73:74:2a:9d:f3:b8:47:83:85:9f:af:dd: ae:7e:12:48:d9:f2:25:74:02:70:38:7f:0b:12:1f:f5:64:6f: f3:3a:f3:ca:4d:3e:05:27:38:02:18:15:bb:86:db:04:20:ad: d5:40:1d:a9:d8:85:eb:6b:f1:fa:34:ff:48:f8:91:bf:26:6f: 2c:f3:7d:fb:90:b7:50:fe:0f:11:9f:64:76:08:d2:1a:aa:20: e1:95:eb:de:25:40:9d:c9:1b:51:66:82:73:59:4c:5d:5c:0d: 43:7b:a6:b0:bd:94:1b:0f:18:14:ab:da:40:46:bd:7c:a2:ce: 92:2b:d9:80:a2:55:12:0c:d6:68:36:4e:c9:19:9c:e5:11:82: ab:16:7e:f5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbeIJhB5mFlLxfqMMN5C+y3iFgTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDkyMVoX DTI3MDUwMjAyNTQyMVowMzExMC8GA1UEAxMoNTQ4RDFCNkI2QkE5QTE2NUU3N0FE RUVGRTI4NDI0ODcwNDJDMzI1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALciJkAKpqH2rWywRhnDa/0K94OYTnMCyblwU7nDh0YpmsckVnRR74EU/jpC 64Pp0FKbF4xLRKh0UoZ9JqkYETtBGLMuQ/JZWS6QQ9qxNLuBEdvAz6I4e/fWhN5v rhcy0VArM+aAW1fxeeajOX+1U2kqbZU8A9DBWmeVqn8wL2kIvkcX6y4J3aR9RBHa G7dCOWgiHucHD0oUngzad9HuGIHLZ9X6vwGwmSl9Mw0eG+yGj5+ROQB39PFoeNqy +ZhY+6KMPpipBKb412WqIsdNKEGAN89PvbbMI4ECjR/lluQf9tvtyHsj5n29PR8D uEIz7Cj/mcmVfVqcOI0w8tVGzTsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFSNG2trqaFl53re7+KEJIcELDJeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZmN2E3ZDk4LTIzMzgtNGQ3Ny05NjYyLWYzM2VhNjhjODZmMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZjdhN2Q5 OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC81NDhEMUI2QjZCQTlBMTY1 RTc3QURFRUZFMjg0MjQ4NzA0MkMzMjVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLXuMMA0GCSqGSIb3DQEBCwUAA4IBAQBYbOhprAShOiUPeOHt5ErT/cgZTX1O /sZ7hrSpkExjWdvvKxHp2m82T/nJt6aFpUKHrPvHlob5C6vEUyDXJFBIAEkeR7hF Gkz5oR9iWH2TC0Rnt7OpJ1qLzjqnf5ZJcULIQcG7ZvxpZyO1oM0QfcWsb2xzdCqd 87hHg4Wfr92ufhJI2fIldAJwOH8LEh/1ZG/zOvPKTT4FJzgCGBW7htsEIK3VQB2p 2IXra/H6NP9I+JG/Jm8s8337kLdQ/g8Rn2R2CNIaqiDhleveJUCdyRtRZoJzWUxd XA1De6awvZQbDxgUq9pARr18os6SK9mAolUSDNZoNk7JGZzlEYKrFn71 -----END CERTIFICATE-----Generated at Tue May 12 22:02:37 2026 by rpki-client