$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5ABD75609EEB0674A51335F6DE524A79441BA605.cer File: 5ABD75609EEB0674A51335F6DE524A79441BA605.cer (raw, json) Hash identifier: 3t7Hx5XgU2GILWD/tgXl7j4gX071qz93SnqEE2Zmxyk= Subject key identifier: 5A:BD:75:60:9E:EB:06:74:A5:13:35:F6:DE:52:4A:79:44:1B:A6:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2643B623DB0991E25791A80B26FAA3ECE626016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/5ABD75609EEB0674A51335F6DE524A79441BA605.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:23 +0000 Certificate not after: Sun 02 May 2027 01:10:23 +0000 Subordinate resources: IP: 36.50.222.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:43:b6:23:db:09:91:e2:57:91:a8:0b:26:fa:a3:ec:e6:26:01:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:05:23 2026 GMT Not After : May 2 01:10:23 2027 GMT Subject: CN=5ABD75609EEB0674A51335F6DE524A79441BA605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:64:e5:d4:12:de:1b:67:3a:41:dc:5b:9a: c4:96:db:1d:75:96:a7:a5:53:0b:70:3d:d0:32:08: f5:1b:74:f2:e4:ca:2a:50:00:41:7a:97:d6:d9:eb: 34:0e:fb:ff:66:7f:9a:c3:0c:dd:19:97:d0:2b:d8: a9:31:be:ef:fe:86:ea:fb:e6:db:66:8a:fa:1e:f4: 6f:25:56:d3:78:42:bb:22:0b:3b:af:d1:92:b0:bb: 54:1d:4a:fb:f3:f1:6b:b9:c7:72:22:63:d6:cd:f0: b7:4f:f0:33:be:ae:05:2d:d1:f5:d1:d9:7d:b9:54: d6:52:b5:c5:40:aa:cd:06:85:3c:46:eb:0c:b0:2e: 59:dc:f0:12:b4:2b:df:d3:bd:28:3e:9e:d8:85:c8: 81:d0:e9:c9:73:50:50:be:07:13:9b:25:aa:3f:25: 24:0d:b2:6a:4a:57:a2:51:c0:8d:ed:1c:7e:62:96: ed:33:09:05:68:c7:14:64:de:ca:92:21:d8:dd:8a: c6:e2:e8:e1:fb:a7:fe:d7:67:4e:9d:29:b2:db:9c: c1:16:d3:9c:46:ec:b5:bb:32:22:48:37:75:cf:aa: 8c:80:27:fa:8d:81:3b:6b:14:dc:ca:3d:81:8a:c0: 1e:e5:02:44:42:fc:f2:03:4d:31:0e:82:76:ad:5a: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:BD:75:60:9E:EB:06:74:A5:13:35:F6:DE:52:4A:79:44:1B:A6:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/5ABD75609EEB0674A51335F6DE524A79441BA605.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.222.0/23 Signature Algorithm: sha256WithRSAEncryption 87:0d:69:e0:27:00:9f:20:88:95:dd:c7:cc:69:8e:07:02:cf: e8:54:dd:dc:67:df:8b:7a:c8:83:1e:e1:b1:1b:22:84:cc:d3: 59:29:95:d5:db:db:49:4a:83:3c:c2:a9:62:f8:03:e5:c8:c3: 44:cf:cc:2a:15:ad:3c:f6:0e:cc:ae:cf:5e:4e:bf:06:68:4d: fa:d7:88:44:a7:a0:c3:cc:7c:7a:21:e5:2a:2a:77:73:ff:32: ea:52:d4:28:56:2b:36:54:b9:d9:44:a9:0a:3a:a2:a0:10:97: 97:e9:ee:6e:f3:f4:ea:0f:b1:25:be:c3:43:68:70:fd:41:c7: 2c:68:1e:77:2a:39:27:6d:25:8f:b2:75:7d:51:67:27:c7:c2: 62:07:70:f8:08:26:0e:74:6c:c7:46:00:82:0c:48:88:c4:6d: 4b:90:8f:49:a1:7f:2e:71:a0:99:e4:d4:f9:f2:ad:02:16:e5: 9f:e5:9c:8b:a5:13:fa:af:ad:a0:0d:73:36:42:b9:d4:17:6a: ad:2b:be:f7:f0:93:06:0d:f4:75:a9:e1:7d:06:7c:45:4b:79: 30:22:bd:85:cf:c7:ae:a3:c6:ae:70:4d:97:64:a8:f5:93:f0: cf:af:91:c1:df:05:11:49:53:bd:d1:62:62:d6:be:5e:19:4b: 6a:e2:3a:a4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJkO2I9sJkeJXkagLJvqj7OYmAWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDUyM1oX DTI3MDUwMjAxMTAyM1owMzExMC8GA1UEAxMoNUFCRDc1NjA5RUVCMDY3NEE1MTMz NUY2REU1MjRBNzk0NDFCQTYwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1YZOXUEt4bZzpB3FuaxJbbHXWWp6VTC3A90DII9Rt08uTKKlAAQXqX1tnr NA77/2Z/msMM3RmX0CvYqTG+7/6G6vvm22aK+h70byVW03hCuyILO6/RkrC7VB1K +/Pxa7nHciJj1s3wt0/wM76uBS3R9dHZfblU1lK1xUCqzQaFPEbrDLAuWdzwErQr 39O9KD6e2IXIgdDpyXNQUL4HE5slqj8lJA2yakpXolHAje0cfmKW7TMJBWjHFGTe ypIh2N2KxuLo4fun/tdnTp0pstucwRbTnEbstbsyIkg3dc+qjIAn+o2BO2sU3Mo9 gYrAHuUCREL88gNNMQ6Cdq1aRwsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFq9dWCe6wZ0pRM19t5SSnlEG6YFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdmNGZjMzQwLWFmNjktNGU4ZS1hNzc3LTc0N2RkODI5ZGMzZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZjRmYzM0 MC1hZjY5LTRlOGUtYTc3Ny03NDdkZDgyOWRjM2YvMC81QUJENzU2MDlFRUIwNjc0 QTUxMzM1RjZERTUyNEE3OTQ0MUJBNjA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBJDLeMA0GCSqGSIb3DQEBCwUAA4IBAQCHDWngJwCfIIiV3cfMaY4HAs/oVN3c Z9+LesiDHuGxGyKEzNNZKZXV29tJSoM8wqli+APlyMNEz8wqFa089g7Mrs9eTr8G aE3614hEp6DDzHx6IeUqKndz/zLqUtQoVis2VLnZRKkKOqKgEJeX6e5u8/TqD7El vsNDaHD9QccsaB53KjknbSWPsnV9UWcnx8JiB3D4CCYOdGzHRgCCDEiIxG1LkI9J oX8ucaCZ5NT58q0CFuWf5ZyLpRP6r62gDXM2QrnUF2qtK7738JMGDfR1qeF9BnxF S3kwIr2Fz8euo8aucE2XZKj1k/DPr5HB3wURSVO90WJi1r5eGUtq4jqk -----END CERTIFICATE-----Generated at Tue May 12 22:16:08 2026 by rpki-client