$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer (raw, json) Hash identifier: FaUtszDZMRGliSIP5yYppTSSlWa0UwnydstZvpVcXzU= Subject key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5022F895DD059F3416DF17F69EA5120810FBE868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:15:56 +0000 Certificate not after: Sun 02 May 2027 02:20:56 +0000 Subordinate resources: IP: 117.54.0.0/16 IP: 180.233.152.0/21 IP: 202.53.224.0/19 IP: 202.153.224.0/19 IP: 202.159.0.0/18 IP: 202.159.96.0/19 IP: 2402:ac00::/32 IP: 2404:170::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:22:f8:95:dd:05:9f:34:16:df:17:f6:9e:a5:12:08:10:fb:e8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:15:56 2026 GMT Not After : May 2 02:20:56 2027 GMT Subject: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:33:b6:6b:95:5b:0c:37:a8:a4:08:d0:42: cb:98:ab:95:c8:19:c7:35:6c:ff:a6:59:ed:3b:dc: 8a:21:e1:4f:8a:19:a7:44:4b:d3:0b:58:0e:9a:8f: 7d:ed:4d:d8:19:30:9d:e1:c1:c0:b2:3e:ce:c3:22: df:44:25:8f:e8:2d:4a:71:a0:5e:97:94:18:78:72: fe:6e:72:cb:29:f3:95:19:15:ed:70:01:ed:47:97: 28:16:99:02:48:30:20:9f:bd:c5:50:b8:9a:ff:89: c7:8e:8f:64:47:12:36:f2:82:bc:0b:f0:64:bf:37: 9b:e0:01:d0:78:c5:49:cc:8f:d3:e6:cb:8e:ae:0f: 4b:29:c9:85:76:e1:ca:28:58:9c:cf:00:f2:3e:9b: 42:d9:f0:ef:08:01:a5:33:cd:4e:cf:91:53:38:f0: 68:ba:a0:9d:f7:1a:94:da:70:dd:8d:1e:c7:1f:bc: 31:02:84:01:9f:49:d4:3f:5d:4f:d1:06:8c:8b:56: da:96:e5:4b:b9:6e:c8:99:fe:bf:2e:2a:91:8e:39: bf:d0:c0:53:53:ef:eb:fe:e2:c3:79:0a:ea:50:6a: 01:90:46:9c:9c:4e:01:f0:dd:5d:b1:d4:52:ae:0f: 5b:00:1d:47:89:04:b8:d2:86:d3:39:54:27:36:ca: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.54.0.0/16 180.233.152.0/21 202.53.224.0/19 202.153.224.0/19 202.159.0.0/18 202.159.96.0/19 IPv6: 2402:ac00::/32 2404:170::/32 Signature Algorithm: sha256WithRSAEncryption 99:a7:d5:68:aa:d4:67:72:14:31:23:d0:b6:e1:02:05:c4:7b: f4:60:c9:ba:c6:fe:5e:8e:33:c7:78:f7:21:f0:cd:43:a9:f3: f9:12:ba:34:ca:cc:cb:60:11:51:8e:51:57:3f:66:72:02:c6: fe:81:90:1c:b7:d5:14:0f:fb:f7:b4:9b:41:49:dc:34:a0:1e: 37:9b:be:7e:7e:24:0a:42:5f:53:92:ee:75:51:55:09:3d:3f: 72:29:b3:fe:b5:9a:1c:1d:d3:f8:aa:3e:33:1c:a9:d0:fe:64: 05:2b:7f:fe:ea:d9:8f:a3:b0:aa:cd:15:f1:3e:32:5e:9e:54: 47:7b:88:69:84:e9:ad:00:e5:fa:fd:e2:39:01:51:bc:85:9a: a6:b0:87:aa:85:1f:3e:55:a4:4a:ee:c8:5c:70:23:e7:4f:b5: a7:f2:fa:08:da:46:5c:36:12:75:80:1e:10:0b:cf:b2:6a:f7: 82:2f:7e:0a:74:1e:11:ad:2c:29:9d:3e:86:d8:01:3a:a3:93: 0e:3a:ab:37:d0:d4:cb:34:9d:6f:e0:cf:fb:5a:fc:03:2a:83: b5:ad:4e:16:09:e9:5a:60:e1:ee:00:08:76:0e:08:8e:bc:9f: 5e:b3:8b:ee:c1:a4:59:de:e9:91:44:56:5a:ae:3c:c7:b6:5b: 2a:b7:f8:3e -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUUCL4ld0FnzQW3xf2nqUSCBD76GgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTU1NloX DTI3MDUwMjAyMjA1NlowMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5 NzM1MTQ5NzlBMTcwM0ZBOUUyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6bM7ZrlVsMN6ikCNBCy5irlcgZxzVs/6ZZ7TvciiHhT4oZp0RL0wtYDpqP fe1N2BkwneHBwLI+zsMi30Qlj+gtSnGgXpeUGHhy/m5yyynzlRkV7XAB7UeXKBaZ AkgwIJ+9xVC4mv+Jx46PZEcSNvKCvAvwZL83m+AB0HjFScyP0+bLjq4PSynJhXbh yihYnM8A8j6bQtnw7wgBpTPNTs+RUzjwaLqgnfcalNpw3Y0exx+8MQKEAZ9J1D9d T9EGjItW2pblS7luyJn+vy4qkY45v9DAU1Pv6/7iw3kK6lBqAZBGnJxOAfDdXbHU Uq4PWwAdR4kEuNKG0zlUJzbKTjcCAwEAAaOCAuwwggLoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGYqHR8Lg9zqxz2XNRSXmhcD+p4oMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U1YjFlNTdlLWEwZjEtNDY3Zi1hNDZmLTU1YTMxNTdiMGQ2NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNWIxZTU3 ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC82NjJBMUQxRjBCODNEQ0VB QzczRDk3MzUxNDk3OUExNzAzRkE5RTI4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTApBAIAATAj AwMAdTYDBAO06ZgDBAXKNeADBAXKmeADBAbKnwADBAXKn2AwFAQCAAIwDgMFACQC rAADBQAkBAFwMA0GCSqGSIb3DQEBCwUAA4IBAQCZp9VoqtRnchQxI9C24QIFxHv0 YMm6xv5ejjPHePch8M1DqfP5Ero0yszLYBFRjlFXP2ZyAsb+gZAct9UUD/v3tJtB Sdw0oB43m75+fiQKQl9Tku51UVUJPT9yKbP+tZocHdP4qj4zHKnQ/mQFK3/+6tmP o7CqzRXxPjJenlRHe4hphOmtAOX6/eI5AVG8hZqmsIeqhR8+VaRK7shccCPnT7Wn 8voI2kZcNhJ1gB4QC8+yaveCL34KdB4RrSwpnT6G2AE6o5MOOqs30NTLNJ1v4M/7 WvwDKoO1rU4WCelaYOHuAAh2DgiOvJ9es4vuwaRZ3umRRFZarjzHtlsqt/g+ -----END CERTIFICATE-----Generated at Tue May 12 22:04:13 2026 by rpki-client