$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.cer File: 80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.cer (raw, json) Hash identifier: QqMN2QKrAS6UTBDmz/I+GGJqydlRJiD8RkM7fEC3djk= Subject key identifier: 80:FD:CC:7C:63:A6:A1:F6:F2:11:D6:00:8A:E9:77:5E:4D:CF:7A:7E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 77FC814860D9D8A1FAA5874109C6E785C937EA9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:49 +0000 Certificate not after: Sun 02 May 2027 01:00:49 +0000 Subordinate resources: IP: 2001:df3:5bc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fc:81:48:60:d9:d8:a1:fa:a5:87:41:09:c6:e7:85:c9:37:ea:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:49 2026 GMT Not After : May 2 01:00:49 2027 GMT Subject: CN=80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f6:28:af:c2:dd:fa:0e:d5:9c:40:7e:30:eb: 85:33:32:3c:27:b2:c5:17:d6:31:83:aa:17:77:e2: 8c:60:8f:c5:22:96:b9:b2:ae:35:9a:9e:af:93:d7: aa:4f:39:51:8b:be:ce:f7:1e:ac:f1:05:46:d6:97: 30:4e:d7:8d:e8:ed:7d:5d:05:aa:a4:3e:a4:c5:8f: aa:60:a2:d0:fd:63:69:e4:4c:b6:eb:a8:f5:a0:d8: cc:48:b6:cd:61:e4:89:24:11:cf:64:ce:08:b3:29: c7:31:55:85:79:70:86:a1:32:6c:9c:6f:7f:5b:96: d6:a8:e6:ba:21:02:9d:3b:de:52:5e:43:93:b5:11: c7:55:98:fc:48:19:4e:a0:32:ef:18:37:8d:8c:08: f9:fe:20:7e:b7:3b:f7:e8:d7:8e:ba:31:f8:57:e6: ef:19:18:5c:42:21:1f:b6:b4:2e:55:f6:0a:79:ca: dc:e9:2c:35:dd:a7:80:07:b4:c0:50:f2:56:fc:81: 65:b3:50:f0:2c:04:b2:68:7a:18:a7:4e:9c:c7:85: b1:64:8b:00:96:c7:31:49:fa:02:5b:b1:9d:95:8a: c2:0d:f5:d5:e0:6b:6a:cc:37:40:39:63:47:e7:8f: 42:66:b8:3c:e5:cd:30:6d:ba:f3:d5:6f:58:87:d3: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:FD:CC:7C:63:A6:A1:F6:F2:11:D6:00:8A:E9:77:5E:4D:CF:7A:7E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:5bc0::/48 Signature Algorithm: sha256WithRSAEncryption 86:df:a0:3d:ea:7f:b5:50:45:5f:60:22:44:6f:9b:88:fb:5d: f2:77:7a:c2:dd:db:72:9c:62:72:c3:d3:13:54:9f:0a:15:d1: e5:c6:8b:24:a0:1b:81:6c:02:f3:43:b9:7f:87:c9:ae:81:f5: a9:19:4a:de:32:ce:f0:52:7f:55:41:cb:94:97:04:e9:68:47: e4:02:26:65:9f:7b:89:fc:24:5c:e4:07:6a:8c:01:58:21:36: 54:58:ae:2d:87:ee:49:b4:5f:0f:6e:2e:d8:8c:a1:d6:b0:f0: bd:bf:ef:c2:ae:81:80:56:8e:b0:b2:0a:4d:2a:92:b8:4f:11: 97:d4:a5:cc:ed:17:80:72:94:4b:9a:cd:8e:40:7b:28:88:65: fa:5f:d4:56:b1:78:7a:23:05:02:91:59:46:c0:a2:e1:09:95: 70:6d:32:21:b7:ea:51:8c:95:86:2f:1c:34:2b:b0:8c:10:c9: 3c:f1:2a:7c:35:57:9e:dd:81:3b:52:de:8b:61:b4:d0:1d:48: 3f:fb:f2:5c:85:5e:19:bb:ad:1f:49:de:c4:07:85:0e:29:76: 77:81:55:75:aa:b3:2c:62:1b:4e:dc:ea:e2:45:af:5e:00:e3: 18:35:00:01:3d:d0:80:48:ec:9f:cd:83:07:b5:ff:bc:42:20: 10:9c:55:d4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUd/yBSGDZ2KH6pYdBCcbnhck36p0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTU0OVoX DTI3MDUwMjAxMDA0OVowMzExMC8GA1UEAxMoODBGRENDN0M2M0E2QTFGNkYyMTFE NjAwOEFFOTc3NUU0RENGN0E3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJP2KK/C3foO1ZxAfjDrhTMyPCeyxRfWMYOqF3fijGCPxSKWubKuNZqer5PX qk85UYu+zvcerPEFRtaXME7XjejtfV0FqqQ+pMWPqmCi0P1jaeRMtuuo9aDYzEi2 zWHkiSQRz2TOCLMpxzFVhXlwhqEybJxvf1uW1qjmuiECnTveUl5Dk7URx1WY/EgZ TqAy7xg3jYwI+f4gfrc79+jXjrox+Ffm7xkYXEIhH7a0LlX2CnnK3OksNd2ngAe0 wFDyVvyBZbNQ8CwEsmh6GKdOnMeFsWSLAJbHMUn6AluxnZWKwg311eBrasw3QDlj R+ePQma4POXNMG2689VvWIfTlCsCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFID9zHxjpqH28hHWAIrpd15Nz3p+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzczMmU0Zjg2LTQ4ZTctNDhjNy1iYTkxLWUyNTk2ODM3OGU5NS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MzJlNGY4 Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMS84MEZEQ0M3QzYzQTZBMUY2 RjIxMUQ2MDA4QUU5Nzc1RTREQ0Y3QTdFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN81vAMA0GCSqGSIb3DQEBCwUAA4IBAQCG36A96n+1UEVfYCJEb5uI+13y d3rC3dtynGJyw9MTVJ8KFdHlxoskoBuBbALzQ7l/h8mugfWpGUreMs7wUn9VQcuU lwTpaEfkAiZln3uJ/CRc5AdqjAFYITZUWK4th+5JtF8Pbi7YjKHWsPC9v+/CroGA Vo6wsgpNKpK4TxGX1KXM7ReAcpRLms2OQHsoiGX6X9RWsXh6IwUCkVlGwKLhCZVw bTIht+pRjJWGLxw0K7CMEMk88Sp8NVee3YE7Ut6LYbTQHUg/+/JchV4Zu60fSd7E B4UOKXZ3gVV1qrMsYhtO3OriRa9eAOMYNQABPdCASOyfzYMHtf+8QiAQnFXU -----END CERTIFICATE-----Generated at Tue May 12 22:45:56 2026 by rpki-client