$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer File: 822159966075595E4F7698AB063AA58F2CE6EFF6.cer (raw, json) Hash identifier: CsJUoQFh0smjTQAobcT4uqS4nWhPOqwCPJX12DujX6E= Subject key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1AC3111E17AEEF5C0D8592D78B1A6FE02048A6E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:37:45 +0000 Certificate not after: Sun 02 May 2027 01:42:45 +0000 Subordinate resources: IP: 61.29.252.0/23 IP: 103.130.198.0/23 IP: 117.103.116.0/24 IP: 160.20.222.0/24 IP: 2407:14c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c3:11:1e:17:ae:ef:5c:0d:85:92:d7:8b:1a:6f:e0:20:48:a6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:37:45 2026 GMT Not After : May 2 01:42:45 2027 GMT Subject: CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:f1:f2:0d:e2:f5:41:37:57:29:c6:be:69: 99:53:a3:de:54:45:dd:12:63:7d:cc:99:82:fc:93: 9d:c6:b3:f8:b5:14:be:3d:11:3d:fc:8a:0f:02:c8: 79:5e:e7:bd:95:81:e1:5d:d7:e3:97:54:06:fd:f7: 2a:02:7f:4a:ce:7e:8b:a2:4e:38:84:c7:78:71:c9: e0:f4:75:ab:c6:a0:b9:87:b8:7f:0c:31:23:a9:dd: c0:a8:f6:d7:69:46:91:48:03:7e:45:9f:99:24:5e: 1f:ad:b8:4e:ed:78:8c:1b:97:2f:7e:7b:d7:a1:e1: 3d:1c:83:0c:5b:73:c9:94:2f:42:df:0d:3b:40:6b: 74:ce:3b:a7:b8:93:5f:11:70:da:4c:c6:ff:17:59: 8f:5a:cb:fb:33:df:f4:fb:5a:d5:0c:9c:8b:af:7f: be:cc:7e:bb:a5:27:6a:ed:07:cb:db:8a:c2:c8:d5: cc:a4:c1:8b:63:0e:1e:1a:27:95:fe:ea:53:8c:39: c3:f7:43:7e:d9:0d:6f:cd:f0:da:26:ae:48:e6:c5: b6:64:b0:15:eb:f6:5a:2a:6d:73:79:f1:52:08:88: 60:12:a2:59:8f:a2:81:a5:af:88:7a:6c:7b:0e:b3: 27:a4:67:7d:08:00:8b:cf:b4:00:bd:91:d7:3f:89: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.29.252.0/23 103.130.198.0/23 117.103.116.0/24 160.20.222.0/24 IPv6: 2407:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 60:05:f3:f0:48:11:bb:a2:b6:1f:a4:8e:17:fe:3e:54:bc:3f: 70:88:c9:2a:b2:94:ed:1e:6f:f1:7c:f3:a2:45:2e:ed:05:70: 70:f1:45:07:ba:0b:2a:5b:88:22:e7:3b:cb:9c:fc:58:e3:bd: c4:d2:71:25:17:79:bc:a9:59:d7:b3:67:e6:05:b5:b9:68:5a: 5c:4c:46:e1:38:7b:27:ae:6b:b0:c4:63:1e:a9:8c:54:9d:5a: d0:65:c1:a9:2d:28:19:03:48:a3:e4:8e:2b:1d:13:0d:13:5b: d3:d6:7d:b8:b6:04:f3:18:17:47:0d:30:30:68:dd:82:3d:f1: b2:1c:0d:b7:cc:a7:89:2b:43:8d:4b:97:b2:33:e4:35:6e:98: dc:9f:ce:dc:ea:7a:9a:d3:d7:bf:ea:9c:d2:a2:0a:4e:87:24: b9:96:3b:64:b9:b9:d2:88:ea:79:31:d1:4c:fc:b0:6c:81:26: f4:92:e0:c5:c6:57:4d:67:eb:b2:78:9e:3b:06:2d:a6:a4:a0: 5e:c9:8c:c2:f7:e9:77:d2:23:4e:b8:b2:96:38:d6:31:56:9b: 7f:f1:92:a8:5e:6d:58:b1:4a:f6:30:35:d1:81:2c:cd:72:1d: 96:d3:a8:10:e5:a4:d3:11:27:c2:50:70:c7:92:20:98:d4:0d: 03:da:07:5d -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUGsMRHheu71wNhZLXixpv4CBIpuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzc0NVoX DTI3MDUwMjAxNDI0NVowMzExMC8GA1UEAxMoODIyMTU5OTY2MDc1NTk1RTRGNzY5 OEFCMDYzQUE1OEYyQ0U2RUZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0s8fIN4vVBN1cpxr5pmVOj3lRF3RJjfcyZgvyTncaz+LUUvj0RPfyKDwLI eV7nvZWB4V3X45dUBv33KgJ/Ss5+i6JOOITHeHHJ4PR1q8aguYe4fwwxI6ndwKj2 12lGkUgDfkWfmSReH624Tu14jBuXL35716HhPRyDDFtzyZQvQt8NO0BrdM47p7iT XxFw2kzG/xdZj1rL+zPf9Pta1Qyci69/vsx+u6Unau0Hy9uKwsjVzKTBi2MOHhon lf7qU4w5w/dDftkNb83w2iauSObFtmSwFev2Wiptc3nxUgiIYBKiWY+igaWviHps ew6zJ6RnfQgAi8+0AL2R1z+JYy0CAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIIhWZZgdVleT3aYqwY6pY8s5u/2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FmNmQxODVlLWQ0ZjQtNDgyMC1iNGI2LTc5OGMzMDdhZDdlNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZjZkMTg1 ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC84MjIxNTk5NjYwNzU1OTVF NEY3Njk4QUIwNjNBQTU4RjJDRTZFRkY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQBPR38AwQBZ4LGAwQAdWd0AwQAoBTeMA0EAgACMAcDBQAkBxTAMA0GCSqGSIb3 DQEBCwUAA4IBAQBgBfPwSBG7orYfpI4X/j5UvD9wiMkqspTtHm/xfPOiRS7tBXBw 8UUHugsqW4gi5zvLnPxY473E0nElF3m8qVnXs2fmBbW5aFpcTEbhOHsnrmuwxGMe qYxUnVrQZcGpLSgZA0ij5I4rHRMNE1vT1n24tgTzGBdHDTAwaN2CPfGyHA23zKeJ K0ONS5eyM+Q1bpjcn87c6nqa09e/6pzSogpOhyS5ljtkubnSiOp5MdFM/LBsgSb0 kuDFxldNZ+uyeJ47Bi2mpKBeyYzC9+l30iNOuLKWONYxVpt/8ZKoXm1YsUr2MDXR gSzNch2W06gQ5aTTESfCUHDHkiCY1A0D2gdd -----END CERTIFICATE-----Generated at Tue May 12 22:16:49 2026 by rpki-client