$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer File: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer (raw, json) Hash identifier: 1OO6CP7N8W9mY99JD+U6AkPSIWoND9qu8NkxY2riPLs= Subject key identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1C541B9999BDAE4C74C9910301D0637F9582E95D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:10:30 +0000 Certificate not after: Sun 02 May 2027 00:15:30 +0000 Subordinate resources: IP: 163.223.118.0/23 IP: 2001:df5:3ec0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:54:1b:99:99:bd:ae:4c:74:c9:91:03:01:d0:63:7f:95:82:e9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:10:30 2026 GMT Not After : May 2 00:15:30 2027 GMT Subject: CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:91:86:7b:76:33:a8:d1:34:30:5e:0f:1d: b7:ca:5f:46:be:4a:20:c5:d3:1a:f9:5d:44:24:54: fa:d2:b3:a4:e3:6b:f0:50:bb:f3:e5:3a:4a:26:73: 9e:a2:cb:18:3a:47:45:a6:7c:e4:51:ee:8d:0d:65: ca:24:c5:9e:9e:13:cf:c0:6f:e4:c4:9a:02:eb:c8: 0a:8e:49:06:05:3a:49:de:b9:e6:7c:26:c4:61:19: 4c:42:1c:b8:54:e3:11:98:a5:5c:1a:47:16:e3:c5: ec:61:8d:a3:ce:17:27:e5:9e:7c:40:75:f0:2d:24: 8f:89:6f:a2:c2:d5:ec:80:4f:34:19:cc:0b:b3:a6: c7:e4:a9:80:8b:bc:ab:91:33:31:29:0d:c7:4d:3c: c4:00:61:cc:6f:66:04:01:53:72:a4:c4:3a:19:35: aa:a7:63:38:d5:91:c4:52:50:e2:80:01:f0:f4:b8: 67:9e:4e:e8:be:20:70:47:cf:0d:ec:a7:6e:19:ee: 5f:05:26:f0:d3:15:ff:ab:4f:f9:cc:71:e4:1a:45: b4:d8:12:0c:b6:f1:3e:5c:2d:08:d8:c7:9a:c5:16: 9e:3e:fc:f5:f9:5b:fa:90:1b:7c:3d:42:87:39:2d: bf:73:df:af:1d:c5:5e:9f:dd:6f:8c:21:a6:da:a1: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.118.0/23 IPv6: 2001:df5:3ec0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:1f:8e:f3:4c:ec:c1:d4:4c:6b:7a:55:4a:e3:57:c0:da:84: d8:96:3f:14:a9:a6:f9:51:6f:dd:0c:5c:aa:88:bf:21:4e:ba: 5e:52:4b:5a:ee:d8:4a:aa:b4:77:d4:07:33:de:03:a5:3b:30: d8:e7:08:c4:00:4c:1e:5a:3c:2a:b2:87:d4:06:8d:e0:82:f3: 03:95:0c:6a:38:43:d7:c5:bb:27:20:5d:eb:4e:80:b1:0c:c7: 65:26:c0:00:07:37:8a:6f:19:3d:0a:7e:05:95:7c:b4:24:d1: b4:25:e3:7b:e3:68:50:08:01:ae:35:d8:67:e9:f0:dc:c4:35: 43:c8:89:e4:f9:9b:40:73:53:a5:11:6c:03:19:2a:3e:ff:7f: 00:63:7f:eb:07:bb:8c:a0:09:70:f6:d4:fd:10:44:d1:bd:3a: 7b:ff:4b:ed:2d:2e:d4:61:86:2a:a3:19:b8:a2:b5:43:36:1c: 57:d2:f0:34:53:18:f2:0e:a1:3a:21:82:8b:43:41:76:45:5d: 5a:25:f4:56:b1:2e:3d:cd:83:b2:2c:09:fd:49:34:1f:c5:13: 05:4f:81:e4:22:6f:5f:7f:df:0a:0c:64:ff:6e:fb:7e:e8:6f: b9:a1:ac:e4:44:67:83:b4:ce:1c:41:c4:8f:f4:ce:f5:84:d3: 47:99:7a:2c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHFQbmZm9rkx0yZEDAdBjf5WC6V0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTAzMFoX DTI3MDUwMjAwMTUzMFowMzExMC8GA1UEAxMoOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFE RUJCQ0EwRDFFMkMzM0U1MTREQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHgkYZ7djOo0TQwXg8dt8pfRr5KIMXTGvldRCRU+tKzpONr8FC78+U6SiZz nqLLGDpHRaZ85FHujQ1lyiTFnp4Tz8Bv5MSaAuvICo5JBgU6Sd655nwmxGEZTEIc uFTjEZilXBpHFuPF7GGNo84XJ+WefEB18C0kj4lvosLV7IBPNBnMC7Omx+SpgIu8 q5EzMSkNx008xABhzG9mBAFTcqTEOhk1qqdjONWRxFJQ4oAB8PS4Z55O6L4gcEfP DeynbhnuXwUm8NMV/6tP+cxx5BpFtNgSDLbxPlwtCNjHmsUWnj789flb+pAbfD1C hzktv3Pfrx3FXp/db4whptqhpOkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJSPE88uVOH8ylHeu8oNHiwz5RTcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJlYjA2NTY5LTBhMmItNGIxYi05YjBkLWQ5NWQwOGEzNGE3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZWIwNjU2 OS0wYTJiLTRiMWItOWIwZC1kOTVkMDhhMzRhNzYvMC85NDhGMTNDRjJFNTRFMUZD Q0E1MURFQkJDQTBEMUUyQzMzRTUxNERDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBo992MA8EAgACMAkDBwAgAQ31PsAwDQYJKoZIhvcNAQELBQADggEBAI0fjvNM 7MHUTGt6VUrjV8DahNiWPxSppvlRb90MXKqIvyFOul5SS1ru2EqqtHfUBzPeA6U7 MNjnCMQATB5aPCqyh9QGjeCC8wOVDGo4Q9fFuycgXetOgLEMx2UmwAAHN4pvGT0K fgWVfLQk0bQl43vjaFAIAa412Gfp8NzENUPIieT5m0BzU6URbAMZKj7/fwBjf+sH u4ygCXD21P0QRNG9Onv/S+0tLtRhhiqjGbiitUM2HFfS8DRTGPIOoTohgotDQXZF XVol9FaxLj3Ng7IsCf1JNB/FEwVPgeQib19/3woMZP9u+37ob7mhrOREZ4O0zhxB xI/0zvWE00eZeiw= -----END CERTIFICATE-----Generated at Tue May 12 22:38:45 2026 by rpki-client