$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer File: 955AF2D41C7C84BFE354F8648EE3271584452C79.cer (raw, json) Hash identifier: pHeL1XaikO7QHxFon1fXGHBOB6O629KFsGbXgQIbOaw= Subject key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7BC1E02F74125FB57F51C6402C0833DD6288DC82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:08 +0000 Certificate not after: Sun 02 May 2027 01:32:08 +0000 Subordinate resources: IP: 27.131.0.0/21 IP: 45.115.64.0/22 IP: 103.16.112.0/22 IP: 103.29.4.0/22 IP: 119.110.80.0/21 IP: 2401:ae00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c1:e0:2f:74:12:5f:b5:7f:51:c6:40:2c:08:33:dd:62:88:dc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:27:08 2026 GMT Not After : May 2 01:32:08 2027 GMT Subject: CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:17:3b:62:23:2e:b0:af:e9:4f:a0:85:b8: b9:06:25:da:50:bf:b1:62:10:9c:02:82:69:27:35: 82:7e:81:b2:d7:c5:62:97:39:67:0e:0e:d4:a0:84: 22:12:3a:0d:80:4b:d0:3c:e7:25:17:ba:d4:5c:6a: cc:ba:eb:96:90:68:75:02:45:07:21:71:35:c3:82: ab:e5:f4:12:c2:69:7d:b9:08:20:40:26:9e:32:7a: f6:87:09:cd:55:ef:14:90:02:8c:91:6d:0c:21:ff: 22:d5:d9:0b:0f:23:f5:05:da:4e:ac:c6:7b:65:3f: ba:3b:c6:8a:15:6b:2b:f9:25:a0:8c:47:6b:c2:6d: c4:00:d0:16:3f:c7:bb:14:04:28:5b:8d:8c:ff:cf: 7c:de:77:e0:5c:cf:7c:b4:41:0c:e0:07:c8:f7:9a: 03:93:50:07:5e:f7:5d:50:5e:4d:b1:ed:45:7d:f3: 23:0a:76:c5:db:a1:0e:61:00:5c:bf:a2:b9:55:65: fb:42:42:c3:a4:f6:74:f5:ec:c3:b3:a5:22:cd:1b: 28:f8:b1:69:ec:c2:ca:13:d0:f3:bc:57:24:cd:0c: 31:e3:8b:96:21:7f:d6:e3:6c:07:fe:62:64:47:22: c8:e8:54:99:b3:72:03:ec:ae:2a:f2:b6:b0:f8:82: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.0.0/21 45.115.64.0/22 103.16.112.0/22 103.29.4.0/22 119.110.80.0/21 IPv6: 2401:ae00::/32 Signature Algorithm: sha256WithRSAEncryption 15:8e:c4:ca:28:3b:1f:bb:a0:07:f2:df:b0:02:29:56:76:c7: ae:c6:b1:57:a8:0a:83:f1:ba:ba:52:49:a4:44:12:77:6d:21: 31:12:9c:b4:6e:bc:cc:be:46:eb:f0:3e:33:8f:b0:76:41:0d: ba:cd:99:19:b3:81:2c:c5:bf:a3:72:5f:ba:cb:eb:e6:99:85: 78:91:6e:6f:12:87:35:1d:b7:81:0b:9d:96:09:28:39:75:d6: 9b:e7:e5:64:ba:e7:70:36:0f:f7:54:18:c3:45:7e:16:b0:7e: d7:17:f9:70:63:02:82:8a:8b:38:47:10:f7:d7:84:08:d4:81: 5c:49:ba:d3:6f:a7:34:a0:a8:f1:42:00:ea:df:fa:ee:5c:ff: 18:8d:a8:48:72:6a:ab:cc:c0:0f:5a:1e:dd:e1:5f:d8:e5:16: 93:82:8a:f2:c5:56:4e:87:a9:72:42:a1:0d:ca:02:eb:5a:6f: 99:63:ee:dc:1d:33:e6:9e:01:bd:e7:54:6f:52:b5:60:96:23: 2e:73:bb:71:3d:68:ce:a6:3b:de:53:38:47:bf:f1:f4:00:a8: b0:b6:31:e0:b6:5a:d3:16:18:15:c4:32:6f:9f:c4:b5:c9:db: ca:5e:a9:8a:74:f1:57:a7:21:15:8b:2a:6d:0b:df:a2:09:1c: e2:ac:5e:e6 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUe8HgL3QSX7V/UcZALAgz3WKI3IIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjcwOFoX DTI3MDUwMjAxMzIwOFowMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRG ODY0OEVFMzI3MTU4NDQ1MkM3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlbFztiIy6wr+lPoIW4uQYl2lC/sWIQnAKCaSc1gn6BstfFYpc5Zw4O1KCE IhI6DYBL0DznJRe61FxqzLrrlpBodQJFByFxNcOCq+X0EsJpfbkIIEAmnjJ69ocJ zVXvFJACjJFtDCH/ItXZCw8j9QXaTqzGe2U/ujvGihVrK/kloIxHa8JtxADQFj/H uxQEKFuNjP/PfN534FzPfLRBDOAHyPeaA5NQB173XVBeTbHtRX3zIwp2xduhDmEA XL+iuVVl+0JCw6T2dPXsw7OlIs0bKPixaezCyhPQ87xXJM0MMeOLliF/1uNsB/5i ZEciyOhUmbNyA+yuKvK2sPiCQxcCAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJVa8tQcfIS/41T4ZI7jJxWERSx5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EwNmI2NjczLTQ3YTEtNDVlNS1iNmMyLTQyYWI4YjQ3NjI0OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMDZiNjY3 My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC85NTVBRjJENDFDN0M4NEJG RTM1NEY4NjQ4RUUzMjcxNTg0NDUyQzc5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAe AwQDG4MAAwQCLXNAAwQCZxBwAwQCZx0EAwQDd25QMA0EAgACMAcDBQAkAa4AMA0G CSqGSIb3DQEBCwUAA4IBAQAVjsTKKDsfu6AH8t+wAilWdseuxrFXqAqD8bq6Ukmk RBJ3bSExEpy0brzMvkbr8D4zj7B2QQ26zZkZs4Esxb+jcl+6y+vmmYV4kW5vEoc1 HbeBC52WCSg5ddab5+VkuudwNg/3VBjDRX4WsH7XF/lwYwKCios4RxD314QI1IFc SbrTb6c0oKjxQgDq3/ruXP8YjahIcmqrzMAPWh7d4V/Y5RaTgoryxVZOh6lyQqEN ygLrWm+ZY+7cHTPmngG951RvUrVgliMuc7txPWjOpjveUzhHv/H0AKiwtjHgtlrT FhgVxDJvn8S1ydvKXqmKdPFXpyEViyptC9+iCRzirF7m -----END CERTIFICATE-----Generated at Tue May 12 22:45:29 2026 by rpki-client