$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer (raw, json) Hash identifier: aAJhyJxMSFqJ6HWpK8DvEulRHuMAuutBNTp6poDArSs= Subject key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 242A64875868CDB680ADC722B9F4BB77CA1ABDAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:21 +0000 Certificate not after: Sun 02 May 2027 00:50:21 +0000 Subordinate resources: IP: 49.156.56.0/23 IP: 49.156.60.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2a:64:87:58:68:cd:b6:80:ad:c7:22:b9:f4:bb:77:ca:1a:bd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:21 2026 GMT Not After : May 2 00:50:21 2027 GMT Subject: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:d6:84:c3:45:39:15:61:c2:23:49:5f:ac: db:79:0d:56:55:93:9b:82:2f:5a:66:0d:e6:0e:06: 9e:14:2a:a9:05:e6:b6:d4:2b:71:51:b3:bd:f3:4a: 0f:28:44:bd:1d:9d:29:bb:3b:0f:25:1e:f1:7c:1e: d4:63:fe:fc:5b:0d:0b:63:74:36:ef:c4:2f:fc:f5: 39:62:64:10:d1:3f:f0:45:c3:75:b0:8f:c3:32:0b: 9e:b2:f3:fa:12:fb:ed:7d:52:ee:6a:da:a3:15:2c: 3d:80:6e:24:b5:42:03:7d:0f:98:7a:6a:c6:8a:da: 56:ed:50:a9:2f:7e:12:4b:3c:fb:c3:88:45:87:c9: 04:87:37:d7:90:ec:33:4f:45:21:78:59:29:71:6f: 03:ce:72:26:36:87:5b:38:43:c9:5c:78:9f:d1:99: a1:7e:3d:03:b8:d6:88:fa:f8:64:5f:74:7d:9f:49: 13:4a:82:f3:42:1a:96:c2:44:5e:c2:c0:3e:79:9e: 0f:76:1b:3c:42:e6:57:24:c5:0b:94:0d:a6:49:cd: 7e:9c:89:0f:8b:ae:a8:e2:9f:dd:c6:35:9e:fe:6e: 3b:41:d0:71:7f:a1:3a:c9:a9:65:7f:4b:d5:c8:7c: 7a:bc:ff:b0:90:7b:d6:f5:c9:15:35:44:08:40:cb: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.156.56.0/23 49.156.60.0/24 Signature Algorithm: sha256WithRSAEncryption 08:ee:56:17:6e:28:5e:af:8f:5c:50:33:58:09:ec:92:c7:a2: 6a:d5:a8:9b:b5:9c:e6:0a:49:0e:5d:42:8b:10:14:a1:2d:dc: e3:2a:de:bc:8b:55:23:1d:03:a0:21:bc:c8:c5:e0:61:09:80: b6:1e:d1:11:fc:12:49:59:68:99:42:8c:2c:f0:f3:0a:a7:e1: c4:a5:11:f3:a8:87:fd:29:d4:79:8e:46:0a:2b:0d:3e:3a:43: 1e:30:6a:de:1c:d3:25:86:81:d5:52:d8:fd:90:c8:1f:bf:fa: b9:6f:d0:b8:07:18:12:87:95:45:19:11:c0:13:92:94:72:c6: fb:61:4a:15:4e:39:b0:e8:0b:38:26:ee:4b:59:78:22:b1:98: ff:d4:5d:01:f4:1b:97:02:bf:fb:ce:39:5c:74:b4:98:3a:67: 25:38:f1:a6:19:56:0e:d8:85:70:44:f9:93:ca:74:57:c0:fc: 6d:ff:d9:fd:fd:13:32:22:96:07:8c:c5:d1:da:30:f3:bb:ed: b2:73:44:58:f5:5c:0d:91:3a:d5:4b:66:4d:c0:50:79:6b:94: 40:3f:5d:cb:4b:04:1b:25:cb:ff:e6:c1:e6:ad:7c:1a:29:d1: 24:9a:c0:6b:28:a1:5d:69:d8:d2:eb:9c:7a:b8:b7:43:36:f2: 0e:9b:cc:a8 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUJCpkh1hozbaArcciufS7d8oava4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDUyMVoX DTI3MDUwMjAwNTAyMVowMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1 RTRDN0I0NzVFMjIyNzY0NTBGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMn1oTDRTkVYcIjSV+s23kNVlWTm4IvWmYN5g4GnhQqqQXmttQrcVGzvfNK DyhEvR2dKbs7DyUe8Xwe1GP+/FsNC2N0Nu/EL/z1OWJkENE/8EXDdbCPwzILnrLz +hL77X1S7mraoxUsPYBuJLVCA30PmHpqxoraVu1QqS9+Eks8+8OIRYfJBIc315Ds M09FIXhZKXFvA85yJjaHWzhDyVx4n9GZoX49A7jWiPr4ZF90fZ9JE0qC80IalsJE XsLAPnmeD3YbPELmVyTFC5QNpknNfpyJD4uuqOKf3cY1nv5uO0HQcX+hOsmpZX9L 1ch8erz/sJB71vXJFTVECEDLHvsCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJWIkF3l2jzre1deTHtHXiInZFDwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYyMDZjZjUwLWEzZDEtNGNjOS05MjYwLTk4N2IyY2EwYzkyNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MjA2Y2Y1 MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC85NTg4OTA1REU1REEzQ0VC N0I1NzVFNEM3QjQ3NUUyMjI3NjQ1MEYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQBMZw4AwQAMZw8MA0GCSqGSIb3DQEBCwUAA4IBAQAI7lYXbiher49cUDNYCeyS x6Jq1aibtZzmCkkOXUKLEBShLdzjKt68i1UjHQOgIbzIxeBhCYC2HtER/BJJWWiZ Qows8PMKp+HEpRHzqIf9KdR5jkYKKw0+OkMeMGreHNMlhoHVUtj9kMgfv/q5b9C4 BxgSh5VFGRHAE5KUcsb7YUoVTjmw6As4Ju5LWXgisZj/1F0B9BuXAr/7zjlcdLSY OmclOPGmGVYO2IVwRPmTynRXwPxt/9n9/RMyIpYHjMXR2jDzu+2yc0RY9VwNkTrV S2ZNwFB5a5RAP13LSwQbJcv/5sHmrXwaKdEkmsBrKKFdadjS65x6uLdDNvIOm8yo -----END CERTIFICATE-----Generated at Wed May 13 00:44:25 2026 by rpki-client