$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer File: 994E7625F275D75C44DFB4A7ADF4842506F11789.cer (raw, json) Hash identifier: 5dCGoEQtquziHAR04J8PnWH79culFC9NR0+EwE8Q0qQ= Subject key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0981377B091CADE8A3DA4D81A65EA9D4462545E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:48:52 +0000 Certificate not after: Sat 01 May 2027 23:53:52 +0000 Subordinate resources: IP: 2001:df3:e5c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:81:37:7b:09:1c:ad:e8:a3:da:4d:81:a6:5e:a9:d4:46:25:45:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:48:52 2026 GMT Not After : May 1 23:53:52 2027 GMT Subject: CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:fb:5c:ed:97:d4:ca:58:96:2d:c4:62:3d: cc:70:45:b1:4c:03:52:e3:c6:36:e6:75:d9:1c:c2: c5:da:7a:53:b2:87:3b:4a:90:d2:b8:4d:96:4e:dd: fb:f6:73:9a:89:a7:bb:cf:b3:18:af:75:50:c6:3e: a6:f1:bb:01:0b:8f:bf:cd:41:51:ae:f0:39:fd:32: 3c:d2:32:54:f9:c1:8d:8d:c3:c4:99:9e:5e:6e:2a: 76:83:de:76:d4:b2:fd:70:c3:eb:b2:5a:2e:cc:6c: 20:94:56:a8:d1:76:6f:a1:ae:b5:8e:81:b0:5a:47: 98:df:f6:87:25:c6:fb:3c:98:af:34:81:90:44:1f: c0:f4:ff:19:9a:db:30:1b:ec:7f:b7:55:66:b6:95: 74:05:43:c8:ab:54:f0:41:b0:b0:c1:63:cf:77:0e: 9d:7b:82:0a:b8:da:ee:07:2e:d9:c3:50:15:2c:8b: 92:6b:79:07:4d:24:0e:73:4c:bb:35:7d:db:d2:a0: 95:12:9d:ca:01:03:6c:b8:5d:88:34:f7:2d:35:af: 72:e8:4e:aa:66:b4:b7:37:15:30:e5:7c:29:b7:7d: 34:27:46:12:28:1f:d8:de:2d:5f:ba:e6:0f:1c:b0: 72:68:f8:76:4e:4f:a0:83:67:52:6b:b4:aa:3c:b4: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:e5c0::/48 Signature Algorithm: sha256WithRSAEncryption 24:a8:d4:05:1e:54:6b:1c:c8:99:45:98:9a:00:c4:d0:6e:2b: d7:c8:95:62:4a:1e:3b:68:5c:1d:e6:1a:7c:d8:07:8c:25:4a: 49:7d:eb:28:0b:68:fc:56:41:1d:98:62:ec:49:64:fd:48:9c: 7b:2d:dd:35:64:ee:f8:e6:54:1b:3a:24:dc:e4:d6:a4:9a:73: eb:c0:d1:70:11:d9:3b:09:b1:f5:f5:43:fa:bf:74:da:45:6a: ae:38:60:f0:cc:34:da:ad:b9:15:9c:ca:9b:3b:12:4c:de:92: 03:68:c6:fc:a2:6e:89:b6:bf:2c:f6:23:c0:43:c4:d6:59:50: e9:0e:ae:b6:ea:08:b7:fe:83:a9:10:ef:c8:c6:c6:ea:06:9a: d2:9e:65:ad:39:18:9c:ae:35:d6:73:60:34:1f:3f:d5:bd:7c: 54:57:70:3d:7f:76:c1:e7:45:48:6a:d0:2f:1f:2d:a9:b1:22: e9:ae:4a:07:d5:16:6a:33:97:61:e7:3a:2b:ef:5e:e6:a8:93: 76:46:25:07:d7:b0:ea:ad:fd:9b:2e:c0:d2:3f:05:da:19:0d: 45:f9:66:76:30:84:13:b3:fc:38:d7:89:27:55:cb:ea:bc:37: 8a:e8:1e:33:4b:68:c0:c0:44:1c:a7:c3:c8:67:8f:5d:74:59: 61:cc:23:15 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCYE3ewkcreij2k2Bpl6p1EYlRekwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDg1MloX DTI3MDUwMTIzNTM1MlowMzExMC8GA1UEAxMoOTk0RTc2MjVGMjc1RDc1QzQ0REZC NEE3QURGNDg0MjUwNkYxMTc4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+V+1ztl9TKWJYtxGI9zHBFsUwDUuPGNuZ12RzCxdp6U7KHO0qQ0rhNlk7d +/Zzmomnu8+zGK91UMY+pvG7AQuPv81BUa7wOf0yPNIyVPnBjY3DxJmeXm4qdoPe dtSy/XDD67JaLsxsIJRWqNF2b6GutY6BsFpHmN/2hyXG+zyYrzSBkEQfwPT/GZrb MBvsf7dVZraVdAVDyKtU8EGwsMFjz3cOnXuCCrja7gcu2cNQFSyLkmt5B00kDnNM uzV929KglRKdygEDbLhdiDT3LTWvcuhOqma0tzcVMOV8Kbd9NCdGEigf2N4tX7rm Dxywcmj4dk5PoINnUmu0qjy0VocCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJlOdiXydddcRN+0p630hCUG8ReJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBlYzY3N2ZkLWQ1NjktNGNjNS1hNTYzLTliMGYyNDhiMWFmMS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZWM2Nzdm ZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS85OTRFNzYyNUYyNzVENzVD NDRERkI0QTdBREY0ODQyNTA2RjExNzg5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN8+XAMA0GCSqGSIb3DQEBCwUAA4IBAQAkqNQFHlRrHMiZRZiaAMTQbivX yJViSh47aFwd5hp82AeMJUpJfesoC2j8VkEdmGLsSWT9SJx7Ld01ZO745lQbOiTc 5NakmnPrwNFwEdk7CbH19UP6v3TaRWquOGDwzDTarbkVnMqbOxJM3pIDaMb8om6J tr8s9iPAQ8TWWVDpDq626gi3/oOpEO/IxsbqBprSnmWtORicrjXWc2A0Hz/VvXxU V3A9f3bB50VIatAvHy2psSLprkoH1RZqM5dh5zor717mqJN2RiUH17Dqrf2bLsDS PwXaGQ1F+WZ2MIQTs/w414knVcvqvDeK6B4zS2jAwEQcp8PIZ49ddFlhzCMV -----END CERTIFICATE-----Generated at Tue May 12 22:03:44 2026 by rpki-client