$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer (raw, json) Hash identifier: EkcNfgke9+C8Rxf5w5QdaNfLdLf9qmF92PL+UALj43w= Subject key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59C2B9D55B123B970569EE0F333E73ABE84B2179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:57:46 +0000 Certificate not after: Sun 02 May 2027 01:02:46 +0000 Subordinate resources: IP: 163.128.35.0/24 IP: 2001:df6:cec0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c2:b9:d5:5b:12:3b:97:05:69:ee:0f:33:3e:73:ab:e8:4b:21:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:57:46 2026 GMT Not After : May 2 01:02:46 2027 GMT Subject: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:50:51:bc:27:c3:6a:06:46:c8:a7:c8:f8: c7:b7:b0:82:18:4b:94:be:71:dd:87:28:87:35:06: c7:c0:21:47:ca:9b:af:58:30:71:29:4d:a3:2b:e1: 37:04:3e:a9:b5:d7:05:be:bb:a6:3f:8c:08:9a:b2: 81:78:ca:a4:4c:79:94:43:98:76:b0:d7:24:6c:1b: 50:75:bf:5e:69:46:73:63:30:2a:74:16:e0:92:52: 9b:cc:09:ad:72:a6:ed:60:7a:20:1c:4e:78:fe:6e: 3b:a3:f4:18:08:7e:47:a5:bf:92:7c:b1:8f:8f:78: 0e:91:51:df:e8:f2:3e:56:cf:31:ea:16:c2:cb:1c: 48:22:3e:33:b0:08:63:d3:13:37:86:09:8e:69:3b: 49:42:ca:2d:7c:8b:e4:8e:f1:fe:ae:d3:82:7b:48: 54:2e:02:65:51:ff:bc:4b:89:83:8e:cf:a5:b9:5b: 36:41:2d:30:86:82:b1:39:36:81:d4:d9:aa:8e:82: 92:80:32:18:16:46:cc:a9:2f:f5:0f:e5:80:5e:fb: b1:8e:55:2c:6a:1c:f9:a9:1c:09:4d:c4:4b:fd:b0: fc:1d:47:97:b9:52:f1:09:28:e4:48:86:2a:3e:78: 1f:49:08:07:d4:71:31:22:c3:0b:ed:7c:6a:3b:35: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.35.0/24 IPv6: 2001:df6:cec0::/48 Signature Algorithm: sha256WithRSAEncryption 2a:7a:0a:23:18:fd:a4:2c:80:8c:f3:ac:c6:24:cf:78:04:88: 4f:ca:79:34:08:ae:df:54:9f:89:cb:21:bf:53:1a:de:43:eb: 8c:df:1a:b1:eb:ad:8d:d0:05:1a:20:ed:09:64:42:03:90:79: 9e:0d:d3:33:77:59:a2:fe:51:a3:6d:82:9e:34:76:15:93:82: aa:f8:8d:c1:c3:29:12:f7:93:51:ae:d2:43:02:2d:a3:68:a0: c8:dd:70:82:ca:73:73:cd:b7:a5:a0:5f:27:64:9d:88:e1:14: d2:a9:32:f9:f0:af:e2:3f:43:90:84:c7:1c:08:19:42:1c:bc: 02:8e:53:c7:e9:f6:c2:3c:43:17:93:c3:d7:74:15:b7:d9:4a: 67:37:fb:ce:b8:5e:a1:05:f3:6b:ed:a5:1e:bb:99:7a:02:51: 0d:4f:a7:3f:75:a5:f8:48:e5:0f:c6:3f:0f:a5:79:ff:35:f5: 44:31:bc:b4:08:31:61:32:54:ce:91:04:62:78:5c:43:1c:56: 48:41:20:d7:76:9d:41:85:fc:cd:90:56:3a:23:3e:eb:38:47: 61:a1:bd:39:76:98:df:39:c8:a9:a9:33:1f:dc:f4:99:95:3c: 69:96:02:26:a9:99:0e:55:64:3d:57:d3:03:51:db:48:ce:99: b7:df:14:c9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUWcK51VsSO5cFae4PMz5zq+hLIXkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTc0NloX DTI3MDUwMjAxMDI0NlowMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0Ey REY1NTZGNjRGOThCQjY4QjFFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQ1UFG8J8NqBkbIp8j4x7ewghhLlL5x3YcohzUGx8AhR8qbr1gwcSlNoyvh NwQ+qbXXBb67pj+MCJqygXjKpEx5lEOYdrDXJGwbUHW/XmlGc2MwKnQW4JJSm8wJ rXKm7WB6IBxOeP5uO6P0GAh+R6W/knyxj494DpFR3+jyPlbPMeoWwsscSCI+M7AI Y9MTN4YJjmk7SULKLXyL5I7x/q7TgntIVC4CZVH/vEuJg47PpblbNkEtMIaCsTk2 gdTZqo6CkoAyGBZGzKkv9Q/lgF77sY5VLGoc+akcCU3ES/2w/B1Hl7lS8Qko5EiG Kj54H0kIB9RxMSLDC+18ajs1PCsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKKzg/mNCdPEQ8ot9Vb2T5i7aLHiMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc1NTY0ZTc5LWI2NzktNDZkNS1iMWZkLTAyOGQxNzdiNjhjMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NTU2NGU3 OS1iNjc5LTQ2ZDUtYjFmZC0wMjhkMTc3YjY4YzAvMC9BMkIzODNGOThEMDlEM0M0 NDNDQTJERjU1NkY2NEY5OEJCNjhCMUUyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAo4AjMA8EAgACMAkDBwAgAQ32zsAwDQYJKoZIhvcNAQELBQADggEBACp6CiMY /aQsgIzzrMYkz3gEiE/KeTQIrt9Un4nLIb9TGt5D64zfGrHrrY3QBRog7QlkQgOQ eZ4N0zN3WaL+UaNtgp40dhWTgqr4jcHDKRL3k1Gu0kMCLaNooMjdcILKc3PNt6Wg XydknYjhFNKpMvnwr+I/Q5CExxwIGUIcvAKOU8fp9sI8QxeTw9d0FbfZSmc3+864 XqEF82vtpR67mXoCUQ1Ppz91pfhI5Q/GPw+lef819UQxvLQIMWEyVM6RBGJ4XEMc VkhBINd2nUGF/M2QVjojPus4R2GhvTl2mN85yKmpMx/c9JmVPGmWAiapmQ5VZD1X 0wNR20jOmbffFMk= -----END CERTIFICATE-----Generated at Wed May 13 01:07:12 2026 by rpki-client