$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer (raw, json) Hash identifier: qGyeINYEirvdYqDSQ6vxRFx5cXoRbBQViWrXXczxviM= Subject key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59E0A39781CABB702EA0CE39AB740483D4D8F7EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:52:20 +0000 Certificate not after: Sun 02 May 2027 01:57:20 +0000 Subordinate resources: IP: 2001:df3:98c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e0:a3:97:81:ca:bb:70:2e:a0:ce:39:ab:74:04:83:d4:d8:f7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:52:20 2026 GMT Not After : May 2 01:57:20 2027 GMT Subject: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:08:76:3d:3e:9b:9e:37:71:0c:72:80:22: 1f:71:f4:da:23:5a:5d:59:21:be:da:f2:c3:c2:bc: 3b:04:5b:76:df:d1:cf:36:82:3a:cb:23:35:70:a5: 6e:aa:64:59:51:9a:e2:68:0f:53:36:df:fe:cb:e3: 6a:d2:19:d3:ef:fb:d9:b4:45:d6:a2:5e:fb:97:df: cf:a0:6c:81:61:00:86:60:a8:bf:ab:84:a9:e1:08: 1c:42:15:ec:b7:89:3d:5c:1e:4b:32:a9:c3:c3:02: 96:87:35:d9:64:53:88:b8:11:2b:86:38:aa:9e:ab: 1e:c5:87:5b:7f:1f:84:2e:61:86:12:07:5d:6e:d5: 97:fc:df:b5:f3:51:3e:be:cd:a9:41:50:64:86:8e: 6a:09:60:bf:d5:e7:d0:3b:31:a8:21:18:ac:53:d3: c3:a5:5f:e0:c7:a4:b7:41:da:26:e9:f4:ce:c7:17: c3:39:7a:01:57:b3:22:f8:c0:90:e4:0f:fa:8a:b3: 3b:5f:32:29:7e:39:fb:d3:6b:42:99:cf:4a:9d:a0: fb:b2:8a:dc:b6:44:a8:4e:37:ed:e1:ff:90:f6:79: b1:fb:a9:21:69:92:00:4b:2b:74:08:0e:8f:cf:a4: 66:34:5a:47:c9:67:70:8c:8e:d5:7e:f0:41:dd:0a: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 2d:10:b3:a8:be:7f:1f:9c:98:10:96:7f:cb:76:4c:ff:3c:2c: 40:9a:2b:49:31:8e:c5:51:36:30:cc:ee:46:5a:69:41:f3:d8: 5f:29:4e:05:0e:a8:f1:58:ce:1c:9c:a8:da:04:d8:1a:28:89: 07:35:1a:15:0b:1b:cc:b9:cb:89:52:f9:af:26:7b:dd:43:ba: 20:63:56:23:e7:0e:6c:1c:be:ee:35:b0:81:07:7d:5c:1e:9d: ca:e7:05:05:cc:ea:49:14:ea:80:52:32:0e:0c:14:e7:5a:4e: a1:3a:84:7c:9a:78:7a:eb:ed:48:39:e4:03:eb:99:f9:0e:a1: 1c:06:dc:60:a2:8e:3d:63:36:e5:98:35:df:95:ad:49:43:d6: a7:90:04:6e:b5:31:4e:6e:2f:24:a4:ee:7a:12:65:4e:c3:73: c2:7e:2f:20:6c:d5:ce:50:2b:22:8c:d2:8d:c4:98:91:f2:f9: ed:4d:10:57:64:05:47:0c:1d:55:51:2c:4e:db:82:53:a7:d9: 1f:d1:fa:5d:17:78:f3:b9:2b:26:4a:7c:9e:2b:bd:2b:70:88: b3:87:8e:61:88:7e:d8:60:15:28:17:87:f5:a5:5f:f3:5b:83: 70:75:c5:6c:11:92:9b:5d:e1:7a:a2:ae:a4:fe:3d:67:e4:24: c0:de:72:2e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWeCjl4HKu3AuoM45q3QEg9TY9+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTIyMFoX DTI3MDUwMjAxNTcyMFowMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdE Q0MxOTc4RTI3MTAxMkQ1NEQyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHvCHY9PpueN3EMcoAiH3H02iNaXVkhvtryw8K8OwRbdt/RzzaCOssjNXCl bqpkWVGa4mgPUzbf/svjatIZ0+/72bRF1qJe+5ffz6BsgWEAhmCov6uEqeEIHEIV 7LeJPVweSzKpw8MCloc12WRTiLgRK4Y4qp6rHsWHW38fhC5hhhIHXW7Vl/zftfNR Pr7NqUFQZIaOaglgv9Xn0DsxqCEYrFPTw6Vf4Mekt0HaJun0zscXwzl6AVezIvjA kOQP+oqzO18yKX45+9NrQpnPSp2g+7KK3LZEqE437eH/kPZ5sfupIWmSAEsrdAgO j8+kZjRaR8lncIyO1X7wQd0Kho8CAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKPC47IU4lRcTTfcwZeOJxAS1U0rMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M4MmI4ZjU2LThlODItNDY0NC1iMDQ5LTJjNWMyZmZiNGQ5OS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jODJiOGY1 Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS9BM0MyRTNCMjE0RTI1NDVD NEQzN0RDQzE5NzhFMjcxMDEyRDU0RDJCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN85jAMA0GCSqGSIb3DQEBCwUAA4IBAQAtELOovn8fnJgQln/Ldkz/PCxA mitJMY7FUTYwzO5GWmlB89hfKU4FDqjxWM4cnKjaBNgaKIkHNRoVCxvMucuJUvmv JnvdQ7ogY1Yj5w5sHL7uNbCBB31cHp3K5wUFzOpJFOqAUjIODBTnWk6hOoR8mnh6 6+1IOeQD65n5DqEcBtxgoo49YzblmDXfla1JQ9ankARutTFObi8kpO56EmVOw3PC fi8gbNXOUCsijNKNxJiR8vntTRBXZAVHDB1VUSxO24JTp9kf0fpdF3jzuSsmSnye K70rcIizh45hiH7YYBUoF4f1pV/zW4NwdcVsEZKbXeF6oq6k/j1n5CTA3nIu -----END CERTIFICATE-----Generated at Tue May 12 22:03:28 2026 by rpki-client