$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer File: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer (raw, json) Hash identifier: h4hwI2hW9Rpi8WnnVXjQA1Z+SXZBoNomxVVtiLvmQHc= Subject key identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 370BB4BF373DD1F4BADE149316265A8C1494B744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft caRepository: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 22:48:44 +0000 Certificate not after: Sat 01 May 2027 22:53:44 +0000 Subordinate resources: IP: 36.50.253.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0b:b4:bf:37:3d:d1:f4:ba:de:14:93:16:26:5a:8c:14:94:b7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 22:48:44 2026 GMT Not After : May 1 22:53:44 2027 GMT Subject: CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:a7:93:1f:e4:fc:87:5c:72:e0:e8:ab:67: 9a:44:dc:32:12:c6:dc:27:c3:20:b6:70:b8:36:2e: 7b:e0:fe:c9:30:30:da:0a:40:67:df:f9:d5:9e:b4: a7:38:ec:ca:f2:b6:ba:b6:b9:c5:f5:ca:8d:c0:12: cc:e4:43:14:0c:57:47:d7:33:e8:f0:89:49:99:58: 54:83:88:ad:69:ec:28:0b:8f:4c:e1:76:1a:a2:78: 12:26:74:53:52:ec:bc:1b:04:69:38:20:8c:da:eb: 41:c3:7c:bf:d7:1d:7f:56:50:e4:56:61:79:e5:f4: 5c:bc:de:51:b8:c1:11:45:8d:93:60:71:b9:34:80: 3a:d7:1a:20:4a:3f:46:83:54:b8:50:0b:64:10:f6: aa:f4:1c:72:11:c3:2f:59:21:98:67:e6:d7:a9:10: 4e:3e:d2:24:96:4e:af:cd:80:13:cd:03:4c:b6:60: cb:6b:a6:cc:68:46:3c:db:b4:bc:68:74:94:2c:d3: 95:d1:7c:18:62:3e:51:80:f5:56:6a:41:8a:5d:98: e0:42:de:52:96:77:62:03:6f:ed:5d:31:cb:4e:7a: 3d:74:e9:70:d5:d4:c3:da:a4:67:87:ab:35:27:1a: c4:fe:97:0d:3e:a5:1f:cb:5d:54:56:37:a6:8b:35: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.253.0/24 Signature Algorithm: sha256WithRSAEncryption 79:91:e2:04:36:cb:f4:0a:f4:2d:fb:4b:4d:8a:b0:19:dd:f6: 0b:53:34:f9:91:ba:07:46:74:7e:e8:db:12:c8:ac:94:0d:f0: f2:2f:a8:2c:96:a5:90:0f:bc:2f:94:5c:e6:c2:31:76:68:66: ae:ee:ab:91:21:b5:8d:f2:fb:2b:45:b4:df:ef:a7:a1:cd:ee: 75:77:f9:47:bc:fa:31:dc:87:30:dd:2e:d6:b7:cc:5a:7e:ed: 27:51:f2:7e:fa:85:5a:78:2b:3f:d1:42:44:99:6b:67:9f:2e: 3e:ec:1f:60:1b:84:96:10:35:d0:7e:91:a3:9c:97:b1:b0:7d: e9:16:60:7c:81:4b:0c:18:9e:a9:6f:ac:23:3a:5e:57:c2:2c: ea:53:74:a0:14:1c:ca:d3:39:db:d4:0a:10:45:90:9b:cc:1e: 64:1e:38:29:46:38:c8:ff:13:8a:bc:a1:a1:35:00:2c:1e:3e: 62:85:30:90:9b:99:71:6a:10:f1:b6:2a:f0:de:32:eb:76:d0: 9e:8b:64:5b:d2:f8:da:e4:9b:c0:dd:f1:95:71:4c:d7:88:7b: a6:88:6a:fb:a6:d1:3d:00:70:e3:91:ff:10:2c:50:fb:19:c2: b3:e7:a9:5b:3b:9d:60:b3:87:59:29:79:43:96:bf:c0:c4:cb: 1e:c5:f7:34 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNwu0vzc90fS63hSTFiZajBSUt0QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIyNDg0NFoX DTI3MDUwMTIyNTM0NFowMzExMC8GA1UEAxMoQTk0MTkyQ0IyNjJGQTc4QzVGQzY3 Q0UxOEJEQjlDQ0YxRjQyRDU4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKp8p5Mf5PyHXHLg6KtnmkTcMhLG3CfDILZwuDYue+D+yTAw2gpAZ9/51Z60 pzjsyvK2ura5xfXKjcASzORDFAxXR9cz6PCJSZlYVIOIrWnsKAuPTOF2GqJ4EiZ0 U1LsvBsEaTggjNrrQcN8v9cdf1ZQ5FZheeX0XLzeUbjBEUWNk2BxuTSAOtcaIEo/ RoNUuFALZBD2qvQcchHDL1khmGfm16kQTj7SJJZOr82AE80DTLZgy2umzGhGPNu0 vGh0lCzTldF8GGI+UYD1VmpBil2Y4ELeUpZ3YgNv7V0xy056PXTpcNXUw9qkZ4er NScaxP6XDT6lH8tdVFY3pos1JTECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKlBkssmL6eMX8Z84YvbnM8fQtWJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAwYTZmZWFhLTZiNGYtNDdjZi05ZTNjLTAwYWVhYzY3YTMyYS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMGE2ZmVh YS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS9BOTQxOTJDQjI2MkZBNzhD NUZDNjdDRTE4QkRCOUNDRjFGNDJENTg5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAJDL9MA0GCSqGSIb3DQEBCwUAA4IBAQB5keIENsv0CvQt+0tNirAZ3fYLUzT5 kboHRnR+6NsSyKyUDfDyL6gslqWQD7wvlFzmwjF2aGau7quRIbWN8vsrRbTf76eh ze51d/lHvPox3Icw3S7Wt8xafu0nUfJ++oVaeCs/0UJEmWtnny4+7B9gG4SWEDXQ fpGjnJexsH3pFmB8gUsMGJ6pb6wjOl5XwizqU3SgFBzK0znb1AoQRZCbzB5kHjgp RjjI/xOKvKGhNQAsHj5ihTCQm5lxahDxtirw3jLrdtCei2Rb0vja5JvA3fGVcUzX iHumiGr7ptE9AHDjkf8QLFD7GcKz56lbO51gs4dZKXlDlr/AxMsexfc0 -----END CERTIFICATE-----Generated at Wed May 13 02:12:47 2026 by rpki-client