$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer (raw, json) Hash identifier: 0goZ3eBOHt/+6boRvT0xgN2k/Y+S1Pq70dw9WiQhC5w= Subject key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5279C81D06560E21EB46AECD1670E120ADCA3BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:37 +0000 Certificate not after: Sun 02 May 2027 00:22:37 +0000 Subordinate resources: IP: 202.93.112.0/20 IP: 2401:1440::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:79:c8:1d:06:56:0e:21:eb:46:ae:cd:16:70:e1:20:ad:ca:3b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:37 2026 GMT Not After : May 2 00:22:37 2027 GMT Subject: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:ed:78:b4:30:3f:ac:4a:fc:79:a5:d7:b2: 27:ce:6a:ca:1b:a1:1c:6a:e4:b3:01:50:89:90:66: 85:1a:ad:2f:33:28:d8:c8:a2:1a:d4:13:44:41:cc: 2e:78:62:2d:26:32:e0:c4:8a:75:d4:32:3a:74:2f: 42:13:77:b9:86:68:d6:33:93:6c:a7:5e:28:f9:d9: c8:5e:77:20:be:9c:e8:bd:ad:46:d9:7a:79:70:f8: 08:42:79:5e:aa:c3:27:9f:29:36:bf:6c:dc:83:30: 39:ea:83:a5:66:29:41:ef:a8:4a:f6:2e:51:72:7c: 17:4c:3b:18:d4:61:c1:50:f1:72:ca:e9:4d:df:6d: dc:7b:70:9f:da:42:6b:07:c8:ff:db:6d:d3:07:9f: b8:3a:7e:fc:62:c0:f9:59:fe:e2:c0:d4:f7:60:77: af:b6:a8:d8:6a:63:04:97:af:27:f3:7f:3c:20:ae: a1:d1:ce:75:87:f3:46:72:26:44:ec:3a:35:38:9a: 95:84:9f:17:f8:cc:8e:5b:a9:ff:90:62:9e:97:0b: b9:02:70:7e:38:0b:08:7b:9a:4d:56:06:43:5d:43: 54:2c:47:de:30:6d:bc:45:df:b0:c2:10:e0:68:3d: 47:fc:6f:cd:42:e1:8c:80:62:1c:ce:7e:3c:2e:bc: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.112.0/20 IPv6: 2401:1440::/32 Signature Algorithm: sha256WithRSAEncryption 97:9f:cd:3f:6f:bb:56:9f:cd:42:1a:2b:2c:cb:9c:33:f5:18: 88:e4:32:75:1f:50:eb:10:ed:a8:27:78:c9:e4:7b:de:e6:76: 4a:f2:0c:f2:d3:78:f6:c6:5b:56:a1:71:ca:40:08:27:2d:f0: 1b:38:da:14:54:5a:c3:cd:c3:fd:dc:ac:fb:c6:d6:2d:35:e1: 7a:96:73:63:b8:72:b8:53:9b:dc:e9:8f:51:68:80:2a:8d:9e: 6c:72:c1:97:49:9f:44:c4:92:55:ae:2b:c7:b8:cc:a5:e9:33: 51:0d:da:4d:c9:13:a1:99:cb:21:b3:c4:35:3f:7e:03:23:e5: 06:c9:28:fe:d1:c6:64:63:56:8e:41:d5:99:e4:b7:51:2b:d2: 6f:32:f2:f9:aa:0b:7b:97:93:78:d4:7c:50:9c:d0:92:cf:22: 37:66:9a:8b:69:b6:35:87:a6:41:ba:7b:df:b0:b5:bc:20:1b: 93:ab:84:36:e6:60:bd:59:29:30:51:ad:d3:42:1e:1f:b6:d3: ff:ad:1d:2e:40:63:d7:07:ca:3d:90:fe:3c:55:ce:cd:ee:27: 8d:af:97:4b:4c:02:db:8f:c0:2c:a1:c1:9d:8f:c2:bf:9a:01: 0b:f5:9b:2c:ad:f2:85:c8:4a:f8:be:dd:d7:f0:d6:00:01:d3: 8c:ac:9a:78 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUUnnIHQZWDiHrRq7NFnDhIK3KO/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTczN1oX DTI3MDUwMjAwMjIzN1owMzExMC8GA1UEAxMoQjVBRTdENzlCMjI5NTY1REI1QTlD NEU3NENEMDM4RTUzRjk4NEJGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL97Xi0MD+sSvx5pdeyJ85qyhuhHGrkswFQiZBmhRqtLzMo2MiiGtQTREHM LnhiLSYy4MSKddQyOnQvQhN3uYZo1jOTbKdeKPnZyF53IL6c6L2tRtl6eXD4CEJ5 XqrDJ58pNr9s3IMwOeqDpWYpQe+oSvYuUXJ8F0w7GNRhwVDxcsrpTd9t3Htwn9pC awfI/9tt0wefuDp+/GLA+Vn+4sDU92B3r7ao2GpjBJevJ/N/PCCuodHOdYfzRnIm ROw6NTialYSfF/jMjlup/5BinpcLuQJwfjgLCHuaTVYGQ11DVCxH3jBtvEXfsMIQ 4Gg9R/xvzULhjIBiHM5+PC683pMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLWufXmyKVZdtanE50zQOOU/mEv1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM4YzczOTZjLTRiYmUtNGM2ZS04ZjUwLTQ0MmMyMDVlMDcwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zOGM3Mzk2 Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC9CNUFFN0Q3OUIyMjk1NjVE QjVBOUM0RTc0Q0QwMzhFNTNGOTg0QkY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQEyl1wMA0EAgACMAcDBQAkARRAMA0GCSqGSIb3DQEBCwUAA4IBAQCXn80/b7tW n81CGissy5wz9RiI5DJ1H1DrEO2oJ3jJ5Hve5nZK8gzy03j2xltWoXHKQAgnLfAb ONoUVFrDzcP93Kz7xtYtNeF6lnNjuHK4U5vc6Y9RaIAqjZ5scsGXSZ9ExJJVrivH uMyl6TNRDdpNyROhmcshs8Q1P34DI+UGySj+0cZkY1aOQdWZ5LdRK9JvMvL5qgt7 l5N41HxQnNCSzyI3ZpqLabY1h6ZBunvfsLW8IBuTq4Q25mC9WSkwUa3TQh4fttP/ rR0uQGPXB8o9kP48Vc7N7ieNr5dLTALbj8AsocGdj8K/mgEL9ZssrfKFyEr4vt3X 8NYAAdOMrJp4 -----END CERTIFICATE-----Generated at Tue May 12 22:47:32 2026 by rpki-client