$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer File: C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer (raw, json) Hash identifier: DMPOLf3FdU9U6gAWz7yx70JxeZRLGZBV2wlh+r4x+D8= Subject key identifier: C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6AE86EE2964BA0616E45CA1C9A95E9B7BEB9B02C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:58:13 +0000 Certificate not after: Sun 02 May 2027 00:03:13 +0000 Subordinate resources: IP: 2001:df3:e040::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e8:6e:e2:96:4b:a0:61:6e:45:ca:1c:9a:95:e9:b7:be:b9:b0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:58:13 2026 GMT Not After : May 2 00:03:13 2027 GMT Subject: CN=C26EDB3142A0D7089EB5B4DE81D381D57270DFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a8:1c:7b:63:dd:73:f1:72:8a:ec:4e:ce:ba: ea:dc:9c:a2:c4:86:df:8b:a6:24:00:d3:17:15:8f: df:78:e3:3b:e4:13:25:fe:34:a7:11:ea:65:17:09: fc:67:72:7f:61:ec:6f:df:12:f7:52:a6:ae:50:d4: e2:23:99:2b:c1:f0:c7:63:83:fb:35:a9:8e:d4:f1: b4:f4:10:d1:ae:a6:b3:19:af:90:5a:76:12:9f:67: 37:40:c0:05:c9:c3:c1:09:79:2e:4f:33:d6:b4:51: 42:83:6a:2c:59:f8:d4:22:8a:d9:7c:d3:c4:75:fa: 31:25:ca:f3:e1:b2:2d:74:4e:5d:09:6e:a5:8e:54: 68:88:98:05:93:37:df:1f:71:9e:f5:10:8f:f6:45: 73:84:7d:6a:92:2e:93:9d:cc:6a:32:70:9f:3b:e2: 3d:ca:bc:76:11:6d:77:2f:63:03:98:7d:52:a7:bb: 08:7a:3d:db:4d:17:1a:1d:94:c7:16:1a:70:b3:6d: c6:11:f0:5c:5a:f2:0d:32:1a:78:56:8c:d9:8b:97: 27:af:e8:b3:56:89:b8:24:73:e3:b1:bf:cd:eb:7f: 30:ad:21:b1:41:c3:2e:de:68:72:56:87:60:9c:4f: 92:87:83:96:12:20:ff:ba:d2:78:08:3c:86:40:66: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:e040::/48 Signature Algorithm: sha256WithRSAEncryption 49:ce:1c:9e:78:c2:7f:ae:c8:c4:54:1f:7c:e8:be:ab:35:2e: 6b:df:86:98:9b:e2:af:c2:4c:0f:4f:27:6e:b6:86:07:b3:42: 89:e5:ee:37:8a:bf:58:a6:fa:7f:cb:24:ee:73:11:5e:18:b8: fd:3b:79:70:a7:23:bd:01:69:14:68:3f:ef:c1:d4:06:3a:4c: 38:a9:ab:11:a3:29:0b:a6:60:15:22:63:4c:87:91:be:7e:28: ef:18:ef:a4:f5:f4:2c:3a:6b:c2:42:34:f6:8f:3f:4f:c3:d2: dc:77:74:d1:be:37:97:85:45:57:85:20:19:3f:ad:75:b3:06: 23:7a:05:7e:ef:f6:32:87:4b:07:31:65:23:4f:3f:0c:81:9e: 31:44:9b:29:47:9a:27:13:b3:a2:55:01:88:78:a0:93:05:7e: 49:dc:98:36:4e:45:c3:a2:af:36:19:a4:e1:29:cd:bc:e1:a1: d2:1b:aa:b7:08:5a:59:0d:ad:7f:4e:c8:ae:fe:de:c4:d8:c5: 6b:c4:de:87:16:e3:5a:01:87:ce:e8:52:d9:cc:29:9d:2e:0e: 2b:d6:a4:ea:bb:40:8a:19:26:3c:d3:86:18:cf:17:e4:58:55: 67:8f:2f:50:52:09:24:6d:03:4e:94:b4:86:76:e5:fb:17:3a: 55:a5:a1:1e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUauhu4pZLoGFuRcocmpXpt765sCwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTgxM1oX DTI3MDUwMjAwMDMxM1owMzExMC8GA1UEAxMoQzI2RURCMzE0MkEwRDcwODlFQjVC NERFODFEMzgxRDU3MjcwREZBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOoHHtj3XPxcorsTs666tycosSG34umJADTFxWP33jjO+QTJf40pxHqZRcJ /Gdyf2Hsb98S91KmrlDU4iOZK8Hwx2OD+zWpjtTxtPQQ0a6msxmvkFp2Ep9nN0DA BcnDwQl5Lk8z1rRRQoNqLFn41CKK2XzTxHX6MSXK8+GyLXROXQlupY5UaIiYBZM3 3x9xnvUQj/ZFc4R9apIuk53MajJwnzviPcq8dhFtdy9jA5h9Uqe7CHo9200XGh2U xxYacLNtxhHwXFryDTIaeFaM2YuXJ6/os1aJuCRz47G/zet/MK0hsUHDLt5oclaH YJxPkoeDlhIg/7rSeAg8hkBmwUMCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMJu2zFCoNcInrW03oHTgdVycN+qMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiZGNlMzkxLWE1ZDMtNDExYi1hOTdiLWU4NjJmYmY1NjMxYy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYmRjZTM5 MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMjZFREIzMTQyQTBENzA4 OUVCNUI0REU4MUQzODFENTcyNzBERkFBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN8+BAMA0GCSqGSIb3DQEBCwUAA4IBAQBJzhyeeMJ/rsjEVB986L6rNS5r 34aYm+KvwkwPTydutoYHs0KJ5e43ir9Ypvp/yyTucxFeGLj9O3lwpyO9AWkUaD/v wdQGOkw4qasRoykLpmAVImNMh5G+fijvGO+k9fQsOmvCQjT2jz9Pw9Lcd3TRvjeX hUVXhSAZP611swYjegV+7/Yyh0sHMWUjTz8MgZ4xRJspR5onE7OiVQGIeKCTBX5J 3Jg2TkXDoq82GaThKc284aHSG6q3CFpZDa1/Tsiu/t7E2MVrxN6HFuNaAYfO6FLZ zCmdLg4r1qTqu0CKGSY804YYzxfkWFVnjy9QUgkkbQNOlLSGduX7FzpVpaEe -----END CERTIFICATE-----Generated at Tue May 12 22:15:59 2026 by rpki-client