$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer File: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer (raw, json) Hash identifier: iR/sFTkvH0n+RMO7/NQmwB9hABtJk+hMFLG8t0+wsRY= Subject key identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2DBB295E697D843EC07804B9D239B9873B00813A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:33 +0000 Certificate not after: Sun 02 May 2027 01:41:33 +0000 Subordinate resources: IP: 2001:df3:da40::/48 IP: 2001:df3:e440::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bb:29:5e:69:7d:84:3e:c0:78:04:b9:d2:39:b9:87:3b:00:81:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:36:33 2026 GMT Not After : May 2 01:41:33 2027 GMT Subject: CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:da:6a:dd:f3:7f:a1:03:a0:9f:44:6c:3e: cb:2a:e4:c7:c9:d6:93:88:21:36:85:d2:3f:73:51: 44:86:4b:d2:5b:b2:96:46:6c:2b:9d:b4:87:3c:22: b3:c4:07:3a:37:ff:a1:c3:b9:df:ac:e5:0e:58:8d: 09:2e:0d:2e:70:fb:b1:f4:2d:5f:60:ab:f2:2d:aa: 50:70:ca:51:80:36:aa:56:2e:2c:88:8a:11:16:07: 71:4c:05:61:9a:e7:44:4f:83:e5:63:63:d9:79:f2: 9b:3a:9b:20:db:c4:c5:1a:18:06:3c:12:b3:85:8e: 5c:74:ce:ea:09:c4:3c:26:94:5f:4f:6f:98:27:1b: 97:06:fa:4c:3f:a2:dd:d1:22:96:ec:9d:59:91:1d: cc:da:b3:00:9d:9b:8e:b5:6a:c4:1b:bf:5c:c9:4a: e6:80:b3:c6:3c:22:2f:12:c4:d4:56:d5:ba:e0:10: d8:39:ce:cd:33:42:c1:37:91:c0:1d:4e:75:d4:be: e5:8f:85:43:87:80:dd:a3:45:ce:7f:fc:ce:c5:fc: f7:a9:c1:cf:d7:d8:40:cf:4c:0f:25:2f:62:e1:5c: fb:71:b8:52:21:b7:12:74:93:e5:fe:6e:a6:ac:ef: 3a:66:7a:7f:e1:54:20:cc:83:60:76:34:94:b7:80: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:da40::/48 2001:df3:e440::/48 Signature Algorithm: sha256WithRSAEncryption 56:aa:f0:dd:1d:e7:d1:0f:f9:bb:1e:b5:8a:32:0a:3f:90:71: af:e5:61:07:89:ca:92:6f:c6:0b:2e:ca:64:7f:a9:81:fa:58: b1:47:b8:67:28:0c:a9:fd:35:d5:8f:a5:3d:e7:27:d4:06:22: 5f:5f:70:8e:69:83:ca:b3:1e:10:aa:34:52:2b:d5:4f:c6:e3: c5:e6:5a:8b:df:e5:a6:50:60:58:e6:af:9a:82:79:08:22:fc: 8e:a5:e7:3e:c8:7e:2c:39:9b:88:94:48:ab:a9:ae:d0:36:09: d9:a1:1a:9c:bb:cd:3c:27:eb:62:c3:da:b3:cc:57:3d:39:56: 2c:b9:d0:8d:b4:91:17:eb:7e:d0:4b:8e:d7:bd:56:d1:ef:02: 93:4c:38:49:6c:b0:0a:b5:78:f5:b8:7c:73:77:2a:ee:d6:80: 77:a1:85:6b:ea:a5:5a:28:f0:d6:08:ae:ea:ed:c1:0c:56:f9: ec:6f:ed:36:e5:89:74:3a:d9:64:cc:73:ad:00:ef:52:1d:6e: ae:11:12:cb:03:3e:3b:78:69:90:31:22:50:20:c5:c9:09:47: c2:99:a3:e6:fe:cf:fc:dc:45:5a:d2:5a:93:de:5c:1f:73:aa: 45:ac:0b:e4:e8:66:86:18:ed:04:0b:fd:10:f5:d2:5a:ac:41: fd:88:6a:ca -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIULbspXml9hD7AeAS50jm5hzsAgTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzYzM1oX DTI3MDUwMjAxNDEzM1owMzExMC8GA1UEAxMoRDE4QUY5RDc0RTFFNkU4MDk3OUMw NjM5RkQxMDRGMEY1Q0JGQ0NENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKev2mrd83+hA6CfRGw+yyrkx8nWk4ghNoXSP3NRRIZL0luylkZsK520hzwi s8QHOjf/ocO536zlDliNCS4NLnD7sfQtX2Cr8i2qUHDKUYA2qlYuLIiKERYHcUwF YZrnRE+D5WNj2XnymzqbINvExRoYBjwSs4WOXHTO6gnEPCaUX09vmCcblwb6TD+i 3dEiluydWZEdzNqzAJ2bjrVqxBu/XMlK5oCzxjwiLxLE1FbVuuAQ2DnOzTNCwTeR wB1OddS+5Y+FQ4eA3aNFzn/8zsX896nBz9fYQM9MDyUvYuFc+3G4UiG3EnST5f5u pqzvOmZ6f+FUIMyDYHY0lLeA2ycCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNGK+ddOHm6Al5wGOf0QTw9cv8zVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FlMTk4ODE2LTVhZjktNDdlZi1iOTg5LTQyZjI3MzE4NDhiZS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZTE5ODgx Ni01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS9EMThBRjlENzRFMUU2RTgw OTc5QzA2MzlGRDEwNEYwRjVDQkZDQ0Q1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjAS AwcAIAEN89pAAwcAIAEN8+RAMA0GCSqGSIb3DQEBCwUAA4IBAQBWqvDdHefRD/m7 HrWKMgo/kHGv5WEHicqSb8YLLspkf6mB+lixR7hnKAyp/TXVj6U95yfUBiJfX3CO aYPKsx4QqjRSK9VPxuPF5lqL3+WmUGBY5q+agnkIIvyOpec+yH4sOZuIlEirqa7Q NgnZoRqcu808J+tiw9qzzFc9OVYsudCNtJEX637QS47XvVbR7wKTTDhJbLAKtXj1 uHxzdyru1oB3oYVr6qVaKPDWCK7q7cEMVvnsb+025Yl0OtlkzHOtAO9SHW6uERLL Az47eGmQMSJQIMXJCUfCmaPm/s/83EVa0lqT3lwfc6pFrAvk6GaGGO0EC/0Q9dJa rEH9iGrK -----END CERTIFICATE-----Generated at Tue May 12 22:10:38 2026 by rpki-client