$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer File: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer (raw, json) Hash identifier: Zau0pkpROHIJgIk97ULKe3U3ndbrahMuddc/dBDTDgI= Subject key identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0356E45A4F9159EF02D187D2CEB111FD3E8890DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft caRepository: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:04 +0000 Certificate not after: Sun 02 May 2027 01:25:04 +0000 Subordinate resources: IP: 2001:df4:8e40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:56:e4:5a:4f:91:59:ef:02:d1:87:d2:ce:b1:11:fd:3e:88:90:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:20:04 2026 GMT Not After : May 2 01:25:04 2027 GMT Subject: CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ee:c2:6a:2f:ab:5d:68:cb:8f:f6:a3:a7:d7: 2d:fb:ed:23:c9:10:24:c8:55:b9:24:03:48:43:a6: d5:06:81:05:fd:dc:93:8d:ae:81:cd:1a:5e:e1:fa: 47:50:68:fa:5a:61:da:f3:37:61:da:8a:6a:2b:a2: 4a:aa:04:04:9a:ea:8b:f0:7a:1a:a8:7e:38:ce:8a: 4e:36:92:64:b8:c1:0b:27:0c:1e:c0:82:ea:a0:ed: 92:be:b4:e0:48:ca:e4:3c:84:47:0e:91:23:bc:30: 14:29:d4:a8:dc:94:ea:9b:bb:5b:8e:4d:b5:d9:83: 4d:64:71:0d:58:8f:58:7a:7a:9c:94:2f:4a:89:9c: 36:19:7e:70:d9:68:37:a5:5c:f2:ee:7b:41:0b:5f: 50:60:3d:c2:34:0c:03:f4:59:b7:88:5a:2b:48:47: 74:f3:16:64:a8:9b:40:e5:3d:93:b3:9b:f9:9e:e5: 2f:53:18:40:43:24:93:52:fe:ae:ab:6c:7a:e8:19: f8:16:31:51:98:65:91:2b:38:ab:ec:22:04:27:94: aa:20:0e:cc:3e:40:40:67:ea:49:ff:11:e7:bf:06: 50:5b:af:f7:3c:21:2a:92:83:ee:21:3f:cf:3f:a8: 36:c3:6e:ac:93:f5:4e:f2:55:ec:30:d0:5b:7f:85: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:8e40::/48 Signature Algorithm: sha256WithRSAEncryption 04:b9:72:d6:4c:91:39:d2:74:f0:8b:83:9f:4c:f8:3c:73:d9: 92:19:ef:88:c6:e6:dc:bf:a9:08:5a:02:25:f2:20:ef:5a:ef: 6e:92:07:f1:32:0a:46:d2:d4:17:48:43:53:67:32:04:06:5b: f6:37:a1:81:1f:65:72:6d:8e:f0:2a:0d:3d:73:a4:63:ca:f9: 90:55:92:b2:0c:85:d5:c8:75:1f:65:d9:bd:e5:06:e3:eb:28: e8:96:23:96:bc:4d:69:e5:0c:7d:14:ca:87:4d:9c:37:cf:a1: ed:12:6c:1c:f2:5a:6a:ba:06:e8:33:df:93:8a:4e:56:4f:3b: ea:f1:f8:be:8e:da:64:4b:5e:36:43:30:0b:21:38:04:45:2b: de:d8:9e:cf:14:99:09:a7:50:a8:fd:35:b1:01:04:cb:f5:3c: 40:1a:83:5f:ea:cf:a3:74:d0:b6:36:b8:6e:fe:27:7b:04:d5: b3:cd:2f:1d:92:73:99:de:14:59:45:06:e1:b7:93:d6:8a:34: f7:18:01:0c:c6:83:8e:02:a7:ae:0c:9a:2d:87:fa:e9:5d:f5: 40:b8:bb:bb:30:85:c9:67:8f:73:32:66:d6:8e:b2:a6:bf:94: 7d:89:7c:f0:e7:47:1b:58:15:d5:00:19:4b:ba:d6:f1:b5:93: 1e:ae:aa:24 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUA1bkWk+RWe8C0YfSzrER/T6IkN4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjAwNFoX DTI3MDUwMjAxMjUwNFowMzExMC8GA1UEAxMoRDRGQUVEMEFCNUU5MEEzNkI1REJE Q0JDRTg2Qjg4RUFEMjY2QTkxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTuwmovq11oy4/2o6fXLfvtI8kQJMhVuSQDSEOm1QaBBf3ck42ugc0aXuH6 R1Bo+lph2vM3YdqKaiuiSqoEBJrqi/B6Gqh+OM6KTjaSZLjBCycMHsCC6qDtkr60 4EjK5DyERw6RI7wwFCnUqNyU6pu7W45NtdmDTWRxDViPWHp6nJQvSomcNhl+cNlo N6Vc8u57QQtfUGA9wjQMA/RZt4haK0hHdPMWZKibQOU9k7Ob+Z7lL1MYQEMkk1L+ rqtseugZ+BYxUZhlkSs4q+wiBCeUqiAOzD5AQGfqSf8R578GUFuv9zwhKpKD7iE/ zz+oNsNurJP1TvJV7DDQW3+FDv8CAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNT67Qq16Qo2tdvcvOhriOrSZqkVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk1OTYxMmEyLTQ0MzMtNDJiOS04ZjRmLWI4NDc3NzZhY2FmZC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NTk2MTJh Mi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS9ENEZBRUQwQUI1RTkwQTM2 QjVEQkRDQkNFODZCODhFQUQyNjZBOTE1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9I5AMA0GCSqGSIb3DQEBCwUAA4IBAQAEuXLWTJE50nTwi4OfTPg8c9mS Ge+Ixubcv6kIWgIl8iDvWu9ukgfxMgpG0tQXSENTZzIEBlv2N6GBH2VybY7wKg09 c6RjyvmQVZKyDIXVyHUfZdm95Qbj6yjoliOWvE1p5Qx9FMqHTZw3z6HtEmwc8lpq ugboM9+Tik5WTzvq8fi+jtpkS142QzALITgERSve2J7PFJkJp1Co/TWxAQTL9TxA GoNf6s+jdNC2Nrhu/id7BNWzzS8dknOZ3hRZRQbht5PWijT3GAEMxoOOAqeuDJot h/rpXfVAuLu7MIXJZ49zMmbWjrKmv5R9iXzw50cbWBXVABlLutbxtZMerqok -----END CERTIFICATE-----Generated at Tue May 12 22:03:36 2026 by rpki-client