$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer File: D626CC25972BF9948C6B3BDE4E354C71F2570880.cer (raw, json) Hash identifier: ujN++OqD69dW5DIV+wNFbekzUoXVXLpTZ7v2J09pF88= Subject key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4EB72B826AA0F9E5D6B93E7CC2A473B3EED41597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:11 +0000 Certificate not after: Sun 02 May 2027 02:03:11 +0000 Subordinate resources: IP: 103.104.204.0/22 IP: 2402:1a40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b7:2b:82:6a:a0:f9:e5:d6:b9:3e:7c:c2:a4:73:b3:ee:d4:15:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:11 2026 GMT Not After : May 2 02:03:11 2027 GMT Subject: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2d:ea:f4:67:fa:fc:3e:3f:a0:ac:ec:75:97: 8e:e2:21:5d:e0:db:51:2e:06:8e:df:72:51:6e:3d: a5:d4:c5:83:a0:fa:7d:5b:59:53:ae:e4:46:d2:08: fb:24:eb:78:b4:77:f5:81:19:24:0e:f7:cb:ad:a7: 10:cf:f8:35:ea:d3:17:2b:9d:ef:b1:90:8f:86:73: 71:bf:f5:64:2a:e9:f0:f7:a9:8c:28:bd:76:29:44: 3c:ec:96:0f:66:0b:71:9e:0d:13:b3:c9:73:45:83: d2:d9:71:2b:29:2a:65:f0:ac:bb:46:d7:2f:2e:d6: d6:85:e2:6e:39:d7:67:62:38:43:e0:4e:44:64:96: f6:a2:55:f8:97:70:40:b6:b1:b2:98:07:87:19:74: ab:58:0e:1e:08:5e:86:9b:c6:45:87:f4:cc:81:c3: d4:71:11:03:bb:c0:c6:4d:85:97:29:cc:60:9e:0f: 62:7e:de:2a:de:c9:2d:c6:58:ec:2c:78:66:90:40: 3d:37:d5:dc:39:9a:ea:f0:49:af:81:24:25:c1:e6: 0d:cf:e6:44:40:e4:2d:23:fc:0e:23:5a:f3:29:30: 69:8b:90:85:72:93:3f:39:44:6c:5b:f2:a3:7b:4c: 14:91:6d:ee:e5:b2:78:66:57:d9:d2:94:1a:99:c8: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.204.0/22 IPv6: 2402:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 2a:e4:6b:27:03:84:1c:79:4a:ad:78:93:4e:e5:bf:15:ad:61: c4:04:f5:26:30:15:7e:97:6a:ea:a9:f2:28:b7:60:46:b8:3a: a0:aa:b7:70:fa:bb:d6:bb:c5:dd:4b:90:b5:4b:b8:91:be:1a: 9d:d0:2e:c9:94:05:d2:41:81:f8:90:da:d2:f7:e9:d3:22:fd: c5:ec:51:7d:8f:df:f3:17:e1:2a:24:bc:fd:54:5b:5e:7f:e1: 20:60:fc:b9:f8:b3:02:bb:35:37:6e:d3:42:f5:ca:5e:06:1c: de:12:c7:33:09:57:f1:dd:c7:86:00:14:7a:7c:ea:3c:fe:52: c8:07:2a:dd:f0:62:22:f9:d8:f1:94:d9:62:e9:b8:42:a1:83: fe:44:04:77:01:e7:99:f3:c0:87:21:65:82:af:22:0a:ca:f3: 0b:7e:9b:18:2c:b0:aa:b4:d0:ef:f5:d4:ee:88:21:22:bb:45: ce:be:94:1e:78:03:33:ac:22:00:94:d2:7d:f4:b5:11:77:50: 6b:de:b1:79:3a:f3:aa:7e:9b:7b:53:80:db:43:63:b5:bb:28: ab:f1:2b:7d:76:c0:ab:52:08:c5:e2:94:22:38:9f:93:e7:a0: 41:42:0d:25:db:1f:08:b9:da:9c:b3:d3:84:af:20:ce:e0:a1: 35:ec:e2:02 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUTrcrgmqg+eXWuT58wqRzs+7UFZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgxMVoX DTI3MDUwMjAyMDMxMVowMzExMC8GA1UEAxMoRDYyNkNDMjU5NzJCRjk5NDhDNkIz QkRFNEUzNTRDNzFGMjU3MDg4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO0t6vRn+vw+P6Cs7HWXjuIhXeDbUS4Gjt9yUW49pdTFg6D6fVtZU67kRtII +yTreLR39YEZJA73y62nEM/4NerTFyud77GQj4Zzcb/1ZCrp8PepjCi9dilEPOyW D2YLcZ4NE7PJc0WD0tlxKykqZfCsu0bXLy7W1oXibjnXZ2I4Q+BORGSW9qJV+Jdw QLaxspgHhxl0q1gOHghehpvGRYf0zIHD1HERA7vAxk2FlynMYJ4PYn7eKt7JLcZY 7Cx4ZpBAPTfV3Dma6vBJr4EkJcHmDc/mREDkLSP8DiNa8ykwaYuQhXKTPzlEbFvy o3tMFJFt7uWyeGZX2dKUGpnIzQcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNYmzCWXK/mUjGs73k41THHyVwiAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QyMzFlNmIxLTE4NDEtNDc2ZC1iNDZiLWI0NGI5Y2I5NjhiMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMjMxZTZi MS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9ENjI2Q0MyNTk3MkJGOTk0 OEM2QjNCREU0RTM1NEM3MUYyNTcwODgwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2jMMA0EAgACMAcDBQAkAhpAMA0GCSqGSIb3DQEBCwUAA4IBAQAq5GsnA4Qc eUqteJNO5b8VrWHEBPUmMBV+l2rqqfIot2BGuDqgqrdw+rvWu8XdS5C1S7iRvhqd 0C7JlAXSQYH4kNrS9+nTIv3F7FF9j9/zF+EqJLz9VFtef+EgYPy5+LMCuzU3btNC 9cpeBhzeEsczCVfx3ceGABR6fOo8/lLIByrd8GIi+djxlNli6bhCoYP+RAR3AeeZ 88CHIWWCryIKyvMLfpsYLLCqtNDv9dTuiCEiu0XOvpQeeAMzrCIAlNJ99LURd1Br 3rF5OvOqfpt7U4DbQ2O1uyir8St9dsCrUgjF4pQiOJ+T56BBQg0l2x8Iudqcs9OE ryDO4KE17OIC -----END CERTIFICATE-----Generated at Tue May 12 22:16:27 2026 by rpki-client