$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer (raw, json) Hash identifier: oaorzBC0M6koOGOoBW9ZaDc0yobau+4+d2JFuAheTRs= Subject key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5511A477D13AF7B7AF2C791A1AEA135868E825BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:23:26 +0000 Certificate not after: Sun 02 May 2027 02:28:26 +0000 Subordinate resources: IP: 27.112.64.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:11:a4:77:d1:3a:f7:b7:af:2c:79:1a:1a:ea:13:58:68:e8:25:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:23:26 2026 GMT Not After : May 2 02:28:26 2027 GMT Subject: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:d1:3f:18:27:9e:97:38:e0:e1:be:a2:f5: e6:b2:9d:02:6b:f6:ab:07:49:9e:b3:94:65:65:2d: a1:47:c0:4b:3c:07:ca:5f:d4:9b:08:b9:6e:ae:07: b0:00:66:65:81:25:e8:f3:78:a8:b8:8b:fb:ed:76: 28:c2:eb:de:0a:95:76:33:a1:e8:83:c1:dd:53:98: 24:b8:33:08:c2:5e:f7:79:1e:a8:63:44:ed:97:0c: 81:95:53:2a:21:7f:3a:c1:70:26:73:90:db:b8:14: 56:d8:b4:21:31:6e:9e:b9:3b:f5:97:85:6d:fa:41: ea:a8:cd:dc:74:16:16:17:9c:57:dc:83:f1:db:9d: ce:6f:04:f1:d0:d5:63:db:d8:05:53:f5:e9:94:20: 42:c5:f0:e0:99:39:94:44:60:5e:9f:4d:6a:07:da: 3a:05:1f:90:14:0f:79:38:d4:0f:13:ed:28:8c:39: e2:cf:b2:18:92:cc:9c:15:ee:0c:ae:12:e5:ca:ea: a5:41:7d:5d:a4:a4:a8:24:e3:e6:0f:99:f0:8d:67: fd:d3:af:3a:44:b5:73:61:d8:0e:0c:18:a3:40:5e: ea:51:a7:e4:81:e7:e3:fa:da:e2:31:77:cf:83:99: 6a:76:70:08:ef:74:41:99:6b:59:2d:c6:a3:0f:33: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.112.64.0/21 Signature Algorithm: sha256WithRSAEncryption a5:08:2b:ac:f0:a2:72:c1:24:05:49:ed:9e:50:9b:ff:30:56: ae:3b:cf:bd:63:5c:21:d1:cb:0b:8f:63:cb:b2:ab:95:ec:77: 42:88:aa:6f:68:18:b7:7b:d2:2d:4d:69:d3:e4:3b:2b:7b:7f: 64:ba:29:c1:a9:e6:1a:8b:bf:2c:b9:ec:3f:c5:82:d3:93:88: 0d:1b:6c:ae:c0:95:f1:b0:39:a4:a3:46:74:47:fb:20:50:f1: fa:47:09:17:b1:b5:3b:99:3a:db:25:a2:46:72:82:a4:7e:05: 2c:89:d5:07:4c:fc:8c:79:7d:9f:c8:08:1e:9f:1e:72:65:d0: eb:95:df:2e:2d:1f:b4:cc:88:8f:5e:f7:8e:d9:27:3b:90:f6: dd:51:43:72:f0:67:2f:e9:f9:99:dd:3d:85:d5:4e:cf:94:e7: 0c:95:dc:24:d4:42:04:88:c3:cd:d2:15:0e:0e:db:8d:e0:91: 23:e5:f4:dd:2a:39:6f:1c:13:1a:82:cd:01:24:48:fd:69:71: 76:f4:89:23:52:ba:16:d1:e4:e6:c0:73:67:f4:65:82:c7:2b: 9f:e7:75:5a:2f:f8:93:38:e0:7b:60:88:f4:ec:f9:67:0e:12: c3:e7:11:e4:b5:93:55:19:76:a0:a9:cf:a4:40:c1:5e:a3:ad: 16:d8:09:1d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVRGkd9E697evLHkaGuoTWGjoJb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjMyNloX DTI3MDUwMjAyMjgyNlowMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUy NTA4RTY3QkIxMjlDNDFFMzFDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANC90T8YJ56XOODhvqL15rKdAmv2qwdJnrOUZWUtoUfASzwHyl/Umwi5bq4H sABmZYEl6PN4qLiL++12KMLr3gqVdjOh6IPB3VOYJLgzCMJe93keqGNE7ZcMgZVT KiF/OsFwJnOQ27gUVti0ITFunrk79ZeFbfpB6qjN3HQWFhecV9yD8dudzm8E8dDV Y9vYBVP16ZQgQsXw4Jk5lERgXp9NagfaOgUfkBQPeTjUDxPtKIw54s+yGJLMnBXu DK4S5crqpUF9XaSkqCTj5g+Z8I1n/dOvOkS1c2HYDgwYo0Be6lGn5IHn4/ra4jF3 z4OZanZwCO90QZlrWS3Gow8zR30CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNvrX8iRzAqGIKUlCOZ7sSnEHjHCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VhZDFlMTZhLTBhNGQtNDRiMS05ODQ1LTljMGNkN2E2ZjM4Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYWQxZTE2 YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EQkVCNUZDODkxQ0MwQTg2 MjBBNTI1MDhFNjdCQjEyOUM0MUUzMUMyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDG3BAMA0GCSqGSIb3DQEBCwUAA4IBAQClCCus8KJywSQFSe2eUJv/MFauO8+9 Y1wh0csLj2PLsquV7HdCiKpvaBi3e9ItTWnT5Dsre39kuinBqeYai78suew/xYLT k4gNG2yuwJXxsDmko0Z0R/sgUPH6RwkXsbU7mTrbJaJGcoKkfgUsidUHTPyMeX2f yAgenx5yZdDrld8uLR+0zIiPXveO2Sc7kPbdUUNy8Gcv6fmZ3T2F1U7PlOcMldwk 1EIEiMPN0hUODtuN4JEj5fTdKjlvHBMags0BJEj9aXF29IkjUroW0eTmwHNn9GWC xyuf53VaL/iTOOB7YIj07PlnDhLD5xHktZNVGXagqc+kQMFeo60W2Akd -----END CERTIFICATE-----Generated at Tue May 12 22:38:46 2026 by rpki-client