$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer File: DCA916604EAE55F638D4691DA6D930A094E4281C.cer (raw, json) Hash identifier: 6GqIh3VBKM73L14FsTrXUpvpXPJmxCJ0p3IqYugHIGE= Subject key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67625CD8D4250CB7F5AB0B7062CE15CB8C365EA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:28:30 +0000 Certificate not after: Sun 02 May 2027 01:33:30 +0000 Subordinate resources: IP: 2001:df4:6b40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:62:5c:d8:d4:25:0c:b7:f5:ab:0b:70:62:ce:15:cb:8c:36:5e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:28:30 2026 GMT Not After : May 2 01:33:30 2027 GMT Subject: CN=DCA916604EAE55F638D4691DA6D930A094E4281C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:17:e5:b5:ea:88:1d:02:db:a0:12:1e:0c: 64:31:8a:8c:18:f4:e4:2d:bb:29:13:56:b3:b9:1e: 4a:4f:f6:fb:0f:11:b7:e7:5f:9f:a5:ee:71:ec:48: 00:aa:6b:a9:0e:a9:90:0c:d7:9a:f6:76:53:c8:ca: 3e:80:dc:be:41:cb:8f:8e:87:c5:17:da:c3:69:80: 45:4b:19:28:39:39:07:f5:6d:40:a1:11:a4:17:85: a2:13:c1:5f:bc:15:47:b0:40:73:08:39:5f:9b:bc: 8a:33:11:33:83:e4:bf:ef:51:f3:99:34:c3:24:5b: ea:2e:f2:2f:08:e5:9c:02:1f:ac:28:ac:78:4f:42: a1:fc:20:c9:53:95:1f:52:4f:a4:ee:08:6a:d5:ef: b4:5e:eb:de:36:0b:09:a3:cc:fd:e6:03:5d:61:15: 29:39:01:d9:84:29:54:1b:a1:69:3d:18:04:3e:9e: da:ee:1c:35:9f:95:0d:90:48:f6:02:14:84:58:80: 0d:8f:fe:e7:0b:60:8c:7e:6f:55:68:49:6c:f5:25: 58:55:a7:e4:60:89:ac:3d:36:33:f8:a6:a5:9f:55: 7b:4e:69:e0:16:b9:eb:86:ff:f6:7d:58:f9:fa:b2: 8a:54:b0:93:48:15:5a:b6:66:43:fb:25:fe:e6:cc: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:6b40::/48 Signature Algorithm: sha256WithRSAEncryption 1a:3e:0b:43:6b:44:cb:31:16:75:55:0d:27:09:f6:f1:9c:2a: 36:1f:bd:c6:2b:7c:7d:f2:7d:08:c6:76:32:c7:7e:00:fc:3f: d7:05:18:f5:3b:2d:f4:fd:7b:85:01:cc:a0:88:58:16:e6:4b: be:54:4e:03:e5:62:6a:6a:40:f7:e5:c5:05:af:ed:54:57:f6: c7:59:07:83:2e:e3:49:54:a1:31:e4:8f:20:d8:28:3c:c8:d1: 66:4b:97:a0:b5:89:05:da:32:2e:d6:e3:2e:e3:66:4a:d9:3d: 64:2e:4e:fe:c1:51:16:cb:53:a7:34:e5:99:9a:b6:59:64:33: 88:bb:bb:4a:b0:52:f2:d0:d5:c0:e7:1c:91:40:83:84:70:f6: 50:22:88:b7:25:69:a2:3d:d6:f3:75:42:0c:8a:ef:11:7a:2e: a5:de:e6:77:52:93:39:33:87:4a:16:01:c5:cc:10:3f:e3:50: ac:a2:9d:bc:70:f9:a0:23:3a:fd:bc:a4:c4:9e:08:30:7f:07: c9:34:2d:37:1f:ff:27:84:2b:5a:f0:ee:30:91:38:61:da:eb: 29:fa:c7:95:7d:e3:9f:72:21:b6:03:af:2a:87:d7:62:bd:58: 02:44:21:4c:bf:f6:7b:db:f0:bf:28:38:ae:9e:96:df:15:4b: 01:03:79:05 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZ2Jc2NQlDLf1qwtwYs4Vy4w2XqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjgzMFoX DTI3MDUwMjAxMzMzMFowMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2 OTFEQTZEOTMwQTA5NEU0MjgxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOybF+W16ogdAtugEh4MZDGKjBj05C27KRNWs7keSk/2+w8Rt+dfn6XucexI AKprqQ6pkAzXmvZ2U8jKPoDcvkHLj46HxRfaw2mARUsZKDk5B/VtQKERpBeFohPB X7wVR7BAcwg5X5u8ijMRM4Pkv+9R85k0wyRb6i7yLwjlnAIfrCiseE9CofwgyVOV H1JPpO4IatXvtF7r3jYLCaPM/eYDXWEVKTkB2YQpVBuhaT0YBD6e2u4cNZ+VDZBI 9gIUhFiADY/+5wtgjH5vVWhJbPUlWFWn5GCJrD02M/impZ9Ve05p4Ba564b/9n1Y +fqyilSwk0gVWrZmQ/sl/ubMqNMCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNypFmBOrlX2ONRpHabZMKCU5CgcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EyMTFmMzQ3LWExZTctNDcxZC1hZDIwLWRhNzZhYWJmMzg0Yy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMjExZjM0 Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9EQ0E5MTY2MDRFQUU1NUY2 MzhENDY5MURBNkQ5MzBBMDk0RTQyODFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9GtAMA0GCSqGSIb3DQEBCwUAA4IBAQAaPgtDa0TLMRZ1VQ0nCfbxnCo2 H73GK3x98n0IxnYyx34A/D/XBRj1Oy30/XuFAcygiFgW5ku+VE4D5WJqakD35cUF r+1UV/bHWQeDLuNJVKEx5I8g2Cg8yNFmS5egtYkF2jIu1uMu42ZK2T1kLk7+wVEW y1OnNOWZmrZZZDOIu7tKsFLy0NXA5xyRQIOEcPZQIoi3JWmiPdbzdUIMiu8Rei6l 3uZ3UpM5M4dKFgHFzBA/41Csop28cPmgIzr9vKTEnggwfwfJNC03H/8nhCta8O4w kThh2usp+seVfeOfciG2A68qh9divVgCRCFMv/Z72/C/KDiunpbfFUsBA3kF -----END CERTIFICATE-----Generated at Tue May 12 22:03:56 2026 by rpki-client