$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer (raw, json) Hash identifier: 0xH46ZwKa2LbbIqC+RiZhUM/myJFnmOtfTgecaGrUX0= Subject key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10D1723987353102997B3C2D33A7477786F107C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:12 +0000 Certificate not after: Sun 02 May 2027 01:45:12 +0000 Subordinate resources: IP: 103.151.98.0/23 IP: 2001:df3:b980::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d1:72:39:87:35:31:02:99:7b:3c:2d:33:a7:47:77:86:f1:07:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:12 2026 GMT Not After : May 2 01:45:12 2027 GMT Subject: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:d5:52:3d:90:5a:57:88:d1:51:15:5d:fb: 1a:79:08:7d:17:87:7f:25:da:a3:9a:e4:3b:bb:1a: c2:ed:91:16:79:f8:f7:d1:64:11:da:3e:16:25:f2: e2:d9:89:ca:6b:90:19:26:87:56:3f:cc:44:8c:03: 8b:4f:49:be:c4:53:89:8f:43:68:5b:dd:37:17:33: 7f:6b:55:7f:8b:ff:11:88:ad:f8:e6:93:54:02:94: 86:55:e8:2f:d8:4c:f3:d1:6c:e9:c0:a3:6a:41:76: 25:0b:09:4c:47:45:86:aa:8e:86:d0:60:47:17:55: 0c:a1:4a:54:3f:cc:16:ba:1e:10:3c:34:16:54:b2: 0f:0d:c4:ae:7b:e4:49:ba:9c:87:65:d6:4c:88:c8: 61:2f:56:80:54:08:30:99:91:54:06:db:82:bd:22: 9a:d1:e5:73:38:57:1b:86:e3:a0:6f:b3:f2:99:b3: 84:bf:7c:d7:4b:73:49:5a:66:63:23:61:c8:a6:89: fb:fb:a3:ee:46:f2:65:04:04:0c:ae:ae:7c:eb:a0: 66:80:1b:c2:8f:24:e2:04:a9:59:95:b2:f6:11:4e: 4d:cb:99:05:3c:56:f4:82:38:38:62:04:91:52:19: b7:c5:30:3b:92:9e:c9:a4:1d:dc:c8:cf:8f:e0:d2: c4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.98.0/23 IPv6: 2001:df3:b980::/48 Signature Algorithm: sha256WithRSAEncryption 6d:98:af:a4:1c:34:cd:e0:82:8d:9e:20:ea:23:a1:c7:4c:a5: f5:7d:f7:27:f7:c0:76:d1:cd:07:1d:d3:10:08:85:ad:04:0f: 57:4b:75:89:62:20:92:68:29:90:2d:6f:cc:f2:82:35:de:78: 5b:62:bf:6c:03:db:a8:11:cc:aa:d4:7e:eb:77:30:14:09:60: db:26:fd:40:5e:03:63:29:d9:41:90:22:1a:b0:0d:31:8c:cf: 31:b8:8b:08:41:ac:6b:0d:92:f1:7b:c8:86:53:26:36:fc:ce: d8:a0:25:cc:e4:a3:98:51:72:ba:f2:91:48:5a:0f:29:42:46: 5c:c6:55:75:93:14:12:80:8f:78:4b:fe:2c:1b:32:68:0d:ca: 9a:85:a7:f3:1b:08:d9:af:77:76:cf:e9:8c:34:cf:87:c9:e6: 75:38:46:4e:9c:54:36:bb:0a:2a:17:29:e0:c6:18:aa:ca:19: 6c:8a:15:4a:22:07:9e:21:0b:d0:19:48:f6:e9:d2:fd:a1:8b: 00:c7:29:b7:aa:ba:af:58:76:de:eb:f6:f9:d2:b3:73:ff:48: e1:49:92:93:22:d2:f4:0a:df:6d:69:2c:42:ec:79:e7:e6:57: f7:f1:d0:b2:51:6c:39:cb:49:d9:2b:3d:1b:66:28:7f:a4:5e: 65:c8:0b:c0 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUENFyOYc1MQKZezwtM6dHd4bxB8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDAxMloX DTI3MDUwMjAxNDUxMlowMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRD RUFGRURFNEE3NkNERkE1QTQyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtt1VI9kFpXiNFRFV37GnkIfReHfyXao5rkO7sawu2RFnn499FkEdo+FiXy 4tmJymuQGSaHVj/MRIwDi09JvsRTiY9DaFvdNxczf2tVf4v/EYit+OaTVAKUhlXo L9hM89Fs6cCjakF2JQsJTEdFhqqOhtBgRxdVDKFKVD/MFroeEDw0FlSyDw3Ernvk Sbqch2XWTIjIYS9WgFQIMJmRVAbbgr0imtHlczhXG4bjoG+z8pmzhL9810tzSVpm YyNhyKaJ+/uj7kbyZQQEDK6ufOugZoAbwo8k4gSpWZWy9hFOTcuZBTxW9II4OGIE kVIZt8UwO5KeyaQd3MjPj+DSxOkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN80F1AM4JVktKTOr+3kp2zfpaQlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IzNzg1ZTY1LTUxZTItNGIxYi04MmY5LWU3NTNhZDRiMjQwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMzc4NWU2 NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC9ERjM0MTc1MDBDRTA5NTY0 QjRBNENFQUZFREU0QTc2Q0RGQTVBNDI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5diMA8EAgACMAkDBwAgAQ3zuYAwDQYJKoZIhvcNAQELBQADggEBAG2Yr6Qc NM3ggo2eIOojocdMpfV99yf3wHbRzQcd0xAIha0ED1dLdYliIJJoKZAtb8zygjXe eFtiv2wD26gRzKrUfut3MBQJYNsm/UBeA2Mp2UGQIhqwDTGMzzG4iwhBrGsNkvF7 yIZTJjb8ztigJczko5hRcrrykUhaDylCRlzGVXWTFBKAj3hL/iwbMmgNypqFp/Mb CNmvd3bP6Yw0z4fJ5nU4Rk6cVDa7CioXKeDGGKrKGWyKFUoiB54hC9AZSPbp0v2h iwDHKbequq9Ydt7r9vnSs3P/SOFJkpMi0vQK321pLELseefmV/fx0LJRbDnLSdkr PRtmKH+kXmXIC8A= -----END CERTIFICATE-----Generated at Tue May 12 22:10:09 2026 by rpki-client