$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer File: E54912D936D5BF778FBB732E7E449916627DA941.cer (raw, json) Hash identifier: kjLfzVXukPfY/WQwulZo774I81wt6ESUA24Sv8B+Cnk= Subject key identifier: E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4087DC62D1E023ADB0E022D498F6795A0336186B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:43:41 +0000 Certificate not after: Sun 02 May 2027 02:48:41 +0000 Subordinate resources: IP: 2001:df3:d3c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:87:dc:62:d1:e0:23:ad:b0:e0:22:d4:98:f6:79:5a:03:36:18:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:43:41 2026 GMT Not After : May 2 02:48:41 2027 GMT Subject: CN=E54912D936D5BF778FBB732E7E449916627DA941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:83:d5:b6:9e:32:88:d4:f9:bd:a7:6e:38: 6a:96:62:f9:ca:9d:72:4f:6c:f4:6e:42:7e:19:0d: 21:5f:94:d0:22:b7:4e:62:0e:9c:e9:82:4d:b9:c0: 7f:26:33:49:14:12:aa:a0:14:19:a8:bd:c8:ee:74: 25:a1:65:e9:0e:80:09:6c:e2:14:7d:6e:36:f7:c6: bb:5c:51:4e:6e:94:9e:e7:7d:61:11:67:84:2d:cc: 3d:9d:d8:21:c6:be:45:be:da:c1:74:76:13:00:5e: 05:f2:b4:d5:12:3e:7a:5c:f6:77:b0:1f:b4:e8:d6: 19:15:dd:17:65:78:f1:fd:be:b1:d9:06:07:7b:2a: b6:48:bc:d4:99:72:87:a7:84:06:dd:fc:10:42:49: a5:f2:65:3e:43:fa:86:04:2b:54:e2:17:b0:e4:47: dd:c7:e5:63:8b:6a:ae:a1:2e:57:34:a7:b7:68:10: 5c:52:b6:20:93:a1:fb:af:e5:6c:da:9b:70:9b:fb: 30:c4:2c:33:bb:e5:9f:f1:63:c2:dd:31:a8:fc:c9: ba:3e:35:0a:13:89:e2:5c:2a:33:9c:d3:86:e4:70: 9d:b5:af:c8:1d:a3:9f:fb:78:89:bb:fd:8f:fb:9b: fb:84:19:8a:f7:1b:e5:7b:7c:72:de:15:ed:19:f9: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d3c0::/48 Signature Algorithm: sha256WithRSAEncryption 49:99:c7:b4:5f:77:bd:0c:d1:48:9d:44:ee:cc:d1:14:f3:49: 4b:81:c7:dc:94:75:8d:ad:84:22:ca:6f:c3:c9:b0:47:b1:6b: 4c:a1:af:a9:cc:9f:4d:8b:01:13:c0:02:64:4f:28:59:32:09: 0c:8d:91:37:58:14:23:b7:b0:94:2c:82:70:3f:ab:27:70:e4: 36:36:e6:2e:54:70:3e:94:55:bd:87:a4:e1:db:aa:66:48:a4: a1:79:84:dc:9c:26:0d:50:20:cd:a0:2d:f0:5e:73:e6:06:fd: f3:34:5e:97:d7:11:e8:27:45:28:cc:04:b8:98:62:59:02:39: f0:64:8e:63:dc:e5:6b:d9:de:43:a3:08:16:0a:2d:6a:7a:54: 30:0a:54:0d:7a:64:df:f0:4b:d1:2d:d9:f6:9b:df:b5:30:c3: b3:a6:51:f8:a2:f2:1a:08:25:8c:d4:b7:be:2e:95:42:f8:63: 09:44:fc:16:52:bd:08:68:cd:54:3f:da:5d:4d:22:2f:8a:50: 63:03:2f:a0:0b:24:11:a1:e6:6c:2a:4f:3f:7c:d1:ce:c8:12: 22:5f:b7:3d:2f:92:19:eb:29:15:0d:ff:a4:a3:96:36:51:65: 3c:aa:65:43:26:95:fc:80:d3:83:44:b3:5a:59:5e:4a:e3:d4: e2:8b:42:2f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQIfcYtHgI62w4CLUmPZ5WgM2GGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDM0MVoX DTI3MDUwMjAyNDg0MVowMzExMC8GA1UEAxMoRTU0OTEyRDkzNkQ1QkY3NzhGQkI3 MzJFN0U0NDk5MTY2MjdEQTk0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDLg9W2njKI1Pm9p244apZi+cqdck9s9G5CfhkNIV+U0CK3TmIOnOmCTbnA fyYzSRQSqqAUGai9yO50JaFl6Q6ACWziFH1uNvfGu1xRTm6Unud9YRFnhC3MPZ3Y Ica+Rb7awXR2EwBeBfK01RI+elz2d7AftOjWGRXdF2V48f2+sdkGB3sqtki81Jly h6eEBt38EEJJpfJlPkP6hgQrVOIXsORH3cflY4tqrqEuVzSnt2gQXFK2IJOh+6/l bNqbcJv7MMQsM7vln/Fjwt0xqPzJuj41ChOJ4lwqM5zThuRwnbWvyB2jn/t4ibv9 j/ub+4QZivcb5Xt8ct4V7Rn5FqkCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOVJEtk21b93j7tzLn5EmRZifalBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZiYjVmYTRhLWJlYTYtNDY0Zi1iNDA5LTExZDlhMzc2MWE2Yy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYmI1ZmE0 YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS9FNTQ5MTJEOTM2RDVCRjc3 OEZCQjczMkU3RTQ0OTkxNjYyN0RBOTQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN89PAMA0GCSqGSIb3DQEBCwUAA4IBAQBJmce0X3e9DNFInUTuzNEU80lL gcfclHWNrYQiym/DybBHsWtMoa+pzJ9NiwETwAJkTyhZMgkMjZE3WBQjt7CULIJw P6sncOQ2NuYuVHA+lFW9h6Th26pmSKSheYTcnCYNUCDNoC3wXnPmBv3zNF6X1xHo J0UozAS4mGJZAjnwZI5j3OVr2d5DowgWCi1qelQwClQNemTf8EvRLdn2m9+1MMOz plH4ovIaCCWM1Le+LpVC+GMJRPwWUr0IaM1UP9pdTSIvilBjAy+gCyQRoeZsKk8/ fNHOyBIiX7c9L5IZ6ykVDf+ko5Y2UWU8qmVDJpX8gNODRLNaWV5K49Tii0Iv -----END CERTIFICATE-----Generated at Tue May 12 22:32:27 2026 by rpki-client