$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer (raw, json) Hash identifier: 3Qxy9PAuOa3iuhRCg1Xb+0cPawKDvJL3WpUEJ0yIiEg= Subject key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 451B9EDB31EFDC83B600B619693C57A69665A249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:12:46 +0000 Certificate not after: Sun 02 May 2027 00:17:46 +0000 Subordinate resources: IP: 2001:df6:afc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1b:9e:db:31:ef:dc:83:b6:00:b6:19:69:3c:57:a6:96:65:a2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:12:46 2026 GMT Not After : May 2 00:17:46 2027 GMT Subject: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:19:58:8b:3f:7e:23:ec:78:b1:f0:a7:89: 8b:9b:f5:f3:83:5c:bd:ad:ea:a7:85:40:0f:47:82: bc:61:86:82:e5:42:04:5d:b5:b3:98:24:6b:ca:83: 36:69:eb:f1:1f:30:8d:a0:e8:21:e4:16:7d:87:72: c4:d7:6c:f2:0a:8f:24:53:35:94:a7:75:95:0e:d4: 70:31:c3:ad:b7:df:0f:6f:46:1b:89:10:fb:f4:15: 81:aa:f0:8c:d3:82:5f:88:3d:ec:44:39:09:8c:3c: 75:66:e6:1f:e9:12:bb:e9:fa:83:30:99:33:b5:89: 87:f7:56:94:93:c3:76:33:8c:50:3f:0e:f5:11:be: d2:4c:92:c9:60:a4:5b:94:a0:da:99:5d:e9:2f:fb: 52:a0:6b:3d:dd:0b:97:5e:1e:b5:a8:c6:66:c3:36: 87:4e:17:09:f1:8b:68:c6:63:f5:6a:4b:f9:27:29: 05:82:ff:80:2b:ac:0c:1f:5f:86:2f:ff:ac:ee:c5: 67:7c:d0:33:49:80:1e:5d:bb:16:a6:e8:e7:cc:62: 38:b1:72:e8:d3:8e:e9:1c:6f:02:26:11:3d:dd:de: 7c:63:57:f8:c0:af:91:81:cd:3d:40:b7:8b:f0:d8: 05:fe:53:06:20:14:5c:22:5a:de:98:d4:79:6d:29: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:afc0::/48 Signature Algorithm: sha256WithRSAEncryption a3:db:2c:a6:57:5b:cc:58:a3:e0:e1:3b:4c:7e:4d:a7:9a:9a: de:1a:33:28:f5:9d:75:ab:ca:a7:32:77:a6:10:93:8a:9d:ca: 2f:cc:74:c2:7b:73:47:e0:6d:1a:39:84:e6:28:a5:f4:c4:d3: 9a:b9:21:4e:e9:bf:10:61:34:37:7f:4e:0f:39:df:5c:be:4f: 41:60:42:24:ba:e8:8f:82:e8:e5:41:9e:63:3d:5a:5b:69:07: 8c:38:8c:98:49:f1:8f:09:c3:c1:ab:63:84:30:20:3b:5e:a0: fe:4d:39:fc:1b:a3:ff:f3:57:c1:14:7b:69:44:8f:2f:1b:81: f7:8e:66:66:99:4e:7a:b3:04:15:5d:22:b0:04:fa:4c:ef:61: 42:44:45:9d:4a:88:79:c3:77:fc:20:05:79:67:24:a6:98:29: a8:82:ba:b7:34:31:a1:15:d6:bf:a0:3e:b8:6f:fc:86:82:4d: cc:9a:83:0a:6c:36:bb:b3:36:3e:88:ae:07:d6:db:1e:b2:7f: 82:c3:c0:8c:e9:94:74:3f:35:c9:31:a6:3e:e5:e2:14:27:dc: da:06:cc:16:f5:aa:33:2c:56:d6:21:d2:3f:74:d3:bc:a9:d5: 4d:bd:7c:6b:5d:52:ea:c2:7e:b9:0a:96:3b:e9:58:1e:04:ea: 5e:29:b5:bf -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURRue2zHv3IO2ALYZaTxXppZlokkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTI0NloX DTI3MDUwMjAwMTc0NlowMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBF QjVDQUI5MjFFRTA0OThDNUNEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIwgGViLP34j7Hix8KeJi5v184Ncva3qp4VAD0eCvGGGguVCBF21s5gka8qD Nmnr8R8wjaDoIeQWfYdyxNds8gqPJFM1lKd1lQ7UcDHDrbffD29GG4kQ+/QVgarw jNOCX4g97EQ5CYw8dWbmH+kSu+n6gzCZM7WJh/dWlJPDdjOMUD8O9RG+0kySyWCk W5Sg2pld6S/7UqBrPd0Ll14etajGZsM2h04XCfGLaMZj9WpL+ScpBYL/gCusDB9f hi//rO7FZ3zQM0mAHl27Fqbo58xiOLFy6NOO6RxvAiYRPd3efGNX+MCvkYHNPUC3 i/DYBf5TBiAUXCJa3pjUeW0pPuUCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPcNdgDgEkJpPKDrXKuSHuBJjFzTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMyNzcwZmQzLTkyMTYtNDM4Yi05OTdmLWU1OTcyZTQ2NGUzYS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMjc3MGZk My05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMS9GNzBENzYwMEUwMTI0MjY5 M0NBMEVCNUNBQjkyMUVFMDQ5OEM1Q0QzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9q/AMA0GCSqGSIb3DQEBCwUAA4IBAQCj2yymV1vMWKPg4TtMfk2nmpre GjMo9Z11q8qnMnemEJOKncovzHTCe3NH4G0aOYTmKKX0xNOauSFO6b8QYTQ3f04P Od9cvk9BYEIkuuiPgujlQZ5jPVpbaQeMOIyYSfGPCcPBq2OEMCA7XqD+TTn8G6P/ 81fBFHtpRI8vG4H3jmZmmU56swQVXSKwBPpM72FCREWdSoh5w3f8IAV5ZySmmCmo grq3NDGhFda/oD64b/yGgk3MmoMKbDa7szY+iK4H1tsesn+Cw8CM6ZR0PzXJMaY+ 5eIUJ9zaBswW9aozLFbWIdI/dNO8qdVNvXxrXVLqwn65CpY76VgeBOpeKbW/ -----END CERTIFICATE-----Generated at Tue May 12 22:10:22 2026 by rpki-client