$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer (raw, json) Hash identifier: 48TjJu/4sscmlVkzccwE6BFslJ5uyRWOShhkaJyNmgc= Subject key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 766D653A9D6B5D82A467A31C1EBAB4B6E1339FC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:21:50 +0000 Certificate not after: Sun 02 May 2027 02:26:50 +0000 Subordinate resources: IP: 2001:df3:92c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6d:65:3a:9d:6b:5d:82:a4:67:a3:1c:1e:ba:b4:b6:e1:33:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:21:50 2026 GMT Not After : May 2 02:26:50 2027 GMT Subject: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:91:b7:41:8b:6e:90:7b:0a:78:23:47:e1: f7:1d:be:5a:c7:05:18:e1:a6:44:a8:cd:05:7c:6d: 37:bd:5d:88:c6:d6:9a:45:ef:0e:8d:3b:b0:66:83: 1b:4a:59:7b:c1:05:9b:0c:28:f7:68:8d:8d:b2:fe: de:35:b7:d0:08:05:23:41:71:77:55:39:c9:39:68: 36:aa:05:8b:ec:4b:5f:15:3f:53:0f:b6:a3:78:0b: ec:3d:89:d0:50:88:d5:3a:4a:a3:0e:52:96:bb:5a: 90:44:4d:d6:9c:25:22:7c:80:74:fa:8b:95:e1:26: a3:dd:64:75:2e:82:31:2a:2f:9e:23:59:d2:f4:c6: 28:b9:bc:30:f2:e2:78:89:bb:67:ad:77:b8:70:85: 33:a2:6a:bf:5a:a3:01:de:cd:5c:f3:67:6e:8b:c0: c8:62:72:ce:c7:ef:84:6e:fa:04:7c:e2:9b:29:f7: ae:d6:2c:89:3c:22:d0:1f:0d:2d:ac:f4:8f:3d:b5: 0a:7a:fa:59:dd:04:71:f2:d2:cf:c1:28:06:d7:4c: af:1f:01:7e:90:ac:a6:f3:26:80:26:ce:1c:ad:30: 81:6a:11:61:8a:5b:f0:4f:ce:27:6d:ad:e6:c7:89: ef:92:a7:8a:26:f3:88:cd:60:d2:16:33:cc:ea:f1: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:92c0::/48 Signature Algorithm: sha256WithRSAEncryption 31:e2:f8:30:86:e4:45:50:23:1f:0f:32:5d:00:f0:1e:45:bf: e6:aa:07:00:cf:a3:2a:dc:6f:76:c7:c3:b7:4a:1b:31:8e:c9: e9:6d:18:36:b4:48:8f:ad:36:6a:c1:d9:f5:9d:6a:1e:6b:42: a4:f3:f7:5d:9a:c6:c3:30:ae:54:18:0b:02:5a:4a:27:a1:0d: c5:79:fc:00:b2:a5:46:4e:44:ae:b5:02:96:fa:82:c7:63:68: 33:3a:85:31:87:7e:43:c5:68:71:e9:c9:25:5d:61:85:20:bf: fb:ff:cc:63:fe:c0:ca:6a:17:6c:cb:f3:f2:41:88:0c:f2:fc: d2:77:7e:3b:69:6e:bb:a3:b0:bc:8a:ee:d9:e7:d0:dc:f4:3f: 7e:8f:cb:5e:de:25:87:54:e0:29:15:9c:63:10:d0:2f:d7:03: bf:f2:ab:8d:2b:e6:20:91:15:b0:60:60:e0:d7:73:3d:f6:f0: ad:39:88:01:a6:cc:f6:64:38:07:57:9d:3d:9a:1b:12:13:03: dc:b2:b0:ae:27:4b:4a:e3:83:f8:45:3d:a5:26:38:72:e5:b4: 6d:29:da:18:12:cb:3f:6c:d7:68:8f:da:14:5c:8c:e9:77:84: 44:4d:a6:39:31:89:84:82:1a:67:a9:b3:24:b8:e9:27:a9:9c: c3:33:e6:ef -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdm1lOp1rXYKkZ6McHrq0tuEzn8AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjE1MFoX DTI3MDUwMjAyMjY1MFowMzExMC8GA1UEAxMoRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3 NzY1NTdFMTZBRTAyQTRBRDc3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHUkbdBi26Qewp4I0fh9x2+WscFGOGmRKjNBXxtN71diMbWmkXvDo07sGaD G0pZe8EFmwwo92iNjbL+3jW30AgFI0Fxd1U5yTloNqoFi+xLXxU/Uw+2o3gL7D2J 0FCI1TpKow5SlrtakERN1pwlInyAdPqLleEmo91kdS6CMSovniNZ0vTGKLm8MPLi eIm7Z613uHCFM6Jqv1qjAd7NXPNnbovAyGJyzsfvhG76BHzimyn3rtYsiTwi0B8N Laz0jz21Cnr6Wd0EcfLSz8EoBtdMrx8BfpCspvMmgCbOHK0wgWoRYYpb8E/OJ22t 5seJ75KniibziM1g0hYzzOrxtPkCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPcax+bw1icd2Xd3ZVfhauAqStd8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VhNGY3OTM0LWNkYzctNDA4Mi04M2ZiLWRmN2Q0ZjgyMTlhZi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYTRmNzkz NC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9GNzFBQzdFNkYwRDYyNzFE RDk3Nzc3NjU1N0UxNkFFMDJBNEFENzdDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN85LAMA0GCSqGSIb3DQEBCwUAA4IBAQAx4vgwhuRFUCMfDzJdAPAeRb/m qgcAz6Mq3G92x8O3ShsxjsnpbRg2tEiPrTZqwdn1nWoea0Kk8/ddmsbDMK5UGAsC WkonoQ3FefwAsqVGTkSutQKW+oLHY2gzOoUxh35DxWhx6cklXWGFIL/7/8xj/sDK ahdsy/PyQYgM8vzSd347aW67o7C8iu7Z59Dc9D9+j8te3iWHVOApFZxjENAv1wO/ 8quNK+YgkRWwYGDg13M99vCtOYgBpsz2ZDgHV509mhsSEwPcsrCuJ0tK44P4RT2l Jjhy5bRtKdoYEss/bNdoj9oUXIzpd4RETaY5MYmEghpnqbMkuOknqZzDM+bv -----END CERTIFICATE-----Generated at Tue May 12 22:39:12 2026 by rpki-client