$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer (raw, json) Hash identifier: 1u5/geN2DXXOvs56oTriqv/VYFH/KKvNiVjdKshks/s= Subject key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5AA4F15E286458176F639B510089D896DBE4264D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:24:02 +0000 Certificate not after: Sun 02 May 2027 01:29:02 +0000 Subordinate resources: IP: 2001:df3:d340::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a4:f1:5e:28:64:58:17:6f:63:9b:51:00:89:d8:96:db:e4:26:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:24:02 2026 GMT Not After : May 2 01:29:02 2027 GMT Subject: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:fc:17:19:97:e4:98:fc:5a:4c:4b:5d:05: 10:ee:65:9f:93:a7:d8:12:b5:21:51:05:77:5e:19: ca:65:b2:7f:fa:5b:73:25:7f:42:16:69:01:69:c5: 2a:b1:f4:91:a4:ff:b9:c1:00:bf:3b:2c:44:22:db: 1b:d5:33:23:e6:83:f9:7c:5c:6f:cb:00:6a:3e:fd: cf:a2:98:c2:4b:e5:55:39:a7:0b:5c:f7:f4:50:05: 31:27:34:ef:1d:77:4c:3b:50:d2:ed:b3:bb:74:67: ac:2e:b3:24:89:0d:b7:c7:95:63:b2:ca:87:55:eb: 44:3a:c8:c4:91:ff:3d:5d:a1:8b:68:57:c3:b2:88: 8d:86:c8:1f:7d:9c:71:71:35:62:a4:54:aa:36:43: 09:2a:fa:a6:4c:50:19:ab:1c:8c:56:9a:2f:82:53: 4c:9d:ae:a9:d7:67:a3:cd:96:e8:1a:c8:fa:f5:a6: 6c:e9:b9:c2:c5:03:c5:ec:b1:c0:d9:fe:7d:3d:02: bb:22:fa:91:36:d8:2a:62:50:b3:bc:97:4d:c4:df: 5e:e8:54:5f:cb:49:cb:19:d3:b8:4a:53:5c:30:e0: ec:26:96:b8:5d:54:40:cb:3e:c3:e8:00:32:44:e4: fe:43:26:2a:29:4d:96:0d:d4:4f:2f:0f:62:e4:e4: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d340::/48 Signature Algorithm: sha256WithRSAEncryption 66:6c:78:21:80:49:a0:47:75:92:75:4f:a8:e2:29:37:f8:67: 34:4d:71:24:b7:22:e1:80:e4:d9:b5:21:c0:0f:cb:fd:90:80: 91:e5:5e:a7:a4:90:31:5b:3a:66:d2:c8:da:3b:8d:92:59:45: 30:b8:27:52:ff:98:7f:70:a1:db:bf:93:77:1c:0b:cc:c3:56: 73:31:0f:dc:3f:73:fc:29:ce:73:03:2f:e6:45:c2:db:b8:42: 20:d3:98:24:1b:5b:ab:35:73:5d:98:31:ee:b5:51:d7:ad:aa: d3:1a:82:4a:32:ba:2c:03:57:0d:e4:5d:15:35:99:ed:73:7e: 69:98:1c:78:70:e9:be:72:09:a5:b0:a8:44:e3:e9:51:5c:7d: 30:51:a4:e3:b7:7e:74:13:67:a6:59:c8:85:19:01:04:f3:28: 61:40:3e:43:f5:23:93:7e:50:3c:aa:07:c1:bc:a7:2f:95:3d: fa:1d:cc:f1:f5:2c:ab:e9:0a:0e:97:52:fd:a5:33:5f:7c:ed: 84:02:5b:f0:67:34:ab:20:6d:7e:f5:1f:25:7f:31:5f:e0:15: fc:3f:1b:35:0e:03:1a:48:98:2a:be:dd:fd:f0:cb:e2:e3:07: 9f:78:71:4a:b5:03:38:11:a1:7e:88:b2:e4:33:6d:d3:8d:6b: 82:4f:88:1d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWqTxXihkWBdvY5tRAInYltvkJk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjQwMloX DTI3MDUwMjAxMjkwMlowMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0 RTFGRDJFOTA1RkUxQzUzNUJFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUY/BcZl+SY/FpMS10FEO5ln5On2BK1IVEFd14ZymWyf/pbcyV/QhZpAWnF KrH0kaT/ucEAvzssRCLbG9UzI+aD+Xxcb8sAaj79z6KYwkvlVTmnC1z39FAFMSc0 7x13TDtQ0u2zu3RnrC6zJIkNt8eVY7LKh1XrRDrIxJH/PV2hi2hXw7KIjYbIH32c cXE1YqRUqjZDCSr6pkxQGascjFaaL4JTTJ2uqddno82W6BrI+vWmbOm5wsUDxeyx wNn+fT0CuyL6kTbYKmJQs7yXTcTfXuhUX8tJyxnTuEpTXDDg7CaWuF1UQMs+w+gA MkTk/kMmKilNlg3UTy8PYuTkoakCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjiSrS+qz7+3d1OH9LpBf4cU1vjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzliNzMzZGNmLTlmNWUtNDc3NS05Y2U3LTlkZDUyNWI0NGI4Ni8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YjczM2Rj Zi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS9GOEUyNEFCNEJFQUIzRUZF RERERDRFMUZEMkU5MDVGRTFDNTM1QkUzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN89NAMA0GCSqGSIb3DQEBCwUAA4IBAQBmbHghgEmgR3WSdU+o4ik3+Gc0 TXEktyLhgOTZtSHAD8v9kICR5V6npJAxWzpm0sjaO42SWUUwuCdS/5h/cKHbv5N3 HAvMw1ZzMQ/cP3P8Kc5zAy/mRcLbuEIg05gkG1urNXNdmDHutVHXrarTGoJKMros A1cN5F0VNZntc35pmBx4cOm+cgmlsKhE4+lRXH0wUaTjt350E2emWciFGQEE8yhh QD5D9SOTflA8qgfBvKcvlT36Hczx9Syr6QoOl1L9pTNffO2EAlvwZzSrIG1+9R8l fzFf4BX8Pxs1DgMaSJgqvt398Mvi4wefeHFKtQM4EaF+iLLkM23TjWuCT4gd -----END CERTIFICATE-----Generated at Tue May 12 22:39:06 2026 by rpki-client