$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer File: F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer (raw, json) Hash identifier: O9cJpsRQiF6qaDQu5QyCVOOlPYgMYr2cPJoD+UFBk3Y= Subject key identifier: F9:70:5E:75:10:80:1B:2B:D0:73:B5:BE:93:CC:35:01:1C:7E:7A:DA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D90A95F57E385859AFFD1525CAB04AA7B9733DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:18 +0000 Certificate not after: Sun 02 May 2027 00:47:18 +0000 Subordinate resources: IP: 2001:df3:9040::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:90:a9:5f:57:e3:85:85:9a:ff:d1:52:5c:ab:04:aa:7b:97:33:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:42:18 2026 GMT Not After : May 2 00:47:18 2027 GMT Subject: CN=F9705E7510801B2BD073B5BE93CC35011C7E7ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:3f:d7:46:5a:91:b4:c9:b9:db:90:59:dc: 8f:fd:ee:e4:10:5c:12:c7:9f:eb:d2:51:16:ae:23: 7d:a0:d4:41:ac:55:a4:a2:36:8b:52:45:52:c1:b9: 29:7f:49:7c:9a:f2:39:ee:c6:cb:19:f2:bd:9f:7e: 52:e1:f7:d0:ac:c3:1f:0a:0b:d3:f1:0b:66:30:65: 9e:8c:06:b1:bd:b3:8b:f9:53:dc:0a:87:bb:8a:d0: 07:ba:60:29:8a:70:42:96:02:5e:14:97:23:27:c9: 95:4f:71:0b:78:3c:73:42:66:58:5d:e3:5e:f6:4a: b2:1c:d2:9b:ad:d1:79:ff:12:c0:3c:62:ee:e8:87: 78:ba:a2:76:2c:2c:19:fc:87:a7:27:e8:84:03:1f: 3c:b7:93:75:b8:46:9e:ee:33:e7:b6:71:52:c3:5f: 4b:78:22:37:4d:6f:3c:5b:de:62:de:a4:7a:10:29: b4:36:86:08:11:c3:be:25:39:aa:88:57:b2:d7:9a: 66:41:6c:4f:36:c7:55:93:bb:18:b8:3e:a7:f4:1c: b4:4d:2b:c4:67:61:02:0f:27:cf:d7:2b:26:5a:44: a5:f5:7c:8d:be:73:25:f1:91:4f:35:49:bf:66:22: 70:1b:f9:bf:fb:9f:55:30:d0:82:39:1e:4e:65:b9: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:70:5E:75:10:80:1B:2B:D0:73:B5:BE:93:CC:35:01:1C:7E:7A:DA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:9040::/48 Signature Algorithm: sha256WithRSAEncryption 1e:1a:52:86:24:83:57:da:5a:0c:0c:12:67:8f:9c:73:3c:61: 6f:ed:c5:34:8f:cb:24:16:0f:f3:fe:e1:9b:ec:2e:54:ba:87: 5a:fc:00:4d:92:24:ab:d9:4f:78:b8:7f:4b:2f:12:ee:22:d3: 10:ff:c9:de:97:fe:bf:dd:bb:97:fa:cb:ac:cd:ad:ca:2b:b3: 23:10:62:a9:8c:50:da:57:fd:2e:b9:4f:7d:8d:81:9a:c0:8b: e7:6a:e9:aa:b0:f3:26:42:b1:d8:1f:33:ff:9c:44:2c:0d:ab: e2:0f:b7:47:d6:46:da:fe:5c:65:95:3e:1c:c4:71:60:65:16: 3c:65:ee:96:20:89:1a:e8:ad:1b:54:86:ea:5c:2f:54:76:a6: ac:13:33:78:03:9b:f7:27:aa:f2:3f:60:5b:76:40:33:aa:28: 5d:26:b8:72:51:86:0b:9e:76:fb:1a:d4:4a:92:99:f7:65:5c: 9b:27:1c:1b:cd:1c:9a:31:58:a9:72:4f:78:7b:7b:cb:16:4a: df:aa:b8:dc:ce:07:3d:8e:03:1b:36:a9:eb:79:da:cd:29:09: 40:1e:b5:f3:8d:47:e0:10:08:83:4b:82:92:62:8d:0b:28:53: 3a:ee:6d:b3:b4:ae:be:a9:cd:f6:f9:fe:94:bd:f3:c4:3e:ef: b6:e3:49:69 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHZCpX1fjhYWa/9FSXKsEqnuXM9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDIxOFoX DTI3MDUwMjAwNDcxOFowMzExMC8GA1UEAxMoRjk3MDVFNzUxMDgwMUIyQkQwNzNC NUJFOTNDQzM1MDExQzdFN0FEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWmP9dGWpG0ybnbkFncj/3u5BBcEsef69JRFq4jfaDUQaxVpKI2i1JFUsG5 KX9JfJryOe7GyxnyvZ9+UuH30KzDHwoL0/ELZjBlnowGsb2zi/lT3AqHu4rQB7pg KYpwQpYCXhSXIyfJlU9xC3g8c0JmWF3jXvZKshzSm63Ref8SwDxi7uiHeLqidiws GfyHpyfohAMfPLeTdbhGnu4z57ZxUsNfS3giN01vPFveYt6kehAptDaGCBHDviU5 qohXsteaZkFsTzbHVZO7GLg+p/QctE0rxGdhAg8nz9crJlpEpfV8jb5zJfGRTzVJ v2YicBv5v/ufVTDQgjkeTmW54JUCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPlwXnUQgBsr0HO1vpPMNQEcfnraMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVkODIzYmIzLTVhMDEtNDY1OC1hNzgzLWY4ZTg5ZmFkY2Y0NS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZDgyM2Ji My01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS9GOTcwNUU3NTEwODAxQjJC RDA3M0I1QkU5M0NDMzUwMTFDN0U3QURBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN85BAMA0GCSqGSIb3DQEBCwUAA4IBAQAeGlKGJINX2loMDBJnj5xzPGFv 7cU0j8skFg/z/uGb7C5Uuoda/ABNkiSr2U94uH9LLxLuItMQ/8nel/6/3buX+sus za3KK7MjEGKpjFDaV/0uuU99jYGawIvnaumqsPMmQrHYHzP/nEQsDaviD7dH1kba /lxllT4cxHFgZRY8Ze6WIIka6K0bVIbqXC9UdqasEzN4A5v3J6ryP2BbdkAzqihd JrhyUYYLnnb7GtRKkpn3ZVybJxwbzRyaMVipck94e3vLFkrfqrjczgc9jgMbNqnr edrNKQlAHrXzjUfgEAiDS4KSYo0LKFM67m2ztK6+qc32+f6UvfPEPu+240lp -----END CERTIFICATE-----Generated at Tue May 12 22:02:42 2026 by rpki-client