$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.cer (raw, json) Hash identifier: kc9cGBdAN4RNu4O7D1ydvNxKTI5dBER91wtAfmlNMnI= Subject key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D2AC550613B38A5F1210523414179233D57A57E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:10:06 +0000 Certificate not after: Sun 02 May 2027 00:15:06 +0000 Subordinate resources: IP: 58.65.240.0/21 IP: 115.166.96.0/19 IP: 2403:ff00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 15:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2a:c5:50:61:3b:38:a5:f1:21:05:23:41:41:79:23:3d:57:a5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:10:06 2026 GMT Not After : May 2 00:15:06 2027 GMT Subject: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:b7:0e:34:48:97:15:4c:8b:52:6a:59:bd: 3e:b4:d6:ad:0d:a4:9b:0c:c6:fe:c5:45:a8:fb:d9: 04:18:0a:98:1c:5e:d8:6c:4e:d1:a3:8a:2d:db:07: 1b:64:68:4e:56:71:2b:dc:e8:40:f3:e1:dd:4a:5a: 97:a4:87:b0:27:ca:45:5a:98:5a:fc:75:b4:cd:a7: 1a:fd:dd:64:e9:96:a3:5b:10:16:0a:01:7b:f3:9c: 73:55:00:ea:0f:2d:f0:92:91:fd:54:c9:ff:d8:bf: b3:ec:aa:05:87:c1:47:3f:8f:83:59:96:09:80:f3: c8:55:36:8d:1d:05:cb:36:d9:5c:c1:f5:ed:49:a9: 58:36:c2:ec:ec:ec:6f:fc:75:ba:ec:c3:6c:4d:5e: 23:3e:d9:1a:6b:e2:7c:33:c3:e9:a6:bc:ee:e5:72: e5:92:4d:c4:14:d6:d0:a8:36:95:30:7f:bf:71:a8: 20:a3:eb:2a:fd:b5:1b:8e:07:dc:fc:51:81:2c:73: 6b:c0:04:2d:ac:56:23:2b:dd:41:73:90:38:c4:62: 0d:1e:ae:88:9e:d7:c5:67:35:b7:7b:0d:c9:43:7d: 72:4a:7c:ef:d6:72:b4:55:ed:6f:32:f6:a2:3d:2c: bd:80:60:9a:9b:bf:0e:aa:49:f1:f9:3c:67:cf:ba: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.65.240.0/21 115.166.96.0/19 IPv6: 2403:ff00::/32 Signature Algorithm: sha256WithRSAEncryption 74:59:d8:7c:21:8b:c3:16:e6:97:20:18:18:7e:5b:15:42:5a: f4:f0:2c:78:d3:7c:85:aa:f9:1a:5b:cb:50:47:3d:79:d5:f8: e6:5a:f7:3e:8a:d5:b2:04:02:ba:64:a1:fd:ef:44:4a:4c:17: 8b:c3:34:27:76:2f:e3:0f:b1:1c:21:a2:29:2f:68:7c:a5:b6: 63:b7:7f:a3:3b:59:5c:a3:78:4c:f0:69:22:20:f6:83:51:5e: ad:53:52:9f:ae:23:75:83:5c:0a:07:d2:75:bb:75:52:1d:fd: a0:d1:2b:f6:ab:4c:f9:13:33:0c:85:07:84:44:95:69:fd:64: 26:f7:6a:cd:b3:4d:78:fd:f8:77:39:f0:67:6b:38:8a:2e:e0: 8b:4b:09:1c:7c:cb:5e:93:ec:01:33:67:60:3e:51:fe:06:b4: 8f:8c:e9:b0:82:c8:c3:b9:28:b0:cc:ef:71:46:4a:f1:2c:f2: 73:55:dd:a6:01:5b:3e:bc:a1:fa:2c:9f:16:1e:31:2f:ef:88: bf:7f:3b:1c:ee:ab:2b:b7:1d:e4:e5:07:9c:57:6f:d9:63:6f: 6f:5e:73:69:9a:64:c1:c9:06:09:6e:9b:99:57:42:5b:93:31: df:94:3e:a7:80:9e:f2:61:06:96:9d:89:a2:51:d4:04:7f:be: 8e:84:21:d0 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUPSrFUGE7OKXxIQUjQUF5Iz1XpX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTAwNloX DTI3MDUwMjAwMTUwNlowMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdB NTgxQzNGRTFBQzc4RTUyOUYyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/ktw40SJcVTItSalm9PrTWrQ2kmwzG/sVFqPvZBBgKmBxe2GxO0aOKLdsH G2RoTlZxK9zoQPPh3Upal6SHsCfKRVqYWvx1tM2nGv3dZOmWo1sQFgoBe/Occ1UA 6g8t8JKR/VTJ/9i/s+yqBYfBRz+Pg1mWCYDzyFU2jR0FyzbZXMH17UmpWDbC7Ozs b/x1uuzDbE1eIz7ZGmvifDPD6aa87uVy5ZJNxBTW0Kg2lTB/v3GoIKPrKv21G44H 3PxRgSxza8AELaxWIyvdQXOQOMRiDR6uiJ7XxWc1t3sNyUN9ckp879ZytFXtbzL2 oj0svYBgmpu/DqpJ8fk8Z8+6DlkCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/4WVPGhQ41lGelgcP+GseOUp8vMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJkZDQ3ZjU2LWVjNTMtNDJlYi05YjhiLWZhMDhmODc0ZDMxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZGQ0N2Y1 Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC81RkY4NTk1M0M2ODUwRTM1 OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5RjJGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQDOkHwAwQFc6ZgMA0EAgACMAcDBQAkA/8AMA0GCSqGSIb3DQEBCwUAA4IBAQB0 Wdh8IYvDFuaXIBgYflsVQlr08Cx403yFqvkaW8tQRz151fjmWvc+itWyBAK6ZKH9 70RKTBeLwzQndi/jD7EcIaIpL2h8pbZjt3+jO1lco3hM8GkiIPaDUV6tU1KfriN1 g1wKB9J1u3VSHf2g0Sv2q0z5EzMMhQeERJVp/WQm92rNs014/fh3OfBnaziKLuCL SwkcfMtek+wBM2dgPlH+BrSPjOmwgsjDuSiwzO9xRkrxLPJzVd2mAVs+vKH6LJ8W HjEv74i/fzsc7qsrtx3k5QecV2/ZY29vXnNpmmTByQYJbpuZV0JbkzHflD6ngJ7y YQaWnYmiUdQEf76OhCHQ -----END CERTIFICATE-----Generated at Sun May 3 16:11:08 2026 by rpki-client