$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.cer (raw, json) Hash identifier: nRiJAfapzULiZfTSSmmUcl3gzoEQU21Udk+rsceqxBs= Subject key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0666F2940470840D488916E2FCD0002217596A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:43:43 +0000 Certificate not after: Sun 02 May 2027 00:48:43 +0000 Subordinate resources: IP: 103.102.12.0/22 IP: 2401:db40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:66:f2:94:04:70:84:0d:48:89:16:e2:fc:d0:00:22:17:59:6a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:43:43 2026 GMT Not After : May 2 00:48:43 2027 GMT Subject: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:23:24:e9:8e:a8:92:32:eb:4d:fc:83:32: 94:0b:fc:12:6d:f3:11:f4:0f:06:e6:a1:14:84:79: 63:4b:89:29:83:09:4d:18:ba:14:88:04:f6:d8:05: ff:7b:a9:a1:27:39:ac:c1:ed:9b:3f:3e:25:42:b4: 7e:cc:9e:b7:ac:e8:35:14:e9:b3:9e:e4:d4:d1:11: b0:77:c0:58:a4:48:bd:f2:8c:d5:e5:4b:34:88:ce: 09:87:67:de:fb:f8:de:00:bf:a2:1b:b4:00:fd:40: e3:be:3b:a0:e4:d1:28:70:99:5d:60:6b:09:d4:6e: 9b:45:f3:98:20:66:9f:f0:0f:32:85:46:64:dd:76: 0b:63:11:d1:68:75:00:03:41:b3:80:16:18:93:f2: 32:56:eb:9e:4b:21:b4:96:d1:c5:c0:fa:e9:56:d5: 2d:18:a7:16:e2:e9:39:fb:8a:69:e8:6f:eb:d8:ed: 19:3a:41:9c:64:9f:2e:7d:e1:4b:8d:16:a6:2a:c0: 1b:51:0a:05:94:2d:9d:d7:8e:26:e7:e7:f9:10:e0: 08:94:1b:83:93:d7:e7:0f:fd:28:75:58:fe:3f:b1: ba:a3:cb:b3:b5:53:41:54:89:6f:32:e9:1a:d5:65: 0d:fe:45:e6:59:91:8e:42:7b:ee:e1:fd:96:6d:c8: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.12.0/22 IPv6: 2401:db40::/32 Signature Algorithm: sha256WithRSAEncryption 7f:3a:56:ea:47:98:c3:92:3b:b2:cf:9b:18:8f:74:bc:12:6c: d3:e3:00:29:0a:e5:29:b9:8e:6b:b4:70:8f:c2:d0:07:da:0d: ba:7f:d9:66:53:7d:08:a9:6c:3a:af:a0:58:8d:66:b2:aa:71: dd:64:5c:2a:56:49:3b:f2:bd:b2:da:c2:05:fd:bf:b9:9c:22: 15:0e:65:4e:b4:f1:88:6c:eb:1e:55:16:97:e1:d4:96:f8:00: 98:49:dd:c6:00:5b:4b:f5:78:4e:2e:cc:ff:cf:62:c1:03:34: c6:b9:8b:fc:60:3c:f2:3a:97:18:ac:14:83:51:8d:d5:89:76: bd:1d:6a:74:eb:c0:70:c0:df:c0:cb:a7:b1:b8:8b:1b:e0:d0: 79:7f:d2:94:1b:d7:90:59:08:fe:43:af:bc:2a:5c:8e:99:92: e6:6a:5e:97:e0:e5:f0:cf:62:82:5f:d0:c0:95:e9:de:48:00: 97:31:43:80:ff:0a:21:da:12:b6:be:6e:68:77:8a:b0:86:09: 64:09:48:22:69:45:ab:b1:da:73:2e:e2:10:90:3b:84:b6:52: cd:32:a0:10:96:f6:1c:b0:d2:8d:f5:2e:e8:0c:b5:ee:7c:99: 7a:1f:4b:a7:81:1c:f6:f1:32:c2:9c:49:b3:96:47:e7:ff:bd: 10:8a:ad:40 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUBmbylARwhA1IiRbi/NAAIhdZajkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDM0M1oX DTI3MDUwMjAwNDg0M1owMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUx MzEyOUVCNjc3Qjk2QzQ5QzdGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKwIyTpjqiSMutN/IMylAv8Em3zEfQPBuahFIR5Y0uJKYMJTRi6FIgE9tgF /3upoSc5rMHtmz8+JUK0fsyet6zoNRTps57k1NERsHfAWKRIvfKM1eVLNIjOCYdn 3vv43gC/ohu0AP1A4747oOTRKHCZXWBrCdRum0XzmCBmn/APMoVGZN12C2MR0Wh1 AANBs4AWGJPyMlbrnkshtJbRxcD66VbVLRinFuLpOfuKaehv69jtGTpBnGSfLn3h S40WpirAG1EKBZQtndeOJufn+RDgCJQbg5PX5w/9KHVY/j+xuqPLs7VTQVSJbzLp GtVlDf5F5lmRjkJ77uH9lm3IYQcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIQSLaWxRpedWq4TEp62d7lsScf2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVmODZiMTJlLWU1NzQtNDI2Yi1hYTZiLTQ5MzllM2IwMzBiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81Zjg2YjEy ZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC84NDEyMkRBNUIxNDY5NzlE NUFBRTEzMTI5RUI2NzdCOTZDNDlDN0Y2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2YMMA0EAgACMAcDBQAkAdtAMA0GCSqGSIb3DQEBCwUAA4IBAQB/OlbqR5jD kjuyz5sYj3S8EmzT4wApCuUpuY5rtHCPwtAH2g26f9lmU30IqWw6r6BYjWayqnHd ZFwqVkk78r2y2sIF/b+5nCIVDmVOtPGIbOseVRaX4dSW+ACYSd3GAFtL9XhOLsz/ z2LBAzTGuYv8YDzyOpcYrBSDUY3ViXa9HWp068BwwN/Ay6exuIsb4NB5f9KUG9eQ WQj+Q6+8KlyOmZLmal6X4OXwz2KCX9DAleneSACXMUOA/woh2hK2vm5od4qwhglk CUgiaUWrsdpzLuIQkDuEtlLNMqAQlvYcsNKN9S7oDLXufJl6H0ungRz28TLCnEmz lkfn/70Qiq1A -----END CERTIFICATE-----Generated at Tue May 5 17:58:08 2026 by rpki-client