$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer (raw, json) Hash identifier: zL+P0YV1KjKgedVGegkiBoUCg8BlbIC5j7vEYzbFPqw= Subject key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7C1A61D152008A9687BF706D4AE3CB17FE44D7C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:15:08 +0000 Certificate not after: Sun 02 May 2027 01:20:08 +0000 Subordinate resources: IP: 223.25.96.0/20 IP: 2402:a500::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1a:61:d1:52:00:8a:96:87:bf:70:6d:4a:e3:cb:17:fe:44:d7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:15:08 2026 GMT Not After : May 2 01:20:08 2027 GMT Subject: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:1d:a4:48:c6:a6:f9:b9:fd:31:32:99:c7: f8:3e:93:16:df:27:b1:07:86:7b:5d:03:28:a6:21: b5:7f:8c:97:66:03:30:d1:f3:63:49:61:fe:b9:50: 5e:09:d9:17:78:63:e1:6e:a4:4c:b2:ee:bd:37:d8: d1:85:f1:2c:7a:0d:6a:3e:dc:3d:98:dd:d8:34:ff: 87:04:49:81:df:74:b6:62:60:88:94:68:96:05:42: d3:69:40:78:0c:4f:85:f9:5a:12:ca:25:46:48:ee: ba:25:05:f4:c7:62:ad:9c:35:87:be:2d:aa:41:71: 7a:65:1c:20:46:7f:fb:f8:a3:20:9e:43:7c:08:62: 02:fd:1f:31:c6:9d:a1:45:30:7c:a2:75:a4:f6:48: 1c:16:d8:4e:47:b1:41:e2:f9:76:36:92:a6:dc:b7: d6:05:ea:60:bc:ec:a1:31:ef:8c:53:d4:58:66:02: dc:99:e1:65:91:7b:3f:e2:68:84:24:24:80:08:12: dd:12:d3:5e:85:1a:ce:e7:a0:a2:a1:a4:8d:0d:d9: f5:a8:a9:af:32:c4:f9:37:b3:4a:be:71:86:2c:06: ba:fd:1f:cf:35:85:84:7d:a8:fe:31:b8:3c:4a:07: 3a:25:cf:1a:53:50:8e:eb:b0:94:ae:13:f2:cc:07: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.96.0/20 IPv6: 2402:a500::/32 Signature Algorithm: sha256WithRSAEncryption 7c:a7:8a:5f:54:e9:b9:5f:42:08:44:b9:4e:60:ef:95:a3:e6: fe:2a:29:a2:52:10:b1:b9:42:01:9c:45:ca:a3:14:80:1f:e9: b9:54:58:f6:e4:aa:0b:de:ff:97:a9:78:99:b2:02:16:86:8b: fd:b7:f9:46:34:d1:aa:4b:9d:02:3f:83:a2:e1:1c:b1:4a:da: 44:4b:55:65:a8:fe:33:4e:da:cc:bd:64:f4:7b:09:97:0c:58: 81:f8:15:d5:08:6a:a7:bb:9e:d1:3b:cd:dd:05:cf:fb:b8:45: 4c:bf:97:c6:d2:a2:08:0d:91:79:dc:d9:a0:33:f8:48:f7:37: 87:bc:ac:a4:04:a9:21:be:08:a7:10:42:c0:b4:97:e0:2a:f1: b3:8d:a3:04:36:2c:aa:42:ea:5f:71:b7:18:6a:a9:13:26:18: 07:b9:d7:72:f5:16:b0:63:0f:a9:07:5a:7f:5e:98:bb:be:4b: 5b:77:a5:12:61:8d:44:7f:26:1a:51:4a:e6:3f:4b:bf:1d:fe: 84:68:32:9b:b7:c3:35:0b:49:4c:c0:7d:e2:44:d3:71:14:fb: 63:2b:d5:5e:49:3d:ab:e6:44:5a:31:57:6f:26:3d:b1:8a:10: 21:70:d2:80:4d:50:8f:b5:28:04:58:c3:11:57:eb:59:8a:76: fe:b4:d0:8f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUfBph0VIAipaHv3BtSuPLF/5E18YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTUwOFoX DTI3MDUwMjAxMjAwOFowMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdC NkE3QTBFOTE2NzREREIyOUFDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbUHaRIxqb5uf0xMpnH+D6TFt8nsQeGe10DKKYhtX+Ml2YDMNHzY0lh/rlQ XgnZF3hj4W6kTLLuvTfY0YXxLHoNaj7cPZjd2DT/hwRJgd90tmJgiJRolgVC02lA eAxPhflaEsolRkjuuiUF9MdirZw1h74tqkFxemUcIEZ/+/ijIJ5DfAhiAv0fMcad oUUwfKJ1pPZIHBbYTkexQeL5djaSpty31gXqYLzsoTHvjFPUWGYC3JnhZZF7P+Jo hCQkgAgS3RLTXoUazuegoqGkjQ3Z9aiprzLE+TezSr5xhiwGuv0fzzWFhH2o/jG4 PEoHOiXPGlNQjuuwlK4T8swH03sCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN5OmeoDCviuv7e2p6DpFnTdsprDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhkMjU0NDE5LTUzYmUtNGFkNC1iZjdmLTI5Zjg5MTI1MjNkMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ZDI1NDQx OS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC9ERTRFOTlFQTAzMEFGOEFF QkZCN0I2QTdBMEU5MTY3NEREQjI5QUMzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQE3xlgMA0EAgACMAcDBQAkAqUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8p4pfVOm5 X0IIRLlOYO+Vo+b+KimiUhCxuUIBnEXKoxSAH+m5VFj25KoL3v+XqXiZsgIWhov9 t/lGNNGqS50CP4Oi4RyxStpES1VlqP4zTtrMvWT0ewmXDFiB+BXVCGqnu57RO83d Bc/7uEVMv5fG0qIIDZF53NmgM/hI9zeHvKykBKkhvginEELAtJfgKvGzjaMENiyq QupfcbcYaqkTJhgHuddy9RawYw+pB1p/Xpi7vktbd6USYY1EfyYaUUrmP0u/Hf6E aDKbt8M1C0lMwH3iRNNxFPtjK9VeST2r5kRaMVdvJj2xihAhcNKATVCPtSgEWMMR V+tZinb+tNCP -----END CERTIFICATE-----Generated at Tue May 5 11:14:14 2026 by rpki-client