$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer File: CD846D565A6E2859697B59C438907050C12DE37D.cer (raw, json) Hash identifier: 6CN90lTrLRk5hg+hADC3XlD75i0dqjeqZqyWiRET42c= Subject key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 5DBB199E659E57475690FA117A08D12367D1751A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Manifest: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:12:16 +0000 Certificate not after: Sun 02 May 2027 01:17:16 +0000 Subordinate resources: IP: 212.117.48.0/20 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 14:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bb:19:9e:65:9e:57:47:56:90:fa:11:7a:08:d1:23:67:d1:75:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: May 3 01:12:16 2026 GMT Not After : May 2 01:17:16 2027 GMT Subject: CN=CD846D565A6E2859697B59C438907050C12DE37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:00:78:88:f8:f2:be:1b:f2:0a:c0:ef:d2:71: 7d:ab:33:62:e3:f0:4e:e8:1f:42:2a:67:22:dd:4a: 48:b4:d6:10:b8:5e:a0:0c:ec:4b:9d:71:2b:5b:52: 5e:3e:fc:f5:ec:bf:46:ec:64:d6:2d:ea:2f:3c:72: ed:50:25:d2:fa:80:b0:53:1f:15:cf:e4:f1:01:2d: cc:90:61:dd:6b:83:19:ff:17:c9:80:b9:cd:11:3e: 51:13:85:5b:bd:56:bc:2f:91:7f:33:74:74:85:bd: 58:92:b9:11:57:e5:7f:f7:26:79:16:38:8a:ba:15: 0f:7f:5e:86:79:d7:b4:9f:b5:4d:fe:95:7b:1a:61: 85:96:1c:aa:6f:5b:80:ef:5c:85:5f:18:02:70:89: e4:9a:c9:a3:23:80:b8:aa:0b:da:4e:3c:d3:47:2b: 07:b6:68:1c:a4:e3:69:1a:73:26:51:ca:db:34:7b: 58:f0:ef:e5:7e:d3:db:f5:68:2d:96:71:dc:33:4a: f9:95:1a:ec:9f:60:6a:1d:4d:57:b2:f8:d9:bc:c5: ee:d5:fc:99:e1:22:b8:12:b6:18:0c:28:84:78:47: 4a:4c:d2:a4:a6:a0:d5:ea:85:65:25:0d:61:c7:3d: b9:76:6a:2c:64:43:00:b0:d9:c7:40:81:d3:92:01: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.117.48.0/20 Signature Algorithm: sha256WithRSAEncryption 43:bf:39:15:c8:92:8a:17:45:8d:66:f9:42:3b:a4:43:c8:36: 87:ad:3a:1f:7e:30:69:f4:6e:db:a2:05:0e:9f:66:a9:fe:91: 14:fe:5a:ea:6f:9a:6e:26:43:58:f0:56:76:07:78:53:f8:60: 74:1a:3d:9d:1f:c7:06:57:d8:64:b6:23:90:54:5f:74:33:34: cd:cc:c4:4d:41:0e:7d:10:75:46:47:78:df:36:66:00:74:9e: 39:63:e4:38:dd:67:2d:92:f6:b2:58:e1:17:10:13:38:43:63: 3d:a4:df:5e:71:04:3a:0a:1e:46:3e:60:35:d3:53:dc:aa:32: 8b:6a:68:fa:6e:57:8f:38:a9:b9:bc:05:c3:a1:ca:8b:68:8a: bf:cd:ad:97:f6:fd:ff:e4:ee:ff:ce:32:c8:58:db:b3:ef:d5: bc:2a:da:3a:eb:c4:19:0c:cc:2d:ba:0e:f8:30:d0:f1:45:bd: 34:c0:17:88:0f:60:bc:21:23:63:2e:a8:a3:ff:c6:09:84:85: f2:96:b8:2a:6b:45:e7:9e:9c:2b:56:36:d7:cd:a6:eb:38:8b: 52:7b:95:87:bc:b6:92:1a:a2:a7:ab:24:26:90:35:b7:bf:aa: 01:fe:a9:b1:e3:45:a0:ee:0a:7a:d2:5d:26:03:b4:21:cd:bc: 1a:9c:06:1a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXbsZnmWeV0dWkPoRegjRI2fRdRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMzAxMTIxNloX DTI3MDUwMjAxMTcxNlowMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1 OUM0Mzg5MDcwNTBDMTJERTM3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIAeIj48r4b8grA79JxfaszYuPwTugfQipnIt1KSLTWELheoAzsS51xK1tS Xj789ey/Ruxk1i3qLzxy7VAl0vqAsFMfFc/k8QEtzJBh3WuDGf8XyYC5zRE+UROF W71WvC+RfzN0dIW9WJK5EVflf/cmeRY4iroVD39ehnnXtJ+1Tf6VexphhZYcqm9b gO9chV8YAnCJ5JrJoyOAuKoL2k4800crB7ZoHKTjaRpzJlHK2zR7WPDv5X7T2/Vo LZZx3DNK+ZUa7J9gah1NV7L42bzF7tX8meEiuBK2GAwohHhHSkzSpKag1eqFZSUN Ycc9uXZqLGRDALDZx0CB05IBOkkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM2EbVZabihZaXtZxDiQcFDBLeN9MB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg5MWQzYzMwLTk1ZGMtNGI3Mi1hZTFiLWFkMWU5OGIwZTE3OS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84OTFkM2Mz MC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS9DRDg0NkQ1NjVBNkUyODU5 Njk3QjU5QzQzODkwNzA1MEMxMkRFMzdELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQE1HUwMA0GCSqGSIb3DQEBCwUAA4IBAQBDvzkVyJKKF0WNZvlCO6RDyDaHrTof fjBp9G7bogUOn2ap/pEU/lrqb5puJkNY8FZ2B3hT+GB0Gj2dH8cGV9hktiOQVF90 MzTNzMRNQQ59EHVGR3jfNmYAdJ45Y+Q43WctkvayWOEXEBM4Q2M9pN9ecQQ6Ch5G PmA101PcqjKLamj6blePOKm5vAXDocqLaIq/za2X9v3/5O7/zjLIWNuz79W8Kto6 68QZDMwtug74MNDxRb00wBeID2C8ISNjLqij/8YJhIXylrgqa0XnnpwrVjbXzabr OItSe5WHvLaSGqKnqyQmkDW3v6oB/qmx40Wg7gp60l0mA7QhzbwanAYa -----END CERTIFICATE-----Generated at Tue May 5 14:55:33 2026 by rpki-client