$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B12232B70EF234D5CB970B1B84D73947CC4864.cer File: C5B12232B70EF234D5CB970B1B84D73947CC4864.cer (raw, json) Hash identifier: GTaI2fsfHmcX4YBGwFiWEtzRYBUtgO9JnZo/mzMvaP8= Subject key identifier: C5:B1:22:32:B7:0E:F2:34:D5:CB:97:0B:1B:84:D7:39:47:CC:48:64 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08F54A32F6919F22BB0FC246EAD0740EF5399F06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.mft caRepository: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 07:19:03 +0000 Certificate not after: Tue 06 Apr 2027 07:24:03 +0000 Subordinate resources: IP: 2001:df6:b040::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f5:4a:32:f6:91:9f:22:bb:0f:c2:46:ea:d0:74:0e:f5:39:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 07:19:03 2026 GMT Not After : Apr 6 07:24:03 2027 GMT Subject: CN=C5B12232B70EF234D5CB970B1B84D73947CC4864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5c:fe:1f:99:d5:41:09:a7:2e:55:3c:46:6c: 56:b1:79:2d:ef:90:4a:0a:79:69:29:f4:35:ae:45: 9a:fb:c7:35:8c:48:0d:7b:ac:f7:82:0b:a4:de:62: 44:56:25:31:dc:b7:4d:bb:84:6d:b4:c3:b1:b9:8c: af:13:a5:07:d8:92:57:4d:bb:9f:c8:a6:f8:12:18: 87:f7:b1:10:ec:64:34:ab:a1:8d:a9:ea:69:b2:e4: 38:0f:ea:07:30:36:19:6e:20:14:5a:6c:ba:a2:58: ff:e0:27:e3:2f:fc:13:d3:07:6a:e5:16:ed:c2:28: f7:01:75:34:63:08:ad:d9:14:8c:91:ed:59:70:22: 30:6a:0e:c9:5b:56:b7:ac:4b:a5:cc:84:94:3e:25: 6a:8a:e2:ac:39:06:b1:8c:f3:44:fa:06:54:b4:8f: 82:ca:e7:06:9b:a9:05:60:38:6d:ec:f6:d8:ee:d6: 92:4c:2b:2f:67:d5:a9:12:3d:51:a3:3e:29:68:8c: 6a:e0:8a:a4:19:44:dc:23:d2:d0:d7:fb:6b:1c:cf: 2b:e0:5f:cc:f4:30:ae:08:ae:2b:1b:c1:e5:e1:b9: ef:5f:f2:45:b6:4c:fd:f6:9c:6f:e2:28:e5:f0:03: 32:71:6e:97:0d:3c:c7:36:66:b9:7b:1e:ce:48:b1: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:B1:22:32:B7:0E:F2:34:D5:CB:97:0B:1B:84:D7:39:47:CC:48:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:b040::/48 Signature Algorithm: sha256WithRSAEncryption 46:f0:20:29:f5:91:0f:da:eb:c1:3a:d1:79:6b:71:a4:57:a8: 62:c1:5c:97:16:ba:cf:4f:f1:73:a3:dc:bd:9b:24:ba:7d:4b: a1:21:0d:41:36:be:44:74:82:67:30:e9:b2:55:33:f3:11:39: e3:ab:87:1b:d8:66:a6:b9:89:28:8b:20:55:61:7c:e7:67:23: 96:a6:d8:8b:2c:00:f4:d8:26:5a:3f:ef:df:63:d0:63:56:67: dc:70:66:3d:83:9d:de:c0:a7:7d:e0:7d:c2:46:58:6d:b6:b1: 5a:49:f1:89:50:9c:1d:c4:b9:3a:fc:8e:b1:ca:55:52:9c:aa: 87:bc:c5:8e:b9:76:ca:60:3f:05:60:00:33:86:aa:9a:64:d1: b4:31:d6:1b:af:52:b5:6c:d4:8d:31:f6:f1:84:a0:dc:91:0b: 58:ec:40:60:62:53:95:fe:38:e9:43:e7:1d:ca:60:29:5c:a4: 2b:59:2a:50:9a:22:30:68:3d:47:d5:6d:ff:7c:74:2e:47:43: ae:23:a0:8a:b1:98:46:0e:cb:d5:e8:92:dd:9a:29:dc:51:6b: ab:3a:16:80:48:56:08:e1:b2:ee:0b:e9:01:15:e1:bc:0c:25: a0:dc:ab:d8:6b:41:84:ea:64:99:98:9e:0f:14:b1:d6:16:05: eb:a8:7e:f0 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUCPVKMvaRnyK7D8JG6tB0DvU5nwYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNzA3MTkwM1oX DTI3MDQwNjA3MjQwM1owMzExMC8GA1UEAxMoQzVCMTIyMzJCNzBFRjIzNEQ1Q0I5 NzBCMUI4NEQ3Mzk0N0NDNDg2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxc/h+Z1UEJpy5VPEZsVrF5Le+QSgp5aSn0Na5FmvvHNYxIDXus94ILpN5i RFYlMdy3TbuEbbTDsbmMrxOlB9iSV027n8im+BIYh/exEOxkNKuhjanqabLkOA/q BzA2GW4gFFpsuqJY/+An4y/8E9MHauUW7cIo9wF1NGMIrdkUjJHtWXAiMGoOyVtW t6xLpcyElD4laorirDkGsYzzRPoGVLSPgsrnBpupBWA4bez22O7WkkwrL2fVqRI9 UaM+KWiMauCKpBlE3CPS0Nf7axzPK+BfzPQwrgiuKxvB5eG571/yRbZM/facb+Io 5fADMnFulw08xzZmuXsezkix528CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMWxIjK3DvI01cuXCxuE1zlHzEhkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZDVhMDNlYi1hM2UxLTQ4NzktODViZi0yYmVhMDM1NTU4ZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkNWEwM2Vi LWEzZTEtNDg3OS04NWJmLTJiZWEwMzU1NThkZC8wL0M1QjEyMjMyQjcwRUYyMzRE NUNCOTcwQjFCODRENzM5NDdDQzQ4NjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32sEAwDQYJKoZIhvcNAQELBQADggEBAEbwICn1kQ/a68E60XlrcaRXqGLB XJcWus9P8XOj3L2bJLp9S6EhDUE2vkR0gmcw6bJVM/MROeOrhxvYZqa5iSiLIFVh fOdnI5am2IssAPTYJlo/799j0GNWZ9xwZj2Dnd7Ap33gfcJGWG22sVpJ8YlQnB3E uTr8jrHKVVKcqoe8xY65dspgPwVgADOGqppk0bQx1huvUrVs1I0x9vGEoNyRC1js QGBiU5X+OOlD5x3KYClcpCtZKlCaIjBoPUfVbf98dC5HQ64joIqxmEYOy9Xokt2a KdxRa6s6FoBIVgjhsu4L6QEV4bwMJaDcq9hrQYTqZJmYng8UsdYWBeuofvA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:18:46 2026 by rpki-client