$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer File: 024857CCDFA5066CE266529DD14709446E2D5817.cer (raw, json) Hash identifier: J29u/SR6PGkwDc9fN1cIYysMIu3AzulRjOFvn2d45W4= Subject key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 216FE4B70A4A1080FCF12E99DCA8F6E6B0E6945F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:07:24 +0000 Certificate not after: Sun 02 May 2027 00:12:24 +0000 Subordinate resources: IP: 103.54.80.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:e4:b7:0a:4a:10:80:fc:f1:2e:99:dc:a8:f6:e6:b0:e6:94:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:07:24 2026 GMT Not After : May 2 00:12:24 2027 GMT Subject: CN=024857CCDFA5066CE266529DD14709446E2D5817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:fa:09:10:7b:59:e3:22:3d:ac:c3:60:b3: 18:40:4e:64:11:40:43:86:b3:c3:37:7c:31:71:4b: e9:59:36:64:05:72:45:57:6e:cc:90:cb:45:f8:84: 11:84:ce:30:25:ca:89:9d:64:1e:24:98:21:57:e8: 73:fd:4b:86:91:b2:59:8d:e7:d6:da:4f:ec:f5:50: 97:a4:13:6d:ac:6d:f9:22:d0:b7:34:1e:93:bc:eb: d6:23:c5:9b:57:45:18:4c:aa:6f:a5:0c:e1:a8:72: 08:a6:b4:f4:4e:a9:d1:42:ce:90:48:90:83:94:f9: 0e:64:f2:98:9c:e3:93:48:43:fa:74:9c:f2:5a:b3: bd:f4:41:fe:cb:e6:6e:ef:c0:0d:c0:8b:4d:4f:dc: 8d:97:b3:21:9f:40:16:e8:0a:eb:11:ec:82:72:59: 76:02:1d:2c:95:c8:da:b2:49:54:b6:67:e4:03:eb: c2:6f:de:2e:d3:15:82:bf:c3:ce:96:54:46:38:28: b4:3a:d5:e9:fb:aa:93:7d:1a:0e:84:d9:12:47:8b: 76:5e:b8:92:68:72:39:66:4a:8c:bd:5a:cb:9c:fa: 77:56:90:25:91:ab:3b:07:a0:d2:ef:46:15:c4:5a: bd:94:ac:90:55:69:f8:df:f1:f0:09:a1:82:f3:51: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.80.0/23 Signature Algorithm: sha256WithRSAEncryption 49:41:c4:b4:04:53:84:98:fa:3e:90:1f:58:a0:b9:2e:29:1b: 4e:89:4e:10:9d:d2:24:0d:90:47:f9:c7:de:25:d0:f1:18:c2: f2:1a:32:ac:e6:f8:10:ae:6c:86:91:75:11:5d:96:3b:a5:dd: f3:5f:35:37:32:9a:20:ac:b7:7f:f4:57:29:e1:ac:1a:27:aa: 37:a6:9c:09:8b:8a:a4:0b:6c:c4:a2:c5:96:28:bf:55:e6:f4: 39:d8:5e:ad:29:2a:6b:d0:a2:95:8c:1c:62:b6:4e:7e:a1:48: df:0c:76:90:f4:67:79:05:07:8a:89:47:2e:6d:e5:05:78:64: da:06:96:b8:7f:ff:0b:11:23:9d:60:18:ed:ea:90:69:4e:4e: 28:c8:6e:fc:d4:73:af:ec:81:1f:18:1b:8b:90:b7:c6:a0:8f: ae:cd:58:a9:84:65:4d:ec:51:39:78:e6:12:8a:9c:23:31:19: 20:a0:f8:71:16:3a:11:62:ad:c0:a1:f5:8c:88:0f:a1:34:97: b5:79:74:04:99:59:d2:9a:79:1d:63:04:4c:6b:73:5e:69:24: 1f:f3:ba:6b:7e:5a:22:e0:8e:81:57:98:93:02:1f:12:86:12: 5f:eb:1f:33:8f:d4:d1:d3:5b:c3:35:aa:06:18:3c:2c:70:66: 68:34:d0:70 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIW/ktwpKEID88S6Z3Kj25rDmlF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDcyNFoX DTI3MDUwMjAwMTIyNFowMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1 MjlERDE0NzA5NDQ2RTJENTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDO+gkQe1njIj2sw2CzGEBOZBFAQ4azwzd8MXFL6Vk2ZAVyRVduzJDLRfiE EYTOMCXKiZ1kHiSYIVfoc/1LhpGyWY3n1tpP7PVQl6QTbaxt+SLQtzQek7zr1iPF m1dFGEyqb6UM4ahyCKa09E6p0ULOkEiQg5T5DmTymJzjk0hD+nSc8lqzvfRB/svm bu/ADcCLTU/cjZezIZ9AFugK6xHsgnJZdgIdLJXI2rJJVLZn5APrwm/eLtMVgr/D zpZURjgotDrV6fuqk30aDoTZEkeLdl64kmhyOWZKjL1ay5z6d1aQJZGrOweg0u9G FcRavZSskFVp+N/x8AmhgvNRQQcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAJIV8zfpQZs4mZSndFHCURuLVgXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJhOTMwMmNlLTE3ZTktNDAzOS1iM2Y5LTk5NWU3ODY3MWMyNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYTkzMDJj ZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC8wMjQ4NTdDQ0RGQTUwNjZD RTI2NjUyOUREMTQ3MDk0NDZFMkQ1ODE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzZQMA0GCSqGSIb3DQEBCwUAA4IBAQBJQcS0BFOEmPo+kB9YoLkuKRtOiU4Q ndIkDZBH+cfeJdDxGMLyGjKs5vgQrmyGkXURXZY7pd3zXzU3MpogrLd/9Fcp4awa J6o3ppwJi4qkC2zEosWWKL9V5vQ52F6tKSpr0KKVjBxitk5+oUjfDHaQ9Gd5BQeK iUcubeUFeGTaBpa4f/8LESOdYBjt6pBpTk4oyG781HOv7IEfGBuLkLfGoI+uzVip hGVN7FE5eOYSipwjMRkgoPhxFjoRYq3AofWMiA+hNJe1eXQEmVnSmnkdYwRMa3Ne aSQf87prfloi4I6BV5iTAh8ShhJf6x8zj9TR01vDNaoGGDwscGZoNNBw -----END CERTIFICATE-----Generated at Tue May 12 22:16:27 2026 by rpki-client