$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer (raw, json) Hash identifier: 86A158nkMu3JjMDY7r5GNN08ThHQDddJHiYVwff+YNk= Subject key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 64F041B78B9BAF1764757B2EC982363FB12D0E76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:52:32 +0000 Certificate not after: Sun 02 May 2027 01:57:32 +0000 Subordinate resources: IP: 103.147.144.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f0:41:b7:8b:9b:af:17:64:75:7b:2e:c9:82:36:3f:b1:2d:0e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:52:32 2026 GMT Not After : May 2 01:57:32 2027 GMT Subject: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:1d:24:6a:05:2c:09:ec:b5:42:c2:6b:b1: 82:db:0c:53:30:50:cb:a3:4f:af:1f:f4:d5:5c:48: 95:e8:17:64:2f:00:ff:c2:c9:93:c4:1b:c9:4d:c6: 29:a9:8a:25:bc:a6:25:37:6a:66:1b:18:51:26:80: 22:39:36:c9:e7:fb:06:93:40:be:ea:6f:b6:c8:bb: b3:99:a4:12:34:3a:bf:d7:e4:93:ee:79:f0:46:e2: 67:09:fe:1a:77:18:da:56:b3:04:b6:42:f0:d1:d5: ea:e4:46:14:4e:7b:0c:62:4c:99:47:f5:bd:aa:62: a5:80:ef:96:d9:d6:ff:fb:91:99:a7:fe:cc:53:7d: d7:8d:df:0b:ca:a2:44:e4:91:1d:76:a5:15:d2:f4: f3:fe:4e:89:c0:c8:19:58:dd:e0:7a:24:40:7d:92: e2:a4:6d:b7:10:d5:9c:fc:e2:f4:9a:17:82:50:e7: 1f:11:d8:85:30:40:b0:9c:44:d6:52:1d:63:a0:ab: 5b:50:9b:61:77:70:e7:0c:44:b9:3c:1e:97:83:09: 87:14:82:7e:d8:b1:42:3c:e0:69:4c:8d:16:8a:41: 68:dd:5d:51:f7:d6:e8:95:4b:5f:47:bd:ec:6a:af: f6:03:5c:aa:66:b6:16:0a:f7:87:3a:d8:9b:67:2a: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.144.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:15:f8:76:35:a2:a9:bf:9d:27:8a:60:2b:59:48:40:46:bb: 61:e3:49:ee:e8:e9:41:bc:98:64:88:c5:93:01:f4:8a:8c:e5: 3c:24:01:6a:31:ab:9a:54:ac:14:21:f6:96:b2:02:d1:09:4c: ed:5c:35:86:a2:c1:76:60:44:d5:c0:ef:26:eb:50:25:d4:0a: cd:4e:04:8a:a3:c8:0c:96:0d:d5:66:2b:37:72:67:56:27:3b: 19:3d:d7:4b:6f:93:60:3c:ec:4d:6a:9e:3c:56:ea:03:fe:78: b6:e4:8e:bd:8a:a1:05:b3:1d:98:d1:48:72:10:dc:18:5c:a8: 26:78:13:b1:61:23:70:eb:69:34:4a:61:4d:32:66:da:27:4e: 5b:70:70:cc:14:6d:61:8a:80:48:4f:1d:56:db:24:46:52:c4: 4b:9b:37:db:57:ca:16:68:e8:df:fb:79:68:82:af:e1:91:09: 3c:ee:45:ec:1b:5b:43:f5:3d:e2:ec:2e:df:37:d3:2a:d2:13: 7d:0a:53:b8:37:1c:f1:3e:ca:4b:46:d7:9b:86:dc:38:4c:82: 7f:34:10:b0:6c:1c:90:11:5b:2c:e5:b2:27:f3:eb:fd:08:66: 16:85:90:e0:ef:f7:7d:2a:f4:9f:2c:30:24:3f:8a:b7:4e:e7: 52:7c:87:89 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZPBBt4ubrxdkdXsuyYI2P7EtDnYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTIzMloX DTI3MDUwMjAxNTczMlowMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBD N0U4OUVDNkUxRjlDMjQ0MkFEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUyHSRqBSwJ7LVCwmuxgtsMUzBQy6NPrx/01VxIlegXZC8A/8LJk8QbyU3G KamKJbymJTdqZhsYUSaAIjk2yef7BpNAvupvtsi7s5mkEjQ6v9fkk+558EbiZwn+ GncY2lazBLZC8NHV6uRGFE57DGJMmUf1vapipYDvltnW//uRmaf+zFN9143fC8qi ROSRHXalFdL08/5OicDIGVjd4HokQH2S4qRttxDVnPzi9JoXglDnHxHYhTBAsJxE 1lIdY6CrW1CbYXdw5wxEuTwel4MJhxSCftixQjzgaUyNFopBaN1dUffW6JVLX0e9 7Gqv9gNcqma2Fgr3hzrYm2cqrqUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAKLcomOC6vPNHDH6J7G4fnCRCrZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M4NWNiZDk1LTU3NGYtNDA1Yi04YmRlLTBkZGI5YzliZGRiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jODVjYmQ5 NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wMjhCNzI4OThFMEJBQkNG MzQ3MEM3RTg5RUM2RTFGOUMyNDQyQUQ5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5OQMA0GCSqGSIb3DQEBCwUAA4IBAQCfFfh2NaKpv50nimArWUhARrth40nu 6OlBvJhkiMWTAfSKjOU8JAFqMauaVKwUIfaWsgLRCUztXDWGosF2YETVwO8m61Al 1ArNTgSKo8gMlg3VZis3cmdWJzsZPddLb5NgPOxNap48VuoD/ni25I69iqEFsx2Y 0UhyENwYXKgmeBOxYSNw62k0SmFNMmbaJ05bcHDMFG1hioBITx1W2yRGUsRLmzfb V8oWaOjf+3logq/hkQk87kXsG1tD9T3i7C7fN9Mq0hN9ClO4NxzxPspLRtebhtw4 TIJ/NBCwbByQEVss5bIn8+v9CGYWhZDg7/d9KvSfLDAkP4q3TudSfIeJ -----END CERTIFICATE-----Generated at Tue May 12 22:03:38 2026 by rpki-client