$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer File: 02A8ED077C03E43C338DFC14D6192E46DA534B52.cer (raw, json) Hash identifier: jTudbzafmHhZ2VsgpA8cS3uWxE0iYhpykEEZ7iJTQFI= Subject key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7239D59DDCEAA9547B7971793BE35724CBF4391E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft caRepository: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:35:03 +0000 Certificate not after: Sun 02 May 2027 00:40:03 +0000 Subordinate resources: IP: 103.121.148.0/23 IP: 2001:df6:4700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:39:d5:9d:dc:ea:a9:54:7b:79:71:79:3b:e3:57:24:cb:f4:39:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:35:03 2026 GMT Not After : May 2 00:40:03 2027 GMT Subject: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:68:21:e8:ec:56:a0:26:09:74:c3:55:15: 22:cc:52:e4:8b:a1:83:c8:a9:8d:ea:de:cc:bf:d2: 8d:3d:ac:b1:35:ee:6c:69:c0:5b:42:bd:08:70:82: 70:b9:48:c8:c4:cc:26:f7:1a:6b:e1:d8:46:7d:83: 86:17:56:11:cb:7b:1e:34:6f:c6:82:5d:78:c7:fc: ad:d3:89:84:a2:ca:e6:48:df:c0:bc:b9:9d:40:99: 2b:ff:57:d4:f5:e8:0d:2b:5a:b6:ed:b0:49:21:b6: 91:bb:28:f5:90:3e:e1:cb:28:fa:5a:b7:d9:6f:8d: 56:c7:3b:33:17:cf:f0:eb:23:b2:41:5d:1c:82:dc: 48:4a:3c:1f:96:ef:ea:60:ad:30:14:2b:92:34:c5: b6:6e:a6:2f:99:a8:76:8b:1c:83:fb:69:2d:12:e7: 55:81:50:14:9f:60:1f:39:ac:6a:17:fd:80:14:df: 93:67:51:9d:44:32:82:38:3e:e8:61:da:32:39:27: 40:73:62:31:dd:de:83:3a:a1:13:6e:1a:be:27:f6: 4e:5e:19:c3:c0:50:c5:fb:9e:a0:40:58:c8:d2:5d: 8e:59:de:93:69:fb:3a:ea:9b:79:11:42:d1:48:e5: d3:79:42:fe:79:98:e1:96:24:50:06:a4:75:a9:88: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.148.0/23 IPv6: 2001:df6:4700::/48 Signature Algorithm: sha256WithRSAEncryption 02:14:b8:48:71:52:07:d3:78:23:39:46:89:98:02:b4:15:91: 18:0a:13:d5:36:45:f0:9d:1e:0a:b7:54:9a:63:a6:ab:f2:81: 55:20:59:3f:a9:0e:57:09:b9:f6:4e:cd:07:4d:83:c1:7e:51: 3f:d4:9e:22:be:ad:4d:28:33:6f:8d:30:27:fb:0b:9d:01:17: ec:0d:5a:0b:96:6f:10:f0:a3:1f:d9:4a:c2:6a:e6:21:52:20: 88:15:1a:c4:ed:87:cc:01:03:14:ff:67:d2:9b:8c:bc:01:82: 51:02:2c:af:69:76:9a:41:c0:34:59:8b:09:6e:3d:19:f6:f3: a9:0c:9a:7e:4d:fa:a7:7c:3c:7f:e2:ea:8d:1e:39:27:9d:e7: 6c:72:b8:62:e5:1e:98:ea:39:3a:79:eb:2b:6f:fb:ab:50:9d: cd:23:af:4a:10:f8:75:d7:79:d3:9b:da:fa:a4:90:b0:ae:db: 4d:26:57:b3:0c:9b:7d:dc:73:11:a3:13:9d:7f:2b:55:fe:f6: 8e:44:b0:97:7f:01:9d:45:a3:87:ca:4e:83:1a:93:e8:f5:99: 3a:1f:ff:bb:8f:0c:c2:d6:4f:97:fd:c2:6c:60:20:e8:da:d5: 10:2b:4b:98:81:5f:bb:7e:60:d3:fa:42:b5:06:25:bc:cd:55: 50:85:19:e7 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUcjnVndzqqVR7eXF5O+NXJMv0OR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzUwM1oX DTI3MDUwMjAwNDAwM1owMzExMC8GA1UEAxMoMDJBOEVEMDc3QzAzRTQzQzMzOERG QzE0RDYxOTJFNDZEQTUzNEI1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOA6aCHo7FagJgl0w1UVIsxS5Iuhg8ipjerezL/SjT2ssTXubGnAW0K9CHCC cLlIyMTMJvcaa+HYRn2DhhdWEct7HjRvxoJdeMf8rdOJhKLK5kjfwLy5nUCZK/9X 1PXoDStatu2wSSG2kbso9ZA+4cso+lq32W+NVsc7MxfP8OsjskFdHILcSEo8H5bv 6mCtMBQrkjTFtm6mL5modoscg/tpLRLnVYFQFJ9gHzmsahf9gBTfk2dRnUQygjg+ 6GHaMjknQHNiMd3egzqhE24avif2Tl4Zw8BQxfueoEBYyNJdjlnek2n7OuqbeRFC 0Ujl03lC/nmY4ZYkUAakdamIdCkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAKo7Qd8A+Q8M438FNYZLkbaU0tSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUzYjE0NmEyLTc3MTUtNDU5Zi04MjQ0LThiMzJhMzY0NjYzYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81M2IxNDZh Mi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC8wMkE4RUQwNzdDMDNFNDND MzM4REZDMTRENjE5MkU0NkRBNTM0QjUyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ3mUMA8EAgACMAkDBwAgAQ32RwAwDQYJKoZIhvcNAQELBQADggEBAAIUuEhx UgfTeCM5RomYArQVkRgKE9U2RfCdHgq3VJpjpqvygVUgWT+pDlcJufZOzQdNg8F+ UT/UniK+rU0oM2+NMCf7C50BF+wNWguWbxDwox/ZSsJq5iFSIIgVGsTth8wBAxT/ Z9KbjLwBglECLK9pdppBwDRZiwluPRn286kMmn5N+qd8PH/i6o0eOSed52xyuGLl HpjqOTp56ytv+6tQnc0jr0oQ+HXXedOb2vqkkLCu200mV7MMm33ccxGjE51/K1X+ 9o5EsJd/AZ1Fo4fKToMak+j1mTof/7uPDMLWT5f9wmxgIOja1RArS5iBX7t+YNP6 QrUGJbzNVVCFGec= -----END CERTIFICATE-----Generated at Tue May 12 22:52:57 2026 by rpki-client