$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer File: 02AAB50744B5B2355B015A3152AD1101FDD80A06.cer (raw, json) Hash identifier: 0fRKTQPOnhRFYN2DmE0MoDYqDGij3UfwROv/RKBheEo= Subject key identifier: 02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 25A07D115FB9D4AFE21DC5B1F9B517B207FD2B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft caRepository: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:09:22 +0000 Certificate not after: Sun 02 May 2027 01:14:22 +0000 Subordinate resources: IP: 103.186.34.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a0:7d:11:5f:b9:d4:af:e2:1d:c5:b1:f9:b5:17:b2:07:fd:2b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:09:22 2026 GMT Not After : May 2 01:14:22 2027 GMT Subject: CN=02AAB50744B5B2355B015A3152AD1101FDD80A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:8d:f3:bc:cd:ee:d3:a0:70:de:dc:41:fd: 19:c8:89:aa:b1:43:f6:da:a9:59:c8:06:cb:ba:66: c3:82:2f:44:7b:dd:0c:10:a6:1e:dd:cd:7d:cd:4f: 31:1e:dc:cb:8a:d5:71:8f:67:b3:97:ee:5e:bc:94: 32:4a:62:3a:ea:8c:3d:27:df:71:96:7c:ec:20:ac: 43:89:e5:ce:9a:ab:48:4d:b2:98:cf:7b:a5:c5:ad: e1:bc:9e:23:6d:ad:9a:56:10:0d:d2:4b:4f:cd:6f: 7d:ff:25:9b:e1:d1:dc:d5:42:b2:a8:8c:36:9a:6c: 87:82:a2:0f:24:83:05:fc:f5:cd:14:26:1e:95:db: b9:79:bf:ee:6f:f8:41:2b:3c:35:e9:7c:34:ef:43: fb:0a:cb:b6:00:93:11:bf:df:37:fa:f5:72:c9:f7: 54:a8:42:5b:f8:ae:e0:02:9f:f6:b1:dd:98:93:4f: 65:53:ef:e5:06:d4:cc:08:31:7f:51:55:d7:72:a2: b8:88:1c:bd:01:01:97:11:6d:28:fb:a8:18:71:90: 7b:60:5e:66:38:b4:cc:71:a5:77:a4:b5:ba:bc:99: a2:58:bf:8b:ae:25:59:0e:34:4c:a7:5a:cc:e9:55: e0:fd:59:6a:d3:62:c2:f7:ac:bc:d8:a0:84:a9:06: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.34.0/24 Signature Algorithm: sha256WithRSAEncryption 16:be:f9:15:da:62:83:8a:dc:ae:7d:92:c0:05:ba:ad:43:04: ee:1e:f1:fc:c5:10:fd:a1:66:19:f0:ef:9b:7d:7c:e3:dd:94: 25:c2:ac:38:3d:aa:ab:9c:2b:e4:d9:48:93:f5:2b:88:36:9e: 78:e9:42:40:87:18:80:14:bb:cc:de:ae:db:0f:19:ef:51:70: ca:af:9a:d0:1d:83:89:9e:e2:47:8b:8d:d1:e7:8b:a1:cb:10: 3d:63:b1:d3:33:56:fa:55:05:c5:82:cb:fd:49:b1:37:13:ab: 86:db:46:4e:03:58:54:27:ca:8b:55:3f:ae:54:b6:d7:c5:88: 98:b6:e0:ae:32:65:32:35:0d:17:5c:77:28:3a:12:47:77:2f: 61:f2:51:b4:09:e2:57:74:1c:27:86:d0:83:5a:ff:e5:c9:00: cc:c3:28:64:0b:d3:86:b2:26:d1:c2:c2:a4:c7:f3:a9:55:d5: db:90:27:e0:bf:74:a7:59:d5:f1:c1:a4:fd:51:f1:94:d5:30: d0:ce:25:dd:61:c8:fa:df:e5:17:96:95:9f:40:77:db:da:7c: b7:ce:a9:74:5b:17:63:19:c2:66:0d:55:89:ca:33:df:7c:53: ce:bf:c3:d4:86:94:7e:5a:2c:a9:86:5e:db:18:fb:7a:70:be: 2d:19:63:ab -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJaB9EV+51K/iHcWx+bUXsgf9K5EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDkyMloX DTI3MDUwMjAxMTQyMlowMzExMC8GA1UEAxMoMDJBQUI1MDc0NEI1QjIzNTVCMDE1 QTMxNTJBRDExMDFGREQ4MEEwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmHjfO8ze7ToHDe3EH9GciJqrFD9tqpWcgGy7pmw4IvRHvdDBCmHt3Nfc1P MR7cy4rVcY9ns5fuXryUMkpiOuqMPSffcZZ87CCsQ4nlzpqrSE2ymM97pcWt4bye I22tmlYQDdJLT81vff8lm+HR3NVCsqiMNppsh4KiDySDBfz1zRQmHpXbuXm/7m/4 QSs8Nel8NO9D+wrLtgCTEb/fN/r1csn3VKhCW/iu4AKf9rHdmJNPZVPv5QbUzAgx f1FV13KiuIgcvQEBlxFtKPuoGHGQe2BeZji0zHGld6S1uryZoli/i64lWQ40TKda zOlV4P1ZatNiwvesvNighKkGkmcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAKqtQdEtbI1WwFaMVKtEQH92AoGMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg1OWM3Yzk2LTdhYmItNDVhYy1hMGNiLWQ3ZmZkMDljMTg3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NTljN2M5 Ni03YWJiLTQ1YWMtYTBjYi1kN2ZmZDA5YzE4NzYvMC8wMkFBQjUwNzQ0QjVCMjM1 NUIwMTVBMzE1MkFEMTEwMUZERDgwQTA2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7oiMA0GCSqGSIb3DQEBCwUAA4IBAQAWvvkV2mKDityufZLABbqtQwTuHvH8 xRD9oWYZ8O+bfXzj3ZQlwqw4PaqrnCvk2UiT9SuINp546UJAhxiAFLvM3q7bDxnv UXDKr5rQHYOJnuJHi43R54uhyxA9Y7HTM1b6VQXFgsv9SbE3E6uG20ZOA1hUJ8qL VT+uVLbXxYiYtuCuMmUyNQ0XXHcoOhJHdy9h8lG0CeJXdBwnhtCDWv/lyQDMwyhk C9OGsibRwsKkx/OpVdXbkCfgv3SnWdXxwaT9UfGU1TDQziXdYcj63+UXlpWfQHfb 2ny3zql0WxdjGcJmDVWJyjPffFPOv8PUhpR+Wiyphl7bGPt6cL4tGWOr -----END CERTIFICATE-----Generated at Tue May 12 22:02:32 2026 by rpki-client