$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer File: 04802014594DAC827C3F8FBF392DF25D2C1943C5.cer (raw, json) Hash identifier: FDczMdchmnE/hiQkTr9V5yGBfVEGdu6juW92l+/WsAg= Subject key identifier: 04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 55E9E9B2485691DF5BE3E124AC59EDF00CDDD187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:10:29 +0000 Certificate not after: Sun 02 May 2027 00:15:29 +0000 Subordinate resources: IP: 103.129.60.0/24 IP: 2001:df6:6700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e9:e9:b2:48:56:91:df:5b:e3:e1:24:ac:59:ed:f0:0c:dd:d1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:10:29 2026 GMT Not After : May 2 00:15:29 2027 GMT Subject: CN=04802014594DAC827C3F8FBF392DF25D2C1943C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:3a:d9:e1:39:41:06:4f:8b:d2:e0:f7:f9: 46:de:0e:2d:65:05:e4:9d:77:05:f6:f5:02:95:f3: 25:05:19:04:2e:cd:39:f2:a8:36:4d:14:0f:14:cd: a0:ad:47:4d:42:ed:f2:5e:26:55:cf:31:7f:4c:a3: 5a:09:b0:41:41:97:9c:fb:f4:82:bf:f2:24:b9:43: a9:8d:7d:3f:06:47:52:7d:41:8e:e6:e6:26:06:c6: 28:33:93:e7:2e:33:a8:05:67:e6:5a:48:aa:ff:4b: a9:6b:71:16:f2:f4:b2:e0:8d:90:4e:cc:2f:55:6e: 15:b0:50:b3:ae:61:ba:95:d4:27:56:e7:1b:a8:f1: 82:75:99:f9:38:42:cf:4e:b1:0c:9c:bd:44:dc:3e: 02:1a:e5:f4:39:38:44:aa:95:8a:89:2a:43:8b:02: 3b:73:91:ef:cf:b7:1e:eb:72:fd:57:09:a8:02:27: d9:e4:f1:52:92:83:a5:4d:9d:7b:7c:75:67:b2:61: 0e:73:a4:4c:a1:46:9b:9d:3d:f6:be:73:a6:4e:ec: 1b:0e:12:67:7a:67:a4:0b:48:9f:ab:ce:d0:74:36: 7c:d1:5c:7d:29:30:65:68:80:48:5c:ea:2a:5a:cf: c5:df:25:8c:3d:32:96:1c:af:9c:75:d5:2c:9d:ef: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.60.0/24 IPv6: 2001:df6:6700::/48 Signature Algorithm: sha256WithRSAEncryption 39:6c:30:8e:b8:0e:8d:da:7a:40:4d:b5:99:02:52:97:27:4c: 40:70:0c:62:ba:0a:8c:a2:61:16:30:11:00:a7:83:77:c7:d7: 0e:2e:88:cf:70:82:21:49:f6:4c:1f:7b:1a:d4:3d:34:ed:ab: 2f:b1:5f:01:e9:62:b4:44:5c:0c:21:0c:13:78:10:a6:05:8e: 86:5e:31:4d:79:31:86:bf:6f:de:76:8f:01:8a:7a:4e:bc:05: ca:a5:1c:81:58:b5:ba:30:99:48:3f:16:bd:a5:57:4c:06:1e: 28:28:5c:e3:b9:af:5f:cd:b6:5b:41:c6:f3:9d:05:4d:8a:56: fd:0b:2e:5c:e6:67:d3:c8:65:62:e5:c4:b4:e7:cd:d1:30:c0: cc:56:b2:e7:08:72:c6:6e:01:12:f4:0c:eb:2e:ab:6b:f4:34: cb:4f:61:5d:72:f3:64:0e:b2:ec:5b:fb:45:19:57:aa:ee:b4: 62:39:6e:35:19:93:ac:2a:3f:d3:27:2b:39:f2:ac:e4:06:57: 0d:ec:09:42:c1:37:be:5d:db:ba:52:38:62:5d:53:0b:54:82: 96:4c:dd:e9:62:ff:f3:d4:c5:99:fc:c3:4e:9c:46:47:7e:3c: a4:89:4e:bb:33:ac:98:1f:54:9b:86:99:9c:d2:18:79:05:66: 2b:84:75:24 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUVenpskhWkd9b4+EkrFnt8Azd0YcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTAyOVoX DTI3MDUwMjAwMTUyOVowMzExMC8GA1UEAxMoMDQ4MDIwMTQ1OTREQUM4MjdDM0Y4 RkJGMzkyREYyNUQyQzE5NDNDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKs7OtnhOUEGT4vS4Pf5Rt4OLWUF5J13Bfb1ApXzJQUZBC7NOfKoNk0UDxTN oK1HTULt8l4mVc8xf0yjWgmwQUGXnPv0gr/yJLlDqY19PwZHUn1BjubmJgbGKDOT 5y4zqAVn5lpIqv9LqWtxFvL0suCNkE7ML1VuFbBQs65hupXUJ1bnG6jxgnWZ+ThC z06xDJy9RNw+Ahrl9Dk4RKqViokqQ4sCO3OR78+3Huty/VcJqAIn2eTxUpKDpU2d e3x1Z7JhDnOkTKFGm5099r5zpk7sGw4SZ3pnpAtIn6vO0HQ2fNFcfSkwZWiASFzq KlrPxd8ljD0ylhyvnHXVLJ3vJA0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFASAIBRZTayCfD+Pvzkt8l0sGUPFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJlNmJiZTRkLTNhMmItNGUxYi1hMWFhLTU5MzYxMGIzZGVjOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZTZiYmU0 ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC8wNDgwMjAxNDU5NERBQzgy N0MzRjhGQkYzOTJERjI1RDJDMTk0M0M1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ4E8MA8EAgACMAkDBwAgAQ32ZwAwDQYJKoZIhvcNAQELBQADggEBADlsMI64 Do3aekBNtZkCUpcnTEBwDGK6CoyiYRYwEQCng3fH1w4uiM9wgiFJ9kwfexrUPTTt qy+xXwHpYrREXAwhDBN4EKYFjoZeMU15MYa/b952jwGKek68BcqlHIFYtbowmUg/ Fr2lV0wGHigoXOO5r1/NtltBxvOdBU2KVv0LLlzmZ9PIZWLlxLTnzdEwwMxWsucI csZuARL0DOsuq2v0NMtPYV1y82QOsuxb+0UZV6rutGI5bjUZk6wqP9MnKznyrOQG Vw3sCULBN75d27pSOGJdUwtUgpZM3eli//PUxZn8w06cRkd+PKSJTrszrJgfVJuG mZzSGHkFZiuEdSQ= -----END CERTIFICATE-----Generated at Tue May 12 22:39:17 2026 by rpki-client