$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer File: 04D52083D82721F61634E6629E16C7C7A870B9F5.cer (raw, json) Hash identifier: jeKpOKDj70zODtTjSGiGvbj5bJpjX/2zf6rolRbxIeI= Subject key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 745DFF01D376DD8E508092F4E3FE4205C95B33F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:37:00 +0000 Certificate not after: Sun 02 May 2027 01:42:00 +0000 Subordinate resources: IP: 103.116.82.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5d:ff:01:d3:76:dd:8e:50:80:92:f4:e3:fe:42:05:c9:5b:33:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:37:00 2026 GMT Not After : May 2 01:42:00 2027 GMT Subject: CN=04D52083D82721F61634E6629E16C7C7A870B9F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:2a:18:dc:4a:e6:18:25:cc:f1:3f:46:b4: f6:9b:5a:63:31:47:4c:0a:96:23:d9:23:21:cd:21: 63:0b:34:b1:48:47:70:6d:c3:30:2d:c6:6d:8a:1e: b1:ef:0c:43:f6:a4:6b:59:0d:ae:0b:98:2e:ca:1e: 40:d6:24:01:fd:c9:49:d3:b0:aa:b6:d7:0f:6b:9a: 61:23:3e:bf:8d:b4:99:3d:57:39:a9:a6:95:54:11: 65:2f:6e:f7:99:26:84:34:a9:be:e4:42:ef:d7:69: 53:b7:95:bd:9c:1b:d5:26:a7:eb:fb:92:2c:c1:bf: ec:41:f5:16:3e:11:9a:56:53:e6:34:1b:7c:f9:28: 88:6c:f2:28:8e:79:11:51:63:c5:4c:a0:61:40:69: 42:a2:cc:eb:38:24:2a:f4:ed:6e:ed:89:3b:fd:ea: 7e:1d:ff:5b:3a:d8:9a:60:6b:85:d1:17:5b:9f:7b: 57:88:9f:27:8b:24:e1:53:2f:b8:b4:6a:65:d3:0c: 99:68:15:79:7c:44:3f:2d:fa:fd:58:e1:5f:c8:4c: d5:d4:43:d8:ba:68:bb:b4:f0:b5:1a:da:7a:89:7f: 6d:d2:6e:46:23:5c:f9:82:97:e5:be:e3:54:56:27: 82:ac:52:22:f4:f2:3d:e0:e9:d7:a8:4d:56:12:bc: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.82.0/23 Signature Algorithm: sha256WithRSAEncryption 97:33:fa:25:c2:b9:bf:90:0d:1e:81:ac:30:9f:0d:4d:47:47: a8:03:d4:64:6e:02:58:47:de:0e:e2:3d:8c:cc:8a:f9:ef:e8: 16:59:c8:b3:18:78:7e:b0:35:79:d1:3a:37:14:fa:4e:7a:92: 28:fe:fe:ce:ea:b2:26:d0:df:99:c2:11:16:f5:05:3e:80:43: 55:16:38:79:bd:29:68:82:e2:42:1a:82:b8:1b:36:24:da:f0: 88:90:74:75:30:a7:46:5a:4e:62:15:83:85:ef:fc:bd:35:91: f7:92:0c:02:ae:1c:ce:c0:05:3c:78:34:f9:a2:71:2f:04:50: 57:8c:6b:d7:07:22:48:9b:b0:01:5e:17:31:f4:af:89:6b:57: 1e:85:1c:ec:1b:56:a5:ec:cf:ea:89:4c:ea:a9:57:fc:38:92: ef:58:2e:22:06:4b:ab:43:c6:b3:d9:53:66:3f:d3:92:08:23: 67:95:45:e9:be:25:e2:d4:f0:ab:d7:0a:ef:5a:0f:65:ea:77: 9a:a3:3b:df:30:be:cd:9e:29:25:2b:ab:fd:bc:a5:79:57:a9: 14:e0:32:24:0d:b0:ab:b6:9a:9f:a3:6c:c5:7b:de:7f:d5:c0: fe:19:55:8b:f2:d8:9e:f0:16:67:eb:84:bd:a1:e9:22:90:a2: ad:68:f9:2c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdF3/AdN23Y5QgJL04/5CBclbM/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzcwMFoX DTI3MDUwMjAxNDIwMFowMzExMC8GA1UEAxMoMDRENTIwODNEODI3MjFGNjE2MzRF NjYyOUUxNkM3QzdBODcwQjlGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcAKhjcSuYYJczxP0a09ptaYzFHTAqWI9kjIc0hYws0sUhHcG3DMC3GbYoe se8MQ/aka1kNrguYLsoeQNYkAf3JSdOwqrbXD2uaYSM+v420mT1XOammlVQRZS9u 95kmhDSpvuRC79dpU7eVvZwb1San6/uSLMG/7EH1Fj4RmlZT5jQbfPkoiGzyKI55 EVFjxUygYUBpQqLM6zgkKvTtbu2JO/3qfh3/WzrYmmBrhdEXW597V4ifJ4sk4VMv uLRqZdMMmWgVeXxEPy36/VjhX8hM1dRD2Lpou7TwtRraeol/bdJuRiNc+YKX5b7j VFYngqxSIvTyPeDp16hNVhK8kWMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFATVIIPYJyH2FjTmYp4Wx8eocLn1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FlOTIyNDNhLTc2M2QtNDRiOC05ODdkLTA4YmQwZGE5ZWUzZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZTkyMjQz YS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC8wNEQ1MjA4M0Q4MjcyMUY2 MTYzNEU2NjI5RTE2QzdDN0E4NzBCOUY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3RSMA0GCSqGSIb3DQEBCwUAA4IBAQCXM/olwrm/kA0egawwnw1NR0eoA9Rk bgJYR94O4j2MzIr57+gWWcizGHh+sDV50To3FPpOepIo/v7O6rIm0N+ZwhEW9QU+ gENVFjh5vSloguJCGoK4GzYk2vCIkHR1MKdGWk5iFYOF7/y9NZH3kgwCrhzOwAU8 eDT5onEvBFBXjGvXByJIm7ABXhcx9K+Ja1cehRzsG1al7M/qiUzqqVf8OJLvWC4i BkurQ8az2VNmP9OSCCNnlUXpviXi1PCr1wrvWg9l6neaozvfML7NniklK6v9vKV5 V6kU4DIkDbCrtpqfo2zFe95/1cD+GVWL8tie8BZn64S9oekikKKtaPks -----END CERTIFICATE-----Generated at Wed May 13 02:11:32 2026 by rpki-client