$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer File: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer (raw, json) Hash identifier: lfgfuACwZZlANtrjAz0GBwJPQg4Yyh2XcmOdx1iKh5E= Subject key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5612933DF834D8686A63A08FE058F1372EA63990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft caRepository: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:07:18 +0000 Certificate not after: Sun 02 May 2027 01:12:18 +0000 Subordinate resources: IP: 103.60.180.0/22 IP: 103.80.88.0/22 IP: 182.54.140.0/22 IP: 2400:4f40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:12:93:3d:f8:34:d8:68:6a:63:a0:8f:e0:58:f1:37:2e:a6:39:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:07:18 2026 GMT Not After : May 2 01:12:18 2027 GMT Subject: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d0:f3:e5:a1:76:1f:40:18:43:66:4d:0e:1a: 9d:f1:85:ab:e3:46:a9:0b:99:70:32:3f:b9:a3:72: f2:3c:f7:2d:d3:4f:c2:27:b0:d0:a4:e8:2f:b7:d8: 1b:b9:dc:40:cc:20:49:cf:b1:53:32:55:3c:6d:fe: fd:00:b8:aa:fc:58:bc:f9:12:29:64:8c:cc:e8:32: 32:ef:a3:25:ea:2d:1c:0e:01:0c:bc:50:03:71:f8: b6:c9:87:47:c1:90:07:be:4b:82:6e:4c:27:e9:09: 86:cb:07:26:7d:86:19:b4:61:50:04:1b:85:59:12: 0d:0b:77:64:ab:fd:9a:8a:79:6f:de:68:68:99:b5: 18:45:0a:8b:15:83:d6:40:ba:a0:d6:91:24:b7:95: de:05:13:99:50:97:70:64:bf:b9:96:3e:b8:4b:56: c9:09:2e:1c:d0:36:d5:05:a4:ad:79:dc:74:29:29: ee:b9:41:59:d2:c2:d3:31:f6:28:c8:bf:86:73:f5: 62:ff:13:32:0a:a8:c3:26:f9:4c:87:df:d9:c4:0e: 10:4f:7f:06:5d:d4:ae:2d:a9:a8:ac:52:26:a5:cb: cf:94:3a:b2:39:4e:3e:2e:96:40:23:1d:9e:fe:cb: a7:a2:94:76:93:8a:ea:48:f8:9d:4a:a9:d8:3d:59: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.180.0/22 103.80.88.0/22 182.54.140.0/22 IPv6: 2400:4f40::/32 Signature Algorithm: sha256WithRSAEncryption 95:00:26:48:3f:7c:fe:21:ad:71:52:26:7c:f4:b2:2b:fd:a1: e9:a5:aa:4c:f1:8e:f3:fc:a5:d5:4e:b8:76:7b:91:31:67:48: 2c:9e:c3:ca:86:aa:ef:c1:bf:31:d8:78:57:ce:28:03:78:fb: 62:02:5d:4c:9e:cd:f9:08:20:a0:60:56:c1:05:0f:d0:7a:22: 92:6a:dc:86:1f:6c:15:3e:78:7b:6e:ab:1a:46:cf:2b:64:da: 70:fd:99:4a:fb:20:ab:90:c1:ac:1e:e2:13:36:9d:5a:e4:f5: fc:c9:ce:a1:16:b6:e8:a2:7f:8f:8b:13:0d:81:77:12:20:1b: 1c:a3:a3:ea:20:1f:06:4d:20:ed:f5:5d:9c:1e:cc:2b:b3:5f: eb:0e:f8:4c:ac:cd:42:7a:b8:39:c5:52:bb:9f:5e:79:39:be: e1:4d:cf:a7:e2:b3:de:a3:ad:28:ad:32:37:77:85:0c:12:6b: aa:b1:2e:01:77:a1:e5:81:fa:80:a6:b2:e0:b3:85:a8:62:71: 78:be:5b:10:21:5f:89:b4:fe:24:65:c2:ef:0a:50:1b:4a:d8: e7:ac:7c:1a:cc:db:ec:9d:21:84:c4:5f:2b:5f:fc:c1:33:4e: 64:2b:52:17:e0:17:3f:44:ba:af:5e:d1:04:3c:3a:23:cd:d2: f1:f0:81:08 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUVhKTPfg02GhqY6CP4FjxNy6mOZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDcxOFoX DTI3MDUwMjAxMTIxOFowMzExMC8GA1UEAxMoMDREQkI1ODUxMUVCNTY2RDlCRTE5 OEI3RUNFMTcxRDJBRTNGMEQzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbQ8+Whdh9AGENmTQ4anfGFq+NGqQuZcDI/uaNy8jz3LdNPwiew0KToL7fY G7ncQMwgSc+xUzJVPG3+/QC4qvxYvPkSKWSMzOgyMu+jJeotHA4BDLxQA3H4tsmH R8GQB75Lgm5MJ+kJhssHJn2GGbRhUAQbhVkSDQt3ZKv9mop5b95oaJm1GEUKixWD 1kC6oNaRJLeV3gUTmVCXcGS/uZY+uEtWyQkuHNA21QWkrXncdCkp7rlBWdLC0zH2 KMi/hnP1Yv8TMgqowyb5TIff2cQOEE9/Bl3Uri2pqKxSJqXLz5Q6sjlOPi6WQCMd nv7Lp6KUdpOK6kj4nUqp2D1ZUd0CAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFATbtYUR61Ztm+GYt+zhcdKuPw02MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgyMDMyYmM5LTYwNWEtNDI1My1hNGNkLTYyZjEyNDEyNmVhYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MjAzMmJj OS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8wNERCQjU4NTExRUI1NjZE OUJFMTk4QjdFQ0UxNzFEMkFFM0YwRDM2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCZzy0AwQCZ1BYAwQCtjaMMA0EAgACMAcDBQAkAE9AMA0GCSqGSIb3DQEBCwUA A4IBAQCVACZIP3z+Ia1xUiZ89LIr/aHppapM8Y7z/KXVTrh2e5ExZ0gsnsPKhqrv wb8x2HhXzigDePtiAl1Mns35CCCgYFbBBQ/QeiKSatyGH2wVPnh7bqsaRs8rZNpw /ZlK+yCrkMGsHuITNp1a5PX8yc6hFrboon+PixMNgXcSIBsco6PqIB8GTSDt9V2c Hswrs1/rDvhMrM1Cerg5xVK7n155Ob7hTc+n4rPeo60orTI3d4UMEmuqsS4Bd6Hl gfqAprLgs4WoYnF4vlsQIV+JtP4kZcLvClAbStjnrHwazNvsnSGExF8rX/zBM05k K1IX4Bc/RLqvXtEEPDojzdLx8IEI -----END CERTIFICATE-----Generated at Tue May 12 22:10:24 2026 by rpki-client