$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.cer File: 0781BEC016DE19ED01FCF2FB47EA495EED3579EA.cer (raw, json) Hash identifier: PuJpczP/9yf+OFilCaw3n967Vz0wKgiePiEMXR5vU2I= Subject key identifier: 07:81:BE:C0:16:DE:19:ED:01:FC:F2:FB:47:EA:49:5E:ED:35:79:EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3C5D630F1192D6DBAFCD329F5B756B4B8DF9B914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:26 +0000 Certificate not after: Sun 02 May 2027 00:57:26 +0000 Subordinate resources: IP: 103.142.20.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5d:63:0f:11:92:d6:db:af:cd:32:9f:5b:75:6b:4b:8d:f9:b9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:26 2026 GMT Not After : May 2 00:57:26 2027 GMT Subject: CN=0781BEC016DE19ED01FCF2FB47EA495EED3579EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:d4:4d:be:61:13:8c:01:d4:5e:ca:5c:3a: 94:a3:0f:97:df:51:e9:43:6d:2c:e4:ef:58:7c:bb: 8e:09:a5:60:61:a2:2e:91:9c:17:d2:c8:23:5c:18: 7c:69:03:8c:74:3b:58:db:e8:ab:03:f0:a2:8a:86: 77:5d:58:3a:3d:d3:80:1c:f5:09:ad:70:87:4b:ec: 93:f0:3a:0a:da:f0:9a:8b:e1:86:70:22:df:24:b1: 40:d0:ab:9f:a0:40:c0:a7:38:1a:3d:98:97:15:69: ec:17:aa:2c:3f:23:a4:ef:2f:b0:8f:c1:8c:9d:a4: 2d:7c:7a:2a:9b:22:d4:1e:78:e3:93:c6:ad:99:17: 80:c0:f9:20:4f:63:30:fa:1c:c2:6e:e1:c3:5b:e1: 2f:56:1f:08:1c:5c:0f:84:38:dc:ae:a6:10:46:13: 7f:6e:10:80:91:31:4c:a7:d1:0e:b0:9b:cb:5b:a7: d0:c5:ba:49:0f:c6:89:1a:96:d4:0e:75:cc:cf:d0: b7:c3:bd:e1:83:a5:e5:0b:99:be:69:b4:23:e4:94: 6e:e2:97:fc:5a:21:c2:7c:2f:0c:85:87:a8:45:60: 57:0c:71:0e:87:15:03:e1:37:a8:64:66:5a:48:be: 0f:a7:a1:b4:0c:3f:ee:08:70:6b:a9:9b:a2:15:50: f5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:81:BE:C0:16:DE:19:ED:01:FC:F2:FB:47:EA:49:5E:ED:35:79:EA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.20.0/24 Signature Algorithm: sha256WithRSAEncryption 10:4d:e3:7a:ea:92:54:13:fa:fc:31:45:73:c2:3c:19:fc:f6: 76:04:88:5f:14:50:5c:8d:c8:93:9b:ee:73:cc:c1:fc:3c:89: e9:d5:02:db:49:df:6b:71:79:74:68:e2:93:38:82:96:d6:cc: b2:25:a2:15:49:eb:b3:48:8f:bf:44:56:09:77:eb:41:77:95: 65:d9:e1:fa:2c:a2:1e:b6:e2:f5:8e:a7:aa:ef:e2:3f:68:b2: 92:76:e8:14:37:cd:8d:1a:56:3a:95:70:02:96:51:75:91:91: 04:c7:10:21:b7:06:04:41:7e:51:9b:12:3c:fc:72:a8:e6:d7: 2f:c9:7a:9a:e7:57:c2:49:43:4e:71:31:72:c0:1b:30:8f:9c: 17:7c:9b:6e:ca:79:91:dd:e3:38:31:55:41:b0:f7:9d:9d:43: 45:d4:8b:91:92:90:c5:25:a9:95:da:31:1c:ed:54:31:c0:4d: 88:3b:90:d9:59:09:40:93:3a:06:2f:e4:ad:e5:8c:65:42:f7: e7:8f:d7:66:22:10:5d:8b:57:9b:d4:aa:72:16:95:73:65:19: 8c:3f:5b:1b:2d:49:a0:d8:e5:d1:d4:32:9e:94:78:90:e1:0a: 0d:18:57:0b:f2:fb:4c:cf:3a:24:48:48:e0:eb:eb:07:f7:74: b3:80:f1:a3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPF1jDxGS1tuvzTKfW3VrS435uRQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTIyNloX DTI3MDUwMjAwNTcyNlowMzExMC8GA1UEAxMoMDc4MUJFQzAxNkRFMTlFRDAxRkNG MkZCNDdFQTQ5NUVFRDM1NzlFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALov1E2+YROMAdReylw6lKMPl99R6UNtLOTvWHy7jgmlYGGiLpGcF9LII1wY fGkDjHQ7WNvoqwPwooqGd11YOj3TgBz1Ca1wh0vsk/A6CtrwmovhhnAi3ySxQNCr n6BAwKc4Gj2YlxVp7BeqLD8jpO8vsI/BjJ2kLXx6Kpsi1B5445PGrZkXgMD5IE9j MPocwm7hw1vhL1YfCBxcD4Q43K6mEEYTf24QgJExTKfRDrCby1un0MW6SQ/GiRqW 1A51zM/Qt8O94YOl5QuZvmm0I+SUbuKX/FohwnwvDIWHqEVgVwxxDocVA+E3qGRm Wki+D6ehtAw/7ghwa6mbohVQ9TkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAeBvsAW3hntAfzy+0fqSV7tNXnqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZkZWVmMjE4LTBkOWItNGQwZC1hNWM1LWY4MzJiOGViNWFiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZGVlZjIx OC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC8wNzgxQkVDMDE2REUxOUVE MDFGQ0YyRkI0N0VBNDk1RUVEMzU3OUVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ44UMA0GCSqGSIb3DQEBCwUAA4IBAQAQTeN66pJUE/r8MUVzwjwZ/PZ2BIhf FFBcjciTm+5zzMH8PInp1QLbSd9rcXl0aOKTOIKW1syyJaIVSeuzSI+/RFYJd+tB d5Vl2eH6LKIetuL1jqeq7+I/aLKSdugUN82NGlY6lXACllF1kZEExxAhtwYEQX5R mxI8/HKo5tcvyXqa51fCSUNOcTFywBswj5wXfJtuynmR3eM4MVVBsPednUNF1IuR kpDFJamV2jEc7VQxwE2IO5DZWQlAkzoGL+St5YxlQvfnj9dmIhBdi1eb1KpyFpVz ZRmMP1sbLUmg2OXR1DKelHiQ4QoNGFcL8vtMzzokSEjg6+sH93SzgPGj -----END CERTIFICATE-----Generated at Tue May 12 22:04:08 2026 by rpki-client