$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer File: 083DF9FCF3773A042D5A64A6401BE726552524C0.cer (raw, json) Hash identifier: MrsvcOG8MJgR4D2MT5IreGtCS8LVLR+Gpw4n8B1wgmA= Subject key identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D2A242EAF1D12EC13DEEF6EFC62CD968B8E2C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:57 +0000 Certificate not after: Sun 02 May 2027 00:07:57 +0000 Subordinate resources: IP: 103.178.224.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2a:24:2e:af:1d:12:ec:13:de:ef:6e:fc:62:cd:96:8b:8e:2c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:57 2026 GMT Not After : May 2 00:07:57 2027 GMT Subject: CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:15:00:40:9b:8c:13:c7:39:5f:0d:06:70: 05:bc:3d:e7:ed:18:7a:88:72:a5:12:69:20:b9:6e: 71:11:9d:cc:48:69:92:88:0b:7e:0f:95:f3:27:f0: 8f:18:17:0a:d8:c5:46:25:65:bd:f6:65:67:0e:7f: 47:55:36:30:ed:c8:e9:b5:36:b3:38:3b:8a:6c:e7: e4:d0:ff:16:3e:cd:d4:e0:3a:4c:ac:5e:2e:d1:e8: c4:c0:5d:43:f0:c3:62:5f:b3:3d:fc:b2:89:d7:cb: 12:fe:fc:5b:08:64:89:6b:e4:d9:54:b5:52:d7:37: 57:46:7a:d1:4b:89:ff:a6:c7:ca:d2:80:7f:59:92: bf:02:78:2a:ea:85:fd:fc:5f:94:77:17:c6:1f:86: 52:3d:ee:9b:c6:fd:75:f8:7e:4e:9c:b2:a5:c0:80: 39:d4:ad:d4:6d:97:50:6d:2d:81:e9:ab:6a:26:b5: 5c:ae:44:7d:4d:0d:dc:5b:49:91:47:66:79:03:ba: 00:9a:cd:57:06:3e:d5:de:e2:d7:ab:1c:d3:49:bc: 7e:13:bc:d2:44:e1:8d:d1:a2:e8:20:57:ab:53:50: 03:8d:05:b7:55:82:d7:c6:33:89:b5:01:1d:a1:62: fc:8d:d5:32:93:19:ed:83:78:0a:be:ed:91:50:14: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.224.0/23 Signature Algorithm: sha256WithRSAEncryption 20:fb:d8:ea:ae:e9:12:9b:7d:d5:7d:9e:70:6b:57:13:27:5b: 6a:05:80:1b:c8:2c:4f:5b:e2:bd:e1:ed:4b:0a:88:4d:47:85: 0c:dd:31:e7:37:30:b6:9d:93:88:c2:56:75:12:3d:1c:69:09: 04:bf:b7:f5:fa:58:f4:4a:44:5f:8d:aa:52:3e:57:2b:03:51: 81:d0:03:2f:a4:bb:79:3c:6d:61:c2:99:d5:85:5b:ca:1b:c7: 47:45:45:6a:da:4b:05:7a:d8:af:df:fb:b9:0b:89:89:1e:4f: 98:66:ba:20:57:75:03:3d:00:e2:35:3e:c6:29:c9:00:b2:eb: a3:b9:1c:11:66:7d:9b:c3:10:f4:b3:e9:df:9f:61:f6:fa:62: 24:75:6f:8c:a1:7b:a2:03:c2:05:eb:5a:cf:31:be:60:68:b5: 62:78:68:2e:a9:28:92:3d:cc:6e:78:c5:02:13:c2:5a:74:0d: ff:6a:54:2b:87:33:4f:a4:07:05:a9:22:de:df:c1:a5:9c:a7: 3e:af:bf:15:dd:11:ac:a0:26:e4:86:bd:a6:a0:f5:2c:e6:81: 53:7a:96:00:03:ae:e7:14:47:04:84:2b:cf:5a:ff:6a:dc:c6: 89:f6:bc:e6:ca:97:da:5b:d5:ab:f0:90:e6:8a:d2:af:56:96: d8:68:8a:0b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULSokLq8dEuwT3u9u/GLNlouOLDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDI1N1oX DTI3MDUwMjAwMDc1N1owMzExMC8GA1UEAxMoMDgzREY5RkNGMzc3M0EwNDJENUE2 NEE2NDAxQkU3MjY1NTI1MjRDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6BFQBAm4wTxzlfDQZwBbw95+0YeohypRJpILlucRGdzEhpkogLfg+V8yfw jxgXCtjFRiVlvfZlZw5/R1U2MO3I6bU2szg7imzn5ND/Fj7N1OA6TKxeLtHoxMBd Q/DDYl+zPfyyidfLEv78WwhkiWvk2VS1Utc3V0Z60UuJ/6bHytKAf1mSvwJ4KuqF /fxflHcXxh+GUj3um8b9dfh+TpyypcCAOdSt1G2XUG0tgemraia1XK5EfU0N3FtJ kUdmeQO6AJrNVwY+1d7i16sc00m8fhO80kThjdGi6CBXq1NQA40Ft1WC18YzibUB HaFi/I3VMpMZ7YN4Cr7tkVAUzvECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAg9+fzzdzoELVpkpkAb5yZVJSTAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIzNTIyNWE2LTA1ZDMtNDQ0Yy1iZjNmLTExZTNlZjdiNmExNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMzUyMjVh Ni0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8wODNERjlGQ0YzNzczQTA0 MkQ1QTY0QTY0MDFCRTcyNjU1MjUyNEMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7LgMA0GCSqGSIb3DQEBCwUAA4IBAQAg+9jqrukSm33VfZ5wa1cTJ1tqBYAb yCxPW+K94e1LCohNR4UM3THnNzC2nZOIwlZ1Ej0caQkEv7f1+lj0SkRfjapSPlcr A1GB0AMvpLt5PG1hwpnVhVvKG8dHRUVq2ksFetiv3/u5C4mJHk+YZrogV3UDPQDi NT7GKckAsuujuRwRZn2bwxD0s+nfn2H2+mIkdW+MoXuiA8IF61rPMb5gaLVieGgu qSiSPcxueMUCE8JadA3/alQrhzNPpAcFqSLe38GlnKc+r78V3RGsoCbkhr2moPUs 5oFTepYAA67nFEcEhCvPWv9q3MaJ9rzmypfaW9Wr8JDmitKvVpbYaIoL -----END CERTIFICATE-----Generated at Tue May 12 22:38:43 2026 by rpki-client