$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer File: 0852B9571B10B9E010A24AEF65D8CD2D47886515.cer (raw, json) Hash identifier: MoDmnsWSj7ZSqc/0ucRMYbbcoe32aHLjHVkyxcGlUKA= Subject key identifier: 08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78474BD381AD3AE217DFAC4C7D1DDF2F953964A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:57:39 +0000 Certificate not after: Sun 02 May 2027 02:02:39 +0000 Subordinate resources: IP: 103.167.156.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:47:4b:d3:81:ad:3a:e2:17:df:ac:4c:7d:1d:df:2f:95:39:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:57:39 2026 GMT Not After : May 2 02:02:39 2027 GMT Subject: CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:04:8c:2d:ee:30:74:b5:95:dd:cc:22:71:4e: 87:c2:c2:9c:3a:18:da:e7:15:1c:e2:50:d1:81:64: 5f:e1:3d:b6:53:bd:eb:b9:f0:9e:84:a9:e9:ef:14: d2:5a:65:66:64:cd:9d:cc:b4:f6:5d:bd:7a:7c:52: b9:c0:40:80:1c:99:d8:70:0e:93:08:eb:70:08:a2: 2d:99:35:49:fa:40:11:3f:95:8d:3c:ee:e7:70:f3: 35:53:56:a5:7b:92:de:d6:32:09:44:b8:4f:f4:f8: 41:f6:d3:b5:73:a7:1c:8f:ac:94:71:24:bb:89:4e: 8e:84:d6:c2:4b:04:97:75:68:97:d3:17:7a:af:52: 31:db:a7:ed:b4:65:4f:c7:8c:00:60:ce:ba:86:e9: 18:3c:6d:c1:12:36:27:c5:d8:d1:3e:e4:e9:f8:da: 24:29:ce:6a:5a:b1:76:f9:8b:81:c1:75:0f:6a:8b: 5d:9b:a8:a6:10:a3:eb:d5:d0:2a:4a:9b:25:47:4f: 6a:d5:4c:6b:2e:00:bc:a4:67:0c:15:df:2c:64:40: 7e:7c:1e:b5:75:d8:4e:84:bf:31:b8:7d:a1:dd:36: 00:16:4c:74:59:e3:5b:57:24:75:95:91:81:bf:33: 1a:64:9f:7c:0a:dd:99:b8:50:b1:d5:bb:e2:b2:bc: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.156.0/24 Signature Algorithm: sha256WithRSAEncryption 47:05:8c:b4:87:0c:e3:ca:cc:27:2f:b3:d8:f0:97:b2:8f:6e: 16:09:1a:28:45:27:27:67:1b:24:cc:28:62:c7:36:2f:9c:8a: 3c:1e:16:1b:f9:70:15:5e:ad:0b:c8:67:1d:64:40:20:d9:eb: db:55:44:de:69:2d:bd:e5:c4:47:fc:40:29:ce:ab:f1:ca:dd: 52:ef:ab:e3:98:33:98:e0:e5:4f:2b:c5:6a:a9:60:75:39:08: 4a:7f:b9:81:88:b8:79:8a:ca:f6:76:b5:96:eb:f6:3a:ab:eb: 03:05:1f:2f:97:5c:78:4f:26:68:76:49:3a:cd:d8:bb:73:36: bf:bc:0a:73:00:97:24:ef:9b:e2:f8:69:b1:be:07:3c:94:c6: fa:12:b8:c4:da:85:c6:14:91:88:e5:4f:48:b3:0a:6a:89:f0: c6:f9:b4:e2:8a:76:2f:e2:ec:91:42:0a:ec:39:1f:66:f5:c8: 49:44:06:64:9f:91:39:54:63:77:0f:a8:f0:df:29:a4:b0:a4: f9:e9:b6:0f:60:66:cf:1d:97:b3:3d:bc:76:ef:31:01:b2:32: b1:91:2a:24:ef:72:e0:48:ff:04:3b:e9:9e:fd:3e:f4:20:d7: 9c:d4:20:75:32:2e:d9:ed:f8:13:b6:f1:44:02:fd:d4:f1:49: b2:44:68:34 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeEdL04GtOuIX36xMfR3fL5U5ZKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTczOVoX DTI3MDUwMjAyMDIzOVowMzExMC8GA1UEAxMoMDg1MkI5NTcxQjEwQjlFMDEwQTI0 QUVGNjVEOENEMkQ0Nzg4NjUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8EjC3uMHS1ld3MInFOh8LCnDoY2ucVHOJQ0YFkX+E9tlO967nwnoSp6e8U 0lplZmTNncy09l29enxSucBAgByZ2HAOkwjrcAiiLZk1SfpAET+VjTzu53DzNVNW pXuS3tYyCUS4T/T4QfbTtXOnHI+slHEku4lOjoTWwksEl3Vol9MXeq9SMdun7bRl T8eMAGDOuobpGDxtwRI2J8XY0T7k6fjaJCnOalqxdvmLgcF1D2qLXZuophCj69XQ KkqbJUdPatVMay4AvKRnDBXfLGRAfnwetXXYToS/Mbh9od02ABZMdFnjW1ckdZWR gb8zGmSffArdmbhQsdW74rK8GuECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAhSuVcbELngEKJK72XYzS1HiGUVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QxODAzMTI1LWQ3NzctNDA1Ni04NDRkLThkMWJlZmQwMTYzZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMTgwMzEy NS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC8wODUyQjk1NzFCMTBCOUUw MTBBMjRBRUY2NUQ4Q0QyRDQ3ODg2NTE1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6ecMA0GCSqGSIb3DQEBCwUAA4IBAQBHBYy0hwzjyswnL7PY8Jeyj24WCRoo RScnZxskzChixzYvnIo8HhYb+XAVXq0LyGcdZEAg2evbVUTeaS295cRH/EApzqvx yt1S76vjmDOY4OVPK8VqqWB1OQhKf7mBiLh5isr2drWW6/Y6q+sDBR8vl1x4TyZo dkk6zdi7cza/vApzAJck75vi+Gmxvgc8lMb6ErjE2oXGFJGI5U9IswpqifDG+bTi inYv4uyRQgrsOR9m9chJRAZkn5E5VGN3D6jw3ymksKT56bYPYGbPHZezPbx27zEB sjKxkSok73LgSP8EO+me/T70INec1CB1Mi7Z7fgTtvFEAv3U8UmyRGg0 -----END CERTIFICATE-----Generated at Tue May 12 22:03:50 2026 by rpki-client