$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer File: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer (raw, json) Hash identifier: CYSVcLholhU/6h5rRXeDGiEOHeS7F0jquXO2AIWfvU8= Subject key identifier: 08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A45E9591EE10800F91C6561A0F7E847D27CD8BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:42:24 +0000 Certificate not after: Sat 01 May 2027 23:47:24 +0000 Subordinate resources: IP: 103.198.1.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:45:e9:59:1e:e1:08:00:f9:1c:65:61:a0:f7:e8:47:d2:7c:d8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:42:24 2026 GMT Not After : May 1 23:47:24 2027 GMT Subject: CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:17:08:d2:00:6c:8e:57:20:74:fa:bd:42: 41:2b:da:35:36:1c:05:90:53:96:07:c9:8a:b6:95: 98:e4:70:37:92:69:ca:0c:f6:15:0f:23:b5:08:32: 44:79:34:fd:28:37:25:83:e0:e3:0c:ee:ca:00:16: 85:9a:f0:10:69:69:8e:da:e6:f8:9f:54:a1:ed:e4: e0:f2:89:a5:0a:6f:8d:33:59:c4:7a:a6:89:6b:f1: 0b:01:16:15:d9:8f:d3:b5:7a:c6:b5:c8:f1:44:7a: 53:6c:9d:32:9b:b3:76:82:87:78:14:2a:8e:49:a3: e8:f6:72:9d:f9:75:3f:2d:a4:ad:3e:5f:37:99:03: 70:74:47:72:b2:38:f7:36:ac:be:90:e0:e2:9e:b1: 0c:75:e0:76:aa:05:a5:63:35:c2:48:70:87:55:fc: 3a:92:fa:fb:d8:7f:e8:10:c2:13:9d:29:bb:8d:2f: fa:4b:c4:da:41:46:c6:cf:2a:b6:65:d5:46:1c:4d: e8:1d:00:cc:0f:99:03:b4:57:51:e8:2f:01:33:bf: 7b:f1:95:61:d3:df:c4:7b:03:c6:9e:dd:58:0a:52: 80:ab:b2:54:8a:5b:ed:10:fa:f8:4e:76:e6:da:5b: 6c:b1:30:b5:28:ba:da:25:19:63:9e:f7:a3:f5:66: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.1.0/24 Signature Algorithm: sha256WithRSAEncryption a6:ea:68:18:dc:06:96:c4:67:12:f2:f9:2d:d3:69:01:e8:c3: bf:49:a9:77:ed:2e:44:08:76:8f:19:00:b0:f5:9c:f8:20:70: 5b:c3:c3:0f:17:84:1e:51:19:62:e7:3a:ef:f3:bb:27:1f:4f: 2b:98:05:00:8a:18:81:30:c4:7b:9b:0d:47:5e:47:ee:03:c2: dd:ea:e5:2a:8e:a2:b7:58:cb:cb:37:cc:30:7a:b3:9b:15:4f: d8:da:b0:d6:49:8e:04:d9:39:d3:7b:11:af:bd:77:71:69:e3: 34:73:7e:61:9c:67:c6:40:2e:a8:28:81:2c:84:c1:eb:fd:25: c1:05:70:1f:b9:95:53:5f:f5:e8:57:6b:68:cd:52:f3:69:bd: ce:79:64:c0:ae:e7:5c:14:c9:75:d6:0b:04:6b:b0:d9:d4:e3: 73:4e:61:37:c1:78:a1:a1:8d:a4:20:78:a5:06:12:2f:6e:d1: 8e:66:04:f6:d5:ad:74:85:ab:4f:51:f1:61:f8:f3:86:89:af: 07:54:6b:cf:bb:f8:33:f3:db:41:2e:17:33:6e:16:e1:84:14: 72:1e:1e:23:20:0a:16:d2:4b:c4:aa:35:14:43:59:05:07:d1: 12:29:3c:cd:57:6c:de:da:dc:45:b3:0b:1c:92:46:18:21:2e: 2c:65:db:ce -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUekXpWR7hCAD5HGVhoPfoR9J82LwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDIyNFoX DTI3MDUwMTIzNDcyNFowMzExMC8GA1UEAxMoMDg5MzMwNzMzOEQ4RDdCQTU1Q0Mw QzA2Mjc5MTUwQTBDOUZBQzZDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALv9FwjSAGyOVyB0+r1CQSvaNTYcBZBTlgfJiraVmORwN5Jpygz2FQ8jtQgy RHk0/Sg3JYPg4wzuygAWhZrwEGlpjtrm+J9Uoe3k4PKJpQpvjTNZxHqmiWvxCwEW FdmP07V6xrXI8UR6U2ydMpuzdoKHeBQqjkmj6PZynfl1Py2krT5fN5kDcHRHcrI4 9zasvpDg4p6xDHXgdqoFpWM1wkhwh1X8OpL6+9h/6BDCE50pu40v+kvE2kFGxs8q tmXVRhxN6B0AzA+ZA7RXUegvATO/e/GVYdPfxHsDxp7dWApSgKuyVIpb7RD6+E52 5tpbbLEwtSi62iUZY573o/Vm/kECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAiTMHM42Ne6VcwMBieRUKDJ+sbKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAzYmEwZDM4LWNhNjItNGMyYi05MGUyLThlZWVlYjgzMTg2MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wM2JhMGQz OC1jYTYyLTRjMmItOTBlMi04ZWVlZWI4MzE4NjAvMC8wODkzMzA3MzM4RDhEN0JB NTVDQzBDMDYyNzkxNTBBMEM5RkFDNkNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8YBMA0GCSqGSIb3DQEBCwUAA4IBAQCm6mgY3AaWxGcS8vkt02kB6MO/Sal3 7S5ECHaPGQCw9Zz4IHBbw8MPF4QeURli5zrv87snH08rmAUAihiBMMR7mw1HXkfu A8Ld6uUqjqK3WMvLN8wwerObFU/Y2rDWSY4E2TnTexGvvXdxaeM0c35hnGfGQC6o KIEshMHr/SXBBXAfuZVTX/XoV2tozVLzab3OeWTArudcFMl11gsEa7DZ1ONzTmE3 wXihoY2kIHilBhIvbtGOZgT21a10hatPUfFh+POGia8HVGvPu/gz89tBLhczbhbh hBRyHh4jIAoW0kvEqjUUQ1kFB9ESKTzNV2ze2txFswsckkYYIS4sZdvO -----END CERTIFICATE-----Generated at Tue May 12 22:47:33 2026 by rpki-client