$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer File: 0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer (raw, json) Hash identifier: VQ/t8j5hemk1klZkNBbyC0U1ebsdK3MRCHiX/zkMJYg= Subject key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 486084954F71A25D22795EE2CDAA8C9EEECCE5A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:15 +0000 Certificate not after: Sun 02 May 2027 00:26:15 +0000 Subordinate resources: IP: 103.147.52.0/23 IP: 2405:aac0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:60:84:95:4f:71:a2:5d:22:79:5e:e2:cd:aa:8c:9e:ee:cc:e5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:15 2026 GMT Not After : May 2 00:26:15 2027 GMT Subject: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:0a:6d:50:f6:37:b6:33:82:b7:dd:f6:2a: 2d:14:10:07:a6:05:c5:87:50:21:a8:12:fd:1a:cf: 73:5f:90:14:51:3c:5b:05:b8:ce:58:29:03:52:45: 1f:e6:60:d0:85:38:bf:be:5d:84:20:0c:94:f3:6c: 34:ed:fc:9d:09:22:99:f5:76:3d:80:39:6c:cf:a7: c1:5a:5f:9c:77:bb:5b:be:0f:87:cc:4d:95:ae:16: 8c:6c:e6:c4:c8:e2:40:d1:59:4f:af:37:a9:57:6f: cd:40:1b:03:5f:f0:be:e3:fe:1b:23:90:55:de:c7: 65:ae:64:43:18:c8:bf:fd:3d:da:5a:3a:e3:9e:2c: 3e:4a:4b:14:b2:63:8d:17:45:a2:cf:fe:6d:51:6f: d7:58:cd:f5:61:0b:73:4a:72:1b:82:8f:4c:4e:d5: d0:59:61:6a:62:33:1c:8c:c1:02:2a:0e:22:d2:3b: 83:39:08:de:c6:de:81:5d:c8:06:d4:2a:23:70:fc: e5:36:a7:81:5e:82:6f:94:0f:79:a9:e7:b2:f9:79: 78:07:81:64:5e:ce:43:e4:6e:96:67:81:c1:46:be: 74:e9:2f:f3:0d:54:70:ae:d3:04:97:51:5f:4a:cd: f2:73:c2:e3:ed:16:ce:34:1f:f3:e8:7d:e7:8d:ab: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.52.0/23 IPv6: 2405:aac0::/32 Signature Algorithm: sha256WithRSAEncryption 45:fc:fd:89:8a:4c:88:db:80:c3:8a:a3:fe:47:94:4b:13:c0: f9:d6:7a:41:15:99:4c:7c:b8:5a:f2:33:07:18:1f:b7:7e:ff: 73:74:b8:55:c8:7d:73:fd:68:54:58:b2:4b:60:67:fb:eb:f9: 8e:78:95:2e:74:62:14:33:bb:bc:52:9b:94:66:dd:7c:13:d9: 1a:5e:02:f3:4f:4e:a2:1a:7f:03:69:16:8a:94:14:93:fc:f7: e7:50:68:39:85:44:b2:c4:a3:16:5c:06:82:58:56:85:2f:f1: 37:c4:8c:bf:de:d4:db:53:87:5e:05:fa:d3:4a:ac:dd:79:ab: ec:87:92:ed:15:c0:36:78:3e:55:f7:24:c6:93:cb:b2:dc:fe: 78:b1:6a:98:84:ee:6f:64:c6:83:b0:0b:0d:e5:d6:61:29:24: f9:19:2e:be:4b:1e:35:97:d7:33:8a:d1:59:18:f8:7e:8c:89: 53:03:58:83:8b:37:c7:8c:3b:06:41:75:ce:47:97:9a:08:44: 42:63:a1:2e:62:3a:23:b8:e3:63:77:fb:7d:0b:00:04:b6:e0: bd:7a:e1:7b:46:07:fa:f2:c5:d7:b8:54:39:38:5c:a8:1f:d4: 39:b8:a3:a3:db:71:ab:8b:80:86:48:80:6d:ae:f4:94:51:6d: 46:69:9a:0c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUSGCElU9xol0ieV7izaqMnu7M5acwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjExNVoX DTI3MDUwMjAwMjYxNVowMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2 NjYxQUFBREUyQzYwMUQwNjRGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyNCm1Q9je2M4K33fYqLRQQB6YFxYdQIagS/RrPc1+QFFE8WwW4zlgpA1JF H+Zg0IU4v75dhCAMlPNsNO38nQkimfV2PYA5bM+nwVpfnHe7W74Ph8xNla4WjGzm xMjiQNFZT683qVdvzUAbA1/wvuP+GyOQVd7HZa5kQxjIv/092lo6454sPkpLFLJj jRdFos/+bVFv11jN9WELc0pyG4KPTE7V0FlhamIzHIzBAioOItI7gzkI3sbegV3I BtQqI3D85TangV6Cb5QPeannsvl5eAeBZF7OQ+RulmeBwUa+dOkv8w1UcK7TBJdR X0rN8nPC4+0WzjQf8+h9542r1G8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAoCRGL/2n4m5dNmYaqt4sYB0GTwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNkZWRjMDMzLWNkNGQtNDYyMC05MzcyLWU2ZTAzOWZjMDZiOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZGVkYzAz My1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC8wQTAyNDQ2MkZGREE3RTI2 RTVEMzY2NjFBQUFERTJDNjAxRDA2NEYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5M0MA0EAgACMAcDBQAkBarAMA0GCSqGSIb3DQEBCwUAA4IBAQBF/P2JikyI 24DDiqP+R5RLE8D51npBFZlMfLha8jMHGB+3fv9zdLhVyH1z/WhUWLJLYGf76/mO eJUudGIUM7u8UpuUZt18E9kaXgLzT06iGn8DaRaKlBST/PfnUGg5hUSyxKMWXAaC WFaFL/E3xIy/3tTbU4deBfrTSqzdeavsh5LtFcA2eD5V9yTGk8uy3P54sWqYhO5v ZMaDsAsN5dZhKST5GS6+Sx41l9czitFZGPh+jIlTA1iDizfHjDsGQXXOR5eaCERC Y6EuYjojuONjd/t9CwAEtuC9euF7Rgf68sXXuFQ5OFyoH9Q5uKOj23Gri4CGSIBt rvSUUW1GaZoM -----END CERTIFICATE-----Generated at Tue May 12 22:10:16 2026 by rpki-client