$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer File: 0D2802EC43905EEA387602B994B8B579041C8507.cer (raw, json) Hash identifier: d9oRFGL9zGvINRQ6rvkRe0VmsZtK8eBdKbNkpTAePpw= Subject key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0516F8B28F481BABDDA451B9AF90E65AC5812693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:14:13 +0000 Certificate not after: Sun 02 May 2027 02:19:13 +0000 Subordinate resources: IP: 103.137.38.0/23 IP: 2404:a4c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:16:f8:b2:8f:48:1b:ab:dd:a4:51:b9:af:90:e6:5a:c5:81:26:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:14:13 2026 GMT Not After : May 2 02:19:13 2027 GMT Subject: CN=0D2802EC43905EEA387602B994B8B579041C8507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:17:44:d9:3f:9b:7f:a4:18:5c:80:1d:ec: ad:8c:86:df:e3:b7:65:10:f3:4f:27:23:03:b6:e6: 17:c5:29:fc:56:e0:8d:4b:6a:fd:3b:7c:5e:fa:82: f5:d4:b3:20:0b:92:80:90:ce:cd:20:c9:26:94:63: 43:ed:28:bf:dc:83:e5:43:61:36:f1:64:ed:5f:ef: 8d:7b:aa:09:c9:86:02:33:77:fd:30:d2:e9:e1:64: 03:04:7a:4c:3f:89:67:01:68:24:b3:10:43:6d:41: ea:da:3a:3b:14:79:80:f9:10:94:4e:8b:4e:96:60: 36:2a:0f:8b:61:d9:b4:65:de:fe:e6:6d:9e:b8:af: 19:74:f9:aa:c4:52:fc:b0:33:fa:bf:14:3f:5f:10: 13:de:b5:58:b8:7b:fa:7d:b8:b1:60:f1:36:b1:4a: 25:11:87:d4:fe:24:ba:d0:1a:e7:8a:5f:e9:3e:fe: 17:c1:1f:1a:0c:8f:0e:4d:01:35:9a:98:24:bb:de: c3:c9:50:17:9c:59:db:51:ac:cb:8d:5d:57:17:56: cd:7c:23:ae:77:aa:77:86:ab:9c:41:ac:02:da:c6: db:88:60:e7:df:42:45:cd:4e:03:cb:7e:fd:0e:87: 63:ba:d4:19:a2:83:db:e2:8d:b7:e1:a3:92:65:05: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.38.0/23 IPv6: 2404:a4c0::/32 Signature Algorithm: sha256WithRSAEncryption 14:81:5e:fd:c0:79:55:2f:9a:4e:94:98:fb:e8:f2:8c:5a:b3: 43:2a:50:74:65:2a:a5:ed:8d:55:62:a1:2b:d9:1c:27:86:d3: 03:b4:7e:8b:fe:fe:e8:fb:4f:64:d9:fe:9e:01:a4:cd:99:00: 00:8a:92:79:00:14:e7:89:aa:a6:37:cd:ce:a8:d2:60:dd:56: b0:be:0c:f0:81:70:a5:08:58:f5:02:91:e4:4e:f0:db:78:06: 4e:7e:d7:e8:4b:eb:be:ed:b1:ef:de:0f:32:ad:fc:3c:ee:52: 57:fc:8e:da:4d:34:9f:f4:1a:8a:d5:c4:49:39:f6:5e:eb:43: cf:81:a7:e1:a7:d7:aa:67:f5:5b:10:d2:c4:ce:c9:8f:f9:d4: 8b:b2:56:f6:0b:0a:ae:4a:a8:a1:d5:e2:cb:29:75:bc:23:4c: f7:9b:98:ec:44:67:c6:14:f8:01:f8:8b:d8:b8:5c:3c:97:d9: 98:74:e3:ae:31:33:ed:ac:63:5e:f7:74:f9:b4:70:01:cf:ec: 1a:7d:f4:55:88:b8:2f:38:74:66:37:25:6c:a9:30:c7:ec:60: 3f:88:d6:d0:a6:fe:b1:96:a5:22:d3:dd:b9:16:39:18:45:63: 56:5a:6b:b6:9b:96:3c:45:f8:37:41:4e:34:54:4e:f1:72:c5: bd:b0:30:fb -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUBRb4so9IG6vdpFG5r5DmWsWBJpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTQxM1oX DTI3MDUwMjAyMTkxM1owMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYw MkI5OTRCOEI1NzkwNDFDODUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALd1F0TZP5t/pBhcgB3srYyG3+O3ZRDzTycjA7bmF8Up/FbgjUtq/Tt8XvqC 9dSzIAuSgJDOzSDJJpRjQ+0ov9yD5UNhNvFk7V/vjXuqCcmGAjN3/TDS6eFkAwR6 TD+JZwFoJLMQQ21B6to6OxR5gPkQlE6LTpZgNioPi2HZtGXe/uZtnrivGXT5qsRS /LAz+r8UP18QE961WLh7+n24sWDxNrFKJRGH1P4kutAa54pf6T7+F8EfGgyPDk0B NZqYJLvew8lQF5xZ21Gsy41dVxdWzXwjrneqd4arnEGsAtrG24hg599CRc1OA8t+ /Q6HY7rUGaKD2+KNt+GjkmUFPr8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA0oAuxDkF7qOHYCuZS4tXkEHIUHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UzYmJmMWRhLWUzMTctNDhlZi1hZDZkLWZlOGE4YmYwODQwMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lM2JiZjFk YS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8wRDI4MDJFQzQzOTA1RUVB Mzg3NjAyQjk5NEI4QjU3OTA0MUM4NTA3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4kmMA0EAgACMAcDBQAkBKTAMA0GCSqGSIb3DQEBCwUAA4IBAQAUgV79wHlV L5pOlJj76PKMWrNDKlB0ZSql7Y1VYqEr2RwnhtMDtH6L/v7o+09k2f6eAaTNmQAA ipJ5ABTniaqmN83OqNJg3VawvgzwgXClCFj1ApHkTvDbeAZOftfoS+u+7bHv3g8y rfw87lJX/I7aTTSf9BqK1cRJOfZe60PPgafhp9eqZ/VbENLEzsmP+dSLslb2Cwqu Sqih1eLLKXW8I0z3m5jsRGfGFPgB+IvYuFw8l9mYdOOuMTPtrGNe93T5tHABz+wa ffRViLgvOHRmNyVsqTDH7GA/iNbQpv6xlqUi0925FjkYRWNWWmu2m5Y8Rfg3QU40 VE7xcsW9sDD7 -----END CERTIFICATE-----Generated at Tue May 12 22:03:32 2026 by rpki-client