$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.cer (raw, json) Hash identifier: XLjKu5hll+gnx3acRFhAU7+e0Yj2vFrm8HygEaHwLwM= Subject key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09D4E8D9E75BE19D051D49460E18476E34D2144E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:39 +0000 Certificate not after: Sun 02 May 2027 02:03:39 +0000 Subordinate resources: IP: 103.23.116.0/23 IP: 103.28.218.0/24 IP: 103.246.169.0/24 IP: 110.92.74.0/23 IP: 2001:df0:41d:: -- 2001:df0:41e:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d4:e8:d9:e7:5b:e1:9d:05:1d:49:46:0e:18:47:6e:34:d2:14:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:39 2026 GMT Not After : May 2 02:03:39 2027 GMT Subject: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:80:0c:95:29:1c:47:d5:37:31:8b:0f:3c: bc:e0:51:66:78:ec:5b:ff:61:8e:52:65:d9:04:02: 4b:ca:9c:34:80:50:48:bb:e5:e8:01:60:b8:75:71: e1:3f:e4:52:38:75:08:78:49:99:6f:3f:67:a2:ce: f5:0f:90:7b:3a:66:e4:2e:a5:72:52:c4:a3:32:7b: fc:f5:dc:b9:51:b4:4a:76:ae:60:22:6a:22:49:d0: ba:0a:19:94:a4:a5:7f:79:ae:01:46:6b:13:17:b9: 4d:b1:fb:e7:55:9b:79:ba:b6:a2:fc:ad:b1:7f:7f: 8a:74:8e:c1:1c:d0:51:a0:2b:84:a8:5b:8d:2a:b8: d5:76:04:4f:c1:51:c7:f5:3f:01:83:af:6c:a2:8c: d7:e3:80:a2:77:91:1a:ce:a4:7e:cb:b5:5d:90:85: db:e1:b7:b3:a5:cb:0b:4b:38:4b:40:da:9f:74:6a: 15:2e:93:41:c3:0a:12:85:8d:34:99:f1:a0:68:06: 9b:41:6f:f5:cb:41:b8:e5:3a:69:b0:f0:f4:9b:9f: fa:e0:5a:74:2d:ba:d8:81:25:81:86:58:53:1d:ab: 6e:41:95:da:f9:b2:b0:24:7b:4f:45:38:e1:a0:7a: 0a:60:42:b6:85:95:65:14:b7:1f:a8:c1:04:e7:9c: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.116.0/23 103.28.218.0/24 103.246.169.0/24 110.92.74.0/23 IPv6: 2001:df0:41d::-2001:df0:41e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 07:d0:e5:1b:07:e2:d5:37:41:ae:48:5d:0b:11:0e:16:6b:6e: 38:4e:d1:4f:c4:22:16:c3:da:67:61:62:7a:cc:76:2c:eb:a7: 30:50:79:3e:db:af:61:82:bd:ef:87:d6:68:32:36:ce:1b:45: 35:75:e6:28:52:e9:13:0b:ea:c5:25:3d:2a:31:47:d6:26:c0: 7c:c5:d7:09:a6:0a:d1:93:64:93:ec:89:5e:fd:87:a9:6c:3d: d6:a4:90:57:78:ac:d6:e1:3a:f5:aa:0b:4c:de:d9:7c:d4:79: a6:e0:47:da:5b:88:57:0a:e4:f9:50:ea:ca:c1:04:51:c8:87: 6d:18:0b:7a:b0:47:06:10:4d:bc:97:18:0f:c4:9b:45:45:cc: 35:3f:d2:ce:62:28:62:ab:17:4b:ef:a3:db:ce:51:43:04:bc: 46:31:25:51:f5:e5:ba:b1:1a:fa:9c:52:ca:d2:d1:32:76:5e: 42:9c:2a:97:ef:08:fa:69:64:28:63:65:02:ee:9d:47:f8:9b: 63:d1:2a:ab:e7:49:6a:6d:e7:f9:52:60:d4:b3:43:92:d4:0f: 91:d9:19:44:4b:98:20:5e:1b:81:d0:2a:48:16:60:9e:ef:64: 0b:d3:1d:07:f5:fc:18:94:fb:15:70:31:68:fc:3b:e0:c2:3a: bb:39:06:21 -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIUCdTo2edb4Z0FHUlGDhhHbjTSFE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgzOVoX DTI3MDUwMjAyMDMzOVowMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4 RkE5RDk2QzA3RDMwRDU1NTlDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKd0gAyVKRxH1Tcxiw88vOBRZnjsW/9hjlJl2QQCS8qcNIBQSLvl6AFguHVx 4T/kUjh1CHhJmW8/Z6LO9Q+Qezpm5C6lclLEozJ7/PXcuVG0SnauYCJqIknQugoZ lKSlf3muAUZrExe5TbH751Wbebq2ovytsX9/inSOwRzQUaArhKhbjSq41XYET8FR x/U/AYOvbKKM1+OAoneRGs6kfsu1XZCF2+G3s6XLC0s4S0Dan3RqFS6TQcMKEoWN NJnxoGgGm0Fv9ctBuOU6abDw9Juf+uBadC262IElgYZYUx2rbkGV2vmysCR7T0U4 4aB6CmBCtoWVZRS3H6jBBOecrqECAwEAAaOCAucwggLjMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBAwXrHXVrjiBZSPqdlsB9MNVVnGMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QzOTI1Mzg4LTM1YzYtNDFkNy05ZGM0LWRiNGQxMThkMTM1YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMzkyNTM4 OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC8xMDMwNUVCMUQ3NTZCOEUy MDU5NDhGQTlEOTZDMDdEMzBENTU1OUM2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAeBAIAATAY AwQBZxd0AwQAZxzaAwQAZ/apAwQBblxKMBoEAgACMBQwEgMHACABDfAEHQMHACAB DfAEHjANBgkqhkiG9w0BAQsFAAOCAQEAB9DlGwfi1TdBrkhdCxEOFmtuOE7RT8Qi FsPaZ2Fiesx2LOunMFB5PtuvYYK974fWaDI2zhtFNXXmKFLpEwvqxSU9KjFH1ibA fMXXCaYK0ZNkk+yJXv2HqWw91qSQV3is1uE69aoLTN7ZfNR5puBH2luIVwrk+VDq ysEEUciHbRgLerBHBhBNvJcYD8SbRUXMNT/SzmIoYqsXS++j285RQwS8RjElUfXl urEa+pxSytLRMnZeQpwql+8I+mlkKGNlAu6dR/ibY9Eqq+dJam3n+VJg1LNDktQP kdkZREuYIF4bgdAqSBZgnu9kC9MdB/X8GJT7FXAxaPw74MI6uzkGIQ== -----END CERTIFICATE-----Generated at Tue May 12 22:16:03 2026 by rpki-client