$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer File: 10553E9FBD62D012FC01AA60343F1431B2A6A334.cer (raw, json) Hash identifier: 8eUTw5bzyjFXLMJqLjTBK0jjMpHUniToK+/TRh5rbto= Subject key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 236A09550C585E930DCA2F95B8A20AADF176A586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft caRepository: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:54:37 +0000 Certificate not after: Sat 01 May 2027 23:59:37 +0000 Subordinate resources: IP: 103.176.98.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6a:09:55:0c:58:5e:93:0d:ca:2f:95:b8:a2:0a:ad:f1:76:a5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:54:37 2026 GMT Not After : May 1 23:59:37 2027 GMT Subject: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:58:ef:c4:2c:b4:a7:f7:2f:1c:61:59:f7: 5c:87:8a:e7:a4:cf:51:e7:86:3e:fb:fe:01:8a:75: 35:0d:27:5a:8f:3b:e9:15:06:b5:b8:3b:47:ad:25: 97:bb:a1:8e:e1:2b:1b:95:96:da:87:d8:9a:b3:02: 48:e9:84:69:64:17:a2:1f:79:3b:ca:36:0b:43:43: e0:18:c5:93:44:ba:64:e1:e8:49:2b:c3:41:0a:03: 38:0b:2f:84:53:eb:e0:48:2c:17:56:cb:eb:b2:c5: 7b:75:17:10:34:46:9d:59:91:f9:ee:d0:91:51:da: 7b:26:f5:bf:1f:e4:6c:f2:c2:9c:14:a9:4f:be:b1: bd:c1:76:2f:08:39:29:d0:23:4b:31:09:14:4b:d1: 4f:7e:2c:05:e8:f2:6a:47:96:a8:2d:64:db:dc:a0: f6:5e:23:c9:05:d8:93:74:39:75:77:f5:60:cc:26: 6f:93:fb:a8:a9:f9:0c:db:2a:b0:b2:0d:a9:8d:40: 4a:6f:6b:76:e8:7b:1e:af:31:e0:72:d5:d4:51:d0: 9b:7f:e2:6d:8e:97:81:4c:ac:b0:2b:e0:2c:09:c8: c0:01:e9:b7:d4:bb:c9:9d:67:f9:04:74:2a:b2:d9: 6e:bb:03:9f:e8:2e:d6:96:84:6d:c6:09:c9:18:df: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.98.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:63:98:d0:62:59:93:29:6b:fc:96:62:bc:57:87:01:c7:38: a1:73:b3:62:c1:b3:f3:cd:0b:86:c4:ed:70:41:e6:29:0c:e4: 44:9d:74:89:69:5b:cb:10:c4:40:ae:1c:fc:06:5a:0a:9c:a5: 79:e1:08:b7:bc:3e:6b:77:31:18:22:2e:86:81:fb:89:ff:53: ed:7e:c1:66:48:c3:65:20:59:1a:42:ec:e1:51:1d:26:67:13: c3:08:2c:45:8c:d8:ff:aa:ef:84:44:56:09:46:ca:f6:c3:55: 7b:3b:ab:15:5f:24:ba:5b:07:c2:d8:cb:df:58:f7:50:52:64: 55:76:b9:78:c5:cb:b9:99:ae:89:82:8a:de:e7:30:c9:a9:01: f5:cc:a2:bc:51:b3:b4:4c:71:3a:a8:52:7e:6e:58:bd:60:ae: 6b:a1:98:47:22:dd:35:e0:d2:f7:d0:8d:0a:62:21:2b:90:26: 02:cf:3c:db:a1:e9:9e:85:48:85:0e:ea:1b:30:6d:9e:bb:bb: 07:90:0d:7e:e4:71:50:3d:78:65:2e:c9:78:97:42:a3:ec:77: e1:29:d5:1f:72:11:ea:5d:0a:13:0a:4f:ef:70:a0:24:56:e8: 26:46:50:f1:8e:f9:43:27:fa:c1:82:29:d9:12:7b:a4:78:30: e9:23:f2:93 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUI2oJVQxYXpMNyi+VuKIKrfF2pYYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTQzN1oX DTI3MDUwMTIzNTkzN1owMzExMC8GA1UEAxMoMTA1NTNFOUZCRDYyRDAxMkZDMDFB QTYwMzQzRjE0MzFCMkE2QTMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKR2WO/ELLSn9y8cYVn3XIeK56TPUeeGPvv+AYp1NQ0nWo876RUGtbg7R60l l7uhjuErG5WW2ofYmrMCSOmEaWQXoh95O8o2C0ND4BjFk0S6ZOHoSSvDQQoDOAsv hFPr4EgsF1bL67LFe3UXEDRGnVmR+e7QkVHaeyb1vx/kbPLCnBSpT76xvcF2Lwg5 KdAjSzEJFEvRT34sBejyakeWqC1k29yg9l4jyQXYk3Q5dXf1YMwmb5P7qKn5DNsq sLINqY1ASm9rduh7Hq8x4HLV1FHQm3/ibY6XgUyssCvgLAnIwAHpt9S7yZ1n+QR0 KrLZbrsDn+gu1paEbcYJyRjf9f8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBBVPp+9YtAS/AGqYDQ/FDGypqM0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE3MjE2NDI1LTZhYTMtNDQyOS1iMTc1LTg2OTAxYmIwY2IxZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNzIxNjQy NS02YWEzLTQ0MjktYjE3NS04NjkwMWJiMGNiMWYvMC8xMDU1M0U5RkJENjJEMDEy RkMwMUFBNjAzNDNGMTQzMUIyQTZBMzM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7BiMA0GCSqGSIb3DQEBCwUAA4IBAQBNY5jQYlmTKWv8lmK8V4cBxzihc7Ni wbPzzQuGxO1wQeYpDOREnXSJaVvLEMRArhz8BloKnKV54Qi3vD5rdzEYIi6GgfuJ /1PtfsFmSMNlIFkaQuzhUR0mZxPDCCxFjNj/qu+ERFYJRsr2w1V7O6sVXyS6WwfC 2MvfWPdQUmRVdrl4xcu5ma6Jgore5zDJqQH1zKK8UbO0THE6qFJ+bli9YK5roZhH It014NL30I0KYiErkCYCzzzboemehUiFDuobMG2eu7sHkA1+5HFQPXhlLsl4l0Kj 7HfhKdUfchHqXQoTCk/vcKAkVugmRlDxjvlDJ/rBginZEnukeDDpI/KT -----END CERTIFICATE-----Generated at Wed May 13 00:44:54 2026 by rpki-client