$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer File: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer (raw, json) Hash identifier: ERTq8wdsNztIgAF1QWojTKXhfYPiSx9zs48i8YOzjZ4= Subject key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2723DAAD25D680E978E036AAB6B2E6A481103736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:01 +0000 Certificate not after: Sun 02 May 2027 01:06:01 +0000 Subordinate resources: IP: 103.145.34.0/23 IP: 2405:77c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:23:da:ad:25:d6:80:e9:78:e0:36:aa:b6:b2:e6:a4:81:10:37:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:01:01 2026 GMT Not After : May 2 01:06:01 2027 GMT Subject: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:7e:76:1c:6b:53:ac:06:fc:51:36:08:1e: 6f:cb:f8:4d:c6:59:b6:44:67:0b:55:21:36:62:a6: 06:ea:3a:d0:7e:ae:87:36:a5:a8:0f:e6:4e:4d:c6: fb:43:3c:8c:9f:db:ba:8a:ae:cb:31:9d:30:41:a8: 08:7e:9e:b0:51:b2:49:43:14:44:77:b5:f7:7b:49: 59:51:c2:21:b0:16:c8:c0:8c:55:14:fb:27:1b:64: 46:76:5c:dc:90:cc:df:ef:a9:07:a1:e0:b3:aa:12: c4:53:20:d7:71:45:7f:ee:b4:54:c1:2e:a6:23:92: 12:39:81:0e:6f:3c:e8:9c:21:25:77:01:15:4d:49: 47:00:e9:cb:37:52:28:ec:28:44:50:da:b0:a9:c2: 21:63:d0:d6:15:e1:97:6d:9f:5a:13:09:dd:0e:f0: 86:b1:13:4f:6e:88:9b:0f:37:ce:c4:1c:97:83:23: ad:65:53:d0:b6:f8:06:51:5b:28:2c:11:76:47:5f: c6:2d:27:94:d9:00:40:24:93:31:a7:70:ec:84:14: 1d:cf:b6:27:ce:b1:28:a3:96:08:7e:16:90:fb:7f: e2:e6:a2:76:ee:a6:2c:7a:b2:b5:3c:56:05:04:bb: cb:80:a5:fc:9f:42:4d:a9:9a:82:a3:44:76:db:96: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.34.0/23 IPv6: 2405:77c0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:ce:9d:a6:9a:b5:43:cb:07:78:22:a1:a0:9a:f1:62:e6:55: 8c:e6:33:99:4e:0b:81:e2:71:ef:33:5d:dd:47:30:b9:4d:16: 0c:72:e1:d5:ca:65:a2:88:b1:de:73:01:31:33:7d:97:dd:e0: 22:fe:b5:de:f7:fb:f2:f7:22:d8:dc:1e:e1:66:a1:2c:ec:19: 2c:21:44:8f:51:d3:2c:45:3c:2e:4e:ef:cc:f1:0c:f4:5e:4a: 0b:92:d3:9b:00:91:77:e8:e7:77:26:94:8e:ca:a8:50:c1:25: fb:a4:a7:bd:47:a9:fd:80:27:65:4b:b9:98:99:1c:97:a1:19: 86:ea:48:4a:d1:9d:c7:e9:ba:70:f1:1d:ca:a2:24:2b:8c:83: f3:7b:1c:1d:e7:12:84:a1:57:db:c0:bd:77:23:be:25:d8:4e: 92:68:26:48:56:72:ad:3b:1f:8a:51:06:be:66:53:84:ab:89: 99:b5:3a:cf:c6:80:0e:99:4a:d1:89:bc:72:bf:83:26:4d:a0: f5:b8:5d:fc:e0:4e:19:05:74:5e:fc:14:78:1f:9c:f2:83:32: 72:d4:d9:d2:4b:1b:9c:ec:1b:10:31:8d:74:88:5c:ee:50:48: 23:a4:eb:6e:e5:d7:0e:d8:05:99:d0:b5:a4:ac:1e:43:42:e8: eb:6c:cd:61 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUJyParSXWgOl44DaqtrLmpIEQNzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDEwMVoX DTI3MDUwMjAxMDYwMVowMzExMC8GA1UEAxMoMTU2Q0M0MkVCNTBGODZFMUUwNEIy RjZGQ0E0MUM5MDNCNUEwMzg1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnNfnYca1OsBvxRNggeb8v4TcZZtkRnC1UhNmKmBuo60H6uhzalqA/mTk3G +0M8jJ/buoquyzGdMEGoCH6esFGySUMURHe193tJWVHCIbAWyMCMVRT7JxtkRnZc 3JDM3++pB6Hgs6oSxFMg13FFf+60VMEupiOSEjmBDm886JwhJXcBFU1JRwDpyzdS KOwoRFDasKnCIWPQ1hXhl22fWhMJ3Q7whrETT26Imw83zsQcl4MjrWVT0Lb4BlFb KCwRdkdfxi0nlNkAQCSTMadw7IQUHc+2J86xKKOWCH4WkPt/4uaidu6mLHqytTxW BQS7y4Cl/J9CTamagqNEdtuWCsMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBVsxC61D4bh4Esvb8pByQO1oDhcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc5ZmJlMDg4LTBkODQtNDc4OS1iNDA1LTI1YzJlNzY5MzdmNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OWZiZTA4 OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC8xNTZDQzQyRUI1MEY4NkUx RTA0QjJGNkZDQTQxQzkwM0I1QTAzODVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5EiMA0EAgACMAcDBQAkBXfAMA0GCSqGSIb3DQEBCwUAA4IBAQCfzp2mmrVD ywd4IqGgmvFi5lWM5jOZTguB4nHvM13dRzC5TRYMcuHVymWiiLHecwExM32X3eAi /rXe9/vy9yLY3B7hZqEs7BksIUSPUdMsRTwuTu/M8Qz0XkoLktObAJF36Od3JpSO yqhQwSX7pKe9R6n9gCdlS7mYmRyXoRmG6khK0Z3H6bpw8R3KoiQrjIPzexwd5xKE oVfbwL13I74l2E6SaCZIVnKtOx+KUQa+ZlOEq4mZtTrPxoAOmUrRibxyv4MmTaD1 uF384E4ZBXRe/BR4H5zygzJy1NnSSxuc7BsQMY10iFzuUEgjpOtu5dcO2AWZ0LWk rB5DQujrbM1h -----END CERTIFICATE-----Generated at Tue May 12 22:38:49 2026 by rpki-client