$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer File: 15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer (raw, json) Hash identifier: I8d81U+7zqP4Lc2SePl7deWyUJW1+O8ijTIbMGkHVAU= Subject key identifier: 15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3EB0AD8DDE6AC39315F9CF7BC54EF43F78F63A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft caRepository: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:57:59 +0000 Certificate not after: Sun 02 May 2027 01:02:59 +0000 Subordinate resources: IP: 103.190.48.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b0:ad:8d:de:6a:c3:93:15:f9:cf:7b:c5:4e:f4:3f:78:f6:3a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:57:59 2026 GMT Not After : May 2 01:02:59 2027 GMT Subject: CN=15C663DD21C04B6CB2084A745F35B6B2C9902F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:ea:3f:09:2a:6e:4c:4f:e3:1c:c6:ad:da: d1:23:7b:73:5d:4b:50:84:6c:29:31:20:fe:9d:c5: dc:96:d3:89:e5:d7:62:8b:d7:c0:2e:4c:90:ca:23: 6c:2e:11:c4:c4:31:bf:54:f4:33:29:fb:4f:70:e7: 00:7c:30:82:0c:71:e9:51:ae:e4:f5:11:b7:76:5d: 88:bf:be:7d:b2:94:5f:9c:86:8c:68:41:9d:8d:42: b3:ea:45:b8:2e:f3:9a:1d:51:be:73:4d:f1:f9:a9: be:d1:c8:5d:25:a9:aa:1d:13:49:99:eb:ef:5c:ce: 5e:cc:b1:46:9e:ec:ba:60:87:74:73:e5:68:f3:af: 16:a4:22:d3:a2:51:90:0b:db:57:46:93:cf:05:21: fa:44:4c:96:46:e4:d0:43:2b:15:86:77:9e:d1:9f: 0c:96:11:9c:a7:8b:7c:fb:9f:49:ff:23:f4:10:62: ef:14:de:b3:ec:b6:c2:79:ad:ee:49:1d:ad:9a:60: 17:58:56:3c:d4:05:c5:48:cd:77:84:dd:52:15:f3: da:7b:71:e1:13:7e:dd:c7:02:3f:32:85:09:8e:bd: 49:a2:59:9c:8e:b5:1b:8d:80:a3:d3:09:06:76:fe: 72:a6:79:af:ec:1b:2e:7f:5f:ea:64:c3:6a:42:65: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.48.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:9b:8f:32:36:b2:aa:94:13:c1:7a:e0:24:34:f0:3b:03:51: 7a:ba:fc:c7:78:a9:db:ad:9c:ed:e8:63:c6:bf:e9:db:7e:48: 48:9a:13:3a:bd:a9:b6:79:bc:57:8c:6c:ce:b2:16:e5:ce:fe: 35:63:9b:5c:fd:8c:54:e1:52:70:b7:d6:8b:38:12:60:02:6a: de:f6:5f:bf:5b:3a:e3:1c:d7:e6:ba:89:64:a5:a5:8d:ab:78: bb:17:64:ff:2b:68:d9:a0:dd:c6:9e:05:c2:0c:57:a2:63:10: e9:a2:e2:87:3b:a1:8d:9f:59:c4:04:c2:e3:e4:c7:57:57:e8: f8:69:99:ea:a4:70:22:b9:3a:a2:13:e4:4e:e3:33:9c:ea:ca: 81:a9:f2:37:40:ab:25:80:0d:3e:d7:df:c5:5b:29:8e:77:af: 0e:a0:b9:d2:a9:5a:cf:1a:b2:47:7a:95:dd:b0:bc:50:fd:30: c4:c2:84:fc:e8:54:a7:19:cd:52:02:32:57:4e:3d:b7:7b:cb: 6f:49:63:83:82:96:1f:01:2a:59:6b:0b:09:03:e0:a6:d9:06: f4:25:27:45:a1:1b:0f:0e:84:49:01:40:1a:fc:7b:b0:95:48: a7:8f:d8:7f:56:9f:51:15:d3:8a:f1:43:14:61:af:ad:02:ec: a8:ed:6d:53 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPrCtjd5qw5MV+c97xU70P3j2OgwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTc1OVoX DTI3MDUwMjAxMDI1OVowMzExMC8GA1UEAxMoMTVDNjYzREQyMUMwNEI2Q0IyMDg0 QTc0NUYzNUI2QjJDOTkwMkY2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIb16j8JKm5MT+Mcxq3a0SN7c11LUIRsKTEg/p3F3JbTieXXYovXwC5MkMoj bC4RxMQxv1T0Myn7T3DnAHwwggxx6VGu5PURt3ZdiL++fbKUX5yGjGhBnY1Cs+pF uC7zmh1RvnNN8fmpvtHIXSWpqh0TSZnr71zOXsyxRp7sumCHdHPlaPOvFqQi06JR kAvbV0aTzwUh+kRMlkbk0EMrFYZ3ntGfDJYRnKeLfPufSf8j9BBi7xTes+y2wnmt 7kkdrZpgF1hWPNQFxUjNd4TdUhXz2ntx4RN+3ccCPzKFCY69SaJZnI61G42Ao9MJ Bnb+cqZ5r+wbLn9f6mTDakJloWUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBXGY90hwEtssghKdF81trLJkC9oMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc1N2U2ODc4LTZjYjItNGE1Zi1iNTUzLWJjZWIyYzk1Yzc2Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NTdlNjg3 OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC8xNUM2NjNERDIxQzA0QjZD QjIwODRBNzQ1RjM1QjZCMkM5OTAyRjY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ74wMA0GCSqGSIb3DQEBCwUAA4IBAQBfm48yNrKqlBPBeuAkNPA7A1F6uvzH eKnbrZzt6GPGv+nbfkhImhM6vam2ebxXjGzOshblzv41Y5tc/YxU4VJwt9aLOBJg Amre9l+/WzrjHNfmuolkpaWNq3i7F2T/K2jZoN3GngXCDFeiYxDpouKHO6GNn1nE BMLj5MdXV+j4aZnqpHAiuTqiE+RO4zOc6sqBqfI3QKslgA0+19/FWymOd68OoLnS qVrPGrJHepXdsLxQ/TDEwoT86FSnGc1SAjJXTj23e8tvSWODgpYfASpZawsJA+Cm 2Qb0JSdFoRsPDoRJAUAa/HuwlUinj9h/Vp9RFdOK8UMUYa+tAuyo7W1T -----END CERTIFICATE-----Generated at Tue May 12 22:03:05 2026 by rpki-client