$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer File: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer (raw, json) Hash identifier: 50yiCkGkud6DsiEoXlzKSRRNnjgoJ9ikYtYzpz9edp4= Subject key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5437ACAFDB8C0E93DCD64C83AB306088D0D7822E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:25 +0000 Certificate not after: Sun 02 May 2027 01:48:25 +0000 Subordinate resources: IP: 103.167.70.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:37:ac:af:db:8c:0e:93:dc:d6:4c:83:ab:30:60:88:d0:d7:82:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:43:25 2026 GMT Not After : May 2 01:48:25 2027 GMT Subject: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:5e:d3:69:48:f2:22:74:b1:87:43:1e:01: c9:c7:7f:cd:4e:f5:26:c7:93:78:68:59:8a:06:74: 44:e4:c1:86:ad:91:51:b6:58:c2:8a:7e:16:6a:1b: 83:f2:0e:4b:da:38:06:d2:6c:12:b7:c6:f8:dc:10: b0:bb:44:a4:b8:39:dc:a3:99:df:77:0d:f4:66:b3: cf:ce:ae:73:60:1e:d3:e6:b7:b2:e6:23:73:ac:30: 01:86:27:3f:9d:4a:95:2c:22:e6:a5:0d:97:98:2c: aa:69:9d:3f:00:5c:a0:ed:4e:89:f5:83:22:51:99: 7e:a4:b6:28:28:ae:b9:a4:1f:f0:39:58:f8:17:70: 29:21:e8:e0:ef:2f:8f:44:7f:15:dc:60:43:71:16: 3b:49:d9:f1:6d:e6:18:08:1d:2f:16:dd:12:eb:4c: 09:22:2e:a1:13:27:b6:b9:72:4f:9b:39:d0:fd:f2: 44:5e:ce:db:6c:38:4f:40:f5:ca:dc:7b:6f:6a:f8: cc:60:c0:e6:14:3c:69:03:98:51:b5:ce:da:a4:d0: 74:c1:6d:62:5d:a8:a2:3d:4e:78:0a:78:ef:f3:2a: be:6c:2d:ce:24:21:2c:c4:8f:3b:1f:80:b5:77:24: 63:ae:af:b5:69:3f:ac:50:52:bb:78:91:da:ae:39: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.70.0/23 Signature Algorithm: sha256WithRSAEncryption 54:0f:e6:6f:26:77:2c:a3:71:f4:84:e6:2b:d7:ac:03:39:ce: 68:98:87:99:c5:d1:95:a8:d5:ef:91:a6:68:df:2d:a3:f3:4b: e3:77:ec:7f:bd:e0:6f:d3:a3:f0:a8:90:e5:3a:ad:3e:52:b3: a2:49:ad:1f:c6:1e:49:d1:ef:2b:b6:1f:aa:40:09:c9:4b:0b: 3e:6b:00:79:57:8e:4b:b2:76:a9:36:8f:9b:49:56:29:06:7c: 20:11:34:0a:2a:8b:cb:c2:07:86:8a:44:5f:61:71:16:d1:e9: 85:a5:0a:e9:17:ec:40:5a:cd:60:e0:f9:dd:d1:df:43:7e:a4: d3:ef:f1:53:d0:c6:d7:94:72:73:cf:45:93:d0:a5:a2:52:05: 2c:96:60:e6:a5:86:25:f7:94:fd:fa:2d:94:1d:1d:8a:e3:8d: f6:a7:ca:87:07:3b:b3:df:01:a6:ea:df:15:dd:78:59:b3:d5: 41:b9:e7:77:45:42:0f:f7:ec:f6:13:9a:00:76:8a:2b:8a:3d: 5c:8c:16:9f:07:1c:15:6e:e6:65:ba:53:3b:48:f8:d3:67:a6: d0:73:4b:7c:eb:4d:24:d9:fe:61:63:ca:2b:fd:5c:fe:1a:1a: 26:ef:79:7e:58:32:cd:65:2c:07:a0:e0:80:ac:12:42:33:9b: 52:01:d3:b3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVDesr9uMDpPc1kyDqzBgiNDXgi4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDMyNVoX DTI3MDUwMjAxNDgyNVowMzExMC8GA1UEAxMoMTVENkUyRDI1MjdFRTZEQ0Y2ODFG RUYwNjNGNjFCMUZDMUIzQzM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALD+XtNpSPIidLGHQx4Bycd/zU71JseTeGhZigZ0ROTBhq2RUbZYwop+Fmob g/IOS9o4BtJsErfG+NwQsLtEpLg53KOZ33cN9Gazz86uc2Ae0+a3suYjc6wwAYYn P51KlSwi5qUNl5gsqmmdPwBcoO1OifWDIlGZfqS2KCiuuaQf8DlY+BdwKSHo4O8v j0R/FdxgQ3EWO0nZ8W3mGAgdLxbdEutMCSIuoRMntrlyT5s50P3yRF7O22w4T0D1 ytx7b2r4zGDA5hQ8aQOYUbXO2qTQdMFtYl2ooj1OeAp47/MqvmwtziQhLMSPOx+A tXckY66vtWk/rFBSu3iR2q45uXECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBXW4tJSfubc9oH+8GP2Gx/Bs8N2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I4ZjllODdkLWU1MDktNDdiYS1iZTlkLTg5NTU2ZjUzMGVhOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iOGY5ZTg3 ZC1lNTA5LTQ3YmEtYmU5ZC04OTU1NmY1MzBlYTgvMC8xNUQ2RTJEMjUyN0VFNkRD RjY4MUZFRjA2M0Y2MUIxRkMxQjNDMzc2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6dGMA0GCSqGSIb3DQEBCwUAA4IBAQBUD+ZvJncso3H0hOYr16wDOc5omIeZ xdGVqNXvkaZo3y2j80vjd+x/veBv06PwqJDlOq0+UrOiSa0fxh5J0e8rth+qQAnJ Sws+awB5V45LsnapNo+bSVYpBnwgETQKKovLwgeGikRfYXEW0emFpQrpF+xAWs1g 4Pnd0d9DfqTT7/FT0MbXlHJzz0WT0KWiUgUslmDmpYYl95T9+i2UHR2K4432p8qH Bzuz3wGm6t8V3XhZs9VBued3RUIP9+z2E5oAdoorij1cjBafBxwVbuZlulM7SPjT Z6bQc0t8600k2f5hY8or/Vz+Ghom73l+WDLNZSwHoOCArBJCM5tSAdOz -----END CERTIFICATE-----Generated at Tue May 12 22:39:26 2026 by rpki-client