$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer File: 167383438D537B2E966FD22726DD3B827DF002FE.cer (raw, json) Hash identifier: Juwnpogcc2hCh9JnzdbRGvNH51CeMuYZkJCPD1/3FHU= Subject key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 291CAE801751C511F6261BAEBB1E7BF656F185E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:57:52 +0000 Certificate not after: Sun 02 May 2027 02:02:52 +0000 Subordinate resources: IP: 114.199.96.0/19 IP: 203.153.24.0/21 IP: 2401:9e80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1c:ae:80:17:51:c5:11:f6:26:1b:ae:bb:1e:7b:f6:56:f1:85:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:57:52 2026 GMT Not After : May 2 02:02:52 2027 GMT Subject: CN=167383438D537B2E966FD22726DD3B827DF002FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:94:b1:f6:67:d7:1a:d9:14:84:7d:f6:14: 59:df:d1:8a:2f:bf:db:01:bf:8a:fc:6c:a1:fe:5b: 9b:69:63:39:5d:0b:e9:d1:61:fa:d8:01:83:d9:f4: e0:2d:35:56:71:a7:e9:80:24:94:97:7b:43:09:45: 2b:dc:9b:de:39:da:30:e2:48:fe:44:3b:5b:92:f7: 0a:55:f3:8a:e8:a8:5a:ea:6f:6e:3b:ce:e1:3e:61: 9f:9d:2f:83:cf:52:a0:6d:2d:79:4b:32:81:dd:1d: b4:aa:e7:c8:96:19:df:51:4d:ba:4f:ca:4f:33:72: a7:cb:33:de:05:fc:9b:2f:d4:9d:bc:6e:12:78:8e: e7:78:6d:2f:42:61:68:98:a8:70:e6:dd:0b:ed:78: 80:79:62:ea:db:a7:5b:d2:11:87:fb:29:21:05:2c: fd:ce:fb:38:e9:27:5f:ab:1f:8d:85:71:2d:3b:80: aa:78:62:75:43:6d:16:be:55:62:d1:6f:fc:53:79: ff:aa:b1:3c:4a:a9:74:d2:44:e4:02:4c:4c:39:78: 7e:7b:16:ad:ec:b9:b1:b7:ae:4f:85:6f:09:ae:5f: 2e:1c:45:e0:43:b9:1c:de:75:c3:67:88:9a:4f:53: 7d:23:25:da:73:a6:41:d0:88:0d:a3:2c:da:b6:4a: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/19 203.153.24.0/21 IPv6: 2401:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 79:3f:25:0c:22:ea:7e:47:3b:59:fc:0d:1b:a7:6e:58:9b:f9: ed:45:e0:b8:53:48:f8:08:22:ce:4d:57:41:10:f5:84:12:96: 68:69:d4:32:9c:28:45:a7:31:92:4b:98:ed:e5:5e:ed:d3:ce: 99:b6:8a:5a:80:c3:41:2f:2b:ff:f2:a8:14:97:28:3b:8f:6f: 7c:86:64:c4:c5:62:d1:fb:e0:90:18:9d:02:c0:62:a8:83:61: e2:fb:22:f2:bb:f0:93:c6:e3:3a:71:a3:8a:1b:97:7f:80:90: eb:98:35:17:7f:66:72:b7:47:b6:2f:6f:bb:34:3e:02:d4:02: 28:f2:79:c3:db:d4:25:fa:ea:4a:72:d9:07:e8:8f:62:f7:9c: bb:0c:11:25:36:6a:d6:6f:d5:5b:ed:d6:4c:7e:ba:09:ef:b4: 32:23:06:c9:83:97:85:3f:f8:d4:aa:28:5d:a5:e7:4d:52:b4: 8f:7e:5c:cd:2d:d7:14:3e:f0:6f:72:b0:4d:8e:2c:62:7a:5e: 30:7b:bf:d3:9c:0f:3e:e9:4e:b3:8b:a2:ec:ff:41:ae:19:9d: 71:ab:51:5e:ca:5a:3b:bc:86:a4:09:4b:af:80:39:01:34:d3: 41:73:24:de:e6:c0:5a:6e:c1:5b:45:f0:0d:8f:f4:47:44:de: c4:7e:7d:24 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUKRyugBdRxRH2Jhuuux579lbxheMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTc1MloX DTI3MDUwMjAyMDI1MlowMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZE MjI3MjZERDNCODI3REYwMDJGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANoPlLH2Z9ca2RSEffYUWd/Rii+/2wG/ivxsof5bm2ljOV0L6dFh+tgBg9n0 4C01VnGn6YAklJd7QwlFK9yb3jnaMOJI/kQ7W5L3ClXziuioWupvbjvO4T5hn50v g89SoG0teUsygd0dtKrnyJYZ31FNuk/KTzNyp8sz3gX8my/UnbxuEniO53htL0Jh aJiocObdC+14gHli6tunW9IRh/spIQUs/c77OOknX6sfjYVxLTuAqnhidUNtFr5V YtFv/FN5/6qxPEqpdNJE5AJMTDl4fnsWrey5sbeuT4VvCa5fLhxF4EO5HN51w2eI mk9TfSMl2nOmQdCIDaMs2rZKHJsCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBZzg0ONU3sulm/SJybdO4J98AL+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QxZjRmZDM4LTc4MjYtNDIwMS05ZjliLTFkN2M3NmFhMjRkZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMWY0ZmQz OC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC8xNjczODM0MzhENTM3QjJF OTY2RkQyMjcyNkREM0I4MjdERjAwMkZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQFcsdgAwQDy5kYMA0EAgACMAcDBQAkAZ6AMA0GCSqGSIb3DQEBCwUAA4IBAQB5 PyUMIup+RztZ/A0bp25Ym/ntReC4U0j4CCLOTVdBEPWEEpZoadQynChFpzGSS5jt 5V7t086ZtopagMNBLyv/8qgUlyg7j298hmTExWLR++CQGJ0CwGKog2Hi+yLyu/CT xuM6caOKG5d/gJDrmDUXf2Zyt0e2L2+7ND4C1AIo8nnD29Ql+upKctkH6I9i95y7 DBElNmrWb9Vb7dZMfroJ77QyIwbJg5eFP/jUqihdpedNUrSPflzNLdcUPvBvcrBN jixiel4we7/TnA8+6U6zi6Ls/0GuGZ1xq1Feylo7vIakCUuvgDkBNNNBcyTe5sBa bsFbRfANj/RHRN7Efn0k -----END CERTIFICATE-----Generated at Tue May 12 22:45:51 2026 by rpki-client