$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer (raw, json) Hash identifier: T75FLZHd03gx7nQob9b+Jt/PLC890udmoIn7qTEkgP4= Subject key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D7CEE13801BAAAFEC955DF4FBCC0421E9C5BC90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft caRepository: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:45:36 +0000 Certificate not after: Sat 01 May 2027 23:50:36 +0000 Subordinate resources: IP: 103.121.123.0/24 IP: 2001:df6:4500::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7c:ee:13:80:1b:aa:af:ec:95:5d:f4:fb:cc:04:21:e9:c5:bc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:45:36 2026 GMT Not After : May 1 23:50:36 2027 GMT Subject: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:69:96:96:52:eb:33:44:51:31:cc:e2:bd: 6a:42:53:4a:a9:39:ec:82:6b:54:d5:02:69:01:92: cb:38:55:d2:d9:c5:68:45:93:5c:00:ae:fc:41:59: 3f:e5:12:dd:72:a2:1d:36:88:46:5f:c8:6d:b8:d1: 36:97:37:1a:cb:72:72:48:e4:6b:2b:e4:f0:a3:09: 68:95:5e:0f:ae:db:55:ba:9d:dc:3b:84:e7:36:53: 85:4e:22:28:e2:d1:bc:ab:6a:60:f5:55:7a:2b:fe: 3f:07:ed:62:a8:e0:9c:8a:a3:22:42:5d:8a:60:40: c5:32:19:78:62:70:1b:f7:55:db:28:42:a6:16:84: 80:90:dc:31:ea:d1:23:87:41:1e:7a:1c:a9:ff:79: cd:fe:16:fe:47:da:90:79:fc:b4:c9:06:8b:94:83: f8:6d:2a:ff:6a:a6:51:42:cb:2f:3e:ec:03:5c:fb: c3:6b:94:3a:c7:7f:c8:dd:09:75:68:db:73:66:85: f3:22:16:b9:5b:3d:aa:6c:d9:88:be:86:5a:2c:3b: 13:9d:0c:3b:ae:ea:0c:61:a9:f0:d4:08:01:aa:ea: cc:9e:ec:e2:cf:05:01:b2:a5:b3:dc:7e:73:2a:56: af:b9:8b:bc:f8:cb:28:a1:ef:62:0b:a3:88:fc:f0: f1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.123.0/24 IPv6: 2001:df6:4500::/48 Signature Algorithm: sha256WithRSAEncryption 51:ac:25:96:45:80:d4:0c:21:e0:2b:15:ce:12:74:42:65:f7: 65:db:e9:68:19:81:5d:14:1a:46:6d:5d:d9:91:2e:94:e0:ed: 73:ab:30:81:e7:48:0a:bc:38:b5:11:9b:07:f1:e4:7a:df:0b: e8:d5:10:dd:6c:19:9f:c1:b6:69:a4:c9:ab:d5:30:40:17:cf: 36:f4:36:0f:51:05:bc:a3:9d:7d:06:10:ec:96:2e:e8:52:ed: 51:37:84:ef:94:0d:06:0d:8a:3b:be:35:0b:79:fe:17:51:3a: f0:08:5e:76:17:52:d8:e7:d5:d6:1b:1f:eb:a6:c3:7f:ea:61: 28:fc:cb:90:57:29:b8:eb:cf:60:65:e3:4e:0f:38:50:15:7d: ff:ca:b3:e4:7d:bc:38:b6:2c:d0:23:ef:43:0d:34:b5:63:30: dd:85:d4:ef:4a:fc:29:84:76:e5:69:62:1b:f9:b4:7d:51:3e: 20:39:d8:c5:19:99:1d:5d:a4:85:39:83:3b:04:26:ab:02:8c: ca:b1:4d:c7:39:da:42:4f:89:18:8f:78:b7:a0:7d:90:d4:a7: f9:df:3a:83:6a:7e:39:32:53:a4:af:8a:9e:01:7c:f7:dd:e8: 40:5c:d4:2d:5d:3c:aa:ee:8e:8f:5f:d5:28:c7:83:72:ac:9a: 1c:15:bd:a9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXXzuE4Abqq/slV30+8wEIenFvJAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDUzNloX DTI3MDUwMTIzNTAzNlowMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZD MEIxRTI2MDZFMkE5NjFGNzIwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHJaZaWUuszRFExzOK9akJTSqk57IJrVNUCaQGSyzhV0tnFaEWTXACu/EFZ P+US3XKiHTaIRl/IbbjRNpc3Gstyckjkayvk8KMJaJVeD67bVbqd3DuE5zZThU4i KOLRvKtqYPVVeiv+PwftYqjgnIqjIkJdimBAxTIZeGJwG/dV2yhCphaEgJDcMerR I4dBHnocqf95zf4W/kfakHn8tMkGi5SD+G0q/2qmUULLLz7sA1z7w2uUOsd/yN0J dWjbc2aF8yIWuVs9qmzZiL6GWiw7E50MO67qDGGp8NQIAarqzJ7s4s8FAbKls9x+ cypWr7mLvPjLKKHvYgujiPzw8T0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBxkpdePhuJ6D8/AseJgbiqWH3IFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA3ZGVkZWQxLWQxNGUtNDEyMy1iNWM5LWM5M2E1OTk3ZmMzMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wN2RlZGVk MS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC8xQzY0QTVENzhGODZFMjdB MEZDRkMwQjFFMjYwNkUyQTk2MUY3MjA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3l7MA8EAgACMAkDBwAgAQ32RQAwDQYJKoZIhvcNAQELBQADggEBAFGsJZZF gNQMIeArFc4SdEJl92Xb6WgZgV0UGkZtXdmRLpTg7XOrMIHnSAq8OLURmwfx5Hrf C+jVEN1sGZ/BtmmkyavVMEAXzzb0Ng9RBbyjnX0GEOyWLuhS7VE3hO+UDQYNiju+ NQt5/hdROvAIXnYXUtjn1dYbH+umw3/qYSj8y5BXKbjrz2Bl404POFAVff/Ks+R9 vDi2LNAj70MNNLVjMN2F1O9K/CmEduVpYhv5tH1RPiA52MUZmR1dpIU5gzsEJqsC jMqxTcc52kJPiRiPeLegfZDUp/nfOoNqfjkyU6Svip4BfPfd6EBc1C1dPKrujo9f 1SjHg3KsmhwVvak= -----END CERTIFICATE-----Generated at Tue May 12 22:16:43 2026 by rpki-client