$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer (raw, json) Hash identifier: skSJFzElHvtE88LSGhHmIRkcEKqUW/mOCNvcNUVWHws= Subject key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 58F955F5563865805504534FEA1706CA383A8F62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:42:26 +0000 Certificate not after: Sat 01 May 2027 23:47:26 +0000 Subordinate resources: IP: 103.29.212.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f9:55:f5:56:38:65:80:55:04:53:4f:ea:17:06:ca:38:3a:8f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:42:26 2026 GMT Not After : May 1 23:47:26 2027 GMT Subject: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:9a:9d:e8:de:46:19:6e:35:6b:3c:89:d3: cc:36:67:fa:55:aa:32:e4:49:b3:48:46:c6:eb:37: 8b:7c:7a:1d:98:ef:e9:83:19:e1:ea:a7:f9:7d:33: dc:ba:a0:84:37:dd:88:00:e8:f1:ef:30:cd:d4:2c: 19:32:f7:83:44:78:6d:07:6e:5e:a8:ca:7d:69:62: 92:21:fb:89:fc:3d:2f:6e:dd:cd:7a:37:f6:6d:1d: d1:1b:0a:98:86:36:c5:1c:75:e0:29:f7:33:b0:66: 76:b6:6c:ce:68:96:a2:f0:a0:8c:db:02:3d:2f:b8: b9:45:4e:19:ec:36:1c:10:13:90:88:50:15:c4:d9: 78:79:66:a0:9d:a4:63:d6:d6:51:5f:6c:e2:ff:ec: ef:68:97:03:c1:fd:f3:b3:bf:bc:7c:dd:76:8a:56: 9b:f0:c3:1f:22:f2:42:7b:84:08:28:36:68:66:7d: a2:21:51:d3:dd:50:83:d6:a6:63:a0:37:63:b8:d0: cd:e7:ba:b9:b3:e6:c2:9d:b8:0d:bb:5e:f9:3d:df: 78:fb:b8:f3:90:af:aa:21:23:30:f3:b2:0f:cb:e5: ae:99:19:53:d5:a8:e2:3b:8d:c9:a3:87:76:96:dd: 80:18:0b:32:95:ba:56:65:73:fa:27:7c:26:52:c2: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.212.0/22 Signature Algorithm: sha256WithRSAEncryption 99:d4:82:55:da:00:7f:e8:02:cf:e0:d5:4a:66:d2:73:42:b0: 2d:c1:32:ef:2d:82:ac:99:98:66:5d:74:40:fa:be:fe:fb:c5: fd:ce:ee:e2:2b:08:88:07:dd:f6:27:a7:91:79:7a:c6:2e:7f: d2:d5:31:d2:12:91:73:63:7d:cc:2e:73:6f:04:fd:42:d5:ad: 58:35:b7:e1:67:ec:c9:02:4f:64:17:c6:87:3d:43:51:43:ac: 38:58:63:66:66:fa:06:f9:b7:26:c9:c1:32:cd:0e:60:fb:93: fb:26:72:ea:17:70:f9:f7:d5:a5:0c:b4:74:38:21:5a:43:0e: 27:59:59:e8:15:54:c9:3b:a1:e9:6d:8a:e1:0a:fe:2e:67:db: 8b:5c:86:a0:58:ba:f0:5d:75:25:ea:99:15:b4:40:84:1d:4a: 6e:c5:ed:42:15:0b:cf:24:9e:72:33:22:58:f9:d0:78:3c:90: d0:bc:2a:af:bf:04:87:cd:07:4c:d1:b4:3e:74:00:08:a7:db: 2f:6f:ae:cb:a3:09:1f:76:13:c8:a0:ce:05:1d:63:5f:d5:d8: 08:d0:f7:93:5b:a6:a4:17:f5:ed:12:d8:5b:0f:ec:1a:e5:73: 90:73:d5:75:cc:3c:54:6c:94:ca:0f:c3:78:2a:5f:48:00:c6: f1:7d:91:05 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWPlV9VY4ZYBVBFNP6hcGyjg6j2IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDIyNloX DTI3MDUwMTIzNDcyNlowMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3 RkQzRUQyNTI2RDhDMTA0NTFGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhzmp3o3kYZbjVrPInTzDZn+lWqMuRJs0hGxus3i3x6HZjv6YMZ4eqn+X0z 3LqghDfdiADo8e8wzdQsGTL3g0R4bQduXqjKfWlikiH7ifw9L27dzXo39m0d0RsK mIY2xRx14Cn3M7BmdrZszmiWovCgjNsCPS+4uUVOGew2HBATkIhQFcTZeHlmoJ2k Y9bWUV9s4v/s72iXA8H987O/vHzddopWm/DDHyLyQnuECCg2aGZ9oiFR091Qg9am Y6A3Y7jQzee6ubPmwp24Dbte+T3fePu485CvqiEjMPOyD8vlrpkZU9Wo4juNyaOH dpbdgBgLMpW6VmVz+id8JlLCInkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB1FcyXIXz/uLeV/0+0lJtjBBFH6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA0MDFiMmQxLTAxY2EtNDBlOC1iZjc3LTk4NjE1OTg2N2EwNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNDAxYjJk MS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC8xRDQ1NzMyNUM4NUYzRkVF MkRFNTdGRDNFRDI1MjZEOEMxMDQ1MUZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZx3UMA0GCSqGSIb3DQEBCwUAA4IBAQCZ1IJV2gB/6ALP4NVKZtJzQrAtwTLv LYKsmZhmXXRA+r7++8X9zu7iKwiIB932J6eReXrGLn/S1THSEpFzY33MLnNvBP1C 1a1YNbfhZ+zJAk9kF8aHPUNRQ6w4WGNmZvoG+bcmycEyzQ5g+5P7JnLqF3D599Wl DLR0OCFaQw4nWVnoFVTJO6HpbYrhCv4uZ9uLXIagWLrwXXUl6pkVtECEHUpuxe1C FQvPJJ5yMyJY+dB4PJDQvCqvvwSHzQdM0bQ+dAAIp9svb67LowkfdhPIoM4FHWNf 1dgI0PeTW6akF/XtEthbD+wa5XOQc9V1zDxUbJTKD8N4Kl9IAMbxfZEF -----END CERTIFICATE-----Generated at Tue May 12 22:46:01 2026 by rpki-client