$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer (raw, json) Hash identifier: gdkiNo3OfhyDWGEEZKCSdYes4SSktPhLzowVCgLFI3s= Subject key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1C89347AE626FED502806539C07B49DF6BB32FC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:53:27 +0000 Certificate not after: Sun 02 May 2027 01:58:27 +0000 Subordinate resources: IP: 103.101.52.0/24 IP: 2001:df2:9100::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:89:34:7a:e6:26:fe:d5:02:80:65:39:c0:7b:49:df:6b:b3:2f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:53:27 2026 GMT Not After : May 2 01:58:27 2027 GMT Subject: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:24:e9:ac:b0:4d:47:4a:97:aa:c3:6c:e2: e0:e6:4a:b6:36:63:2f:fa:06:62:04:8c:cc:07:75: 1b:64:45:d3:be:4e:0e:d1:20:20:70:5c:5b:74:56: c1:b6:c9:26:7c:67:4d:b6:cc:d2:88:87:70:9e:16: 02:d6:df:c8:5d:e7:8b:f5:a5:da:7d:6c:c0:f0:af: e3:17:df:6e:b3:a7:63:be:11:88:08:87:17:eb:74: 3d:c6:e1:1e:9d:02:b9:3f:49:b6:02:64:77:d9:57: 41:8a:9d:7e:49:fc:cd:12:00:96:7e:7b:06:37:c2: da:f2:71:2d:97:28:90:a5:9f:ae:63:29:bf:a8:24: d7:f8:7d:b1:1b:db:6f:24:d3:42:b2:3e:19:3f:9f: a1:71:8f:35:c5:f6:d6:5c:ec:25:02:39:63:17:98: b6:6d:79:25:f4:1f:45:a2:97:0b:c8:c7:61:b2:2a: 42:28:a1:0a:7f:00:c2:c9:c6:dc:72:37:0d:22:73: 64:3d:86:67:1c:f3:c9:e3:f6:5d:79:fa:60:b8:b6: 81:53:2e:fc:d1:b1:14:d9:6d:01:d0:f7:c3:29:eb: 7c:a4:d1:03:1f:0a:bd:71:0c:5a:7b:07:53:dd:7d: 13:d8:45:92:50:71:ed:d7:25:b4:d8:23:34:08:05: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.52.0/24 IPv6: 2001:df2:9100::/48 Signature Algorithm: sha256WithRSAEncryption 35:65:f9:26:6b:8c:54:0f:ef:b4:16:3a:bc:af:32:6a:5f:d2: c5:b9:78:02:78:7a:14:00:0a:a2:85:2f:cc:2c:1f:92:e8:98: c4:d3:ef:0a:d0:ff:2a:00:f0:aa:e9:2b:38:ed:85:4f:f1:7e: 09:51:53:5f:ab:39:05:7f:eb:8e:ab:61:46:bb:11:80:41:2a: 26:69:b1:1c:3c:af:ca:76:b1:5d:4a:03:09:c8:d6:7a:fa:10: c1:8d:7c:e9:c9:d9:41:3e:5f:1e:1e:40:0a:96:34:71:0c:5c: cd:44:9b:f4:2c:81:0e:84:1f:21:fd:a1:a9:f8:46:b8:3b:f1: 14:e7:f5:1a:0c:e8:54:01:20:7a:e5:05:91:31:6b:20:b5:aa: 94:34:c7:21:08:6b:b8:6d:b8:2f:bc:b6:6d:13:fb:4a:6d:8d: 1d:30:b0:a1:3b:5b:eb:87:02:22:69:30:7a:1d:b2:ac:4f:1f: f8:af:08:fd:8a:cd:ca:3e:bc:3f:79:84:7b:9e:c7:fa:e4:c9: 30:f0:ce:bd:8f:e5:e1:64:ff:5c:9d:fb:01:86:78:d3:39:04: 59:92:2f:92:50:72:5c:68:7a:ed:a0:b2:0f:c3:69:a6:9a:cf: d9:b6:7a:c7:f1:b4:4c:7d:85:05:43:98:f4:56:ac:75:13:da: 33:8b:7d:7c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHIk0euYm/tUCgGU5wHtJ32uzL8MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTMyN1oX DTI3MDUwMjAxNTgyN1owMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThG M0E1NUY5Qjk5OTA0NUU1QjIwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTPJOmssE1HSpeqw2zi4OZKtjZjL/oGYgSMzAd1G2RF075ODtEgIHBcW3RW wbbJJnxnTbbM0oiHcJ4WAtbfyF3ni/Wl2n1swPCv4xffbrOnY74RiAiHF+t0Pcbh Hp0CuT9JtgJkd9lXQYqdfkn8zRIAln57BjfC2vJxLZcokKWfrmMpv6gk1/h9sRvb byTTQrI+GT+foXGPNcX21lzsJQI5YxeYtm15JfQfRaKXC8jHYbIqQiihCn8AwsnG 3HI3DSJzZD2GZxzzyeP2XXn6YLi2gVMu/NGxFNltAdD3wynrfKTRAx8KvXEMWnsH U919E9hFklBx7dcltNgjNAgFwJUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB1kOxxuYp3wQqjzpV+bmZBF5bIOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NhMGI0ZjE1LTc3MjAtNGYyYS04MzQzLThlMzdmYWU4N2E1NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYTBiNGYx NS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC8xRDY0M0IxQzZFNjI5REYw NDJBOEYzQTU1RjlCOTk5MDQ1RTVCMjBFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2U0MA8EAgACMAkDBwAgAQ3ykQAwDQYJKoZIhvcNAQELBQADggEBADVl+SZr jFQP77QWOryvMmpf0sW5eAJ4ehQACqKFL8wsH5LomMTT7wrQ/yoA8KrpKzjthU/x fglRU1+rOQV/646rYUa7EYBBKiZpsRw8r8p2sV1KAwnI1nr6EMGNfOnJ2UE+Xx4e QAqWNHEMXM1Em/QsgQ6EHyH9oan4Rrg78RTn9RoM6FQBIHrlBZExayC1qpQ0xyEI a7htuC+8tm0T+0ptjR0wsKE7W+uHAiJpMHodsqxPH/ivCP2Kzco+vD95hHuex/rk yTDwzr2P5eFk/1yd+wGGeNM5BFmSL5JQclxoeu2gsg/Daaaaz9m2esfxtEx9hQVD mPRWrHUT2jOLfXw= -----END CERTIFICATE-----Generated at Tue May 12 22:03:24 2026 by rpki-client