$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer File: 202AE8066C06A8D8247209E512833DDA85B77BB8.cer (raw, json) Hash identifier: WAZxWbp2XzHRyegQwXpjjTK581VU3FB/L0JCiGSo4xw= Subject key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 07FAC0FD1D79115729C8C8E7470251FE590E6382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:28 +0000 Certificate not after: Sun 02 May 2027 02:03:28 +0000 Subordinate resources: IP: 103.19.228.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fa:c0:fd:1d:79:11:57:29:c8:c8:e7:47:02:51:fe:59:0e:63:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:28 2026 GMT Not After : May 2 02:03:28 2027 GMT Subject: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:f2:2d:d0:53:da:70:47:25:99:d9:66:eb: 8e:24:8d:84:67:6e:19:1b:18:bf:69:7c:50:d5:de: b3:25:88:a1:59:06:83:46:fb:97:3b:3a:67:15:27: f3:86:03:ec:60:c9:36:2c:77:96:3b:4b:90:65:1e: c2:11:54:34:ef:8b:72:aa:7a:61:22:c3:4a:93:f4: 29:b9:c1:6b:cc:18:50:70:bc:d1:42:e1:35:cb:6d: 60:d1:83:6e:26:82:ee:64:84:a2:00:1a:21:aa:0c: 07:4b:a9:97:e3:a2:e7:20:78:a7:32:2c:09:df:13: 1b:81:8d:cd:76:0b:84:1e:3c:a2:65:cb:54:e4:c1: 54:eb:5f:da:17:8d:fb:4c:d4:db:7c:24:82:ab:7e: d9:c2:82:ca:a0:f1:13:cf:61:36:06:0f:f2:56:43: f6:2b:56:aa:ea:2f:2b:07:72:d8:d9:51:08:3b:d6: f2:01:51:fe:85:b1:d8:71:49:2e:b0:b6:62:5d:2c: 73:06:81:6a:f3:cc:a5:57:08:d7:fc:dc:8f:6f:2d: f3:07:89:72:2f:5e:d7:30:45:c9:49:4a:c6:a1:96: f7:73:02:e5:12:56:c9:e0:33:ca:96:96:8d:f0:4c: 59:9e:76:10:6f:1b:5f:29:23:dd:47:13:44:34:1d: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.228.0/22 Signature Algorithm: sha256WithRSAEncryption 55:10:f8:e2:de:91:cd:27:e9:ce:95:32:80:ae:2b:29:73:79: 58:d8:72:78:2c:8c:4f:1f:65:31:0b:de:ae:19:16:6c:90:9d: d8:3f:bd:62:1f:f2:f8:34:c9:e0:1f:85:78:3e:6c:a3:84:ba: 17:74:2b:0b:b9:30:b6:04:41:33:d6:fb:b2:95:0a:e5:0f:08: e1:97:e3:50:2d:74:ce:01:26:29:c7:7f:28:69:da:29:8f:41: 9f:bc:bf:33:0d:42:2a:c3:9c:d9:e1:09:ca:e1:db:d8:d4:12: b7:78:2a:81:1f:54:66:17:3c:91:60:5e:93:37:04:15:f0:90: 44:3a:23:0c:ed:62:1e:b6:9c:a8:fd:d8:2a:0b:f7:c0:3e:86: 02:c8:a3:25:68:e2:6f:b3:e3:42:d9:15:fc:18:6a:61:6c:f7: c4:92:92:ca:13:2e:63:c4:35:c2:92:f3:1e:83:9f:e4:8f:c5: 06:09:3a:48:bf:bf:a3:40:19:40:2e:f5:f4:e7:b8:e4:b9:b7: 06:fa:ac:20:6e:e4:61:57:2f:99:fd:b0:a8:08:be:fe:83:1f: d1:c8:55:ae:22:97:f5:86:75:5a:53:12:4e:33:82:5a:9f:90: 79:ff:c7:3f:d8:85:56:e9:7a:93:35:0d:15:7f:f3:39:89:af: 89:cd:57:5d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUB/rA/R15EVcpyMjnRwJR/lkOY4IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgyOFoX DTI3MDUwMjAyMDMyOFowMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIw OUU1MTI4MzNEREE4NUI3N0JCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzX8i3QU9pwRyWZ2WbrjiSNhGduGRsYv2l8UNXesyWIoVkGg0b7lzs6ZxUn 84YD7GDJNix3ljtLkGUewhFUNO+Lcqp6YSLDSpP0KbnBa8wYUHC80ULhNcttYNGD biaC7mSEogAaIaoMB0upl+Oi5yB4pzIsCd8TG4GNzXYLhB48omXLVOTBVOtf2heN +0zU23wkgqt+2cKCyqDxE89hNgYP8lZD9itWquovKwdy2NlRCDvW8gFR/oWx2HFJ LrC2Yl0scwaBavPMpVcI1/zcj28t8weJci9e1zBFyUlKxqGW93MC5RJWyeAzypaW jfBMWZ52EG8bXykj3UcTRDQdt40CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCAq6AZsBqjYJHIJ5RKDPdqFt3u4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QyZjE0MTdhLTU3MTgtNDA3MS05ZjM1LWMxMjI1NTVkYWM3YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMmYxNDE3 YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC8yMDJBRTgwNjZDMDZBOEQ4 MjQ3MjA5RTUxMjgzM0REQTg1Qjc3QkI4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZxPkMA0GCSqGSIb3DQEBCwUAA4IBAQBVEPji3pHNJ+nOlTKArispc3lY2HJ4 LIxPH2UxC96uGRZskJ3YP71iH/L4NMngH4V4PmyjhLoXdCsLuTC2BEEz1vuylQrl Dwjhl+NQLXTOASYpx38oadopj0GfvL8zDUIqw5zZ4QnK4dvY1BK3eCqBH1RmFzyR YF6TNwQV8JBEOiMM7WIetpyo/dgqC/fAPoYCyKMlaOJvs+NC2RX8GGphbPfEkpLK Ey5jxDXCkvMeg5/kj8UGCTpIv7+jQBlALvX057jkubcG+qwgbuRhVy+Z/bCoCL7+ gx/RyFWuIpf1hnVaUxJOM4Jan5B5/8c/2IVW6XqTNQ0Vf/M5ia+JzVdd -----END CERTIFICATE-----Generated at Tue May 12 22:03:11 2026 by rpki-client