$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2262D2B74952F0176503770B9C0C005B5CF77FA2.cer File: 2262D2B74952F0176503770B9C0C005B5CF77FA2.cer (raw, json) Hash identifier: xNI8G4KMbst8CaEFR1ozSQDJyzW9+Ui9CAoqROCF6C0= Subject key identifier: 22:62:D2:B7:49:52:F0:17:65:03:77:0B:9C:0C:00:5B:5C:F7:7F:A2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 52B9AF02C0C7E4ED5CC46BF684AB9823FF711FDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:47 +0000 Certificate not after: Sun 02 May 2027 01:53:47 +0000 Subordinate resources: IP: 103.204.116.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b9:af:02:c0:c7:e4:ed:5c:c4:6b:f6:84:ab:98:23:ff:71:1f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:47 2026 GMT Not After : May 2 01:53:47 2027 GMT Subject: CN=2262D2B74952F0176503770B9C0C005B5CF77FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:f3:f9:46:1a:5e:d5:3d:63:fe:07:14:d1: 10:45:07:bf:9d:92:15:c0:05:69:9a:f1:6a:05:b3: c7:de:5b:a1:ac:6d:fc:2f:d0:08:f3:03:2a:dd:10: 52:03:c0:89:8b:52:99:45:17:a0:9b:66:8e:b4:62: 2e:df:15:35:a8:ba:6c:89:ce:81:59:5a:7f:32:43: 62:ee:41:e2:9e:de:ef:f0:89:be:57:06:62:2c:67: d0:60:ee:b2:db:f9:b0:a0:f5:1b:11:32:5e:9c:0d: 3a:93:1c:13:7a:d2:5d:4f:26:f3:f4:23:28:da:4a: 1d:9e:a2:b4:32:8c:02:4e:59:a3:21:28:80:d8:55: 80:9e:37:5d:ba:77:c9:c1:88:0e:5f:bb:89:9f:bf: a0:d4:63:28:99:33:b3:6a:e4:0f:5c:7a:12:e0:01: 81:aa:85:57:28:59:01:8d:f0:ab:9e:42:41:a7:74: 8f:8f:f7:da:dc:bf:29:df:1b:22:05:ef:bc:ed:62: 73:34:44:ad:d7:9e:95:66:f1:9a:fa:ce:dc:06:bb: 09:0c:c8:36:a1:32:9f:65:85:3d:71:18:d9:98:18: a3:95:db:c4:4a:97:5b:c9:3d:fb:89:12:a6:d2:8a: 26:89:92:41:c4:a1:d4:ab:39:7b:88:f0:4b:27:b0: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:62:D2:B7:49:52:F0:17:65:03:77:0B:9C:0C:00:5B:5C:F7:7F:A2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.116.0/24 Signature Algorithm: sha256WithRSAEncryption 32:89:e5:1d:e2:8b:10:d1:7c:28:73:c2:24:6e:8a:1b:7b:6e: 51:66:c9:5b:28:81:7f:1f:67:94:be:a4:ba:73:91:fa:42:0e: 2f:b9:c3:c4:68:df:f0:8d:dd:78:d5:45:a0:61:be:eb:e1:97: 19:4d:08:0f:93:3a:50:c2:a7:3a:8b:c9:3c:e3:6e:57:1f:fc: 13:c9:bb:8c:24:b0:18:83:ca:53:5e:38:44:66:40:32:a4:37: b7:cf:1e:f3:29:05:86:b2:57:01:53:d9:cb:8c:03:1d:67:b7: e0:6b:8f:1d:cf:fb:62:e6:f2:b3:22:76:60:b7:09:e2:a1:ff: 13:5a:1c:dd:26:4b:0e:86:0e:ab:5e:b1:7b:a3:a2:89:26:bc: 43:a2:fb:2e:75:66:57:a7:a4:8d:30:7f:c3:0f:a5:ab:8d:45: 93:9f:7c:74:e9:3e:dc:31:af:80:a0:87:ac:71:5f:29:94:96: 8a:87:11:a2:a2:14:da:5f:6d:76:d2:1e:86:ae:71:2b:8f:02: 84:21:5d:cd:85:cf:19:ae:4c:58:6a:76:42:0a:7f:04:8a:21: 30:fc:37:25:79:bc:f2:c5:10:8d:19:b9:1e:31:1e:04:24:ff: cc:18:6b:79:d2:a6:6d:1f:d6:db:9e:fe:b5:15:75:2e:ba:2a: 14:c9:cb:30 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUrmvAsDH5O1cxGv2hKuYI/9xH98wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDg0N1oX DTI3MDUwMjAxNTM0N1owMzExMC8GA1UEAxMoMjI2MkQyQjc0OTUyRjAxNzY1MDM3 NzBCOUMwQzAwNUI1Q0Y3N0ZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnB8/lGGl7VPWP+BxTREEUHv52SFcAFaZrxagWzx95boaxt/C/QCPMDKt0Q UgPAiYtSmUUXoJtmjrRiLt8VNai6bInOgVlafzJDYu5B4p7e7/CJvlcGYixn0GDu stv5sKD1GxEyXpwNOpMcE3rSXU8m8/QjKNpKHZ6itDKMAk5ZoyEogNhVgJ43Xbp3 ycGIDl+7iZ+/oNRjKJkzs2rkD1x6EuABgaqFVyhZAY3wq55CQad0j4/32ty/Kd8b IgXvvO1iczRErdeelWbxmvrO3Aa7CQzINqEyn2WFPXEY2ZgYo5XbxEqXW8k9+4kS ptKKJomSQcSh1Ks5e4jwSyewfikCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJi0rdJUvAXZQN3C5wMAFtc93+iMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzMTMyOGNiLWRkNDgtNDNiYi1iMzFmLTA3ZWI4MDMwYzhmNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMzEzMjhj Yi1kZDQ4LTQzYmItYjMxZi0wN2ViODAzMGM4ZjQvMC8yMjYyRDJCNzQ5NTJGMDE3 NjUwMzc3MEI5QzBDMDA1QjVDRjc3RkEyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8x0MA0GCSqGSIb3DQEBCwUAA4IBAQAyieUd4osQ0Xwoc8Ikboobe25RZslb KIF/H2eUvqS6c5H6Qg4vucPEaN/wjd141UWgYb7r4ZcZTQgPkzpQwqc6i8k8425X H/wTybuMJLAYg8pTXjhEZkAypDe3zx7zKQWGslcBU9nLjAMdZ7fga48dz/ti5vKz InZgtwniof8TWhzdJksOhg6rXrF7o6KJJrxDovsudWZXp6SNMH/DD6WrjUWTn3x0 6T7cMa+AoIescV8plJaKhxGiohTaX2120h6GrnErjwKEIV3Nhc8ZrkxYanZCCn8E iiEw/DclebzyxRCNGbkeMR4EJP/MGGt50qZtH9bbnv61FXUuuioUycsw -----END CERTIFICATE-----Generated at Tue May 12 22:47:37 2026 by rpki-client