$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer File: 24707B538B36DD7E0788B2B83162969B177EE4B9.cer (raw, json) Hash identifier: mjKUw6YY9kgJocu7Rr0qiWaLqi6DrxApQPUMm5ZL+MI= Subject key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 06F8991331E2240C58C774CD3D4A43067A32159A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:15 +0000 Certificate not after: Sun 02 May 2027 01:15:15 +0000 Subordinate resources: IP: 103.103.20.0/22 IP: 2001:df2:f700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f8:99:13:31:e2:24:0c:58:c7:74:cd:3d:4a:43:06:7a:32:15:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:15 2026 GMT Not After : May 2 01:15:15 2027 GMT Subject: CN=24707B538B36DD7E0788B2B83162969B177EE4B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:8f:70:fa:67:43:6e:59:4c:b0:71:38:8b: 7c:7d:14:9c:ea:29:89:ad:50:a5:42:0d:09:4e:29: 75:9b:7c:c7:f7:0a:f8:bd:4e:9d:60:f1:85:30:0a: b8:a0:32:54:c0:2f:d4:b0:c8:b1:94:72:5c:d9:d0: f5:42:86:58:94:c7:a6:27:12:30:4d:f8:b7:6f:86: 34:53:ca:6b:81:a0:62:9c:51:2d:15:ad:d7:69:1c: a7:ab:e2:a3:e4:9b:b0:dd:52:92:8a:fc:f9:a3:f1: bb:17:ef:b4:d5:db:18:65:80:41:53:04:b0:cd:98: 2b:14:34:a8:de:64:04:5d:09:ab:12:65:8c:04:1b: 2e:e0:77:ba:3d:e1:b6:61:a1:ca:87:be:5a:e8:ad: 06:3d:99:a9:8e:c5:0a:07:d1:0d:69:36:34:ea:ec: e1:97:cb:2c:96:4a:28:f0:ab:a5:87:f5:2e:3d:92: f4:f7:aa:32:2a:14:b8:55:97:ae:be:54:96:71:63: a0:a7:f1:75:f9:d9:b9:a1:c3:15:37:ec:ca:b0:f8: c0:d6:86:58:e7:db:47:a1:3d:55:34:c1:88:ed:47: f2:8c:11:51:fd:e8:26:72:ca:9a:fe:81:14:46:43: 38:d5:23:94:ee:f5:10:6c:c0:84:1d:6f:5e:b0:f4: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.20.0/22 IPv6: 2001:df2:f700::/48 Signature Algorithm: sha256WithRSAEncryption 3b:9c:62:30:cc:9a:fd:d3:03:b8:73:a5:1d:91:ea:8a:44:2a: 3e:67:0f:c6:e9:73:83:39:38:ae:6e:6e:7c:7a:47:45:16:61: 92:68:60:e0:ca:6d:1d:bb:83:f7:7c:8e:63:ba:f5:a9:e1:a1: b6:1a:2a:a8:b5:59:d2:0e:4a:c8:35:45:10:5d:14:be:a9:37: a3:02:25:b5:a3:c6:88:a6:85:32:0e:e0:77:a5:49:68:b7:47: e8:b6:2c:6d:dd:76:67:37:b5:99:67:1f:06:83:2d:35:83:ba: ba:ae:0f:9f:64:35:0e:b4:69:6d:32:35:e5:0a:6e:ca:44:db: 70:a0:92:94:fc:0c:e4:bc:2c:9b:54:e6:8d:09:ed:1b:b5:78: b6:8e:6b:53:ae:3f:3f:ff:14:34:5c:a6:9c:36:d9:a1:83:d2: 34:7f:01:89:f7:b2:23:b0:a1:a8:ed:14:45:b8:16:8b:c1:4f: e1:fb:7f:ff:8e:93:d6:0f:8d:59:21:2d:57:32:f8:a7:36:71: e7:47:9a:30:a8:9c:2e:e6:6f:eb:e2:e9:87:8c:db:fa:02:20: 2e:73:80:a7:1b:be:f2:08:d2:a7:ac:1f:5c:d9:34:ea:b4:9e: 49:db:00:5b:22:2c:97:49:5b:53:a6:93:3b:7f:ef:11:4b:7c: 52:4c:79:81 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUBviZEzHiJAxYx3TNPUpDBnoyFZowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTAxNVoX DTI3MDUwMjAxMTUxNVowMzExMC8GA1UEAxMoMjQ3MDdCNTM4QjM2REQ3RTA3ODhC MkI4MzE2Mjk2OUIxNzdFRTRCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKopj3D6Z0NuWUywcTiLfH0UnOopia1QpUINCU4pdZt8x/cK+L1OnWDxhTAK uKAyVMAv1LDIsZRyXNnQ9UKGWJTHpicSME34t2+GNFPKa4GgYpxRLRWt12kcp6vi o+SbsN1Skor8+aPxuxfvtNXbGGWAQVMEsM2YKxQ0qN5kBF0JqxJljAQbLuB3uj3h tmGhyoe+WuitBj2ZqY7FCgfRDWk2NOrs4ZfLLJZKKPCrpYf1Lj2S9PeqMioUuFWX rr5UlnFjoKfxdfnZuaHDFTfsyrD4wNaGWOfbR6E9VTTBiO1H8owRUf3oJnLKmv6B FEZDONUjlO71EGzAhB1vXrD0m0cCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCRwe1OLNt1+B4iyuDFilpsXfuS5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg2NjI0N2Y5LTFlZWMtNDkwMS1iYTQyLTlkZjI2NDI0ZjViOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NjYyNDdm OS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMC8yNDcwN0I1MzhCMzZERDdF MDc4OEIyQjgzMTYyOTY5QjE3N0VFNEI5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ2cUMA8EAgACMAkDBwAgAQ3y9wAwDQYJKoZIhvcNAQELBQADggEBADucYjDM mv3TA7hzpR2R6opEKj5nD8bpc4M5OK5ubnx6R0UWYZJoYODKbR27g/d8jmO69anh obYaKqi1WdIOSsg1RRBdFL6pN6MCJbWjxoimhTIO4HelSWi3R+i2LG3ddmc3tZln HwaDLTWDurquD59kNQ60aW0yNeUKbspE23CgkpT8DOS8LJtU5o0J7Ru1eLaOa1Ou Pz//FDRcppw22aGD0jR/AYn3siOwoajtFEW4FovBT+H7f/+Ok9YPjVkhLVcy+Kc2 cedHmjConC7mb+vi6YeM2/oCIC5zgKcbvvII0qesH1zZNOq0nknbAFsiLJdJW1Om kzt/7xFLfFJMeYE= -----END CERTIFICATE-----Generated at Tue May 12 22:32:52 2026 by rpki-client