$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer File: 2552F050305622A342A57694E0C15404F4475354.cer (raw, json) Hash identifier: atNxjGap0u6ME+zwtcg1npSaAan/aIUHwZARosUU6Lk= Subject key identifier: 25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A6E84EFE790B2DE9371C8DE2D1DA7B4F7987BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:18:51 +0000 Certificate not after: Sun 02 May 2027 02:23:51 +0000 Subordinate resources: IP: 103.11.179.0/24 IP: 103.51.158.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6e:84:ef:e7:90:b2:de:93:71:c8:de:2d:1d:a7:b4:f7:98:7b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:18:51 2026 GMT Not After : May 2 02:23:51 2027 GMT Subject: CN=2552F050305622A342A57694E0C15404F4475354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:7c:1b:46:b6:f0:fa:66:c6:5d:a3:ae:bc: 2b:ab:cb:7c:ac:9e:f4:e2:a5:1d:e8:3a:55:89:76: 02:dc:59:be:f1:9c:f3:88:a9:57:23:ae:6e:65:be: 02:35:d7:cb:14:b6:66:ca:58:43:db:25:ad:4a:e1: bb:b5:f3:c7:26:11:28:91:f5:d3:56:96:eb:e5:6c: 61:9b:e6:8d:92:aa:af:6f:de:58:2d:d6:6c:d9:66: c4:7a:96:57:8a:e3:de:a3:e2:79:2b:8c:80:47:03: 37:44:3d:30:b9:8c:4a:e1:82:97:4e:16:b3:4d:6d: ce:85:8d:05:fd:13:bb:ea:e2:af:3a:1f:72:9f:be: 46:25:1c:b0:5e:ec:cd:2c:1a:a2:02:f2:42:0b:d2: 46:35:17:84:65:be:48:e3:d1:c3:09:d0:3d:05:b0: 5b:28:a5:49:93:72:25:29:85:1f:72:8a:af:0c:50: 59:06:6d:1d:3f:eb:d7:24:0d:d5:e1:68:61:5d:44: c2:0c:68:01:b7:80:66:2f:e4:4c:46:3d:19:c7:68: d6:68:75:de:72:18:40:e1:03:71:f4:ef:08:c5:f8: a7:60:59:c4:5a:eb:f6:9b:7c:ac:5e:20:6c:08:4e: 57:ca:64:73:1c:6c:c9:7a:87:e5:aa:03:5d:00:0d: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.179.0/24 103.51.158.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ad:17:c0:e7:c4:a0:0c:08:a3:e4:de:23:78:76:58:ea:e4: a3:5c:1c:61:15:c3:12:f6:7d:87:30:07:d1:6d:19:17:fd:f3: 5b:31:e5:8c:7b:03:57:d3:a0:0a:50:f2:92:ce:35:a8:5d:f3: b0:45:ec:a9:4c:46:ed:c3:e6:d1:6c:c2:00:75:26:ba:51:df: 2f:bc:52:80:41:1f:66:9b:a8:b7:0b:88:05:20:34:49:33:b1: 60:1d:13:d4:8a:11:4c:59:02:7c:5a:6a:34:2c:3e:59:09:15: 64:6d:9c:ff:a0:7f:31:46:5b:2e:24:73:1a:4a:d2:fd:d5:fa: 22:b5:d6:2c:ea:92:ed:40:a8:be:d3:d9:ee:af:98:15:98:fb: 81:2f:5f:cc:8d:c3:13:08:4b:dc:e0:6d:a7:6a:43:df:5a:1c: 86:66:86:ac:b1:e7:8f:25:4d:ed:5c:cb:a6:a9:eb:da:10:a7: fd:de:1e:ef:fc:fd:5b:27:af:22:26:58:4f:59:ea:58:36:e1: 47:ef:39:10:da:f2:32:e6:db:92:eb:c5:ae:43:e8:96:dc:45: f3:09:83:5f:9e:e3:a9:4e:7b:47:d2:47:7d:40:10:4c:6f:5e: e6:b9:41:fa:40:32:c8:f9:ae:0f:51:9c:74:88:68:5e:fd:c9: e0:cf:90:51 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUOm6E7+eQst6TccjeLR2ntPeYe6UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTg1MVoX DTI3MDUwMjAyMjM1MVowMzExMC8GA1UEAxMoMjU1MkYwNTAzMDU2MjJBMzQyQTU3 Njk0RTBDMTU0MDRGNDQ3NTM1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9nfBtGtvD6ZsZdo668K6vLfKye9OKlHeg6VYl2AtxZvvGc84ipVyOubmW+ AjXXyxS2ZspYQ9slrUrhu7XzxyYRKJH101aW6+VsYZvmjZKqr2/eWC3WbNlmxHqW V4rj3qPieSuMgEcDN0Q9MLmMSuGCl04Ws01tzoWNBf0Tu+rirzofcp++RiUcsF7s zSwaogLyQgvSRjUXhGW+SOPRwwnQPQWwWyilSZNyJSmFH3KKrwxQWQZtHT/r1yQN 1eFoYV1EwgxoAbeAZi/kTEY9Gcdo1mh13nIYQOEDcfTvCMX4p2BZxFrr9pt8rF4g bAhOV8pkcxxsyXqH5aoDXQANQF8CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCVS8FAwViKjQqV2lODBVAT0R1NUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U4MWY2OGEzLWIzNTQtNDgwMS1iOTQ5LTM0NTJlN2IxZjcyZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lODFmNjhh My1iMzU0LTQ4MDEtYjk0OS0zNDUyZTdiMWY3MmYvMC8yNTUyRjA1MDMwNTYyMkEz NDJBNTc2OTRFMEMxNTQwNEY0NDc1MzU0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZwuzAwQAZzOeMA0GCSqGSIb3DQEBCwUAA4IBAQCRrRfA58SgDAij5N4jeHZY 6uSjXBxhFcMS9n2HMAfRbRkX/fNbMeWMewNX06AKUPKSzjWoXfOwReypTEbtw+bR bMIAdSa6Ud8vvFKAQR9mm6i3C4gFIDRJM7FgHRPUihFMWQJ8Wmo0LD5ZCRVkbZz/ oH8xRlsuJHMaStL91foitdYs6pLtQKi+09nur5gVmPuBL1/MjcMTCEvc4G2nakPf WhyGZoasseePJU3tXMumqevaEKf93h7v/P1bJ68iJlhPWepYNuFH7zkQ2vIy5tuS 68WuQ+iW3EXzCYNfnuOpTntH0kd9QBBMb17muUH6QDLI+a4PUZx0iGhe/cngz5BR -----END CERTIFICATE-----Generated at Wed May 13 02:12:09 2026 by rpki-client