$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer (raw, json) Hash identifier: hiLmwBPCLkvww2Du9l/pl3Ik9/jLC2oCs7oP3CMg6G4= Subject key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62C326985B3A50F0B18243CA9BAA9803E5D323A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:22 +0000 Certificate not after: Sun 02 May 2027 02:01:22 +0000 Subordinate resources: IP: 103.130.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c3:26:98:5b:3a:50:f0:b1:82:43:ca:9b:aa:98:03:e5:d3:23:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:56:22 2026 GMT Not After : May 2 02:01:22 2027 GMT Subject: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:d7:ee:5f:10:06:e2:29:6c:38:b1:fe:e4: 47:c4:84:69:7d:e1:7f:29:26:a2:42:61:55:fe:3f: 1e:44:c8:84:75:aa:c8:35:ed:62:90:cc:d8:f3:5a: 37:c5:af:c7:f4:6e:15:90:b7:df:b6:ae:c5:39:39: 16:dc:38:37:d1:d1:47:54:60:4e:1e:d5:15:ca:cc: a7:e6:ad:e9:49:75:d6:1d:ba:65:c8:7a:4b:52:29: 66:95:42:82:ba:fe:70:ed:b5:0e:00:40:04:1b:60: 0c:4b:df:28:3d:8f:e7:e6:3c:93:1c:c8:1a:07:76: e0:96:28:a1:eb:2d:6a:8b:37:8a:60:c6:ac:ef:44: 0b:7b:ec:ae:98:fc:60:ee:35:7b:8b:82:f9:35:e4: 91:6f:12:a9:24:ed:25:be:7d:3a:ce:ce:3e:c4:99: b2:6c:63:d0:8b:3a:22:38:35:df:c4:4e:79:80:67: 1a:35:b2:e4:49:b2:4b:1b:34:2e:84:56:05:fa:1a: ef:c6:3e:f1:72:82:2b:8d:44:61:3c:85:80:3b:31: 5d:01:17:48:99:15:06:f7:04:f8:2c:53:b5:bd:c8: ca:36:91:b1:69:fb:e5:37:1a:19:12:9e:c6:05:f5: 9e:82:a7:38:70:37:55:32:1d:9d:b5:74:86:40:9d: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.116.0/23 Signature Algorithm: sha256WithRSAEncryption 00:80:96:d3:bb:05:93:bd:19:bc:44:74:05:c3:4b:06:34:21: cd:ab:09:a5:a2:2e:90:58:3c:8d:96:0b:fb:a7:aa:fb:3f:ea: 2b:57:ea:3a:bd:e4:3f:81:1f:24:20:aa:f1:4d:24:56:0f:01: 6e:c9:19:1f:6d:0e:0b:ad:c3:bd:dc:5a:d2:fa:5c:e3:05:59: b7:4d:ae:73:57:5d:e7:d7:43:6e:6d:b1:38:8b:98:4d:52:02: 0e:ec:5a:fd:89:ef:22:25:9c:90:f4:38:be:12:7e:4e:96:f3: f1:75:6d:e9:8d:8e:14:b6:b8:2f:0a:88:98:98:ab:a8:82:f9: e1:fe:dc:5d:77:31:7a:4b:f8:37:67:96:9e:5e:7f:d6:3c:42: 4d:ec:3d:dd:a8:89:1a:bb:95:93:0b:dc:c2:b4:73:45:f1:fd: f4:a9:c3:e8:7c:92:15:fb:29:70:55:ee:5e:84:f6:39:37:58: 09:f9:f5:b7:dd:04:26:84:dc:e5:74:8a:93:2e:a3:c4:9d:b7: 35:f0:8a:cd:e7:e4:e0:a0:7a:44:26:3c:3a:3c:86:7d:b8:6e: 23:ea:ea:57:44:a0:21:bb:d3:62:4b:5f:fd:0b:62:d3:15:63: 87:70:6e:c8:9a:4f:db:ea:95:28:9e:11:de:9a:43:0b:bd:7e: 8b:e7:89:60 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYsMmmFs6UPCxgkPKm6qYA+XTI6EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTYyMloX DTI3MDUwMjAyMDEyMlowMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3 MUM2ODE0RDAxOTBDNDQ5NDZFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoN1+5fEAbiKWw4sf7kR8SEaX3hfykmokJhVf4/HkTIhHWqyDXtYpDM2PNa N8Wvx/RuFZC337auxTk5Ftw4N9HRR1RgTh7VFcrMp+at6Ul11h26Zch6S1IpZpVC grr+cO21DgBABBtgDEvfKD2P5+Y8kxzIGgd24JYooestaos3imDGrO9EC3vsrpj8 YO41e4uC+TXkkW8SqSTtJb59Os7OPsSZsmxj0Is6Ijg138ROeYBnGjWy5EmySxs0 LoRWBfoa78Y+8XKCK41EYTyFgDsxXQEXSJkVBvcE+CxTtb3IyjaRsWn75TcaGRKe xgX1noKnOHA3VTIdnbV0hkCdkuECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCVuA7wvHaT5Ax5xxoFNAZDESUbtMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NmZmRjMmI3LWYzMDUtNGUwNy1hYWM1LTQ2OWU5MTEzYjBiNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZmZkYzJi Ny1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC8yNTZFMDNCQzJGMURBNEY5 MDMxRTcxQzY4MTREMDE5MEM0NDk0NkVELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4J0MA0GCSqGSIb3DQEBCwUAA4IBAQAAgJbTuwWTvRm8RHQFw0sGNCHNqwml oi6QWDyNlgv7p6r7P+orV+o6veQ/gR8kIKrxTSRWDwFuyRkfbQ4LrcO93FrS+lzj BVm3Ta5zV13n10NubbE4i5hNUgIO7Fr9ie8iJZyQ9Di+En5OlvPxdW3pjY4Utrgv CoiYmKuogvnh/txddzF6S/g3Z5aeXn/WPEJN7D3dqIkau5WTC9zCtHNF8f30qcPo fJIV+ylwVe5ehPY5N1gJ+fW33QQmhNzldIqTLqPEnbc18IrN5+TgoHpEJjw6PIZ9 uG4j6upXRKAhu9NiS1/9C2LTFWOHcG7Imk/b6pUonhHemkMLvX6L54lg -----END CERTIFICATE-----Generated at Tue May 12 22:39:06 2026 by rpki-client