$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer (raw, json) Hash identifier: 5UPUeVFHRI/ykH23s79bJDoUc8E7s6jApuH6YFi5DgY= Subject key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78737EAA07D275DB22B10EC3813BA476D30F69C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:17:27 +0000 Certificate not after: Sun 02 May 2027 02:22:27 +0000 Subordinate resources: IP: 103.31.118.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:73:7e:aa:07:d2:75:db:22:b1:0e:c3:81:3b:a4:76:d3:0f:69:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:17:27 2026 GMT Not After : May 2 02:22:27 2027 GMT Subject: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:ae:fc:76:b7:3f:08:c8:d1:7c:ee:21:4e: f7:82:7f:06:10:b8:6c:d2:30:f8:40:8b:9e:98:70: bf:ac:f4:a3:ad:36:77:92:26:f8:bc:d6:3f:11:de: 9a:d6:9d:2b:52:a3:ba:f5:8d:ba:6b:be:39:d6:4e: 36:41:a0:c2:e1:8b:6e:41:51:28:26:2e:d1:45:5f: 22:9b:9f:64:1a:44:68:15:00:0a:d0:57:a8:50:a4: a8:1f:58:c2:57:a5:3e:c1:3b:3b:04:d2:e8:e6:bf: 6c:30:89:e8:d2:45:b0:59:d0:6d:bb:e8:16:6c:86: 73:84:e1:94:0f:b7:6c:72:3e:28:3f:c7:2e:0e:91: f1:c5:cb:d2:da:98:15:af:3c:4a:4f:1e:8c:5b:f8: d3:8e:a4:9f:c7:e4:36:38:74:3d:e6:6e:41:59:99: c6:8c:91:c4:5b:14:53:a5:63:bc:ef:86:a3:44:c2: 28:e9:c6:17:ad:3a:8c:ba:0d:bb:92:d2:05:4d:67: cc:3b:a9:78:1c:c6:ec:dd:f4:17:29:a9:2e:f9:95: b6:f7:13:ef:c1:bc:ac:dd:c6:38:13:db:95:ee:9b: 3f:e3:c2:15:28:27:eb:18:11:48:3e:8e:fe:26:65: 42:4e:19:7b:40:ee:34:af:a5:bf:95:76:99:b7:21: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.118.0/23 Signature Algorithm: sha256WithRSAEncryption 14:4c:a7:c0:7f:9e:31:b3:16:3a:e2:bb:fd:fc:0b:e7:33:1e: 6d:ab:96:c4:94:01:61:87:bb:e6:87:90:d7:78:b6:eb:3f:b6: 8d:12:97:a4:6d:88:e9:09:2a:5b:91:4b:f5:06:c3:99:0b:53: f8:33:8a:b6:ab:df:8e:27:85:6d:a2:14:54:ec:1f:09:62:76: e0:42:c8:27:7c:70:4d:21:db:aa:c4:ec:54:5b:13:4c:da:ce: 2a:4b:9d:0d:b8:5b:5a:2a:ae:18:76:fb:76:61:c3:d1:71:08: 00:67:21:e5:e6:f6:fd:f8:5a:b5:fc:c7:0e:ad:b1:e6:7d:11: 54:61:d3:ba:53:c1:93:d1:5c:1b:25:b7:51:89:05:ad:a9:b3: 70:31:e6:25:e8:ec:a3:42:bf:1d:b3:e8:cf:04:7a:6a:29:af: 11:78:dc:8e:99:32:ab:ac:77:b1:62:40:92:e7:a9:40:a4:66: 9f:1e:c5:09:78:13:e9:61:1e:12:4f:89:82:c8:7a:a6:91:63: b0:07:21:70:db:c6:d1:bd:b8:f3:57:39:ac:09:38:0d:02:85: 07:a2:93:4b:b9:3a:8e:33:da:0d:3b:73:d4:f8:a5:e9:06:52: f4:b1:d8:c4:30:f1:53:2b:d0:89:e7:5f:fd:f0:8a:47:87:aa: 18:95:c8:aa -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeHN+qgfSddsisQ7DgTukdtMPacYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTcyN1oX DTI3MDUwMjAyMjIyN1owMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJG MEMwQ0NGMTczRTdGQzFFNkY5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpHrvx2tz8IyNF87iFO94J/BhC4bNIw+ECLnphwv6z0o602d5Im+LzWPxHe mtadK1KjuvWNumu+OdZONkGgwuGLbkFRKCYu0UVfIpufZBpEaBUACtBXqFCkqB9Y wlelPsE7OwTS6Oa/bDCJ6NJFsFnQbbvoFmyGc4ThlA+3bHI+KD/HLg6R8cXL0tqY Fa88Sk8ejFv4046kn8fkNjh0PeZuQVmZxoyRxFsUU6VjvO+Go0TCKOnGF606jLoN u5LSBU1nzDupeBzG7N30FympLvmVtvcT78G8rN3GOBPble6bP+PCFSgn6xgRSD6O /iZlQk4Ze0DuNK+lv5V2mbch0b8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCV6/e6foe1sVavwwMzxc+f8Hm+TMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U2Zjc1MDIxLTgzNjgtNDQ4MS05MjY5LTU5ODBkNmY3Mjk1ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNmY3NTAy MS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC8yNTdBRkRFRTlGQTFFRDZD NTVBQkYwQzBDQ0YxNzNFN0ZDMUU2RjkzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZx92MA0GCSqGSIb3DQEBCwUAA4IBAQAUTKfAf54xsxY64rv9/AvnMx5tq5bE lAFhh7vmh5DXeLbrP7aNEpekbYjpCSpbkUv1BsOZC1P4M4q2q9+OJ4VtohRU7B8J YnbgQsgnfHBNIduqxOxUWxNM2s4qS50NuFtaKq4Ydvt2YcPRcQgAZyHl5vb9+Fq1 /McOrbHmfRFUYdO6U8GT0VwbJbdRiQWtqbNwMeYl6OyjQr8ds+jPBHpqKa8ReNyO mTKrrHexYkCS56lApGafHsUJeBPpYR4ST4mCyHqmkWOwByFw28bRvbjzVzmsCTgN AoUHopNLuTqOM9oNO3PU+KXpBlL0sdjEMPFTK9CJ51/98IpHh6oYlciq -----END CERTIFICATE-----Generated at Tue May 12 22:09:53 2026 by rpki-client