$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer (raw, json) Hash identifier: PzLrsIio7ntx9UdW0GTdJVplADvMbCBoLUog+cmL5xM= Subject key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 56D49084B9D35F99FC217748C47BF363D25B7710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:06 +0000 Certificate not after: Sun 02 May 2027 01:38:06 +0000 Subordinate resources: IP: 103.145.108.0/23 IP: 2405:8440::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d4:90:84:b9:d3:5f:99:fc:21:77:48:c4:7b:f3:63:d2:5b:77:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:06 2026 GMT Not After : May 2 01:38:06 2027 GMT Subject: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:4e:f2:12:44:80:92:22:7a:8e:f6:b3:49: 80:c1:f7:8e:65:28:99:d8:b5:99:7e:84:77:1a:f9: ce:19:ed:94:c0:39:3e:bb:a6:59:ba:97:bc:fd:af: 1e:58:0b:1a:a7:e2:c8:98:01:1b:a0:47:d1:2f:b3: 8a:b0:19:80:f6:ba:73:b9:ba:15:2e:03:50:8d:f4: a7:84:14:b2:81:b6:bd:29:75:a6:bc:ea:00:c7:00: e6:79:0d:28:ae:53:ae:89:d1:fe:27:1c:0d:e2:05: 80:ba:5a:ae:02:79:4d:ce:62:f6:b1:56:87:39:45: b4:4a:f1:3a:24:83:fc:86:d8:d9:bf:68:d4:d6:00: 68:94:5e:ea:c2:b6:ca:88:08:ac:6e:5b:d9:91:2d: 51:5e:29:63:f8:73:96:38:d4:57:bc:bc:88:8f:6f: 48:29:d6:d4:61:19:39:71:28:f7:04:61:33:47:08: f2:a7:c5:90:d1:8e:9d:ca:aa:b9:62:f1:b2:2f:78: 9e:e5:5b:76:a2:00:d6:c5:79:fc:84:01:aa:3c:ba: cf:f1:dc:90:a1:05:1a:ba:c5:92:c9:b0:76:a3:2a: c2:dd:20:e3:bd:2f:be:0b:77:49:1d:ea:46:23:6b: 4c:27:5d:61:82:8f:0c:d7:93:d8:8c:3d:f6:2b:80: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.108.0/23 IPv6: 2405:8440::/32 Signature Algorithm: sha256WithRSAEncryption 6c:d9:16:60:76:93:4e:cb:e9:d6:20:f6:55:ba:58:9c:d8:cc: 12:49:6d:e3:67:28:4b:63:f7:29:03:f7:16:21:b4:f9:85:b8: c8:40:a6:9e:63:0b:e0:76:69:7c:27:ec:d9:4a:42:d0:1e:80: 1d:1b:16:36:4c:7b:52:6a:91:2f:12:3b:25:a6:09:8c:5d:3f: 83:b5:27:66:98:22:bc:2c:4a:07:34:66:18:18:ae:51:04:78: e8:05:fc:36:1b:88:8e:b6:aa:84:9e:a9:15:7b:d1:b7:d8:3e: 23:9b:6f:8a:54:f7:6d:06:8a:01:68:d9:2b:cc:31:98:33:e1: 5f:e6:17:5b:cc:cb:ec:d6:40:b5:d9:e9:7b:12:f9:80:1b:d0: 41:ae:26:71:8f:5b:0b:96:d1:1c:c8:22:1f:8b:54:1f:5c:2c: 53:ed:14:d0:88:75:32:e8:cd:fa:64:5b:cb:46:bc:9b:be:27: b9:c1:a9:e0:0c:44:4c:19:06:1b:50:c4:46:c4:6c:39:86:8d: c0:42:66:d9:e1:62:de:02:70:6b:4e:19:1d:dc:a4:0c:aa:12: c7:65:b4:19:c3:7a:95:94:45:13:01:c5:59:f2:eb:13:c4:bc: 02:5b:fa:c6:4c:f2:3f:8a:e3:36:3d:76:31:13:c5:d9:61:14: e2:a7:7c:a0 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUVtSQhLnTX5n8IXdIxHvzY9JbdxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMwNloX DTI3MDUwMjAxMzgwNlowMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5 OEVDQkMyNTRCM0NEMEZGM0Y1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOj6TvISRICSInqO9rNJgMH3jmUomdi1mX6Edxr5zhntlMA5PrumWbqXvP2v HlgLGqfiyJgBG6BH0S+zirAZgPa6c7m6FS4DUI30p4QUsoG2vSl1przqAMcA5nkN KK5TronR/iccDeIFgLpargJ5Tc5i9rFWhzlFtErxOiSD/IbY2b9o1NYAaJRe6sK2 yogIrG5b2ZEtUV4pY/hzljjUV7y8iI9vSCnW1GEZOXEo9wRhM0cI8qfFkNGOncqq uWLxsi94nuVbdqIA1sV5/IQBqjy6z/HckKEFGrrFksmwdqMqwt0g470vvgt3SR3q RiNrTCddYYKPDNeT2Iw99iuARG8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCXfzOhTk2cwa/6Y7LwlSzzQ/z9bMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4YzA2OGRhLWY5YzUtNDAzNi04NTRiLTkyMmNhYTkzZjMyNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOGMwNjhk YS1mOWM1LTQwMzYtODU0Yi05MjJjYWE5M2YzMjQvMC8yNURGQ0NFODUzOTM2NzMw NkJGRTk4RUNCQzI1NEIzQ0QwRkYzRjVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5FsMA0EAgACMAcDBQAkBYRAMA0GCSqGSIb3DQEBCwUAA4IBAQBs2RZgdpNO y+nWIPZVulic2MwSSW3jZyhLY/cpA/cWIbT5hbjIQKaeYwvgdml8J+zZSkLQHoAd GxY2THtSapEvEjslpgmMXT+DtSdmmCK8LEoHNGYYGK5RBHjoBfw2G4iOtqqEnqkV e9G32D4jm2+KVPdtBooBaNkrzDGYM+Ff5hdbzMvs1kC12el7EvmAG9BBriZxj1sL ltEcyCIfi1QfXCxT7RTQiHUy6M36ZFvLRrybvie5wangDERMGQYbUMRGxGw5ho3A QmbZ4WLeAnBrThkd3KQMqhLHZbQZw3qVlEUTAcVZ8usTxLwCW/rGTPI/iuM2PXYx E8XZYRTip3yg -----END CERTIFICATE-----Generated at Tue May 12 22:10:35 2026 by rpki-client