$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer File: 25F44906F292384CC9F1BE632798B911BD52EB7E.cer (raw, json) Hash identifier: NxRSE8kdeVu7UhmNoWmfhsvzuvWgEvwOwMxqazoBEI4= Subject key identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 162C1DB7161AA383FD6FAE7694C35AD6F5F8C523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:50:31 +0000 Certificate not after: Sun 02 May 2027 00:55:31 +0000 Subordinate resources: IP: 103.19.80.0/23 IP: 103.129.230.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2c:1d:b7:16:1a:a3:83:fd:6f:ae:76:94:c3:5a:d6:f5:f8:c5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:50:31 2026 GMT Not After : May 2 00:55:31 2027 GMT Subject: CN=25F44906F292384CC9F1BE632798B911BD52EB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:e0:6e:a4:f2:49:0e:2d:77:c0:54:48:97: f9:c6:75:63:fb:72:f5:7e:e6:9d:9e:df:d8:62:d0: ab:af:f6:76:f0:7f:05:4f:59:66:98:2a:8d:a2:50: 0a:fd:4e:25:48:bd:cb:ee:79:52:ad:b7:29:c6:34: 25:fb:ff:6f:59:c2:f4:26:fc:a9:5f:15:34:78:40: a5:08:24:0c:45:d1:1c:c9:45:3c:b9:9e:79:5c:52: 08:cd:12:43:19:6f:38:c7:bf:df:84:58:5a:91:4f: 94:42:ae:e8:3d:04:5d:62:53:ce:04:ac:b5:1d:df: f8:cf:9d:60:f0:46:70:a0:a8:a2:4f:49:d5:84:a9: 75:2a:06:8e:35:9a:f4:ea:eb:d0:af:dd:1f:c1:f9: 7f:23:bb:0e:f5:87:e2:a9:52:52:c5:f8:af:a7:1c: 10:5c:e7:86:21:2d:8e:b7:4d:4a:e1:db:2e:6d:4f: 37:d6:52:c8:1b:af:76:d7:97:f9:91:f9:2a:85:ae: a0:82:48:c9:bc:6e:aa:e2:fa:27:ce:9c:ed:aa:0d: a2:50:9a:10:f1:a4:a4:20:b6:46:65:c5:82:1c:19: 62:33:b1:1b:54:c7:fa:05:ff:e5:26:19:00:ee:31: 73:c1:e1:a5:b0:bf:58:f3:81:26:d1:84:e4:b7:d2: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.80.0/23 103.129.230.0/23 Signature Algorithm: sha256WithRSAEncryption 71:ad:c1:fa:8d:7a:79:87:06:83:3a:0f:8c:1a:38:a5:83:46: a9:99:e8:90:36:e6:a1:5c:91:ef:ec:36:03:55:2e:d1:24:46: 9e:ae:93:29:ca:94:9d:5c:8b:97:6b:06:fc:7b:66:77:37:22: bb:57:4d:45:2f:bb:38:f1:ad:94:a5:bc:ab:1c:90:c8:ba:32: a7:b6:8e:58:0a:72:9a:7e:9e:1f:b9:11:34:97:6c:30:80:22: 31:b6:5a:66:16:59:c8:f1:79:be:66:3d:fa:56:b2:ca:34:7d: 93:c4:e6:bc:68:9d:36:f3:5a:3f:26:13:f2:50:28:e4:fb:7f: 4e:87:a4:cb:2c:75:95:4a:8c:5e:96:10:c2:fa:16:a9:69:80: 66:c9:bc:a6:5f:ce:28:b5:09:9a:f9:17:0f:ce:b3:ff:e2:f6: 92:3b:60:25:83:5a:59:d7:77:f6:a0:a2:b1:ca:01:51:5e:21: e4:c7:cc:aa:a1:0d:ff:68:ad:82:d7:85:af:6e:a0:2f:ff:0a: 2d:73:c9:85:1e:88:33:59:50:b4:70:8d:55:91:29:8e:5f:25: 28:be:35:90:5b:69:09:b4:aa:9a:89:a8:5c:49:2c:6c:d9:b9: a2:6f:82:60:fd:99:7e:d0:64:18:54:87:69:4d:4c:01:ce:cd: e8:8d:98:f5 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUFiwdtxYao4P9b652lMNa1vX4xSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTAzMVoX DTI3MDUwMjAwNTUzMVowMzExMC8GA1UEAxMoMjVGNDQ5MDZGMjkyMzg0Q0M5RjFC RTYzMjc5OEI5MTFCRDUyRUI3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6i4G6k8kkOLXfAVEiX+cZ1Y/ty9X7mnZ7f2GLQq6/2dvB/BU9ZZpgqjaJQ Cv1OJUi9y+55Uq23KcY0Jfv/b1nC9Cb8qV8VNHhApQgkDEXRHMlFPLmeeVxSCM0S QxlvOMe/34RYWpFPlEKu6D0EXWJTzgSstR3f+M+dYPBGcKCook9J1YSpdSoGjjWa 9Orr0K/dH8H5fyO7DvWH4qlSUsX4r6ccEFznhiEtjrdNSuHbLm1PN9ZSyBuvdteX +ZH5KoWuoIJIybxuquL6J86c7aoNolCaEPGkpCC2RmXFghwZYjOxG1TH+gX/5SYZ AO4xc8HhpbC/WPOBJtGE5LfS/A8CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCX0SQbykjhMyfG+YyeYuRG9Uut+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZhYTQyNzQyLTg5ZDItNDliYi04YTNlLTI5NGMzNjg5NzFmNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YWE0Mjc0 Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC8yNUY0NDkwNkYyOTIzODRD QzlGMUJFNjMyNzk4QjkxMUJENTJFQjdFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQBZxNQAwQBZ4HmMA0GCSqGSIb3DQEBCwUAA4IBAQBxrcH6jXp5hwaDOg+MGjil g0apmeiQNuahXJHv7DYDVS7RJEaerpMpypSdXIuXawb8e2Z3NyK7V01FL7s48a2U pbyrHJDIujKnto5YCnKafp4fuRE0l2wwgCIxtlpmFlnI8Xm+Zj36VrLKNH2TxOa8 aJ0281o/JhPyUCjk+39Oh6TLLHWVSoxelhDC+hapaYBmybymX84otQma+RcPzrP/ 4vaSO2Alg1pZ13f2oKKxygFRXiHkx8yqoQ3/aK2C14WvbqAv/wotc8mFHogzWVC0 cI1VkSmOXyUovjWQW2kJtKqaiahcSSxs2bmib4Jg/Zl+0GQYVIdpTUwBzs3ojZj1 -----END CERTIFICATE-----Generated at Tue May 12 22:03:37 2026 by rpki-client