$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer File: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer (raw, json) Hash identifier: fzS/qbVrdw9yDtRkKKrCG/Hkpy0i6PRhyyCTAF0ctDU= Subject key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F158F03568E9BCA18F854053D8C90A4B07C74C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:24 +0000 Certificate not after: Sun 02 May 2027 01:37:24 +0000 Subordinate resources: IP: 103.239.20.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:15:8f:03:56:8e:9b:ca:18:f8:54:05:3d:8c:90:a4:b0:7c:74:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:24 2026 GMT Not After : May 2 01:37:24 2027 GMT Subject: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:72:1c:d1:b5:c2:9e:dc:2d:09:29:2b:fe: be:48:1f:b1:62:cf:6e:b0:05:8e:73:5f:6f:73:3a: 6a:ff:50:e7:10:d7:7b:ed:26:96:5c:7f:a7:5c:95: e4:99:ad:89:87:46:bf:db:7d:af:52:9d:06:c2:c9: 88:ee:35:f2:c1:1c:4b:ac:72:f0:58:6e:83:26:62: 8b:1e:30:ea:28:93:07:c3:18:c5:e3:41:c9:e4:e2: 15:61:0e:dc:b8:65:64:b2:82:65:73:0c:c0:54:67: 34:93:88:ea:10:fa:e3:07:64:5b:34:05:2d:91:72: 40:65:d2:52:ef:60:7f:16:00:46:58:2b:01:be:82: af:5f:8f:ba:6c:a3:33:68:47:77:21:ba:69:c0:40: 1f:05:e9:34:70:f0:68:3e:6f:c9:bc:37:57:67:73: 62:51:85:02:03:93:d1:45:3d:c2:cf:27:df:70:7a: 9a:60:96:c8:72:fb:1b:c3:2a:7c:ed:ef:23:07:a8: 97:d5:65:7a:23:af:32:54:a0:30:ba:b5:15:32:da: dc:23:b0:61:2e:4c:26:b2:55:65:a2:51:1b:ef:9f: 77:be:20:af:0a:53:08:8b:f7:a8:58:ec:d7:50:5b: 96:18:b4:c7:48:4c:0e:b0:94:65:86:8e:3e:f2:25: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.20.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:49:c4:44:53:69:76:db:19:33:b0:9f:65:d0:32:aa:62:d4: 30:d4:66:24:d8:46:73:37:7c:e1:2f:01:b2:1a:ca:91:e4:f2: 4f:d8:4e:4a:90:fc:9c:00:23:93:4c:48:aa:9c:00:e0:86:c0: 7e:e0:7c:1f:f5:fa:ec:21:a8:7f:35:ae:33:11:c2:e4:c7:28: ce:7e:a6:a4:91:5e:b7:e3:b3:89:26:42:ca:0c:ce:f6:13:fe: 59:3c:64:98:bb:d9:60:6f:2b:c0:e3:4f:49:3e:9d:ef:82:cc: d2:b4:fe:25:e1:13:77:f8:e9:1a:cf:8d:3f:b4:b0:4e:46:2f: d9:dd:39:55:fd:73:28:60:e6:81:cd:84:f6:46:2b:d5:71:4c: a5:6f:66:78:06:61:ce:e0:48:09:9c:fd:ce:21:03:c9:06:67: f0:e3:02:6d:35:e4:b3:5d:3b:a8:09:c9:85:45:14:9f:96:bc: 13:87:f1:d3:99:0e:a2:71:ac:21:93:fd:ea:a2:10:ff:2d:13: 82:d5:c3:9a:af:75:81:f0:9e:55:35:9d:02:c1:6e:19:33:ab: ce:7e:a7:11:64:a4:3a:03:c3:d4:c8:d3:3a:0e:11:9b:35:e2: ac:04:f0:d8:bb:cd:91:b7:0b:da:5c:05:1b:ec:67:c1:6d:ff: c0:19:b6:54 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTxWPA1aOm8oY+FQFPYyQpLB8dMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzIyNFoX DTI3MDUwMjAxMzcyNFowMzExMC8GA1UEAxMoMjZBQzg0N0FGRUYxQkFEQTE3MzJB OEEyMjQ5QkFFRUMyRjJENjE1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVQchzRtcKe3C0JKSv+vkgfsWLPbrAFjnNfb3M6av9Q5xDXe+0mllx/p1yV 5JmtiYdGv9t9r1KdBsLJiO418sEcS6xy8FhugyZiix4w6iiTB8MYxeNByeTiFWEO 3LhlZLKCZXMMwFRnNJOI6hD64wdkWzQFLZFyQGXSUu9gfxYARlgrAb6Cr1+Pumyj M2hHdyG6acBAHwXpNHDwaD5vybw3V2dzYlGFAgOT0UU9ws8n33B6mmCWyHL7G8Mq fO3vIweol9VleiOvMlSgMLq1FTLa3COwYS5MJrJVZaJRG++fd74grwpTCIv3qFjs 11Bblhi0x0hMDrCUZYaOPvIlJlcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCashHr+8braFzKooiSbruwvLWFaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E3YWZkNTdhLWU2ZGUtNGE1Zi1iNWM2LTEwODY1ZDVhOGM5OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hN2FmZDU3 YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC8yNkFDODQ3QUZFRjFCQURB MTczMkE4QTIyNDlCQUVFQzJGMkQ2MTVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+8UMA0GCSqGSIb3DQEBCwUAA4IBAQBvScREU2l22xkzsJ9l0DKqYtQw1GYk 2EZzN3zhLwGyGsqR5PJP2E5KkPycACOTTEiqnADghsB+4Hwf9frsIah/Na4zEcLk xyjOfqakkV6347OJJkLKDM72E/5ZPGSYu9lgbyvA409JPp3vgszStP4l4RN3+Oka z40/tLBORi/Z3TlV/XMoYOaBzYT2RivVcUylb2Z4BmHO4EgJnP3OIQPJBmfw4wJt NeSzXTuoCcmFRRSflrwTh/HTmQ6icawhk/3qohD/LROC1cOar3WB8J5VNZ0CwW4Z M6vOfqcRZKQ6A8PUyNM6DhGbNeKsBPDYu82RtwvaXAUb7GfBbf/AGbZU -----END CERTIFICATE-----Generated at Tue May 12 22:10:33 2026 by rpki-client