$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer File: 2702EC259515C0960B0BFF36647679F0CA781E52.cer (raw, json) Hash identifier: sulNjmzosGV5IgODtR0EUOTl0e3TI3KZluj+HnR8xT8= Subject key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A06C4D4D5EDC138E4A43E833E78D6C63510D3CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:44:44 +0000 Certificate not after: Sun 02 May 2027 01:49:44 +0000 Subordinate resources: IP: 103.138.62.0/23 IP: 2404:cbc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:06:c4:d4:d5:ed:c1:38:e4:a4:3e:83:3e:78:d6:c6:35:10:d3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:44:44 2026 GMT Not After : May 2 01:49:44 2027 GMT Subject: CN=2702EC259515C0960B0BFF36647679F0CA781E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:0f:c3:4c:14:53:7b:80:bc:ae:cc:e5:37: e2:86:37:22:de:61:ab:78:53:44:53:7c:93:49:81: cd:a5:4f:7b:02:23:2b:12:80:1a:5f:9e:61:2b:59: 5c:96:f1:45:30:2a:56:b3:72:34:4f:45:4f:21:12: 44:7a:e9:3f:82:57:56:9a:2e:3f:a9:e6:a1:a8:44: 3c:19:2a:2b:4c:24:78:8e:84:b7:9e:ac:bb:80:08: b6:8e:3f:d7:6e:77:c3:ab:b5:0f:91:c6:7a:b3:fe: ed:ab:19:92:f3:2d:8c:e4:19:7d:cb:22:c5:93:61: f3:63:b8:70:5f:41:ba:b0:0d:a8:6a:f4:5a:f7:f5: f5:73:c8:36:b4:74:c3:0a:01:03:9d:c7:ed:cd:70: 47:2b:1a:ca:9b:64:5f:ae:03:ed:32:95:e5:14:1e: 45:e7:ad:c0:f8:d7:e9:e7:8f:ad:2f:d8:54:aa:7c: d1:42:fa:50:57:19:37:8b:71:95:3c:99:ca:ff:ab: f0:ec:b0:af:4e:bd:a4:0f:a3:a4:be:6d:5f:c4:94: e4:20:1d:61:a9:72:52:5d:e6:5f:d8:f7:81:20:36: 3f:02:02:85:9b:e2:2b:84:f3:5d:da:ce:ae:14:34: a1:06:fd:44:86:91:78:50:bf:04:59:c0:a3:8e:12: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.62.0/23 IPv6: 2404:cbc0::/32 Signature Algorithm: sha256WithRSAEncryption 08:3d:37:9f:f3:95:57:c6:d7:89:8d:f1:52:50:49:3f:fa:46: 31:5b:68:bb:1d:cc:a1:66:24:40:97:97:ce:14:b3:68:c5:b9: 62:11:ba:4c:48:d0:8b:c4:a1:8a:9e:a5:3e:0e:51:ff:31:00: c5:32:65:a8:e5:61:20:a6:41:55:18:54:56:a4:54:67:a4:33: 3d:aa:c1:e1:3f:10:9a:72:e9:e5:b1:c0:63:2b:71:17:1d:bd: 51:e8:52:11:65:cf:4d:56:d8:ad:4a:fd:41:4d:6d:aa:a5:d1: 2b:99:c4:90:83:e2:dc:41:0e:93:09:79:cc:21:2b:f8:4a:f7: f5:0b:cf:4a:86:82:e7:e0:50:1f:09:33:3f:eb:98:27:44:dd: 16:a4:e0:6b:08:e4:ad:1e:e1:de:e1:f1:06:3d:83:af:f9:0c: 91:8e:ba:6d:5e:c5:dc:08:6a:e8:2c:90:45:48:89:84:c5:c0: d3:f6:eb:88:6d:72:a8:dd:ec:d6:dd:9c:21:2f:c2:7c:86:7f: b2:d1:c0:11:e5:12:91:c9:fc:76:e5:b8:1f:64:7f:ab:fa:99: fc:54:31:cd:7e:f1:58:d9:96:0f:cf:b2:5d:98:ee:ad:e3:58: 6d:89:bf:28:33:00:f1:cf:b2:0a:65:0c:4f:08:50:f7:cc:39: 35:54:f1:80 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUCgbE1NXtwTjkpD6DPnjWxjUQ08wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDQ0NFoX DTI3MDUwMjAxNDk0NFowMzExMC8GA1UEAxMoMjcwMkVDMjU5NTE1QzA5NjBCMEJG RjM2NjQ3Njc5RjBDQTc4MUU1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCED8NMFFN7gLyuzOU34oY3It5hq3hTRFN8k0mBzaVPewIjKxKAGl+eYStZ XJbxRTAqVrNyNE9FTyESRHrpP4JXVpouP6nmoahEPBkqK0wkeI6Et56su4AIto4/ 1253w6u1D5HGerP+7asZkvMtjOQZfcsixZNh82O4cF9BurANqGr0Wvf19XPINrR0 wwoBA53H7c1wRysayptkX64D7TKV5RQeReetwPjX6eePrS/YVKp80UL6UFcZN4tx lTyZyv+r8Oywr069pA+jpL5tX8SU5CAdYalyUl3mX9j3gSA2PwIChZviK4TzXdrO rhQ0oQb9RIaReFC/BFnAo44SS3cCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCcC7CWVFcCWCwv/NmR2efDKeB5SMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JjNTg2N2Q4LTNkNmYtNDgxNi1iODRmLWZkZDVjNTAyYjYzNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYzU4Njdk OC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC8yNzAyRUMyNTk1MTVDMDk2 MEIwQkZGMzY2NDc2NzlGMENBNzgxRTUyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4o+MA0EAgACMAcDBQAkBMvAMA0GCSqGSIb3DQEBCwUAA4IBAQAIPTef85VX xteJjfFSUEk/+kYxW2i7HcyhZiRAl5fOFLNoxbliEbpMSNCLxKGKnqU+DlH/MQDF MmWo5WEgpkFVGFRWpFRnpDM9qsHhPxCacunlscBjK3EXHb1R6FIRZc9NVtitSv1B TW2qpdErmcSQg+LcQQ6TCXnMISv4Svf1C89KhoLn4FAfCTM/65gnRN0WpOBrCOSt HuHe4fEGPYOv+QyRjrptXsXcCGroLJBFSImExcDT9uuIbXKo3ezW3ZwhL8J8hn+y 0cAR5RKRyfx25bgfZH+r+pn8VDHNfvFY2ZYPz7JdmO6t41htib8oMwDxz7IKZQxP CFD3zDk1VPGA -----END CERTIFICATE-----Generated at Wed May 13 04:02:40 2026 by rpki-client