$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer File: 271068E54464101C4BF23BC5A4339C1CA88116CD.cer (raw, json) Hash identifier: 32tD4Gh0nIa4MN5TNre+aH5ick0CfRtV0FBLP8vdo4A= Subject key identifier: 27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 48962002D427639791FFDA6D4A436F5FEABB3B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:38:16 +0000 Certificate not after: Sun 02 May 2027 02:43:16 +0000 Subordinate resources: IP: 103.180.118.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:96:20:02:d4:27:63:97:91:ff:da:6d:4a:43:6f:5f:ea:bb:3b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:38:16 2026 GMT Not After : May 2 02:43:16 2027 GMT Subject: CN=271068E54464101C4BF23BC5A4339C1CA88116CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:01:73:46:bc:95:2b:2d:a0:30:ba:8c:e1: f9:30:fd:9b:34:9b:13:66:07:7d:9b:d6:e0:c0:7c: 6d:51:2d:ca:d1:f4:ad:d7:53:f2:0c:41:a5:29:bd: 1f:38:21:d5:51:64:e9:ea:f4:42:01:90:18:ae:d6: ae:a6:66:ac:3d:d4:ad:60:4b:27:96:e3:80:72:3c: 3b:06:32:20:d4:ad:48:22:5c:7d:c4:18:c5:11:87: e2:ca:d3:a0:d5:70:36:dc:c2:28:99:4c:55:63:a2: ea:19:d9:24:1c:ec:e5:49:f4:50:12:82:17:e8:9d: 3c:1c:98:03:63:1b:2b:56:bf:ee:72:1f:af:17:86: 1a:07:bf:ab:be:8a:04:89:62:dc:1c:b4:1d:0e:b6: c3:57:75:06:0e:ac:02:de:d2:31:71:32:11:12:87: b7:d4:05:51:aa:8d:ef:d7:92:74:4a:f8:48:e9:7d: 5a:99:42:c7:71:c2:3c:c2:99:a1:90:e0:63:06:76: 1b:7d:00:63:0b:52:4c:33:4c:be:b2:54:d7:5d:cc: 71:07:b8:c5:7f:e8:81:8b:70:ef:c3:0b:de:02:c9: 01:7c:74:1e:e2:34:da:fd:9c:53:3b:e3:e4:f5:e8: aa:21:91:bd:2f:3b:98:97:7f:9c:cf:e5:c9:e7:5e: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.118.0/23 Signature Algorithm: sha256WithRSAEncryption 65:f6:ea:a1:cd:6e:62:da:80:ab:09:5a:50:09:50:66:d1:ff: 3e:70:b2:2b:3b:ec:97:77:ce:cb:a9:8b:86:01:b1:a1:1d:f9: 54:ba:a2:81:61:7e:13:05:58:c9:bd:1e:9d:cd:c1:a5:51:39: c8:c6:81:54:c5:c2:5a:22:74:85:4d:3e:8b:1e:71:24:8d:df: f9:2f:ec:39:48:d3:3e:92:ea:40:c9:ac:de:a6:73:ff:7c:cf: 62:cd:32:f0:4b:82:1a:13:9b:2d:53:ee:1a:7e:57:1f:73:2b: 32:95:6a:bd:7d:f9:5e:d7:84:13:2e:b1:62:34:90:84:cc:53: 50:86:a0:c4:11:03:8a:e4:e6:bc:64:fe:f8:2e:66:95:e8:5b: 7f:20:8a:e8:04:ef:08:89:46:40:d3:d5:45:38:3c:9c:c0:c7: 6f:1d:0d:3b:11:17:b6:63:5a:5f:53:e1:65:a5:75:01:c4:f3: 04:78:6f:b9:73:d5:77:0f:f1:5c:ce:41:9d:ee:fe:a6:bf:fc: 26:d8:e2:6e:ee:00:d2:0c:30:b4:66:69:48:b3:fd:0d:c0:f6: ba:b8:5c:b6:99:38:75:da:99:e9:d4:f7:82:bb:8f:00:10:6d: f7:63:e0:8e:30:6d:cb:1d:19:6f:ae:14:bf:85:71:5d:09:17: 0e:42:f3:63 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSJYgAtQnY5eR/9ptSkNvX+q7O2cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzgxNloX DTI3MDUwMjAyNDMxNlowMzExMC8GA1UEAxMoMjcxMDY4RTU0NDY0MTAxQzRCRjIz QkM1QTQzMzlDMUNBODgxMTZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9KAXNGvJUrLaAwuozh+TD9mzSbE2YHfZvW4MB8bVEtytH0rddT8gxBpSm9 Hzgh1VFk6er0QgGQGK7WrqZmrD3UrWBLJ5bjgHI8OwYyINStSCJcfcQYxRGH4srT oNVwNtzCKJlMVWOi6hnZJBzs5Un0UBKCF+idPByYA2MbK1a/7nIfrxeGGge/q76K BIli3By0HQ62w1d1Bg6sAt7SMXEyERKHt9QFUaqN79eSdEr4SOl9WplCx3HCPMKZ oZDgYwZ2G30AYwtSTDNMvrJU113McQe4xX/ogYtw78ML3gLJAXx0HuI02v2cUzvj 5PXoqiGRvS87mJd/nM/lyedekMcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCcQaOVEZBAcS/I7xaQznByogRbNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y2YzdlNWIxLTUxOWQtNDU2Yy1iM2I2LTc1NTc5NDcwMjY2NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNmM3ZTVi MS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC8yNzEwNjhFNTQ0NjQxMDFD NEJGMjNCQzVBNDMzOUMxQ0E4ODExNkNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7R2MA0GCSqGSIb3DQEBCwUAA4IBAQBl9uqhzW5i2oCrCVpQCVBm0f8+cLIr O+yXd87LqYuGAbGhHflUuqKBYX4TBVjJvR6dzcGlUTnIxoFUxcJaInSFTT6LHnEk jd/5L+w5SNM+kupAyazepnP/fM9izTLwS4IaE5stU+4aflcfcysylWq9ffle14QT LrFiNJCEzFNQhqDEEQOK5Oa8ZP74LmaV6Ft/IIroBO8IiUZA09VFODycwMdvHQ07 ERe2Y1pfU+FlpXUBxPMEeG+5c9V3D/FczkGd7v6mv/wm2OJu7gDSDDC0ZmlIs/0N wPa6uFy2mTh12pnp1PeCu48AEG33Y+COMG3LHRlvrhS/hXFdCRcOQvNj -----END CERTIFICATE-----Generated at Tue May 12 22:32:09 2026 by rpki-client