$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer (raw, json) Hash identifier: ABq8bPMw7bA0RhmdvBhYfk9ady4sBFYytitH+5mR+bM= Subject key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6569CAEF99F826C0C96967BFCE499764B302F232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:17 +0000 Certificate not after: Sun 02 May 2027 02:05:17 +0000 Subordinate resources: IP: 103.143.232.0/23 IP: 2405:5e40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:69:ca:ef:99:f8:26:c0:c9:69:67:bf:ce:49:97:64:b3:02:f2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:17 2026 GMT Not After : May 2 02:05:17 2027 GMT Subject: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:9b:81:92:5e:cb:05:14:06:2b:dd:22:5a: 92:3c:eb:57:56:ec:56:4b:51:d2:4f:55:2c:7b:29: 81:d0:61:cc:2b:be:15:b0:94:73:ed:30:b5:be:d2: 8e:a9:87:ff:6d:2f:68:3a:d6:e5:35:ca:73:7a:ee: b6:30:e0:c6:1b:72:7c:48:23:60:77:2b:57:bf:70: f3:08:83:bf:4a:92:0e:30:85:83:2b:88:f0:90:26: 1d:79:71:9e:5b:8d:e0:12:d6:01:f5:bf:ce:d6:0a: 1d:44:e6:69:aa:d4:5a:a2:21:cd:ef:ed:c3:e3:80: 55:60:89:cc:87:4b:05:8b:5e:fe:97:56:0a:8e:51: 12:69:1a:0f:b6:fe:e7:e6:fa:31:00:02:b9:4c:ff: 80:f4:9e:d1:59:50:ea:2b:e1:27:6c:b5:56:a4:02: 9e:4b:c0:26:72:30:a4:33:72:ec:97:1c:ab:fd:cb: 21:67:e3:1d:1f:74:2b:0c:39:c8:40:59:1b:55:e8: b5:6f:30:d5:21:38:f6:4e:0e:c0:0d:55:9a:be:60: 60:4e:d3:70:3d:aa:a7:fb:b2:fc:e0:61:7c:32:dd: be:87:5f:b6:4e:0b:d0:2d:0e:05:fa:cf:0d:9d:8d: 50:3e:07:8a:9b:5e:1a:53:2e:e2:7c:2e:79:dd:15: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.232.0/23 IPv6: 2405:5e40::/32 Signature Algorithm: sha256WithRSAEncryption 72:24:1c:76:da:89:9b:00:4a:16:5e:e5:40:1e:23:22:1a:2a: fe:98:f0:84:2f:a0:09:97:80:ae:dc:67:aa:f4:94:6c:17:c9: a7:3a:b3:72:a2:66:87:40:21:98:15:04:d8:24:6c:b3:4e:84: 17:cc:1f:c7:83:50:b5:17:e9:46:6a:1e:44:0b:b2:3e:b6:9b: 15:68:41:61:e6:fb:2f:7a:16:ae:cf:cc:12:e0:31:a0:d5:fb: 27:70:e5:21:33:9b:5c:7b:c2:05:95:db:f8:9f:22:52:ab:45: 7d:75:24:ee:b5:97:11:ca:c2:b8:72:2f:02:d2:45:df:08:c0: 38:4f:ea:84:9c:a1:a1:d6:5b:e3:3b:69:d4:aa:7c:ad:5c:33: 34:9a:67:28:25:e6:64:8b:f2:a6:99:55:ca:88:5e:74:c8:aa: a7:4e:69:03:2e:1e:db:9c:31:e8:52:9d:c6:60:30:97:3d:f1: c4:82:db:bf:ca:23:53:bf:af:01:87:8d:5d:31:55:e2:e9:e0: 79:09:65:5d:88:33:93:28:84:f9:c5:04:8e:98:d1:4b:7f:00: fa:63:b0:39:6a:b6:06:bc:13:26:1b:89:d2:70:b1:5f:fb:5e: 2e:a8:4e:fd:e5:7b:5f:54:f0:ba:71:1a:78:a1:00:d8:26:24: c4:fd:ed:63 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUZWnK75n4JsDJaWe/zkmXZLMC8jIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAxN1oX DTI3MDUwMjAyMDUxN1owMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2 OUE1QzJDMkE3NTAwMkNENUMyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnwm4GSXssFFAYr3SJakjzrV1bsVktR0k9VLHspgdBhzCu+FbCUc+0wtb7S jqmH/20vaDrW5TXKc3rutjDgxhtyfEgjYHcrV79w8wiDv0qSDjCFgyuI8JAmHXlx nluN4BLWAfW/ztYKHUTmaarUWqIhze/tw+OAVWCJzIdLBYte/pdWCo5REmkaD7b+ 5+b6MQACuUz/gPSe0VlQ6ivhJ2y1VqQCnkvAJnIwpDNy7Jccq/3LIWfjHR90Kww5 yEBZG1XotW8w1SE49k4OwA1Vmr5gYE7TcD2qp/uy/OBhfDLdvodftk4L0C0OBfrP DZ2NUD4HipteGlMu4nwued0VPv0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCgFH/GQrWDyhq5ppcLCp1ACzVwiMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q2YzhiM2E5LTRlZmYtNDYwZC1iMDFkLTZiYTVkOTlkYWRiOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNmM4YjNh OS00ZWZmLTQ2MGQtYjAxZC02YmE1ZDk5ZGFkYjkvMC8yODA1MUZGMTkwQUQ2MEYy ODZBRTY5QTVDMkMyQTc1MDAyQ0Q1QzIyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4/oMA0EAgACMAcDBQAkBV5AMA0GCSqGSIb3DQEBCwUAA4IBAQByJBx22omb AEoWXuVAHiMiGir+mPCEL6AJl4Cu3Geq9JRsF8mnOrNyomaHQCGYFQTYJGyzToQX zB/Hg1C1F+lGah5EC7I+tpsVaEFh5vsvehauz8wS4DGg1fsncOUhM5tce8IFldv4 nyJSq0V9dSTutZcRysK4ci8C0kXfCMA4T+qEnKGh1lvjO2nUqnytXDM0mmcoJeZk i/KmmVXKiF50yKqnTmkDLh7bnDHoUp3GYDCXPfHEgtu/yiNTv68Bh41dMVXi6eB5 CWVdiDOTKIT5xQSOmNFLfwD6Y7A5arYGvBMmG4nScLFf+14uqE795XtfVPC6cRp4 oQDYJiTE/e1j -----END CERTIFICATE-----Generated at Tue May 12 22:39:12 2026 by rpki-client