$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer File: 295E13E5C8926C8780CF0694E90F77298E60C812.cer (raw, json) Hash identifier: F6SgD3K/+hgPQYiz3vX3aw6FFfu3mqNnBrEXOQaZzKc= Subject key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71B1A339C8A7C98237DB0F94621CA06B541D84CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft caRepository: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:40 +0000 Certificate not after: Sun 02 May 2027 00:39:40 +0000 Subordinate resources: IP: 103.102.26.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b1:a3:39:c8:a7:c9:82:37:db:0f:94:62:1c:a0:6b:54:1d:84:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:34:40 2026 GMT Not After : May 2 00:39:40 2027 GMT Subject: CN=295E13E5C8926C8780CF0694E90F77298E60C812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:7c:16:8c:bc:9e:c8:37:b6:c2:df:7d:e0: 0d:0e:da:50:fc:14:66:90:35:ba:f2:d5:32:f9:e5: 8a:3f:5d:f2:92:2a:f7:fb:79:d9:ba:74:02:69:0b: 65:2f:26:f6:c2:48:aa:80:37:c9:d8:21:18:fd:4f: 97:ff:5b:1c:23:20:e8:ee:a6:94:26:04:46:51:d6: 27:d6:63:74:95:ce:59:73:94:3b:5d:2f:6a:f1:22: 3d:12:95:9b:6d:ea:13:e8:e5:dc:14:68:41:14:49: ac:02:37:52:4f:72:2d:57:49:fe:17:76:7e:1b:0a: 78:8d:ec:25:25:bc:9a:b6:99:c8:39:57:25:1c:be: e5:47:56:01:36:48:09:d1:6d:55:af:0d:c2:f6:12: 79:38:0c:b0:70:93:d3:8b:c7:b8:cb:8b:ff:0a:c5: 31:69:6c:db:4f:a1:38:a3:1b:e1:da:40:64:04:b6: 55:ad:19:dd:57:8c:6f:bf:73:a6:90:60:01:48:aa: 5b:1b:0b:4c:c7:53:c2:3b:8d:f1:10:ea:2d:30:b5: 6b:b0:37:96:f7:71:af:03:36:13:ac:3b:b8:eb:16: 76:1a:fd:17:16:08:7d:65:89:49:fa:d5:73:f0:06: a1:af:f1:69:5a:15:df:bb:53:12:51:bc:37:ab:5e: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.26.0/24 Signature Algorithm: sha256WithRSAEncryption 91:23:8a:92:98:ff:49:29:fb:a5:1c:b1:2b:1a:c7:64:3d:c0: 77:47:cc:3d:c9:71:73:11:1e:85:4d:c4:ba:e5:65:c7:55:84: 63:5c:ac:3c:94:ad:bf:f8:56:d4:ea:3e:02:92:e1:a4:a9:fb: f8:a8:e3:b7:41:53:1f:c8:f5:23:ef:f8:c9:bd:80:62:b2:2d: 8d:a4:17:66:cf:47:f0:e6:6e:f3:b1:48:03:5b:17:cd:cb:e0: 9b:2c:e4:b5:b8:ea:97:bf:f5:db:a9:44:c3:32:91:86:3f:a1: 36:c0:8d:ef:3e:be:a6:ef:a3:d9:ba:91:0a:84:98:ae:fb:91: e0:15:22:e6:6a:df:5f:c8:fc:df:cd:62:27:48:71:c4:84:69: 4d:9c:d3:25:91:11:95:de:f2:c2:51:4e:25:71:ac:06:cd:a2: 82:35:5f:cd:d2:80:be:b3:c6:f6:1c:9f:be:aa:d8:e8:a0:3f: a6:6b:77:0f:a2:1e:b8:0f:40:ee:18:89:6c:67:05:22:a0:ee: 55:05:a7:c9:a5:ae:cf:c0:75:4d:e9:ba:e4:3c:9a:26:97:78: 11:b2:69:f5:cd:73:50:9c:eb:f5:d3:3d:51:ec:f5:bc:41:ad: c8:b3:fd:03:12:71:8b:25:e3:31:5a:52:0c:e9:0a:fb:2b:2a: 59:8c:45:24 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcbGjOcinyYI32w+UYhyga1QdhM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzQ0MFoX DTI3MDUwMjAwMzk0MFowMzExMC8GA1UEAxMoMjk1RTEzRTVDODkyNkM4NzgwQ0Yw Njk0RTkwRjc3Mjk4RTYwQzgxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNMfBaMvJ7IN7bC333gDQ7aUPwUZpA1uvLVMvnlij9d8pIq9/t52bp0AmkL ZS8m9sJIqoA3ydghGP1Pl/9bHCMg6O6mlCYERlHWJ9ZjdJXOWXOUO10vavEiPRKV m23qE+jl3BRoQRRJrAI3Uk9yLVdJ/hd2fhsKeI3sJSW8mraZyDlXJRy+5UdWATZI CdFtVa8NwvYSeTgMsHCT04vHuMuL/wrFMWls20+hOKMb4dpAZAS2Va0Z3VeMb79z ppBgAUiqWxsLTMdTwjuN8RDqLTC1a7A3lvdxrwM2E6w7uOsWdhr9FxYIfWWJSfrV c/AGoa/xaVoV37tTElG8N6teqjMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCleE+XIkmyHgM8GlOkPdymOYMgSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUzMzg0NDk3LTc3MmQtNDE3OS1iMjQ3LWIwMWM2NGVkMTBkMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MzM4NDQ5 Ny03NzJkLTQxNzktYjI0Ny1iMDFjNjRlZDEwZDEvMC8yOTVFMTNFNUM4OTI2Qzg3 ODBDRjA2OTRFOTBGNzcyOThFNjBDODEyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2YaMA0GCSqGSIb3DQEBCwUAA4IBAQCRI4qSmP9JKfulHLErGsdkPcB3R8w9 yXFzER6FTcS65WXHVYRjXKw8lK2/+FbU6j4CkuGkqfv4qOO3QVMfyPUj7/jJvYBi si2NpBdmz0fw5m7zsUgDWxfNy+CbLOS1uOqXv/XbqUTDMpGGP6E2wI3vPr6m76PZ upEKhJiu+5HgFSLmat9fyPzfzWInSHHEhGlNnNMlkRGV3vLCUU4lcawGzaKCNV/N 0oC+s8b2HJ++qtjooD+ma3cPoh64D0DuGIlsZwUioO5VBafJpa7PwHVN6brkPJom l3gRsmn1zXNQnOv10z1R7PW8Qa3Is/0DEnGLJeMxWlIM6Qr7KypZjEUk -----END CERTIFICATE-----Generated at Tue May 12 22:29:06 2026 by rpki-client