$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer File: 297248FCECD7534E50147B8F048420E637A10C3B.cer (raw, json) Hash identifier: TNQVzFsbT7hTDM83wfaGsuFaZmOWpfLVppuJZhCBt+c= Subject key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B92ECA190E5CC8FE8A2ADF5F3BFE39308780E65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:09:34 +0000 Certificate not after: Sun 02 May 2027 00:14:34 +0000 Subordinate resources: IP: 103.210.120.0/22 IP: 2404:6c80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:92:ec:a1:90:e5:cc:8f:e8:a2:ad:f5:f3:bf:e3:93:08:78:0e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:09:34 2026 GMT Not After : May 2 00:14:34 2027 GMT Subject: CN=297248FCECD7534E50147B8F048420E637A10C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:96:a3:5a:4e:d6:ca:58:d6:18:7d:ce:f1: da:3a:9e:13:cd:c4:eb:f8:1a:bf:bc:76:d8:e2:73: 1a:1e:c1:2a:cf:88:f4:dc:ce:12:71:20:64:fd:92: 80:02:a2:3c:9b:13:32:10:65:a2:a6:16:d2:89:7a: 31:1b:38:00:79:c0:e2:e0:45:b4:05:41:43:0e:cb: d4:8e:c9:06:89:a8:c8:c3:62:a0:76:d0:45:20:a1: 26:12:f8:91:1c:33:6b:31:08:83:82:20:c9:f0:17: ff:e5:76:76:21:1a:7c:23:e1:25:1f:8c:0e:b5:62: a6:61:22:15:9d:d5:ef:e0:82:4a:ff:fc:76:6c:7b: ac:20:20:9f:b9:89:63:37:05:f3:b0:59:fd:9d:89: e7:d3:e4:20:af:9f:55:0a:f3:91:8d:c1:0f:59:2a: 56:5a:45:23:4f:98:53:4e:ff:0e:03:81:d3:bf:0b: 8b:e0:d6:c7:fc:c2:07:5a:6d:3a:69:e9:3c:b0:b3: b4:72:36:d8:ce:86:52:e7:a6:41:63:f1:95:cf:0f: 60:bc:82:82:6a:36:ac:76:f4:00:2c:1f:6c:a0:78: 5d:9e:d2:0e:f3:9b:e9:ee:82:8a:c2:e5:7b:12:a9: ac:38:f9:57:18:67:78:87:cd:65:bb:57:7f:c2:b7: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.120.0/22 IPv6: 2404:6c80::/32 Signature Algorithm: sha256WithRSAEncryption 1a:08:a1:da:5a:65:ea:b5:7f:8b:45:85:ec:4e:7e:0a:86:47: c8:e8:a3:c3:7c:a7:10:da:92:b5:40:c1:c7:c9:9d:35:6c:b8: 6a:a9:b0:ca:4c:5f:37:8e:a0:0a:b0:de:46:30:22:60:1a:e1: 48:bf:ac:ef:0f:99:72:7c:34:36:a1:40:41:16:d1:46:23:67: 58:29:22:70:31:b9:3a:3d:a9:f8:06:bc:aa:d4:04:9c:62:b5: 30:d9:15:95:0a:02:57:08:7f:ed:fd:4e:a0:95:94:f5:75:47: 02:91:29:af:4f:fb:1c:b1:03:93:0e:c7:56:bf:cf:20:f7:0e: cb:e2:8a:89:65:1e:8c:84:b8:9c:0c:47:c9:28:6c:35:37:d7: df:2b:ac:ce:04:49:59:a4:05:68:62:00:cf:39:77:77:3c:35: 42:8e:05:9f:28:38:57:4d:17:a4:5b:ee:a9:98:57:89:c5:fc: 5d:fe:f0:2c:6b:70:05:db:88:2b:d9:1d:51:11:9c:c8:17:7d: bf:7d:71:a3:f4:e6:f1:42:f9:21:6e:f6:e0:3a:b6:ab:33:6a: 10:c8:a0:03:f6:39:b6:3b:47:f5:53:13:f1:48:de:86:66:45: 0d:86:68:77:9a:cb:d0:85:2a:12:88:be:88:f9:27:48:65:34: f1:c3:f0:bd -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUS5LsoZDlzI/ooq3187/jkwh4DmUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDkzNFoX DTI3MDUwMjAwMTQzNFowMzExMC8GA1UEAxMoMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3 QjhGMDQ4NDIwRTYzN0ExMEMzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbAlqNaTtbKWNYYfc7x2jqeE83E6/gav7x22OJzGh7BKs+I9NzOEnEgZP2S gAKiPJsTMhBloqYW0ol6MRs4AHnA4uBFtAVBQw7L1I7JBomoyMNioHbQRSChJhL4 kRwzazEIg4IgyfAX/+V2diEafCPhJR+MDrVipmEiFZ3V7+CCSv/8dmx7rCAgn7mJ YzcF87BZ/Z2J59PkIK+fVQrzkY3BD1kqVlpFI0+YU07/DgOB078Li+DWx/zCB1pt OmnpPLCztHI22M6GUuemQWPxlc8PYLyCgmo2rHb0ACwfbKB4XZ7SDvOb6e6CisLl exKprDj5VxhneIfNZbtXf8K3ThsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClySPzs11NOUBR7jwSEIOY3oQw7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJkNDg3MzYwLTg3MzUtNDFkNy05N2E4LWRiYjM0ZDc5ZWZmNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZDQ4NzM2 MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC8yOTcyNDhGQ0VDRDc1MzRF NTAxNDdCOEYwNDg0MjBFNjM3QTEwQzNCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ9J4MA0EAgACMAcDBQAkBGyAMA0GCSqGSIb3DQEBCwUAA4IBAQAaCKHaWmXq tX+LRYXsTn4KhkfI6KPDfKcQ2pK1QMHHyZ01bLhqqbDKTF83jqAKsN5GMCJgGuFI v6zvD5lyfDQ2oUBBFtFGI2dYKSJwMbk6Pan4Bryq1AScYrUw2RWVCgJXCH/t/U6g lZT1dUcCkSmvT/scsQOTDsdWv88g9w7L4oqJZR6MhLicDEfJKGw1N9ffK6zOBElZ pAVoYgDPOXd3PDVCjgWfKDhXTRekW+6pmFeJxfxd/vAsa3AF24gr2R1REZzIF32/ fXGj9ObxQvkhbvbgOrarM2oQyKAD9jm2O0f1UxPxSN6GZkUNhmh3msvQhSoSiL6I +SdIZTTxw/C9 -----END CERTIFICATE-----Generated at Tue May 12 22:16:24 2026 by rpki-client