$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer (raw, json) Hash identifier: hU0KwA1wQ0cg08ByOHTM2TzpnXAlbENtBZpFnCSO3YA= Subject key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 77DA4DA20A72A0C04B44A88A0125D3009924BFFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:24:55 +0000 Certificate not after: Sun 02 May 2027 00:29:55 +0000 Subordinate resources: IP: 103.91.28.0/22 IP: 123.253.244.0/22 IP: 2001:df0:f700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:da:4d:a2:0a:72:a0:c0:4b:44:a8:8a:01:25:d3:00:99:24:bf:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:24:55 2026 GMT Not After : May 2 00:29:55 2027 GMT Subject: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:1c:9a:08:6a:10:c3:15:12:19:a0:84:c1: 48:ce:e8:97:fd:1d:fc:6d:ff:4d:ff:36:35:ad:d2: 9c:2b:5d:7f:a6:39:05:ef:70:22:22:29:69:9c:67: 41:35:2b:30:f3:d6:ed:45:a4:2e:44:f4:e7:1d:89: 5c:d5:9c:f7:6b:a7:05:0e:d7:a6:11:47:0f:c0:9a: 65:fc:7b:df:9b:7e:bb:d2:96:41:c1:a1:14:3e:87: 4f:4d:e0:27:08:e4:f1:f6:4e:78:2d:1a:1f:10:a8: 53:5f:52:87:cd:1e:96:d0:8e:d4:04:6d:5c:97:24: db:62:0c:e4:c4:7d:c2:d4:87:3a:42:27:eb:7a:c0: 8c:6a:59:76:73:55:17:d8:88:56:57:3f:aa:6b:5e: 96:0a:99:b8:8f:0e:7e:e6:8a:9f:67:2c:45:70:de: 3e:5b:dd:f2:f1:bc:cf:e4:49:91:2c:5c:4c:77:40: 82:1a:b8:9b:c1:b8:80:7c:cc:80:3a:6e:cd:47:ee: 6e:a3:51:4c:c2:db:80:9e:7c:eb:d3:f4:57:de:ec: 1a:93:d9:24:8b:bd:ae:ef:c9:d8:30:45:b3:4f:f0: 87:4a:69:55:fc:41:94:57:f5:bd:39:10:b5:e7:25: 51:21:4c:ed:64:49:b5:5e:64:39:cb:1b:ca:17:a3: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.28.0/22 123.253.244.0/22 IPv6: 2001:df0:f700::/48 Signature Algorithm: sha256WithRSAEncryption 83:bb:aa:7c:2f:3c:2c:1e:2b:b4:46:3b:62:bb:56:75:a6:e7: 44:49:4a:45:97:96:d4:99:ef:b8:3b:40:2b:1d:28:72:79:d7: bd:28:05:16:9d:98:68:db:2b:ba:3c:56:11:ef:3b:98:43:b5: 4c:fc:f5:0a:34:50:93:ca:e9:54:b7:0d:98:74:e9:78:4d:6b: 5f:01:c9:1c:70:0e:ef:09:cd:f1:7a:bb:da:88:9c:55:7f:24: f4:f5:2c:f7:44:d2:ff:83:8e:70:61:85:9a:44:cd:59:23:bc: fd:c9:f0:f8:11:37:71:1a:cc:48:0f:74:09:e9:18:c6:67:60: 0b:70:10:f3:48:ce:5a:88:59:ed:db:7d:e3:f1:c5:e7:f8:75: a7:04:ad:dd:2e:eb:14:76:2f:c7:be:86:91:f2:17:ee:ee:66: 80:3b:98:3a:b7:1e:02:52:92:27:b1:4c:25:a5:f0:81:24:ee: e8:92:41:7a:d4:de:15:33:17:0a:ed:ca:c2:b8:af:59:16:c9: 27:64:f3:c9:94:57:94:53:f2:63:2f:71:c9:4c:7f:eb:d5:bf: 70:36:9f:25:03:2c:10:a4:ca:74:79:26:0b:4b:df:e2:83:cf: 01:ac:4f:89:89:5f:b8:8c:3f:30:c8:38:05:ee:26:e3:2a:8b: bb:64:db:6a -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUd9pNogpyoMBLRKiKASXTAJkkv/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjQ1NVoX DTI3MDUwMjAwMjk1NVowMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJB Q0E2MUUwMjgxMUI0RDZBNkFENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK71HJoIahDDFRIZoITBSM7ol/0d/G3/Tf82Na3SnCtdf6Y5Be9wIiIpaZxn QTUrMPPW7UWkLkT05x2JXNWc92unBQ7XphFHD8CaZfx735t+u9KWQcGhFD6HT03g Jwjk8fZOeC0aHxCoU19Sh80eltCO1ARtXJck22IM5MR9wtSHOkIn63rAjGpZdnNV F9iIVlc/qmtelgqZuI8OfuaKn2csRXDePlvd8vG8z+RJkSxcTHdAghq4m8G4gHzM gDpuzUfubqNRTMLbgJ5869P0V97sGpPZJIu9ru/J2DBFs0/wh0ppVfxBlFf1vTkQ teclUSFM7WRJtV5kOcsbyhejXFcCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCn4lT070T109gusph4CgRtNamrUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ0MjE5ODViLWEwZTYtNGUwNS1iZWY2LWZlNmY1YTZlMmY0My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NDIxOTg1 Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC8yOUY4OTUzRDNCRDEzRDc0 RjYwQkFDQTYxRTAyODExQjRENkE2QUQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCZ1scAwQCe/30MA8EAgACMAkDBwAgAQ3w9wAwDQYJKoZIhvcNAQELBQADggEB AIO7qnwvPCweK7RGO2K7VnWm50RJSkWXltSZ77g7QCsdKHJ5170oBRadmGjbK7o8 VhHvO5hDtUz89Qo0UJPK6VS3DZh06XhNa18ByRxwDu8JzfF6u9qInFV/JPT1LPdE 0v+DjnBhhZpEzVkjvP3J8PgRN3EazEgPdAnpGMZnYAtwEPNIzlqIWe3bfePxxef4 dacErd0u6xR2L8e+hpHyF+7uZoA7mDq3HgJSkiexTCWl8IEk7uiSQXrU3hUzFwrt ysK4r1kWySdk88mUV5RT8mMvcclMf+vVv3A2nyUDLBCkynR5JgtL3+KDzwGsT4mJ X7iMPzDIOAXuJuMqi7tk22o= -----END CERTIFICATE-----Generated at Tue May 12 22:02:43 2026 by rpki-client