$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.cer (raw, json) Hash identifier: hoXmzPe1YmGNfOhDuibysPRAYgAm1JdkDyt882dl6Bc= Subject key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0FB3B4D1DF36F8827E702D58E8557ACC9B703020 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:29:06 +0000 Certificate not after: Sun 02 May 2027 00:34:06 +0000 Subordinate resources: IP: 103.159.224.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b3:b4:d1:df:36:f8:82:7e:70:2d:58:e8:55:7a:cc:9b:70:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:29:06 2026 GMT Not After : May 2 00:34:06 2027 GMT Subject: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:9b:27:99:fd:5e:0b:52:73:6b:d1:da:f1: cb:9e:47:fb:59:97:f9:9e:65:b1:34:a2:e3:22:b5: 4b:15:3b:d9:8e:40:da:7c:41:d3:d2:02:bc:cc:35: df:2a:bd:6b:bc:d1:17:c2:8c:08:08:eb:aa:e4:41: fd:36:c0:12:54:0d:af:a8:02:3f:03:57:af:79:5a: 09:9a:d2:85:9f:7e:23:cb:73:4f:95:ca:21:25:df: 99:a1:60:2e:f7:70:fb:d8:13:7c:d0:3d:c8:08:00: b5:f7:e2:f7:93:7e:3d:6d:3a:11:8e:51:eb:7e:e0: 7e:81:dc:25:10:2d:a2:81:26:c8:9f:c7:e9:3a:cc: 3d:73:5c:a7:e5:79:3a:4b:31:af:78:5f:12:d8:e7: 4e:3c:82:96:31:a4:d2:8e:8d:8f:7b:3c:1c:83:ab: 9c:c0:84:c5:f1:69:02:6e:ff:df:e6:04:79:84:5c: c6:74:24:c8:9e:11:fd:92:cf:7d:d8:ef:8f:80:9e: 9e:47:fa:f5:0a:25:4b:7c:b4:ea:3b:30:7c:03:9d: 12:8d:5a:b3:a4:76:73:91:51:14:19:c3:64:70:f3: 70:05:5b:5a:8b:36:82:ff:95:d1:ba:f8:c6:dd:99: ed:78:f2:ec:51:83:a5:3f:73:55:20:f1:bc:70:cf: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.224.0/23 Signature Algorithm: sha256WithRSAEncryption 60:10:c8:22:b4:b2:6c:03:54:60:e4:17:b7:9e:c1:b5:1d:f1: 0e:9e:bf:ae:13:53:e8:da:86:d0:79:5e:c9:d5:0f:12:a7:be: e0:84:a5:b6:01:cf:1d:cb:51:5d:d3:3c:53:ea:17:5a:08:85: 12:ca:01:48:93:5e:8b:a7:79:57:82:35:e6:e7:4a:d3:2c:d7: 97:48:d3:e8:7a:0c:49:1f:a0:25:8c:0a:29:67:7a:33:ab:5f: 17:bc:72:e5:c7:3d:05:75:53:5a:e6:1d:d5:1d:52:8d:a1:6c: 55:e2:6d:00:15:66:9b:19:72:b8:02:24:27:04:73:ef:ad:8b: 2e:3f:fc:cb:1c:0d:e0:4f:5a:6c:b6:5f:e1:08:dd:3b:74:88: c9:ed:b5:de:44:2a:46:28:b1:1a:79:f7:3e:df:9f:dd:6f:e6: 94:4e:57:0c:27:84:5a:09:b0:4e:6b:d0:16:0e:78:93:6a:bc: ab:7a:b4:15:79:8b:28:63:64:37:27:a9:68:6e:e3:96:70:d6: ca:19:20:f5:c9:1f:ee:d3:94:f7:02:af:02:d6:b4:21:78:50: 4f:17:93:ef:bd:75:f8:e8:a2:f1:d9:e7:cc:4d:99:a7:97:f7: cc:e6:15:5e:51:31:93:92:9f:24:d7:58:51:3f:a4:8a:26:0f: cc:af:d5:e1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUD7O00d82+IJ+cC1Y6FV6zJtwMCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjkwNloX DTI3MDUwMjAwMzQwNlowMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkx QzEwQjlEOTA2NzJDRkQ2NkU2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXDmyeZ/V4LUnNr0drxy55H+1mX+Z5lsTSi4yK1SxU72Y5A2nxB09ICvMw1 3yq9a7zRF8KMCAjrquRB/TbAElQNr6gCPwNXr3laCZrShZ9+I8tzT5XKISXfmaFg Lvdw+9gTfNA9yAgAtffi95N+PW06EY5R637gfoHcJRAtooEmyJ/H6TrMPXNcp+V5 Oksxr3hfEtjnTjyCljGk0o6Nj3s8HIOrnMCExfFpAm7/3+YEeYRcxnQkyJ4R/ZLP fdjvj4Cenkf69QolS3y06jswfAOdEo1as6R2c5FRFBnDZHDzcAVbWos2gv+V0br4 xt2Z7Xjy7FGDpT9zVSDxvHDPbK0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCn6gPYXbCXGkQkcELnZBnLP1m5tMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRhNDhiMjIyLTZkZWQtNDI4YS04ODhmLTEwNDU0YjA4ODBjMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YTQ4YjIy Mi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC8yOUZBODBGNjE3NkMyNUM2 OTEwOTFDMTBCOUQ5MDY3MkNGRDY2RTZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5/gMA0GCSqGSIb3DQEBCwUAA4IBAQBgEMgitLJsA1Rg5Be3nsG1HfEOnr+u E1Po2obQeV7J1Q8Sp77ghKW2Ac8dy1Fd0zxT6hdaCIUSygFIk16Lp3lXgjXm50rT LNeXSNPoegxJH6AljAopZ3ozq18XvHLlxz0FdVNa5h3VHVKNoWxV4m0AFWabGXK4 AiQnBHPvrYsuP/zLHA3gT1pstl/hCN07dIjJ7bXeRCpGKLEaefc+35/db+aUTlcM J4RaCbBOa9AWDniTaryrerQVeYsoY2Q3J6lobuOWcNbKGSD1yR/u05T3Aq8C1rQh eFBPF5PvvXX46KLx2efMTZmnl/fM5hVeUTGTkp8k11hRP6SKJg/Mr9Xh -----END CERTIFICATE-----Generated at Tue May 12 22:03:05 2026 by rpki-client