$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer File: 2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer (raw, json) Hash identifier: 0Jirl+/lOxUTmQNDhbUzRW6lse1Ninh1CEQtu6NaALg= Subject key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03B69324936D290CE6CC74146E92B8AAE8F80C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft caRepository: rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:44 +0000 Certificate not after: Sun 02 May 2027 01:24:44 +0000 Subordinate resources: IP: 103.186.210.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b6:93:24:93:6d:29:0c:e6:cc:74:14:6e:92:b8:aa:e8:f8:0c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:44 2026 GMT Not After : May 2 01:24:44 2027 GMT Subject: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:4a:72:52:1c:d0:54:f3:c9:ef:cb:36:b3: cc:7f:e3:4a:b3:fc:f5:3e:66:27:f5:76:42:10:51: 5e:ef:01:52:a4:73:d6:d2:3b:93:a0:55:fe:18:5b: 23:0e:af:7d:c3:69:d0:66:3d:71:56:a1:6d:6d:04: 92:7d:3b:a7:ff:e4:85:dc:6a:5d:be:43:54:6c:07: c5:7e:6f:0e:93:78:7c:45:bd:81:87:e1:eb:56:96: ce:e8:ae:8b:80:71:ab:60:09:15:c8:42:d0:03:35: d2:d2:e1:b7:ad:ac:0a:e9:92:c2:b9:cc:f3:79:55: 12:73:89:a9:63:73:f4:ca:f8:d6:16:51:4b:92:27: 2e:94:29:b0:eb:ae:9f:bb:ea:b0:06:31:94:c9:d5: 29:f7:92:43:90:b9:08:4d:bb:0d:24:45:b9:52:14: 6b:2a:9c:5a:59:a5:3d:a0:96:4d:21:4d:bb:b8:ea: ef:e2:0b:e0:2f:4a:a7:03:8f:22:96:27:a6:36:77: bd:02:cc:5a:5f:37:75:33:22:74:67:de:33:72:8d: 0c:80:41:00:52:5f:ec:cb:01:d5:45:2e:3b:ee:65: 66:14:b8:c0:4c:a6:7d:5b:6a:36:e5:d6:fe:08:ab: 0f:11:ed:6a:7f:8c:cd:8c:42:24:2f:bd:c8:dd:5d: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.210.0/23 Signature Algorithm: sha256WithRSAEncryption 53:57:e9:4e:b2:93:2c:4c:97:88:f5:ff:7b:c9:c2:b5:e7:df: ed:29:95:a7:4c:c3:21:2f:74:31:4b:c3:92:75:41:ec:ce:3c: 5d:33:93:01:dc:0e:8e:4e:bf:89:cd:be:cd:38:48:ad:a8:43: f3:04:05:4c:e0:c9:84:99:94:84:a2:b9:28:ae:8a:53:75:25: ba:9b:f7:6f:6a:48:ba:0a:22:52:9d:a9:38:c9:42:46:2a:e1: 69:1c:f9:14:d2:2c:44:a8:68:a0:d0:92:f7:6e:1c:da:da:db: 16:c3:2f:3d:d1:bf:b0:75:d6:89:7a:2d:44:51:33:6e:71:d6: 32:5c:b8:2c:f1:f7:14:0e:39:0b:09:c2:73:82:b3:3b:76:43: 5c:a8:d4:f0:63:c9:45:df:5d:be:b5:44:dd:e9:d1:37:b3:b3: 53:b0:45:19:b6:bc:5b:8a:36:62:f9:ad:35:56:79:16:ab:bd: ab:68:9f:c3:95:78:40:36:b3:23:a2:ae:ef:06:c2:ac:af:3d: 0f:bd:dd:ff:e8:c4:5d:53:53:3f:a2:62:89:76:13:03:35:af: 14:60:0f:e0:c0:c8:fd:d5:c5:37:76:e4:ca:37:f7:ab:c5:b0: e4:64:f6:eb:f1:8d:67:f7:cb:c6:f8:23:34:65:3f:f5:7e:07: 72:d4:41:9e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUA7aTJJNtKQzmzHQUbpK4quj4DDIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTk0NFoX DTI3MDUwMjAxMjQ0NFowMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1 NTQ0M0VBOEVFOTQyMjlGQ0YzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6+SnJSHNBU88nvyzazzH/jSrP89T5mJ/V2QhBRXu8BUqRz1tI7k6BV/hhb Iw6vfcNp0GY9cVahbW0Ekn07p//khdxqXb5DVGwHxX5vDpN4fEW9gYfh61aWzuiu i4Bxq2AJFchC0AM10tLht62sCumSwrnM83lVEnOJqWNz9Mr41hZRS5InLpQpsOuu n7vqsAYxlMnVKfeSQ5C5CE27DSRFuVIUayqcWlmlPaCWTSFNu7jq7+IL4C9KpwOP IpYnpjZ3vQLMWl83dTMidGfeM3KNDIBBAFJf7MsB1UUuO+5lZhS4wEymfVtqNuXW /girDxHtan+MzYxCJC+9yN1dzokCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC0wwwBYf22BvptVRD6o7pQin880MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk0ZGNlZjY1LTVkZTMtNDEyOS1hYzI3LTc3MDZkNzI2NjAwMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NGRjZWY2 NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8yRDMwQzMwMDU4N0Y2RDgx QkU5QjU1NDQzRUE4RUU5NDIyOUZDRjM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7rSMA0GCSqGSIb3DQEBCwUAA4IBAQBTV+lOspMsTJeI9f97ycK159/tKZWn TMMhL3QxS8OSdUHszjxdM5MB3A6OTr+Jzb7NOEitqEPzBAVM4MmEmZSEorkoropT dSW6m/dvaki6CiJSnak4yUJGKuFpHPkU0ixEqGig0JL3bhza2tsWwy890b+wddaJ ei1EUTNucdYyXLgs8fcUDjkLCcJzgrM7dkNcqNTwY8lF312+tUTd6dE3s7NTsEUZ trxbijZi+a01VnkWq72raJ/DlXhANrMjoq7vBsKsrz0Pvd3/6MRdU1M/omKJdhMD Na8UYA/gwMj91cU3duTKN/erxbDkZPbr8Y1n98vG+CM0ZT/1fgdy1EGe -----END CERTIFICATE-----Generated at Tue May 12 22:03:46 2026 by rpki-client