$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2DFA9ABE82F079690092186CFE591462760D0F8A.cer File: 2DFA9ABE82F079690092186CFE591462760D0F8A.cer (raw, json) Hash identifier: 6+rmUS6/sAU8eYwD59LaXKF6E+lLiJiaey7UJ+2EjZM= Subject key identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1A3AD2730EA8E2040011967E39A2C958B985EEFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:30:20 +0000 Certificate not after: Sun 02 May 2027 00:35:20 +0000 Subordinate resources: IP: 103.135.48.0/22 IP: 2001:df7:e300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3a:d2:73:0e:a8:e2:04:00:11:96:7e:39:a2:c9:58:b9:85:ee:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:30:20 2026 GMT Not After : May 2 00:35:20 2027 GMT Subject: CN=2DFA9ABE82F079690092186CFE591462760D0F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:6e:34:85:60:26:43:0f:8c:14:02:79:5f: c3:16:75:ad:37:4f:5f:54:30:4c:92:d6:68:2d:80: c6:d7:b7:cf:8b:b7:b1:d0:1a:27:1d:9e:d3:f2:e2: 33:ae:98:c2:65:99:f1:52:fe:f3:95:60:7c:56:1b: e4:17:75:de:17:da:28:e4:b8:9b:57:53:e0:1f:ff: a2:80:1e:e9:02:a9:db:a5:7c:29:47:03:7d:3b:32: 0f:c8:5d:d1:db:07:67:f0:8c:59:4c:e8:85:98:9c: a8:9e:c6:56:d0:00:88:39:73:5d:5e:89:5e:5b:95: 80:c6:4a:ae:2a:89:54:3f:12:c6:e9:8c:42:5e:d1: 14:63:6c:60:41:f7:ee:96:ef:1f:41:40:38:29:d9: 3f:ab:2e:33:51:d9:f8:43:ea:90:e6:04:9b:4c:48: 32:91:27:09:34:3d:47:75:e8:7d:ec:be:87:4f:13: b8:c6:40:10:34:0d:67:63:54:eb:10:00:9f:06:fb: 19:8f:4f:80:60:ec:7a:15:bc:dc:45:94:32:14:9c: 55:69:e8:21:8b:8a:76:27:7e:13:bd:02:c6:96:26: 17:7b:d7:64:3a:01:a4:3e:98:02:96:d8:63:a8:9f: d7:a6:42:d7:a3:4d:fa:e4:30:9e:b4:8b:26:88:b3: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:FA:9A:BE:82:F0:79:69:00:92:18:6C:FE:59:14:62:76:0D:0F:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/2DFA9ABE82F079690092186CFE591462760D0F8A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.48.0/22 IPv6: 2001:df7:e300::/48 Signature Algorithm: sha256WithRSAEncryption 4c:f5:bc:ad:77:56:0a:22:91:d6:9b:88:68:42:07:48:b7:a2: 82:82:cf:57:1b:16:74:d4:1c:9c:17:63:26:ba:44:ea:b1:52: 0d:e7:52:af:ef:b8:0e:8d:00:86:ab:60:40:fd:b3:ac:1f:b0: 9d:02:91:3a:11:c1:33:a6:09:f7:35:34:59:0d:df:e1:3f:d6: c5:a3:da:51:30:00:e4:82:ea:b2:4b:6a:6d:db:af:48:de:ea: 39:be:f4:d8:1a:7a:ee:92:8a:74:c2:a3:50:52:bd:fd:25:73: 8d:24:e7:25:de:e1:6f:40:9f:22:2a:81:7e:e9:36:b5:60:bb: d3:de:aa:c4:7c:df:af:88:a6:10:a6:c7:2a:7f:12:d1:0a:b5: ef:e6:4b:bb:60:30:4a:1d:a5:76:a0:1b:0d:91:c4:04:3f:43: 89:11:f2:f2:f1:0d:d9:44:6c:27:09:51:69:c8:1c:ff:1d:ac: b4:19:cc:7c:71:a5:38:8d:88:55:8b:b6:bf:e8:7d:b0:2c:42: 58:73:c3:e6:39:fa:9d:93:34:81:3e:c5:5a:91:58:64:65:49: 37:c6:0c:a9:73:1f:a3:9b:f9:31:22:fb:a7:22:29:d8:cb:b0: 4b:08:61:e6:de:fe:1d:96:a3:76:ea:d9:4f:b1:b6:7d:c6:2b: 9e:7b:3c:09 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUGjrScw6o4gQAEZZ+OaLJWLmF7v8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzAyMFoX DTI3MDUwMjAwMzUyMFowMzExMC8GA1UEAxMoMkRGQTlBQkU4MkYwNzk2OTAwOTIx ODZDRkU1OTE0NjI3NjBEMEY4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNTbjSFYCZDD4wUAnlfwxZ1rTdPX1QwTJLWaC2Axte3z4u3sdAaJx2e0/Li M66YwmWZ8VL+85VgfFYb5Bd13hfaKOS4m1dT4B//ooAe6QKp26V8KUcDfTsyD8hd 0dsHZ/CMWUzohZicqJ7GVtAAiDlzXV6JXluVgMZKriqJVD8SxumMQl7RFGNsYEH3 7pbvH0FAOCnZP6suM1HZ+EPqkOYEm0xIMpEnCTQ9R3Xofey+h08TuMZAEDQNZ2NU 6xAAnwb7GY9PgGDsehW83EWUMhScVWnoIYuKdid+E70CxpYmF3vXZDoBpD6YApbY Y6if16ZC16NN+uQwnrSLJoizuj0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC36mr6C8HlpAJIYbP5ZFGJ2DQ+KMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRjY2MyYWY0LWE2MmQtNDcwOC1iNjg4LTE4OTI1OTRiYTk4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80Y2NjMmFm NC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC8yREZBOUFCRTgyRjA3OTY5 MDA5MjE4NkNGRTU5MTQ2Mjc2MEQwRjhBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ4cwMA8EAgACMAkDBwAgAQ334wAwDQYJKoZIhvcNAQELBQADggEBAEz1vK13 VgoikdabiGhCB0i3ooKCz1cbFnTUHJwXYya6ROqxUg3nUq/vuA6NAIarYED9s6wf sJ0CkToRwTOmCfc1NFkN3+E/1sWj2lEwAOSC6rJLam3br0je6jm+9Ngaeu6SinTC o1BSvf0lc40k5yXe4W9AnyIqgX7pNrVgu9PeqsR836+IphCmxyp/EtEKte/mS7tg MEodpXagGw2RxAQ/Q4kR8vLxDdlEbCcJUWnIHP8drLQZzHxxpTiNiFWLtr/ofbAs Qlhzw+Y5+p2TNIE+xVqRWGRlSTfGDKlzH6Ob+TEi+6ciKdjLsEsIYebe/h2Wo3bq 2U+xtn3GK557PAk= -----END CERTIFICATE-----Generated at Wed May 13 00:44:49 2026 by rpki-client