$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer (raw, json) Hash identifier: EIABCyF9/RStC0zip67RjPuRw6zlRFttVNj/LHT2+ws= Subject key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09942A44E1F2374F4F2B01C38A35D32F25F24F2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:58 +0000 Certificate not after: Sun 02 May 2027 01:15:58 +0000 Subordinate resources: IP: 103.147.76.0/23 IP: 2405:b140::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:94:2a:44:e1:f2:37:4f:4f:2b:01:c3:8a:35:d3:2f:25:f2:4f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:58 2026 GMT Not After : May 2 01:15:58 2027 GMT Subject: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:a2:38:bf:e1:b6:ce:5b:0d:81:69:d6:46: f8:83:ba:70:c7:92:67:68:ba:d1:3b:21:75:e6:a3: a2:97:03:59:9f:f5:5c:7c:eb:bc:a8:6f:90:f1:37: 37:f6:da:a5:e0:20:7f:55:48:d2:ef:4e:53:42:fb: c8:67:cb:f4:e8:48:4e:24:b8:65:11:77:f4:6d:c7: 61:cc:bd:e8:ba:0c:9f:e1:27:60:12:87:91:e3:d5: da:b1:35:e0:e4:36:4a:f0:d8:3c:24:6a:88:ea:33: d9:80:98:50:ec:06:2b:b6:52:17:39:b1:c6:59:b7: 74:78:cf:cd:fe:e4:06:98:21:5a:c2:89:e4:09:92: 73:47:b9:76:34:50:f6:d9:af:73:1a:1d:c2:9e:06: 13:db:fa:66:2f:d3:a8:2e:42:04:21:70:08:58:86: 05:e9:cf:05:9a:94:ef:3a:12:6d:60:83:67:69:af: 7b:d7:98:95:10:2e:fd:92:aa:d6:84:f2:45:c4:30: a9:43:d6:3f:ca:73:11:85:cd:6f:47:8a:a9:31:6d: 59:4b:d5:41:54:2c:4e:69:08:0c:94:b8:49:42:79: ef:be:f5:33:a4:38:28:da:72:44:cf:20:7d:0b:a0: b0:b8:09:0f:14:01:d1:53:9d:52:ec:47:db:4b:6b: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.76.0/23 IPv6: 2405:b140::/32 Signature Algorithm: sha256WithRSAEncryption 8b:98:73:46:c3:94:de:18:4c:14:e9:42:83:57:b9:19:8a:8f: 97:8a:6a:5c:38:38:56:c0:bd:c8:66:0e:41:70:d9:77:b7:5d: f7:33:cf:8e:e7:58:eb:e9:1a:de:64:b4:d3:87:bc:4b:5a:32: ee:38:1b:42:30:82:6b:ac:16:55:29:b6:d5:55:95:2e:3e:51: 64:1d:04:28:ce:68:01:02:1b:ac:11:1e:35:82:ae:d9:9b:30: 69:7c:88:37:98:f3:d3:34:d6:bb:12:99:b7:d4:bd:4b:1d:50: f7:0f:f6:35:da:06:8f:34:4d:9b:94:92:60:2e:48:01:77:25: b4:51:a5:1c:1c:67:91:d1:28:10:16:2c:03:60:a8:d5:1f:d2: 51:06:6a:e6:da:df:23:46:63:77:61:9d:7b:6b:bd:9b:f4:52: aa:47:1d:73:8a:5e:5b:77:12:5a:4d:8a:8f:a2:68:46:2f:fc: 36:1a:7a:23:2e:12:64:c7:6b:7f:43:c2:64:80:c6:cd:c0:5d: 0f:f3:8e:8c:78:3a:63:97:2d:a6:fb:05:01:ec:42:a7:00:83: 52:4b:d7:09:f4:5b:9a:c0:77:b8:82:25:69:24:e5:b5:ef:fa: 41:ec:3a:d0:86:00:e8:d9:29:d3:77:e1:33:e1:07:86:14:40: 39:1f:e5:8c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUCZQqROHyN09PKwHDijXTLyXyTy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTA1OFoX DTI3MDUwMjAxMTU1OFowMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0 RDYwQjcwQkNGMDk1MzRCQThGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZnoji/4bbOWw2BadZG+IO6cMeSZ2i60TshdeajopcDWZ/1XHzrvKhvkPE3 N/bapeAgf1VI0u9OU0L7yGfL9OhITiS4ZRF39G3HYcy96LoMn+EnYBKHkePV2rE1 4OQ2SvDYPCRqiOoz2YCYUOwGK7ZSFzmxxlm3dHjPzf7kBpghWsKJ5AmSc0e5djRQ 9tmvcxodwp4GE9v6Zi/TqC5CBCFwCFiGBenPBZqU7zoSbWCDZ2mve9eYlRAu/ZKq 1oTyRcQwqUPWP8pzEYXNb0eKqTFtWUvVQVQsTmkIDJS4SUJ57771M6Q4KNpyRM8g fQugsLgJDxQB0VOdUuxH20tr7JECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEckbhjL/k4XYp1NYLcLzwlTS6j9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg3N2IwMWNmLWIxYzktNDUwZi04NTUxLTRkY2I0Y2JkNDI2Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NzdiMDFj Zi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC80NzI0NkUxOENCRkU0RTE3 NjI5RDRENjBCNzBCQ0YwOTUzNEJBOEZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5NMMA0EAgACMAcDBQAkBbFAMA0GCSqGSIb3DQEBCwUAA4IBAQCLmHNGw5Te GEwU6UKDV7kZio+XimpcODhWwL3IZg5BcNl3t133M8+O51jr6RreZLTTh7xLWjLu OBtCMIJrrBZVKbbVVZUuPlFkHQQozmgBAhusER41gq7ZmzBpfIg3mPPTNNa7Epm3 1L1LHVD3D/Y12gaPNE2blJJgLkgBdyW0UaUcHGeR0SgQFiwDYKjVH9JRBmrm2t8j RmN3YZ17a72b9FKqRx1zil5bdxJaTYqPomhGL/w2GnojLhJkx2t/Q8JkgMbNwF0P 846MeDpjly2m+wUB7EKnAINSS9cJ9FuawHe4giVpJOW17/pB7DrQhgDo2SnTd+Ez 4QeGFEA5H+WM -----END CERTIFICATE-----Generated at Tue May 12 22:39:01 2026 by rpki-client