$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer File: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer (raw, json) Hash identifier: BfxZ5kK1l99+jLj7kQy2TFMPlFf0bPKghiYrgzsLdQM= Subject key identifier: 47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E3CD752F214E51A2D3B1F777BA885F64D29C589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:37 +0000 Certificate not after: Sun 02 May 2027 01:00:37 +0000 Subordinate resources: IP: 103.134.184.0/22 IP: 2001:df7:cb00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3c:d7:52:f2:14:e5:1a:2d:3b:1f:77:7b:a8:85:f6:4d:29:c5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:37 2026 GMT Not After : May 2 01:00:37 2027 GMT Subject: CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:9a:a2:cc:ae:fd:87:64:68:38:95:e3:1f: 45:7b:9e:06:f0:f8:72:58:89:65:4c:2f:81:5f:3d: 29:00:fa:bc:46:9f:8b:7e:15:4f:45:ae:b9:64:ec: cb:a7:d1:33:19:60:b6:db:d8:af:b3:57:cc:f3:b3: 62:a6:a2:66:c1:b9:09:c2:da:f7:90:37:08:c0:38: 66:42:f1:87:db:a9:7c:29:5d:e0:88:45:6f:5c:bb: b0:72:46:83:09:13:d7:24:7c:83:2e:32:23:0b:73: 8e:22:4a:a1:57:94:26:f9:f3:b5:48:cc:6f:1a:d3: ea:c2:0c:fc:52:e4:3d:9a:94:3c:3c:1f:97:a7:78: c8:ac:71:c5:37:0d:bb:92:81:b6:a7:e8:21:8e:50: 79:5d:64:e2:43:ac:14:cf:f7:ae:26:5e:42:1e:fa: a4:d5:da:ce:7d:4f:b7:f4:3e:d2:84:e8:25:e8:07: f6:bd:f5:3d:10:93:78:86:6a:73:b8:71:cb:0f:5b: fb:12:f3:55:fb:e2:86:d3:68:db:a7:d6:5d:2a:d6: 3f:40:54:ef:a6:c0:c9:9d:c0:d2:65:61:4c:0a:3e: bd:07:dd:ed:55:bb:91:ad:6a:6f:bd:c9:67:65:60: 6c:a1:68:00:8f:de:e9:a9:db:4c:fc:ec:7f:ef:4f: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.184.0/22 IPv6: 2001:df7:cb00::/48 Signature Algorithm: sha256WithRSAEncryption 67:a3:c9:50:88:ee:17:fd:b4:29:d7:b5:30:63:a5:19:8f:bd: b9:09:06:12:7c:c3:42:61:40:92:39:74:f1:90:a4:8d:44:b7: 5e:5d:0b:05:f9:d2:53:40:07:9b:88:18:5c:8a:a4:96:5c:b4: 36:45:b2:12:c4:36:15:d2:37:e3:c8:c8:f3:63:75:b5:1a:a3: 99:74:f7:1d:4a:aa:e7:ec:5f:a6:fe:4b:6c:b5:40:1e:48:e4: f4:37:f6:35:24:24:77:c7:25:b0:63:10:62:07:2f:07:1e:d4: 02:4f:a1:73:98:8a:55:b5:5d:23:63:19:fb:dc:7c:b7:f6:67: 8e:73:39:5d:88:88:ee:07:b6:35:f1:a0:e7:ba:c4:bb:1d:70: fe:36:87:b5:18:81:c6:40:89:2e:9f:92:16:92:16:dd:fb:02: 75:29:ff:af:3e:ff:0b:3d:ea:e7:f1:48:37:60:82:62:8a:d6: 5a:57:7e:e2:db:c1:f4:bc:6f:23:14:04:5e:5f:d6:b2:1b:a1: 48:c3:ce:48:e1:65:af:e3:41:63:dc:ca:07:0b:ad:9a:1a:20: e9:b1:df:39:b6:1c:a6:d7:da:a8:a9:de:6a:12:c7:62:5d:f8: b6:fc:23:83:46:c5:db:9c:01:76:a9:1c:82:bf:bc:8e:00:f6: 1f:85:59:cc -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUTjzXUvIU5RotOx93e6iF9k0pxYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTUzN1oX DTI3MDUwMjAxMDAzN1owMzExMC8GA1UEAxMoNDczODdDNUZFMThDQ0Q4RjU2QUUw OTNGQ0IwMDMxOUNDNDE4RkM3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRDmqLMrv2HZGg4leMfRXueBvD4cliJZUwvgV89KQD6vEafi34VT0WuuWTs y6fRMxlgttvYr7NXzPOzYqaiZsG5CcLa95A3CMA4ZkLxh9upfCld4IhFb1y7sHJG gwkT1yR8gy4yIwtzjiJKoVeUJvnztUjMbxrT6sIM/FLkPZqUPDwfl6d4yKxxxTcN u5KBtqfoIY5QeV1k4kOsFM/3riZeQh76pNXazn1Pt/Q+0oToJegH9r31PRCTeIZq c7hxyw9b+xLzVfvihtNo26fWXSrWP0BU76bAyZ3A0mVhTAo+vQfd7VW7ka1qb73J Z2VgbKFoAI/e6anbTPzsf+9PpOMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEc4fF/hjM2PVq4JP8sAMZzEGPx/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcyZjQ3NzYzLWIwZTAtNGQwMS1iNmM4LTYwZWE0Y2E1NjBiNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MmY0Nzc2 My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC80NzM4N0M1RkUxOENDRDhG NTZBRTA5M0ZDQjAwMzE5Q0M0MThGQzdGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ4a4MA8EAgACMAkDBwAgAQ33ywAwDQYJKoZIhvcNAQELBQADggEBAGejyVCI 7hf9tCnXtTBjpRmPvbkJBhJ8w0JhQJI5dPGQpI1Et15dCwX50lNAB5uIGFyKpJZc tDZFshLENhXSN+PIyPNjdbUao5l09x1KqufsX6b+S2y1QB5I5PQ39jUkJHfHJbBj EGIHLwce1AJPoXOYilW1XSNjGfvcfLf2Z45zOV2IiO4HtjXxoOe6xLsdcP42h7UY gcZAiS6fkhaSFt37AnUp/68+/ws96ufxSDdggmKK1lpXfuLbwfS8byMUBF5f1rIb oUjDzkjhZa/jQWPcygcLrZoaIOmx3zm2HKbX2qip3moSx2Jd+Lb8I4NGxducAXap HIK/vI4A9h+FWcw= -----END CERTIFICATE-----Generated at Tue May 12 22:10:29 2026 by rpki-client