$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer File: 4758527FF3B22322A18B7C6E96C4B735849522DD.cer (raw, json) Hash identifier: hzz7QrOwtbbKshX6qAjbkh1MPtkJfJyP9xkn9/o+T9Y= Subject key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0DD495A0317BB0A7F08D4586C5EC155A508FC60A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:25 +0000 Certificate not after: Sun 02 May 2027 01:05:25 +0000 Subordinate resources: IP: 103.121.244.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d4:95:a0:31:7b:b0:a7:f0:8d:45:86:c5:ec:15:5a:50:8f:c6:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:25 2026 GMT Not After : May 2 01:05:25 2027 GMT Subject: CN=4758527FF3B22322A18B7C6E96C4B735849522DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:75:de:10:3c:3c:aa:c2:be:c3:94:52:af: e6:6f:0f:8a:46:cb:31:ae:b3:07:cc:30:2f:b3:be: 9b:77:ad:ce:11:10:48:91:b9:a4:3d:c4:c3:42:d1: cc:25:cc:ce:e8:27:70:04:1b:7c:18:7b:a8:79:84: 8f:87:84:56:ca:db:6e:61:fa:70:2d:7b:38:e1:06: cd:d4:8d:c0:25:27:48:16:50:34:1f:2a:d9:2f:de: a2:7e:f5:b7:47:1a:94:ca:27:b0:cc:00:db:51:1b: 71:5b:c4:91:99:84:25:11:3c:a4:58:09:4c:ed:c6: 35:59:f9:4b:e6:f8:0b:88:34:dc:e2:e9:ed:cb:31: bd:29:3c:0d:50:86:22:9a:30:57:14:6d:b9:2f:0b: 58:42:3a:8d:a4:6a:a8:3f:e8:7e:6d:09:5d:e2:ff: 64:78:f8:c1:0e:5e:ae:3b:6f:7a:9f:be:f9:58:68: d8:88:a7:db:bb:cf:4e:31:5c:24:b1:1f:a9:93:ec: a7:58:b5:7b:5f:48:e0:5d:55:6e:08:a8:47:7e:fa: 61:e0:10:c4:f6:9f:b2:ae:58:ce:83:ed:bd:92:00: c5:8c:74:16:df:ac:e3:b3:7e:9d:09:40:19:61:d6: b0:a0:07:5a:0e:41:2b:b2:b3:16:7a:3c:ee:ef:ed: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.244.0/22 Signature Algorithm: sha256WithRSAEncryption 25:3b:50:c6:32:5b:2b:56:5d:7e:ee:f6:b7:c8:a0:92:43:24: 4c:28:a2:4a:7a:53:cc:2f:8c:e0:cc:f0:1b:d3:e9:cb:87:b9: f8:b8:ba:09:35:6a:bc:a4:60:41:b6:2c:70:a1:5f:4c:d7:5d: 60:fd:8f:29:5a:24:30:7c:3e:cc:d4:53:9c:ea:12:9a:a8:00: 1a:8f:3d:32:04:98:c5:47:20:ff:65:a3:b4:49:b4:66:b1:dc: 5f:01:a0:8c:59:1c:9f:32:e0:04:bb:0f:16:e9:12:77:8e:ed: 5c:52:1f:07:5f:24:22:77:37:a1:82:00:91:d2:86:4b:03:57: 0d:cf:5a:60:a7:a8:2a:4a:04:48:ff:eb:bf:46:46:c3:fe:5e: 5c:d7:7c:32:48:d4:48:71:30:ce:72:e0:d5:57:20:43:46:27: 13:d8:bb:33:3b:41:91:0b:9d:40:b7:fd:4c:06:b3:b7:28:a0: 7e:e1:0d:45:5a:d7:f8:33:a1:36:38:a1:31:fb:38:e1:f1:f7: b5:fa:dc:3c:e7:79:27:79:02:1b:1f:85:be:bb:a1:d2:fd:64: 05:34:19:d5:73:10:e8:86:59:28:78:20:f8:31:ed:28:f7:33: ac:a0:58:98:0d:f6:de:d0:fb:78:4e:ee:bc:46:8c:f9:1c:1d: c9:1a:ae:39 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDdSVoDF7sKfwjUWGxewVWlCPxgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDAyNVoX DTI3MDUwMjAxMDUyNVowMzExMC8GA1UEAxMoNDc1ODUyN0ZGM0IyMjMyMkExOEI3 QzZFOTZDNEI3MzU4NDk1MjJERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRudd4QPDyqwr7DlFKv5m8PikbLMa6zB8wwL7O+m3etzhEQSJG5pD3Ew0LR zCXMzugncAQbfBh7qHmEj4eEVsrbbmH6cC17OOEGzdSNwCUnSBZQNB8q2S/eon71 t0calMonsMwA21EbcVvEkZmEJRE8pFgJTO3GNVn5S+b4C4g03OLp7csxvSk8DVCG IpowVxRtuS8LWEI6jaRqqD/ofm0JXeL/ZHj4wQ5erjtvep+++Vho2Iin27vPTjFc JLEfqZPsp1i1e19I4F1VbgioR376YeAQxPafsq5YzoPtvZIAxYx0Ft+s47N+nQlA GWHWsKAHWg5BK7KzFno87u/teDcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEdYUn/zsiMioYt8bpbEtzWElSLdMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc5NWVlOGZjLTZlZmUtNDE1ZC1iNmMxLTBmMGNjY2YyNjE0NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OTVlZThm Yy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC80NzU4NTI3RkYzQjIyMzIy QTE4QjdDNkU5NkM0QjczNTg0OTUyMkRELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3n0MA0GCSqGSIb3DQEBCwUAA4IBAQAlO1DGMlsrVl1+7va3yKCSQyRMKKJK elPML4zgzPAb0+nLh7n4uLoJNWq8pGBBtixwoV9M111g/Y8pWiQwfD7M1FOc6hKa qAAajz0yBJjFRyD/ZaO0SbRmsdxfAaCMWRyfMuAEuw8W6RJ3ju1cUh8HXyQidzeh ggCR0oZLA1cNz1pgp6gqSgRI/+u/RkbD/l5c13wySNRIcTDOcuDVVyBDRicT2Lsz O0GRC51At/1MBrO3KKB+4Q1FWtf4M6E2OKEx+zjh8fe1+tw853kneQIbH4W+u6HS /WQFNBnVcxDohlkoeCD4Me0o9zOsoFiYDfbe0Pt4Tu68Roz5HB3JGq45 -----END CERTIFICATE-----Generated at Tue May 12 22:32:05 2026 by rpki-client