$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer File: 477D71607466F25C429BF0826B9301DA69A81C15.cer (raw, json) Hash identifier: OiKV7OkYxKJbVwR3M6dOEA/9eL96WH30n4S+rsyB3Mw= Subject key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4AE37A70DF3A7C3749CDCE79B45492B92C8D7DCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft caRepository: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:37:34 +0000 Certificate not after: Sun 02 May 2027 01:42:34 +0000 Subordinate resources: IP: 103.112.189.0/24 IP: 2001:df4:b300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e3:7a:70:df:3a:7c:37:49:cd:ce:79:b4:54:92:b9:2c:8d:7d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:37:34 2026 GMT Not After : May 2 01:42:34 2027 GMT Subject: CN=477D71607466F25C429BF0826B9301DA69A81C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:cb:b6:a7:eb:5a:91:48:cf:3c:fa:04:29: 0a:d4:04:7d:fc:b6:ac:08:36:2a:a9:20:17:25:70: d9:33:14:32:ae:ca:a5:26:9a:0e:27:f2:64:16:71: 77:9b:79:dd:1c:fa:23:a3:bf:53:02:b2:7e:65:20: a3:e2:03:33:21:24:fe:b9:1a:8a:d5:37:14:05:af: 5c:df:a6:f5:0f:a6:b3:5e:b4:f7:e4:1b:64:c8:51: d9:44:2e:bf:9f:18:01:54:c1:5f:92:33:07:49:d6: 7e:ca:f1:64:71:08:56:ee:24:be:72:82:e5:20:8e: d3:34:ff:66:99:19:98:cb:f0:24:6b:95:5c:8d:f9: 1b:32:9c:66:ba:3b:b1:8a:77:20:3e:b9:cf:69:49: 6a:c2:0f:32:04:bd:10:c4:5e:15:56:10:63:a5:cb: 6b:87:16:ca:41:ac:31:89:e2:d5:e3:e8:78:50:04: 3d:be:6b:4a:16:32:41:c5:85:28:78:0f:ed:ed:12: 43:9c:30:d0:b3:01:92:3d:d9:08:47:6a:df:ea:42: 74:07:ac:c5:e1:6b:0a:63:7e:1c:12:fc:85:7b:6f: c6:02:3c:b6:32:fe:4d:bb:56:6f:c5:e5:9b:b9:35: d0:82:24:b4:b3:00:f0:46:35:e1:c2:ed:0f:65:7c: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.189.0/24 IPv6: 2001:df4:b300::/48 Signature Algorithm: sha256WithRSAEncryption 52:05:1d:4b:b9:a2:62:26:23:81:b8:60:c8:0c:b2:27:76:82: f0:6f:aa:68:12:47:ed:70:a4:ee:2a:81:db:1a:64:42:e9:b1: 3b:d6:b2:82:52:66:71:c4:a2:c3:9a:73:36:b3:18:51:59:02: dd:ee:9e:9f:54:97:cd:63:66:c9:17:cd:7d:0f:41:0b:cb:8f: f7:c0:30:fb:d4:c8:cb:ff:d9:1a:08:4b:be:27:70:68:1a:04: 8d:5d:d0:c4:f9:97:b3:cb:9b:50:ea:cc:b9:5b:d7:43:01:7b: 4d:be:d5:d7:44:d5:3a:3c:e4:ca:6c:5c:c2:67:f3:89:bb:65: 2e:1a:3a:8c:ae:2c:bc:58:9d:e9:e0:e4:fd:63:bf:2b:22:58: 6a:47:7c:c7:c5:e1:2e:9f:9e:69:cf:b8:18:38:4e:91:e2:29: 87:95:43:ac:ec:fa:81:a7:b2:cb:fb:81:b6:01:8b:05:34:81: 23:1a:af:85:53:f3:17:1a:45:f5:9e:4f:70:74:56:d6:9b:39: c6:55:31:7b:e7:4e:f5:2f:16:77:96:19:f9:91:64:ad:53:1d: 90:2c:93:22:8f:1e:18:8c:a3:80:95:2f:53:c1:8f:8a:8c:46: 24:c2:8b:3b:52:46:e9:ba:0b:22:c2:d4:f1:5c:8d:36:a9:e2: d6:40:1c:34 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSuN6cN86fDdJzc55tFSSuSyNfcwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzczNFoX DTI3MDUwMjAxNDIzNFowMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJG MDgyNkI5MzAxREE2OUE4MUMxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/My7an61qRSM88+gQpCtQEffy2rAg2KqkgFyVw2TMUMq7KpSaaDifyZBZx d5t53Rz6I6O/UwKyfmUgo+IDMyEk/rkaitU3FAWvXN+m9Q+ms1609+QbZMhR2UQu v58YAVTBX5IzB0nWfsrxZHEIVu4kvnKC5SCO0zT/ZpkZmMvwJGuVXI35GzKcZro7 sYp3ID65z2lJasIPMgS9EMReFVYQY6XLa4cWykGsMYni1ePoeFAEPb5rShYyQcWF KHgP7e0SQ5ww0LMBkj3ZCEdq3+pCdAesxeFrCmN+HBL8hXtvxgI8tjL+TbtWb8Xl m7k10IIktLMA8EY14cLtD2V8nv8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEd9cWB0ZvJcQpvwgmuTAdppqBwVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FmNWNmYmEzLWUwMTctNGU4YS05YWM1LWYyZDMwNDMxNzM2NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZjVjZmJh My1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC80NzdENzE2MDc0NjZGMjVD NDI5QkYwODI2QjkzMDFEQTY5QTgxQzE1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3C9MA8EAgACMAkDBwAgAQ30swAwDQYJKoZIhvcNAQELBQADggEBAFIFHUu5 omImI4G4YMgMsid2gvBvqmgSR+1wpO4qgdsaZELpsTvWsoJSZnHEosOaczazGFFZ At3unp9Ul81jZskXzX0PQQvLj/fAMPvUyMv/2RoIS74ncGgaBI1d0MT5l7PLm1Dq zLlb10MBe02+1ddE1To85MpsXMJn84m7ZS4aOoyuLLxYneng5P1jvysiWGpHfMfF 4S6fnmnPuBg4TpHiKYeVQ6zs+oGnssv7gbYBiwU0gSMar4VT8xcaRfWeT3B0Vtab OcZVMXvnTvUvFneWGfmRZK1THZAskyKPHhiMo4CVL1PBj4qMRiTCiztSRum6CyLC 1PFcjTap4tZAHDQ= -----END CERTIFICATE-----Generated at Tue May 12 22:16:24 2026 by rpki-client