$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer (raw, json) Hash identifier: WuaLE+cOsah+CV8Qu4zo/y/S533twpm/j7//causKLg= Subject key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 480908A274CD881D1A5C88B9B10A5EFEBCBC0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:51:41 +0000 Certificate not after: Sun 02 May 2027 01:56:41 +0000 Subordinate resources: IP: 103.156.232.0/23 IP: 2406:8fc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:09:08:a2:74:cd:88:1d:1a:5c:88:b9:b1:0a:5e:fe:bc:bc:0a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:51:41 2026 GMT Not After : May 2 01:56:41 2027 GMT Subject: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:a2:52:81:f4:47:b7:4b:e5:89:93:93:87: c9:2b:4f:e1:a6:ca:71:20:f6:d2:00:11:db:9d:c6: ad:bf:a1:3f:b6:2f:95:14:c0:c0:73:7c:aa:5b:63: dc:42:f1:62:32:9f:28:c2:f7:42:d1:24:8f:80:c1: 7c:93:2b:26:b5:b2:2f:fe:ef:2d:ac:95:b4:ea:33: 12:db:3c:35:a6:a8:5f:c2:79:f1:e7:44:81:0d:bd: ec:0e:b9:7b:98:45:73:99:ab:03:7a:c0:4b:05:67: 10:7e:bd:30:f4:f2:70:b9:46:d6:e2:80:8f:9f:15: 34:f8:31:a1:65:09:58:56:5b:37:82:94:31:ba:82: 35:4c:1f:16:50:80:5d:7f:bc:21:9e:8a:12:1d:23: 27:c9:ac:04:1d:9c:a2:57:19:cf:8b:52:7c:bd:78: bc:21:74:fa:10:1c:9e:11:42:59:23:34:fd:2c:73: ff:2a:e3:0e:9f:04:04:3f:ac:34:65:9d:db:36:15: cf:d9:94:7b:1a:bd:c8:46:99:59:df:eb:0e:a8:8c: db:0a:10:89:7e:fb:07:63:e6:16:31:f1:68:47:e0: 6e:5a:20:04:4d:2e:b8:7b:e6:8c:42:01:3b:c9:43: df:e1:18:11:0a:3e:dd:fb:58:e4:1b:8a:a7:96:9e: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.232.0/23 IPv6: 2406:8fc0::/32 Signature Algorithm: sha256WithRSAEncryption 36:43:a2:76:59:6e:d6:7a:35:a7:16:d0:42:63:db:0e:c3:db: 0b:47:63:8c:41:d0:aa:56:24:20:61:bd:27:69:57:0b:ad:e9: a9:85:43:79:ac:4a:11:e3:f8:de:fb:ac:8b:6c:a3:76:1c:5a: fd:be:03:a0:10:7e:7d:8d:c7:6c:d2:e5:78:08:b9:ff:83:f2: 10:29:3d:7a:33:d0:f9:74:3a:7f:3f:8d:6b:a2:4d:4f:7c:72: 3c:d0:ec:b2:1e:36:46:18:42:89:47:d4:76:2e:60:e8:ec:94: 0c:09:dd:cb:ae:8a:e4:1a:0c:f1:2b:f5:73:8c:bc:8d:2d:26: f4:6e:2e:34:89:9b:a3:10:7f:46:22:30:04:73:fb:33:dd:cb: 34:5d:5c:f4:34:d3:28:2f:d8:b1:30:fa:73:5c:02:77:4e:e5: d5:48:16:4d:1b:e0:94:71:ae:d9:04:a4:aa:a9:00:de:42:9a: e5:59:0f:ce:3b:9a:17:8f:fa:51:17:cc:68:51:ae:d3:71:8e: 1d:51:d7:bf:89:6f:70:26:c8:38:3c:46:48:b7:2c:db:79:ca: d1:ba:5a:6a:02:83:9d:47:b2:3c:be:76:7c:f7:59:28:32:a6: 5b:60:a6:8c:72:2c:ef:07:5c:12:7d:57:1a:4f:b5:26:af:74: 0b:41:13:5a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUSAkIonTNiB0aXIi5sQpe/ry8Co8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTE0MVoX DTI3MDUwMjAxNTY0MVowMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVF RTg2RkI1M0E1MDVERUIzMDhEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3SolKB9Ee3S+WJk5OHyStP4abKcSD20gAR253Grb+hP7YvlRTAwHN8qltj 3ELxYjKfKML3QtEkj4DBfJMrJrWyL/7vLayVtOozEts8NaaoX8J58edEgQ297A65 e5hFc5mrA3rASwVnEH69MPTycLlG1uKAj58VNPgxoWUJWFZbN4KUMbqCNUwfFlCA XX+8IZ6KEh0jJ8msBB2colcZz4tSfL14vCF0+hAcnhFCWSM0/Sxz/yrjDp8EBD+s NGWd2zYVz9mUexq9yEaZWd/rDqiM2woQiX77B2PmFjHxaEfgblogBE0uuHvmjEIB O8lD3+EYEQo+3ftY5BuKp5aeCV8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEeHzVkfb37foq7uhvtTpQXeswjYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M3MmYzZGI0LTQxZTItNDAyOC05MDhiLTUwOTdjOWIxYzFmNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNzJmM2Ri NC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC80Nzg3Q0Q1OTFGNkY3RURG QTJBRUVFODZGQjUzQTUwNURFQjMwOEQ4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5zoMA0EAgACMAcDBQAkBo/AMA0GCSqGSIb3DQEBCwUAA4IBAQA2Q6J2WW7W ejWnFtBCY9sOw9sLR2OMQdCqViQgYb0naVcLremphUN5rEoR4/je+6yLbKN2HFr9 vgOgEH59jcds0uV4CLn/g/IQKT16M9D5dDp/P41rok1PfHI80OyyHjZGGEKJR9R2 LmDo7JQMCd3LrorkGgzxK/VzjLyNLSb0bi40iZujEH9GIjAEc/sz3cs0XVz0NNMo L9ixMPpzXAJ3TuXVSBZNG+CUca7ZBKSqqQDeQprlWQ/OO5oXj/pRF8xoUa7TcY4d Ude/iW9wJsg4PEZItyzbecrRulpqAoOdR7I8vnZ891koMqZbYKaMcizvB1wSfVca T7Umr3QLQRNa -----END CERTIFICATE-----Generated at Tue May 12 22:32:38 2026 by rpki-client