$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer File: 47C0520954E7036D01276256DF53723219F2EDC8.cer (raw, json) Hash identifier: Jh5qCTotoWCBdwO2ZbEtgTqbNE4h0T+H3kLNRDYlZTk= Subject key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 49969A90584155BF7A95B22B3F63D286FFDC8EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:25:55 +0000 Certificate not after: Sun 02 May 2027 02:30:55 +0000 Subordinate resources: IP: 103.215.16.0/22 IP: 202.51.198.0/24 IP: 202.51.214.0/24 IP: 2404:cf80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:96:9a:90:58:41:55:bf:7a:95:b2:2b:3f:63:d2:86:ff:dc:8e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:25:55 2026 GMT Not After : May 2 02:30:55 2027 GMT Subject: CN=47C0520954E7036D01276256DF53723219F2EDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:d2:d7:58:88:25:6f:27:cd:dd:8d:25:a7: b0:06:46:ba:d9:5b:bd:fd:72:41:b0:3b:42:93:72: a4:fa:ca:e5:f5:7e:df:0f:da:2f:4b:c0:96:f5:d4: e6:0c:c3:70:78:e3:f5:29:14:71:7b:12:9b:28:55: 0b:be:d5:0a:36:50:89:97:ee:10:7a:cd:9f:a8:e1: d5:7f:6a:4e:6b:62:f8:d5:c5:d6:60:09:52:ab:06: 07:44:52:e0:1b:88:0c:0a:2f:b4:b8:be:91:42:77: 2c:8a:64:20:c5:e3:a8:77:c4:20:ce:4d:63:a3:3f: 11:f3:aa:ce:f2:2b:e2:d2:1b:8a:aa:67:25:92:af: d5:fb:95:7c:c9:47:8f:0c:76:5b:1b:d0:ab:53:89: 01:0e:7f:b4:33:5b:b2:58:ee:cf:e6:69:94:5b:a9: 63:55:22:d6:fc:fc:71:bc:e5:e4:90:99:89:3c:a2: d8:7a:c6:c0:c5:ec:42:7c:b1:02:00:1a:c8:ee:65: 01:39:3e:b0:c2:d3:df:0d:0e:4f:b0:1a:12:3d:48: 4f:3c:9b:5e:8f:61:ab:8c:f4:7a:01:3c:d3:d2:04: 47:86:00:83:15:3f:1f:2e:d1:32:11:3d:de:62:34: b0:c9:71:42:4d:4e:f0:5d:d3:22:6e:ab:53:9a:7d: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.16.0/22 202.51.198.0/24 202.51.214.0/24 IPv6: 2404:cf80::/32 Signature Algorithm: sha256WithRSAEncryption 42:15:25:4c:0a:ad:dd:ee:c8:80:61:c9:b6:f0:c2:65:cc:87: 31:f7:c1:03:4e:ae:ff:93:62:65:44:97:b0:98:a9:44:9e:20: 94:dc:f1:ec:b2:ad:6d:4e:3c:fa:b7:96:7e:8e:3e:48:7a:16: ae:a1:26:a2:33:40:72:d6:58:f2:32:71:36:a7:47:e1:66:9d: 1c:d3:c7:61:65:3b:06:03:84:e5:ff:d3:7f:9d:f9:6b:94:2c: b1:ff:d8:18:50:5e:20:0c:df:cf:5a:f7:bd:a0:2c:f4:9d:4b: 0a:3c:57:9e:77:34:31:9d:a5:2c:98:cc:46:80:b9:b4:b3:4f: 9d:53:9d:bd:11:bc:f8:95:f5:d2:17:77:cf:c5:0e:17:0b:31: 75:94:68:a9:50:9e:f4:79:de:aa:56:f8:00:30:34:67:36:95: 8d:41:ce:8d:b6:4e:56:69:e8:b5:ae:2c:55:a0:07:36:2e:bd: 21:fc:99:c0:47:ce:59:48:4b:1b:a9:6b:92:0f:c9:8b:6b:f4: 09:ff:75:c2:c9:3c:98:22:6c:ad:1b:76:b2:5e:e7:15:1c:b3: af:19:db:8f:a4:23:4f:ec:b1:a2:b7:0d:3a:f4:52:57:cf:c6: fa:8b:63:2f:2a:8e:19:33:d8:af:31:e1:f2:0a:08:ea:78:99: e9:56:b3:af -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUSZaakFhBVb96lbIrP2PShv/cjrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjU1NVoX DTI3MDUwMjAyMzA1NVowMzExMC8GA1UEAxMoNDdDMDUyMDk1NEU3MDM2RDAxMjc2 MjU2REY1MzcyMzIxOUYyRURDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIru0tdYiCVvJ83djSWnsAZGutlbvf1yQbA7QpNypPrK5fV+3w/aL0vAlvXU 5gzDcHjj9SkUcXsSmyhVC77VCjZQiZfuEHrNn6jh1X9qTmti+NXF1mAJUqsGB0RS 4BuIDAovtLi+kUJ3LIpkIMXjqHfEIM5NY6M/EfOqzvIr4tIbiqpnJZKv1fuVfMlH jwx2WxvQq1OJAQ5/tDNbsljuz+ZplFupY1Ui1vz8cbzl5JCZiTyi2HrGwMXsQnyx AgAayO5lATk+sMLT3w0OT7AaEj1ITzybXo9hq4z0egE809IER4YAgxU/Hy7RMhE9 3mI0sMlxQk1O8F3TIm6rU5p9FAkCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEfAUglU5wNtASdiVt9TcjIZ8u3IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VkNzBjYzM3LTFmYTYtNGZhMC1hODhjLTQwOGFlZDI4ZDlhYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZDcwY2Mz Ny0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC80N0MwNTIwOTU0RTcwMzZE MDEyNzYyNTZERjUzNzIzMjE5RjJFREM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCZ9cQAwQAyjPGAwQAyjPWMA0EAgACMAcDBQAkBM+AMA0GCSqGSIb3DQEBCwUA A4IBAQBCFSVMCq3d7siAYcm28MJlzIcx98EDTq7/k2JlRJewmKlEniCU3PHssq1t Tjz6t5Z+jj5IehauoSaiM0By1ljyMnE2p0fhZp0c08dhZTsGA4Tl/9N/nflrlCyx /9gYUF4gDN/PWve9oCz0nUsKPFeedzQxnaUsmMxGgLm0s0+dU529Ebz4lfXSF3fP xQ4XCzF1lGipUJ70ed6qVvgAMDRnNpWNQc6Ntk5Waei1rixVoAc2Lr0h/JnAR85Z SEsbqWuSD8mLa/QJ/3XCyTyYImytG3ayXucVHLOvGduPpCNP7LGitw069FJXz8b6 i2MvKo4ZM9ivMeHyCgjqeJnpVrOv -----END CERTIFICATE-----Generated at Tue May 12 22:52:42 2026 by rpki-client