$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer File: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer (raw, json) Hash identifier: oDU+jeSdnj6YQXiECwlpqJYbikmMvY58cq54Yda3FWg= Subject key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4ADD85F0A457237BF2A1DD7178120DF5280E17C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:30 +0000 Certificate not after: Sun 02 May 2027 01:35:30 +0000 Subordinate resources: IP: 103.65.236.0/23 IP: 103.77.106.0/23 IP: 2001:df2:a200::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:dd:85:f0:a4:57:23:7b:f2:a1:dd:71:78:12:0d:f5:28:0e:17:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:30 2026 GMT Not After : May 2 01:35:30 2027 GMT Subject: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a4:12:13:50:7e:c6:8d:e1:7d:ff:1c:b0:6f: c7:1e:57:60:bb:e5:f5:5f:29:9b:51:eb:8a:4c:df: 40:3f:27:a6:f6:c0:f5:13:50:af:ad:0a:12:34:3f: 00:cc:31:10:8b:bb:37:fd:85:73:d1:a0:10:fb:01: ce:a1:09:3a:1d:35:50:6f:74:7f:83:20:57:28:e7: d2:94:d3:fa:ac:90:8b:80:b6:a7:b8:96:4b:27:0b: 9f:11:dd:17:fb:66:8e:57:58:dd:83:16:a1:e9:4d: 05:57:f6:16:14:43:57:16:c6:c7:b7:77:63:44:56: 00:39:c2:16:d6:c3:a2:a1:33:e2:79:81:78:3f:0d: 30:b5:db:c5:20:5f:49:4f:37:58:75:9b:e4:11:7d: 6e:8a:29:fa:1a:17:9d:2c:2c:ed:4d:97:56:6d:d3: 4d:95:fa:3f:7d:73:17:5a:b7:da:ce:c7:7b:4a:ea: d6:77:3d:a3:4f:10:5c:1e:ca:05:07:7f:1f:bc:04: b2:a4:69:0b:ea:2f:d2:1f:68:7d:f0:c6:66:a3:ad: 38:1e:31:b6:ec:14:34:d0:7d:1b:25:91:4b:cb:60: 2d:96:c0:d7:fd:27:7c:46:9d:a9:ac:e0:6d:07:2b: 52:6a:5a:df:b5:44:a9:ee:a3:a9:e7:d4:db:ce:b8: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.236.0/23 103.77.106.0/23 IPv6: 2001:df2:a200::/48 Signature Algorithm: sha256WithRSAEncryption 12:5c:3f:ac:f9:4e:94:13:2a:ff:67:f3:28:18:be:ac:b4:57: 20:8c:18:94:21:cb:7a:ed:73:8d:fa:be:71:3d:d2:4d:bf:47: 11:5c:70:02:b2:bb:de:8b:ca:bd:85:ad:c0:d0:01:ae:8e:85: c7:34:38:ca:34:f9:f5:9d:05:88:77:c5:35:be:2f:2a:77:4d: 70:54:97:7b:93:4e:1a:59:7e:00:cd:d7:4b:de:f4:e8:f8:02: 02:45:ef:0d:4d:80:24:58:d4:68:a2:77:68:bc:dc:9b:5e:56: 32:d6:25:0a:54:34:e4:8f:8e:a5:ca:d2:8d:2f:f4:f9:8c:ab: c9:82:ff:1c:62:f4:ea:e3:29:89:c6:21:a6:93:e4:74:f5:95: 5d:fd:f5:73:d4:de:47:98:be:82:d1:2e:84:6f:d8:c2:f2:6f: 80:d8:a6:89:fa:57:3d:e6:d6:7c:a1:f0:d1:fa:83:36:f4:70: 4b:a5:ca:5e:b4:a6:16:61:08:df:2e:b4:80:f7:8b:81:5f:96: 76:f0:a7:89:21:69:f3:9c:73:a2:d6:a1:62:2a:f8:47:96:f3: 94:45:e2:c5:94:b2:c0:4f:c7:68:15:e3:37:38:2f:19:84:1a: fa:4b:cf:8a:39:20:cb:e1:9f:ac:87:b4:41:68:99:20:e3:69: a8:2c:51:87 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUSt2F8KRXI3vyod1xeBIN9SgOF8kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzAzMFoX DTI3MDUwMjAxMzUzMFowMzExMC8GA1UEAxMoNDdFQzg4NEQ1Rjc5MzU4MjNFMDc0 RTZEQ0REMkIyQjc1QUI0Q0JBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSkEhNQfsaN4X3/HLBvxx5XYLvl9V8pm1HrikzfQD8npvbA9RNQr60KEjQ/ AMwxEIu7N/2Fc9GgEPsBzqEJOh01UG90f4MgVyjn0pTT+qyQi4C2p7iWSycLnxHd F/tmjldY3YMWoelNBVf2FhRDVxbGx7d3Y0RWADnCFtbDoqEz4nmBeD8NMLXbxSBf SU83WHWb5BF9boop+hoXnSws7U2XVm3TTZX6P31zF1q32s7He0rq1nc9o08QXB7K BQd/H7wEsqRpC+ov0h9offDGZqOtOB4xtuwUNNB9GyWRS8tgLZbA1/0nfEadqazg bQcrUmpa37VEqe6jqefU28644T8CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEfsiE1feTWCPgdObc3SsrdatMugMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2MDhhMmUyLWY4MTAtNDZlOC1hNWExLTU2ZWM1YTM1ZDJhZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNjA4YTJl Mi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC80N0VDODg0RDVGNzkzNTgy M0UwNzRFNkRDREQyQjJCNzVBQjRDQkEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZ0HsAwQBZ01qMA8EAgACMAkDBwAgAQ3yogAwDQYJKoZIhvcNAQELBQADggEB ABJcP6z5TpQTKv9n8ygYvqy0VyCMGJQhy3rtc436vnE90k2/RxFccAKyu96Lyr2F rcDQAa6Ohcc0OMo0+fWdBYh3xTW+Lyp3TXBUl3uTThpZfgDN10ve9Oj4AgJF7w1N gCRY1Giid2i83JteVjLWJQpUNOSPjqXK0o0v9PmMq8mC/xxi9OrjKYnGIaaT5HT1 lV399XPU3keYvoLRLoRv2MLyb4DYpon6Vz3m1nyh8NH6gzb0cEulyl60phZhCN8u tID3i4Fflnbwp4khafOcc6LWoWIq+EeW85RF4sWUssBPx2gV4zc4LxmEGvpLz4o5 IMvhn6yHtEFomSDjaagsUYc= -----END CERTIFICATE-----Generated at Tue May 12 22:04:03 2026 by rpki-client