$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer File: 5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer (raw, json) Hash identifier: 9Rbc6wRMkEE1ETBhaxoq5rq6lfTBtoEoweRs6QrcdNk= Subject key identifier: 51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76F6C9C624B19C30493E00E5651A9BEB58BD4516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:05 +0000 Certificate not after: Sun 02 May 2027 01:10:05 +0000 Subordinate resources: IP: 103.90.64.0/24 IP: 103.108.190.0/24 IP: 103.108.200.0/23 IP: 2001:df0:d700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f6:c9:c6:24:b1:9c:30:49:3e:00:e5:65:1a:9b:eb:58:bd:45:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:05:05 2026 GMT Not After : May 2 01:10:05 2027 GMT Subject: CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:9f:a1:fe:d3:78:b2:52:79:a5:13:b5:be: e7:20:b9:f4:4f:5b:23:9c:2b:66:cb:04:05:07:48: 3f:d4:e5:2f:bc:85:a8:8a:bf:1f:dd:73:43:ce:5e: af:92:e7:3e:ca:c8:21:a0:be:56:bd:c6:ce:fb:ef: 07:11:42:b4:9c:51:c0:ad:4b:2a:33:ac:bc:8f:3c: eb:7a:06:af:58:66:25:81:29:e7:48:2b:9d:ba:6c: a2:7b:55:7c:6d:45:51:2f:28:0a:f1:14:eb:6a:e5: 6d:99:ae:6f:9d:b3:ae:db:ec:69:89:e4:c3:f4:c1: 77:b0:65:8b:dc:01:2b:ed:fb:25:8d:c2:e8:09:ae: b7:61:3c:ca:ab:c9:6f:85:b7:af:51:d7:f7:b0:77: 78:b9:e8:f7:ef:f6:57:d6:14:06:62:7e:cd:e8:a0: 9a:88:4f:1c:6c:05:e9:06:2c:f5:25:dd:4e:42:95: 3c:60:04:df:bd:2a:dc:05:48:eb:64:1b:c9:5f:06: 29:15:37:a2:65:76:7c:1e:b7:8b:a0:6b:70:7b:c6: e9:83:41:b7:ae:25:f3:97:fd:5a:c8:af:23:a5:a0: 54:fc:ec:26:9e:92:08:a0:d1:3a:37:d6:df:fc:ed: 2a:df:4d:99:ce:c5:97:8d:fb:6e:3c:61:ea:06:5d: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.64.0/24 103.108.190.0/24 103.108.200.0/23 IPv6: 2001:df0:d700::/48 Signature Algorithm: sha256WithRSAEncryption 1a:fb:1b:26:55:e2:ad:4e:bd:17:21:6e:c7:fe:18:f6:aa:ed: dd:e6:1f:eb:d5:b8:24:56:b0:92:f7:e3:3c:45:cb:0a:3c:05: 90:db:b9:9a:84:d8:f9:4e:a9:53:23:87:1f:52:c7:67:fe:cf: f7:20:cf:6a:c1:61:bb:49:80:26:86:26:8e:e3:a1:cc:e2:eb: 67:f6:71:d1:30:ab:6e:91:84:11:be:43:98:4e:d7:19:25:7c: 88:b0:94:b5:57:10:df:a6:91:ab:12:ac:cd:bb:66:54:92:80: 4c:84:56:dc:07:01:63:3f:b3:2b:73:6d:81:7b:d8:e7:71:f2: 15:a5:37:7f:be:9d:8f:1c:f4:27:7c:fb:3e:5f:54:d1:b9:30: 02:fc:33:a0:3c:cf:53:1f:8b:39:13:48:d7:c1:d0:ed:d6:fb: ad:ce:70:21:46:a1:d7:a2:2d:bc:46:2f:0f:2b:8d:45:fe:62: 81:ad:77:69:02:07:1b:01:63:61:dd:6b:99:ad:c4:b6:23:0c: 4e:1f:f3:c4:9d:36:62:e1:8a:e2:35:56:97:fe:b4:41:a0:79: cf:a4:46:d4:3b:0c:06:e4:a0:3f:8f:0c:1e:2e:95:b2:1c:0b: 0c:4a:01:ed:1c:9a:97:2a:f5:3d:77:9e:9d:a9:0c:07:7f:a0: 95:3b:5b:8b -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUdvbJxiSxnDBJPgDlZRqb61i9RRYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDUwNVoX DTI3MDUwMjAxMTAwNVowMzExMC8GA1UEAxMoNTEwODE3OUUzRkI1N0Y1QUM0NUYx NzczMjc5QTY5QUY5NERDMTBEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQVn6H+03iyUnmlE7W+5yC59E9bI5wrZssEBQdIP9TlL7yFqIq/H91zQ85e r5LnPsrIIaC+Vr3GzvvvBxFCtJxRwK1LKjOsvI8863oGr1hmJYEp50grnbpsontV fG1FUS8oCvEU62rlbZmub52zrtvsaYnkw/TBd7Bli9wBK+37JY3C6Amut2E8yqvJ b4W3r1HX97B3eLno9+/2V9YUBmJ+zeigmohPHGwF6QYs9SXdTkKVPGAE370q3AVI 62QbyV8GKRU3omV2fB63i6BrcHvG6YNBt64l85f9WsivI6WgVPzsJp6SCKDROjfW 3/ztKt9Nmc7Fl437bjxh6gZdGtcCAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFEIF54/tX9axF8Xcyeaaa+U3BDRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdmMzQwNGU2LWJiMmEtNDRiMC1iZWRlLWE4YjM1MDE0NjEyZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZjM0MDRl Ni1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC81MTA4MTc5RTNGQjU3RjVB QzQ1RjE3NzMyNzlBNjlBRjk0REMxMEQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATAS AwQAZ1pAAwQAZ2y+AwQBZ2zIMA8EAgACMAkDBwAgAQ3w1wAwDQYJKoZIhvcNAQEL BQADggEBABr7GyZV4q1OvRchbsf+GPaq7d3mH+vVuCRWsJL34zxFywo8BZDbuZqE 2PlOqVMjhx9Sx2f+z/cgz2rBYbtJgCaGJo7joczi62f2cdEwq26RhBG+Q5hO1xkl fIiwlLVXEN+mkasSrM27ZlSSgEyEVtwHAWM/sytzbYF72Odx8hWlN3++nY8c9Cd8 +z5fVNG5MAL8M6A8z1MfizkTSNfB0O3W+63OcCFGodeiLbxGLw8rjUX+YoGtd2kC BxsBY2Hda5mtxLYjDE4f88SdNmLhiuI1Vpf+tEGgec+kRtQ7DAbkoD+PDB4ulbIc CwxKAe0cmpcq9T13np2pDAd/oJU7W4s= -----END CERTIFICATE-----Generated at Tue May 12 22:03:34 2026 by rpki-client