$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/51EA2D201A9B22BD5BF9F0D6225CE19E241F63DF.cer File: 51EA2D201A9B22BD5BF9F0D6225CE19E241F63DF.cer (raw, json) Hash identifier: tTkad/tYh0NO1v4drzxNxTf23/H1gp4hQhUYwZlL84g= Subject key identifier: 51:EA:2D:20:1A:9B:22:BD:5B:F9:F0:D6:22:5C:E1:9E:24:1F:63:DF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 575714AEAB811542F0BEF6FA7F715ECEBCDCB322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/51EA2D201A9B22BD5BF9F0D6225CE19E241F63DF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:10:20 +0000 Certificate not after: Sun 02 May 2027 00:15:20 +0000 Subordinate resources: IP: 103.251.180.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:57:14:ae:ab:81:15:42:f0:be:f6:fa:7f:71:5e:ce:bc:dc:b3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:10:20 2026 GMT Not After : May 2 00:15:20 2027 GMT Subject: CN=51EA2D201A9B22BD5BF9F0D6225CE19E241F63DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:43:6c:d2:aa:b1:db:27:e1:e0:6d:b7:55: 37:62:e3:a1:ec:cb:20:06:27:56:54:75:82:78:73: 03:b2:2c:c3:8d:ba:55:6f:5d:42:11:76:44:b4:a0: 87:5f:3c:ab:40:56:a0:0f:d1:7c:86:38:6a:c0:bc: b9:54:26:5e:c3:51:f2:60:49:27:1b:e2:82:e3:cb: c6:ac:6e:3d:ee:cf:33:09:99:61:ba:37:3e:0f:c7: 02:44:2c:e0:60:a7:91:58:bf:57:24:ef:f4:7b:59: bf:11:de:a9:14:07:fc:98:9b:63:de:3a:f5:d0:a8: 93:5d:00:51:21:f6:e7:ae:29:8a:d0:5d:a5:db:48: b6:07:d7:81:a4:d8:14:a6:26:4a:13:f6:39:6b:90: 53:f4:dd:f7:b9:08:34:48:82:2e:fe:ec:4f:be:30: 1d:32:b2:15:66:6d:7d:f5:4e:27:d7:fa:fd:f9:1c: b8:a4:60:e1:58:d4:ad:91:9c:90:67:6f:f3:78:71: 86:ea:73:3d:c7:87:db:12:25:ef:d9:1c:23:1e:e4: 4c:17:4e:4f:fa:ce:cd:22:f3:ba:94:fd:dc:db:c2: 60:f3:f4:4e:4b:e4:1e:fa:dc:0b:17:ab:8f:37:5c: 29:b2:3b:30:73:0e:b4:92:9c:46:97:fc:c6:2c:86: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:EA:2D:20:1A:9B:22:BD:5B:F9:F0:D6:22:5C:E1:9E:24:1F:63:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/51EA2D201A9B22BD5BF9F0D6225CE19E241F63DF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.180.0/22 Signature Algorithm: sha256WithRSAEncryption 07:16:96:06:a3:e2:a4:b9:d5:26:b3:d1:49:38:3c:be:e8:42: 1d:e2:37:34:30:64:9d:fd:6d:19:ae:13:e8:5c:02:27:e1:ee: 84:d1:63:98:d9:50:9f:39:83:3d:a5:f0:58:2b:9f:23:cc:8b: 67:e3:12:1c:89:8d:1f:56:ba:b4:fc:95:d8:3b:ed:4c:e5:06: 53:f0:b5:e0:58:cb:f6:d5:76:76:e6:8d:b2:ea:1f:36:ec:9a: 43:3a:17:7f:f4:91:ea:07:5a:4c:b0:2e:5e:bf:68:55:42:c8: 14:e9:35:06:4d:2b:36:7d:35:55:8d:41:ef:4f:8f:e6:68:bf: 23:ce:a7:81:5d:51:08:35:69:ea:cb:8d:cf:44:71:e4:64:dc: 67:36:50:66:3a:ca:b1:18:5f:1a:ce:16:37:38:e1:75:c9:bb: 02:a3:14:16:f8:57:c0:c3:6b:22:fd:7c:a3:ac:f5:73:8c:f8: dc:5d:b8:ea:73:9d:b6:1c:0b:a1:3e:4b:4f:31:24:d5:60:b3: ee:c5:95:f7:76:a3:5e:fe:cf:08:bf:8c:c2:48:07:3e:8a:e1: a1:08:b3:49:5f:68:58:b7:5e:dd:bf:d0:de:5c:e7:2f:60:1f: 05:7c:18:96:b6:15:52:61:c4:68:8b:6a:ed:2e:8b:3a:6b:82: ca:a2:b0:50 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUV1cUrquBFULwvvb6f3FezrzcsyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTAyMFoX DTI3MDUwMjAwMTUyMFowMzExMC8GA1UEAxMoNTFFQTJEMjAxQTlCMjJCRDVCRjlG MEQ2MjI1Q0UxOUUyNDFGNjNERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqkQ2zSqrHbJ+HgbbdVN2LjoezLIAYnVlR1gnhzA7Isw426VW9dQhF2RLSg h188q0BWoA/RfIY4asC8uVQmXsNR8mBJJxviguPLxqxuPe7PMwmZYbo3Pg/HAkQs 4GCnkVi/VyTv9HtZvxHeqRQH/JibY9469dCok10AUSH2564pitBdpdtItgfXgaTY FKYmShP2OWuQU/Td97kINEiCLv7sT74wHTKyFWZtffVOJ9f6/fkcuKRg4VjUrZGc kGdv83hxhupzPceH2xIl79kcIx7kTBdOT/rOzSLzupT93NvCYPP0TkvkHvrcCxer jzdcKbI7MHMOtJKcRpf8xiyGVPUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFHqLSAamyK9W/nw1iJc4Z4kH2PfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJlMzNhOWVmLTViNWYtNDQyOS04MzRiLTk1YjJiNzM2ODBlNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZTMzYTll Zi01YjVmLTQ0MjktODM0Yi05NWIyYjczNjgwZTYvMC81MUVBMkQyMDFBOUIyMkJE NUJGOUYwRDYyMjVDRTE5RTI0MUY2M0RGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ/u0MA0GCSqGSIb3DQEBCwUAA4IBAQAHFpYGo+KkudUms9FJODy+6EId4jc0 MGSd/W0ZrhPoXAIn4e6E0WOY2VCfOYM9pfBYK58jzItn4xIciY0fVrq0/JXYO+1M 5QZT8LXgWMv21XZ25o2y6h827JpDOhd/9JHqB1pMsC5ev2hVQsgU6TUGTSs2fTVV jUHvT4/maL8jzqeBXVEINWnqy43PRHHkZNxnNlBmOsqxGF8azhY3OOF1ybsCoxQW +FfAw2si/XyjrPVzjPjcXbjqc522HAuhPktPMSTVYLPuxZX3dqNe/s8Iv4zCSAc+ iuGhCLNJX2hYt17dv9DeXOcvYB8FfBiWthVSYcRoi2rtLos6a4LKorBQ -----END CERTIFICATE-----Generated at Tue May 12 22:02:51 2026 by rpki-client