$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer File: 521B83183A9325633BB6ADA03FF17A79CADB35DF.cer (raw, json) Hash identifier: +VSdnwNsPp+7QSojS3VKt2ELskfD4dVNQt9lnIQqrsE= Subject key identifier: 52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0D2CBD50B230D334A884140564DD59DC502D4D1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:08:41 +0000 Certificate not after: Sun 02 May 2027 01:13:41 +0000 Subordinate resources: IP: 103.177.188.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2c:bd:50:b2:30:d3:34:a8:84:14:05:64:dd:59:dc:50:2d:4d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:08:41 2026 GMT Not After : May 2 01:13:41 2027 GMT Subject: CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:b2:9d:4d:2b:9b:dc:d4:a9:4d:bf:b6:ea: a8:d3:10:9e:8c:4f:1e:3b:03:4a:b7:27:b7:68:b9: 82:5f:60:a9:70:e3:24:3b:09:f5:4a:b5:6a:14:a3: 1a:51:a2:88:29:6f:e0:c2:53:ba:f9:42:38:e9:c3: b3:76:c7:64:5f:47:71:11:f4:74:2d:7a:6a:b5:b0: 65:1a:9b:23:ec:c3:7a:c4:66:1b:9c:7d:1f:ce:0c: 0a:c8:74:03:8d:e6:67:26:19:70:a7:87:db:a6:1e: a8:15:93:bc:8c:49:a0:6f:5f:e2:7d:91:01:bf:ca: 92:36:ab:5a:ec:6f:31:94:87:f9:04:fd:22:05:1a: 35:76:23:9b:83:f7:c6:ce:3f:39:04:92:be:16:37: fa:d3:ca:22:79:d5:6c:07:b7:4b:8d:4f:23:ff:b2: 3a:b5:2e:0b:d2:24:52:b3:63:09:d7:2e:23:33:81: 8d:cc:38:4c:e1:6d:4e:6c:1a:b8:a2:e9:bf:55:62: bc:ad:a1:56:88:73:95:23:79:cc:da:40:e1:17:50: b0:15:fe:fc:24:ed:41:78:8d:9f:9d:00:86:f9:0c: 80:ce:ff:3c:d7:41:25:34:15:5c:f5:23:bf:74:40: 40:5a:27:bd:57:b5:26:2f:85:05:cd:80:31:4a:f7: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.188.0/23 Signature Algorithm: sha256WithRSAEncryption 27:c8:9b:41:ec:c4:aa:97:70:b6:02:bb:e3:50:34:31:10:b1: c2:75:c9:dd:2c:fd:f5:55:fb:ed:f5:e6:bc:fd:ed:36:50:de: a7:06:98:fb:d6:e7:52:fe:6c:27:c8:fb:fc:fb:9d:79:3b:07: 76:16:c5:d1:e5:d6:f0:42:08:96:db:e9:4f:28:2c:f3:ab:88: f9:31:1c:07:0c:24:a1:45:f4:34:a6:42:a7:99:df:a7:fe:13: a5:15:ba:d7:9e:fe:8b:a2:e6:5e:46:4a:cd:3f:f5:40:d0:e2: 38:d1:d8:87:ab:69:f5:0c:5b:d8:3d:a7:48:23:e3:d9:89:91: 5c:61:a7:89:03:81:fc:35:f4:e2:13:26:0c:25:f6:6b:dc:05: dc:a5:fe:6d:6f:6c:4b:00:2b:23:77:3e:21:2b:d0:28:73:24: c1:fd:72:73:7a:7f:fa:a9:14:fc:2a:e6:8e:82:de:28:f7:e7: 20:49:b7:a5:02:7a:78:92:d3:23:7b:de:d2:b0:36:be:7e:69: 10:3e:e3:ea:87:47:04:6b:56:08:fd:c2:6a:67:95:9d:ac:ae: d1:fa:4d:da:66:f1:85:d8:b4:54:1c:13:85:68:09:33:2f:27: 87:56:d7:8a:d5:e3:ec:c9:7c:07:9e:53:76:16:d0:3e:2e:c6: 0a:de:ce:3d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDSy9ULIw0zSohBQFZN1Z3FAtTR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDg0MVoX DTI3MDUwMjAxMTM0MVowMzExMC8GA1UEAxMoNTIxQjgzMTgzQTkzMjU2MzNCQjZB REEwM0ZGMTdBNzlDQURCMzVERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5Usp1NK5vc1KlNv7bqqNMQnoxPHjsDSrcnt2i5gl9gqXDjJDsJ9Uq1ahSj GlGiiClv4MJTuvlCOOnDs3bHZF9HcRH0dC16arWwZRqbI+zDesRmG5x9H84MCsh0 A43mZyYZcKeH26YeqBWTvIxJoG9f4n2RAb/KkjarWuxvMZSH+QT9IgUaNXYjm4P3 xs4/OQSSvhY3+tPKInnVbAe3S41PI/+yOrUuC9IkUrNjCdcuIzOBjcw4TOFtTmwa uKLpv1VivK2hVohzlSN5zNpA4RdQsBX+/CTtQXiNn50AhvkMgM7/PNdBJTQVXPUj v3RAQFonvVe1Ji+FBc2AMUr3KxECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFIbgxg6kyVjO7atoD/xennK2zXfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgzOTJmODk5LWU4M2MtNDcwNi1hOWExLTgyMjU2YmQ0ODIzNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MzkyZjg5 OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC81MjFCODMxODNBOTMyNTYz M0JCNkFEQTAzRkYxN0E3OUNBREIzNURGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7G8MA0GCSqGSIb3DQEBCwUAA4IBAQAnyJtB7MSql3C2ArvjUDQxELHCdcnd LP31Vfvt9ea8/e02UN6nBpj71udS/mwnyPv8+515Owd2FsXR5dbwQgiW2+lPKCzz q4j5MRwHDCShRfQ0pkKnmd+n/hOlFbrXnv6LouZeRkrNP/VA0OI40diHq2n1DFvY PadII+PZiZFcYaeJA4H8NfTiEyYMJfZr3AXcpf5tb2xLACsjdz4hK9AocyTB/XJz en/6qRT8KuaOgt4o9+cgSbelAnp4ktMje97SsDa+fmkQPuPqh0cEa1YI/cJqZ5Wd rK7R+k3aZvGF2LRUHBOFaAkzLyeHVteK1ePsyXwHnlN2FtA+LsYK3s49 -----END CERTIFICATE-----Generated at Tue May 12 22:04:07 2026 by rpki-client