$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer File: 5256FBBE2FC545F984496DD4986EC64B662694E0.cer (raw, json) Hash identifier: KQ4AZElvKhpUSLF8mLWG+A0rHbQ65xCQ4tfDXV8ZYKE= Subject key identifier: 52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7950192D2A51CA4121C4F7AE45D4BB64A5D96695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:43 +0000 Certificate not after: Sun 02 May 2027 00:39:43 +0000 Subordinate resources: IP: 103.253.124.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:50:19:2d:2a:51:ca:41:21:c4:f7:ae:45:d4:bb:64:a5:d9:66:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:34:43 2026 GMT Not After : May 2 00:39:43 2027 GMT Subject: CN=5256FBBE2FC545F984496DD4986EC64B662694E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:07:27:a6:cf:50:44:06:99:1b:d0:85:04: 3a:a6:c3:fc:20:b9:24:99:7e:ff:5c:6e:ba:5f:2f: 54:fd:99:e4:ab:e3:99:43:41:99:5c:20:43:3e:fc: 2a:fc:36:21:82:69:f2:b3:86:6e:e3:d6:e9:3e:ba: 94:c7:8f:10:d4:f4:36:b5:ac:5a:58:f8:76:68:60: f6:ee:a3:f9:3a:dc:b6:c8:41:1f:5c:d1:3c:18:a7: 8b:e0:e0:d3:94:74:c0:7d:49:7f:61:fe:b8:24:c9: e0:e9:b1:19:2f:ea:67:26:f0:42:29:ed:b2:a6:03: aa:7b:13:29:ae:ab:8d:88:60:bb:a7:e0:5c:2d:7a: 08:30:66:63:40:08:0d:5d:35:d6:44:63:29:38:57: 30:c6:c2:a2:d4:65:75:3f:92:db:2f:b7:3d:a8:76: 02:45:13:ea:e2:53:cf:ff:23:93:87:ac:9b:41:1d: e1:79:87:d5:38:96:d6:7b:d9:28:44:a4:d7:7c:9e: 43:f0:d8:09:79:64:e2:1c:a8:52:5a:a2:b1:fa:0f: 72:fe:10:b8:c9:e9:8c:ba:ae:c0:6f:49:65:27:d4: ca:fa:d3:fb:d2:22:b5:a3:39:d6:e2:97:89:47:8b: 5d:5e:75:2e:6d:cc:d0:81:bb:f2:cc:57:c9:13:86: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.124.0/24 Signature Algorithm: sha256WithRSAEncryption 06:03:65:99:59:fa:7a:0c:52:9f:5a:73:4e:8d:9a:7a:14:95: de:9c:eb:9e:40:a8:dc:3c:69:0f:75:73:f4:65:2e:3f:ec:a4: a7:3d:c3:be:1c:bb:ea:52:96:64:cd:45:17:b4:b9:75:3d:87: 2a:c7:a2:1e:7d:de:3b:50:e2:b2:6e:42:4b:5d:85:70:b8:c1: 6c:ac:92:f2:4c:55:79:94:e9:ca:0a:d0:b4:b9:97:71:6f:ca: ce:41:c9:9b:89:1e:0d:c8:d3:e1:01:29:5e:29:e8:6c:d4:0e: 7a:86:7a:39:97:b8:3e:ee:99:c4:46:da:09:56:e9:54:72:8b: 88:f2:a0:76:fc:af:c4:df:3d:a6:01:ec:a9:f5:52:3d:59:ec: 1e:e8:6d:e4:57:d9:1e:2f:bc:dd:60:6d:7d:b0:61:6c:c9:da: cf:86:b9:d7:86:72:aa:7c:9c:79:c7:2c:26:1a:bf:1f:4d:eb: 07:c0:59:bb:25:99:12:c3:92:17:e1:b3:2a:93:72:e2:3b:b2: 95:09:46:eb:4e:2d:84:d0:58:54:02:b3:ad:da:9b:b9:b9:4e: bd:69:71:3e:c8:4c:45:5b:19:e8:73:35:4e:92:71:d6:af:d1: 2f:ab:ed:45:5c:e9:63:1a:eb:9f:e6:88:84:f0:db:45:d6:47: 9c:f0:44:77 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeVAZLSpRykEhxPeuRdS7ZKXZZpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzQ0M1oX DTI3MDUwMjAwMzk0M1owMzExMC8GA1UEAxMoNTI1NkZCQkUyRkM1NDVGOTg0NDk2 REQ0OTg2RUM2NEI2NjI2OTRFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSBByemz1BEBpkb0IUEOqbD/CC5JJl+/1xuul8vVP2Z5KvjmUNBmVwgQz78 Kvw2IYJp8rOGbuPW6T66lMePENT0NrWsWlj4dmhg9u6j+TrctshBH1zRPBini+Dg 05R0wH1Jf2H+uCTJ4OmxGS/qZybwQintsqYDqnsTKa6rjYhgu6fgXC16CDBmY0AI DV011kRjKThXMMbCotRldT+S2y+3Pah2AkUT6uJTz/8jk4esm0Ed4XmH1TiW1nvZ KESk13yeQ/DYCXlk4hyoUlqisfoPcv4QuMnpjLquwG9JZSfUyvrT+9IitaM51uKX iUeLXV51Lm3M0IG78sxXyROGy5ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFJW+74vxUX5hElt1JhuxktmJpTgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUzMmM1MTIxLWY3NDktNGE1NC1hOWVjLWY2YzM0OWYzNDMxMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MzJjNTEy MS1mNzQ5LTRhNTQtYTllYy1mNmMzNDlmMzQzMTAvMC81MjU2RkJCRTJGQzU0NUY5 ODQ0OTZERDQ5ODZFQzY0QjY2MjY5NEUwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ/18MA0GCSqGSIb3DQEBCwUAA4IBAQAGA2WZWfp6DFKfWnNOjZp6FJXenOue QKjcPGkPdXP0ZS4/7KSnPcO+HLvqUpZkzUUXtLl1PYcqx6Iefd47UOKybkJLXYVw uMFsrJLyTFV5lOnKCtC0uZdxb8rOQcmbiR4NyNPhASleKehs1A56hno5l7g+7pnE RtoJVulUcouI8qB2/K/E3z2mAeyp9VI9Wewe6G3kV9keL7zdYG19sGFsydrPhrnX hnKqfJx5xywmGr8fTesHwFm7JZkSw5IX4bMqk3LiO7KVCUbrTi2E0FhUArOt2pu5 uU69aXE+yExFWxnoczVOknHWr9Evq+1FXOljGuuf5oiE8NtF1kec8ER3 -----END CERTIFICATE-----Generated at Tue May 12 22:47:50 2026 by rpki-client