$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer (raw, json) Hash identifier: arnWy2kSO6fnwQxW72BvgmA4v4f8Q5VU0VJKXkOk7ts= Subject key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 115C1186DC1069E07B21CDC69B3F671A5E0F5C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:13:20 +0000 Certificate not after: Sun 02 May 2027 01:18:20 +0000 Subordinate resources: IP: 103.162.152.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5c:11:86:dc:10:69:e0:7b:21:cd:c6:9b:3f:67:1a:5e:0f:5c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:13:20 2026 GMT Not After : May 2 01:18:20 2027 GMT Subject: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:c5:4b:6e:63:ae:52:b5:8c:4b:f0:bb:24: 68:a0:e4:17:44:6b:e3:56:3f:11:55:32:61:2f:a3: 05:56:9a:7c:fd:49:71:2d:55:e2:f6:b9:aa:f2:ee: 39:a3:b5:19:15:fe:15:ac:e7:90:87:cb:0b:8f:ce: 7c:94:40:d4:c6:42:02:5b:7a:cd:80:64:06:4a:69: b4:b4:f5:23:55:0c:25:9c:71:95:0b:89:67:2b:b8: 5c:38:00:65:f7:99:da:19:47:c8:19:90:d7:9a:25: 59:63:e1:ab:47:6c:58:aa:e9:5a:b2:73:ad:06:de: 59:35:39:ab:81:f9:59:ed:c8:3e:86:20:89:b3:67: 0d:05:06:a4:b9:0b:cd:6c:12:ff:e7:01:3e:8d:e6: 84:62:03:00:ca:54:5a:38:f2:3c:09:76:79:9e:0e: cf:ed:d1:93:ed:64:a8:ce:bb:54:60:da:09:9b:13: fa:64:8f:fe:d5:2a:30:e8:42:74:e1:4a:61:94:54: e1:74:fa:93:9f:9a:f4:ce:12:39:55:38:7f:d1:e3: 14:f8:44:0c:eb:94:fb:c6:3f:ce:1b:e9:20:15:57: 2f:de:f8:44:c4:c3:8d:ab:47:aa:6a:8b:62:4d:0f: 69:4e:bb:a9:a0:45:c9:ea:47:c1:1e:73:5f:88:b4: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.152.0/23 Signature Algorithm: sha256WithRSAEncryption 38:f0:c2:9d:2c:44:40:94:9b:ef:6d:fd:8c:c3:b5:3e:95:55: 2d:b8:9f:1d:4b:4a:8d:00:5e:1c:cd:81:ea:7f:1d:bd:ce:83: 08:11:e0:ce:be:b9:aa:f9:78:61:24:b7:32:1a:61:40:b2:8d: 65:9e:a6:5c:2f:4d:22:a0:24:78:a0:ea:2f:9a:43:8e:84:46: fc:0c:79:e8:87:2e:3e:1d:d9:ad:6f:75:f6:bc:ab:d0:6f:73: d3:af:95:0e:03:34:28:dd:f6:49:1d:40:3d:79:20:63:f9:83: 56:9c:b5:12:c6:cf:9b:70:4a:67:86:18:ea:1a:32:ee:2d:5c: 5f:4c:9e:e1:8d:f3:13:bd:5c:e2:51:f6:3a:63:54:72:1b:14: fb:8d:40:3d:ae:41:c3:ed:40:67:b3:f0:0f:80:58:fe:10:74: 23:7b:d0:62:c9:ba:f9:87:f2:96:69:fd:3e:aa:90:3c:bb:d7: 38:c4:4d:8e:c0:fb:bf:4b:69:dc:37:13:ea:5e:37:62:93:9b: aa:a9:59:1d:fc:00:36:9f:be:e0:2c:4c:95:5c:a1:c5:20:76: 58:03:48:87:ba:70:0f:1f:13:f1:b5:35:ed:ff:21:99:a1:a3: ef:b2:64:10:ba:6a:c1:cf:51:08:98:ef:c4:70:99:69:3c:fd: 37:45:8b:91 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEVwRhtwQaeB7Ic3Gmz9nGl4PXGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTMyMFoX DTI3MDUwMjAxMTgyMFowMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFC NkU0MDgyOENCQkE3QzAzQzg0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5IxUtuY65StYxL8LskaKDkF0Rr41Y/EVUyYS+jBVaafP1JcS1V4va5qvLu OaO1GRX+FaznkIfLC4/OfJRA1MZCAlt6zYBkBkpptLT1I1UMJZxxlQuJZyu4XDgA ZfeZ2hlHyBmQ15olWWPhq0dsWKrpWrJzrQbeWTU5q4H5We3IPoYgibNnDQUGpLkL zWwS/+cBPo3mhGIDAMpUWjjyPAl2eZ4Oz+3Rk+1kqM67VGDaCZsT+mSP/tUqMOhC dOFKYZRU4XT6k5+a9M4SOVU4f9HjFPhEDOuU+8Y/zhvpIBVXL974RMTDjatHqmqL Yk0PaU67qaBFyepHwR5zX4i0TKkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFMA0O7HohqvrWG25Agoy7p8A8hJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhhYjNjMDNkLTJlMmUtNDg5Ny04NjliLTIxY2U0ODYwMTYxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YWIzYzAz ZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC81MzAwRDBFRUM3QTIxQUFG QUQ2MUI2RTQwODI4Q0JCQTdDMDNDODQ5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6KYMA0GCSqGSIb3DQEBCwUAA4IBAQA48MKdLERAlJvvbf2Mw7U+lVUtuJ8d S0qNAF4czYHqfx29zoMIEeDOvrmq+XhhJLcyGmFAso1lnqZcL00ioCR4oOovmkOO hEb8DHnohy4+Hdmtb3X2vKvQb3PTr5UOAzQo3fZJHUA9eSBj+YNWnLUSxs+bcEpn hhjqGjLuLVxfTJ7hjfMTvVziUfY6Y1RyGxT7jUA9rkHD7UBns/APgFj+EHQje9Bi ybr5h/KWaf0+qpA8u9c4xE2OwPu/S2ncNxPqXjdik5uqqVkd/AA2n77gLEyVXKHF IHZYA0iHunAPHxPxtTXt/yGZoaPvsmQQumrBz1EImO/EcJlpPP03RYuR -----END CERTIFICATE-----Generated at Tue May 12 22:47:17 2026 by rpki-client