$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer (raw, json) Hash identifier: ScvdR4Y0nS6ZXnPMXH6IixMTd39PG3yoL5xXdiF0nxg= Subject key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 30F50C399029FFC2842A889BAB442D652779E5BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:45 +0000 Certificate not after: Sun 02 May 2027 01:52:45 +0000 Subordinate resources: IP: 203.81.184.0/21 IP: 2403:2600::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f5:0c:39:90:29:ff:c2:84:2a:88:9b:ab:44:2d:65:27:79:e5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:47:45 2026 GMT Not After : May 2 01:52:45 2027 GMT Subject: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:da:a8:b8:98:b8:b2:91:1f:d4:b4:66:fb: d4:f4:3e:f3:68:80:51:df:03:3d:cd:ab:2e:d6:d0: e3:f9:82:1d:aa:ff:75:48:97:09:f9:7e:85:af:84: 9c:58:d5:f0:b5:4f:bc:f6:e9:61:59:fb:57:0b:7c: b4:f0:5b:2e:d4:45:08:96:4a:0d:d5:5a:6a:a3:94: 91:c0:47:e4:6d:68:72:69:60:1b:41:4c:6d:e8:77: 98:39:86:9d:5b:24:f7:94:08:13:00:ea:0b:ce:fa: 49:cb:f0:e0:08:f4:0a:3e:e9:b8:6d:cd:ff:a5:6d: 77:64:aa:7d:a2:87:56:35:f9:14:4c:c0:6e:bc:6e: 38:b9:50:ec:b8:3f:97:f8:a7:cd:77:b8:00:0f:d9: 4d:d8:fd:e3:85:cb:33:09:7e:2a:c9:24:a7:fd:52: 0c:96:01:89:2b:8e:8f:8f:5c:b7:89:bb:b6:67:5e: 6a:9c:c5:2d:fc:41:32:a7:21:c9:e8:c8:53:5c:9b: 27:32:3f:4a:7d:39:e7:16:98:35:6a:93:06:5d:c6: 21:dc:1c:8b:f1:c4:4d:27:fe:1e:9d:fd:5d:08:07: 95:7e:21:70:00:57:ba:04:0a:1d:8b:65:17:9e:df: b8:d2:d4:96:19:6d:ac:e7:02:b8:a3:c5:6b:25:cb: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.81.184.0/21 IPv6: 2403:2600::/32 Signature Algorithm: sha256WithRSAEncryption 64:db:a7:80:33:fc:ee:94:35:b9:29:4e:cf:30:2c:b2:1c:cf: 54:ae:92:68:d5:3a:b6:47:cf:1a:d6:d4:1f:f2:79:17:8c:b3: a7:ff:57:d4:da:e9:10:c9:58:1a:0f:aa:5f:2d:3b:41:b7:a6: 4d:d0:fe:7d:7d:aa:b4:c0:d9:b1:88:aa:52:a9:47:5d:ac:23: 71:65:10:34:15:92:61:52:7f:87:6c:14:5f:b4:20:12:87:a7: 91:7c:1a:bc:6f:f4:33:77:9f:3e:95:a1:81:56:1f:3f:87:12: cc:37:e8:19:16:1a:19:35:71:96:35:b4:be:16:7d:4b:70:1f: d4:8c:02:7c:35:2d:f5:46:dc:ba:7a:eb:dd:9a:97:ae:bb:0f: 47:9e:9e:12:72:60:12:aa:ff:ba:06:b5:3d:a0:04:c2:7e:0d: f5:28:ea:38:15:9d:cb:53:bf:2d:9c:ec:06:6e:ed:41:5b:8a: 95:55:67:bc:ad:e7:15:3d:37:57:a7:be:12:cd:02:23:13:f3: 4e:8a:2e:a0:9b:3d:e7:0b:ea:66:82:d6:7a:51:81:46:e9:e9: 58:38:f1:7d:3c:99:94:d8:c1:ed:41:9d:a5:d9:64:25:89:4d: 70:05:34:91:32:c6:e6:31:74:e5:db:d8:49:12:9f:f2:ad:24: 56:9e:d7:c7 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUMPUMOZAp/8KEKoibq0QtZSd55bwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDc0NVoX DTI3MDUwMjAxNTI0NVowMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVE QThEMEYyOTJDOEExRTVFMkY5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1O2qi4mLiykR/UtGb71PQ+82iAUd8DPc2rLtbQ4/mCHar/dUiXCfl+ha+E nFjV8LVPvPbpYVn7Vwt8tPBbLtRFCJZKDdVaaqOUkcBH5G1ocmlgG0FMbeh3mDmG nVsk95QIEwDqC876Scvw4Aj0Cj7puG3N/6Vtd2SqfaKHVjX5FEzAbrxuOLlQ7Lg/ l/inzXe4AA/ZTdj944XLMwl+Kskkp/1SDJYBiSuOj49ct4m7tmdeapzFLfxBMqch yejIU1ybJzI/Sn055xaYNWqTBl3GIdwci/HETSf+Hp39XQgHlX4hcABXugQKHYtl F57fuNLUlhltrOcCuKPFayXLfYECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFNcK+jEdxl2zTXajQ8pLIoeXi+ZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MxYTI5YTc1LWM1YjktNDc1Yi05ZDk2LTZkMWExNWVhZTI0ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMWEyOWE3 NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC81MzVDMkJFOEM0NzcxOTc2 Q0QzNURBOEQwRjI5MkM4QTFFNUUyRjk5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDy1G4MA0EAgACMAcDBQAkAyYAMA0GCSqGSIb3DQEBCwUAA4IBAQBk26eAM/zu lDW5KU7PMCyyHM9UrpJo1Tq2R88a1tQf8nkXjLOn/1fU2ukQyVgaD6pfLTtBt6ZN 0P59faq0wNmxiKpSqUddrCNxZRA0FZJhUn+HbBRftCASh6eRfBq8b/Qzd58+laGB Vh8/hxLMN+gZFhoZNXGWNbS+Fn1LcB/UjAJ8NS31Rty6euvdmpeuuw9Hnp4ScmAS qv+6BrU9oATCfg31KOo4FZ3LU78tnOwGbu1BW4qVVWe8recVPTdXp74SzQIjE/NO ii6gmz3nC+pmgtZ6UYFG6elYOPF9PJmU2MHtQZ2l2WQliU1wBTSRMsbmMXTl29hJ Ep/yrSRWntfH -----END CERTIFICATE-----Generated at Tue May 12 22:46:08 2026 by rpki-client