$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer File: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer (raw, json) Hash identifier: rUFgMWjO2MUNLf01rezVQU/l76tFud8zNRH7b/PqtPg= Subject key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3CFC2698B1EB88D5038046164385B45189618E4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:38 +0000 Certificate not after: Sun 02 May 2027 01:38:38 +0000 Subordinate resources: IP: 103.129.40.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fc:26:98:b1:eb:88:d5:03:80:46:16:43:85:b4:51:89:61:8e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:38 2026 GMT Not After : May 2 01:38:38 2027 GMT Subject: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:ad:23:be:02:b2:fe:fa:f7:d8:06:75:17: ff:e0:49:1b:89:b5:d9:6a:c6:56:fc:5c:32:c9:f1: 8e:ac:2e:3e:d1:19:05:9b:66:b1:fb:b5:0f:9a:cb: 2b:1d:54:5c:55:c8:41:4b:a0:c0:d5:b5:c7:fd:87: fe:b9:fe:a9:74:23:46:b1:96:54:5e:54:cb:97:10: 5a:df:84:e6:15:c9:68:a8:66:a5:06:32:25:67:55: da:17:ec:22:1c:3d:ff:9f:7e:8d:04:df:26:94:59: 82:dd:5f:f7:95:15:d9:5a:ef:33:74:1a:31:57:d7: 92:8f:b3:bb:f3:0d:86:85:5f:98:83:e1:9e:fd:4c: 93:3a:d7:a1:d4:7e:48:8c:21:60:78:88:17:61:28: ab:18:f7:32:c2:f4:ba:9e:60:ec:86:3e:7b:a1:96: 54:dd:82:bf:37:97:25:c0:11:d3:cd:e2:c6:c8:71: a8:c6:da:42:f5:4f:74:76:68:82:c4:67:15:26:c9: ee:bc:fa:78:37:d3:40:61:2c:81:74:1f:9e:37:96: 7c:88:04:02:9f:53:6d:3a:9b:c7:3e:c1:cb:97:43: 20:6a:b6:4d:49:87:e7:17:0c:ad:66:f0:e7:f3:c5: 5f:84:ff:a0:3d:46:43:47:86:ce:3f:12:cc:31:17: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.40.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:47:c2:2e:73:86:48:ca:d8:c6:34:6e:c7:5a:1c:54:69:95: 1b:bd:ba:e9:e7:4f:e7:5b:ff:d1:df:32:01:77:7d:a2:c8:a5: e9:d5:09:44:b6:7e:4e:8d:b8:cb:bc:db:74:63:d8:e6:4a:25: 17:99:be:2e:03:e3:ef:e5:a7:d4:6b:93:66:f6:41:25:bb:9b: 25:8d:0e:1a:e7:f1:5f:56:6b:3d:8f:58:db:a3:98:b6:c8:23: 04:a5:fa:29:a0:01:e8:43:0d:74:54:db:57:66:5d:48:36:cb: 1b:46:e3:2f:ac:c4:ad:1b:d3:44:11:3c:b5:93:28:bd:57:69: 3d:6f:e8:43:18:e5:0a:16:49:3d:6f:ec:2a:32:e6:21:88:5c: cf:d5:8b:c2:63:94:2f:7d:63:0f:f6:2f:cb:6a:62:21:2e:32: 77:05:45:63:b4:f6:20:e0:13:52:0b:aa:1c:18:db:0f:43:59: d3:44:b7:6a:a2:74:17:fb:9d:36:63:e7:35:fb:05:4b:09:90: 93:16:b8:f5:77:2b:d7:6a:62:81:03:dd:d9:64:cf:ed:0d:ed: 55:80:b6:51:5c:fe:0a:c3:70:d8:28:7b:49:bb:6a:8b:f4:5d: 47:cf:32:ab:e2:a5:a5:5f:8e:ac:c6:d4:33:a1:95:ac:47:00: 4d:61:e9:e6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPPwmmLHriNUDgEYWQ4W0UYlhjkowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMzOFoX DTI3MDUwMjAxMzgzOFowMzExMC8GA1UEAxMoNTNCRUU4QjFDODQ1RTA0MzdEQTFC QTNDRDE4Njc2MzAyOEVGNjRGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsJrSO+ArL++vfYBnUX/+BJG4m12WrGVvxcMsnxjqwuPtEZBZtmsfu1D5rL Kx1UXFXIQUugwNW1x/2H/rn+qXQjRrGWVF5Uy5cQWt+E5hXJaKhmpQYyJWdV2hfs Ihw9/59+jQTfJpRZgt1f95UV2VrvM3QaMVfXko+zu/MNhoVfmIPhnv1MkzrXodR+ SIwhYHiIF2Eoqxj3MsL0up5g7IY+e6GWVN2CvzeXJcAR083ixshxqMbaQvVPdHZo gsRnFSbJ7rz6eDfTQGEsgXQfnjeWfIgEAp9TbTqbxz7By5dDIGq2TUmH5xcMrWbw 5/PFX4T/oD1GQ0eGzj8SzDEXFPMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFO+6LHIReBDfaG6PNGGdjAo72T1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E5OTBkYTQ5LTk4NjItNDFkZS04MzNlLWIzMDRmMGMxYWU1Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOTkwZGE0 OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC81M0JFRThCMUM4NDVFMDQz N0RBMUJBM0NEMTg2NzYzMDI4RUY2NEY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4EoMA0GCSqGSIb3DQEBCwUAA4IBAQCMR8Iuc4ZIytjGNG7HWhxUaZUbvbrp 50/nW//R3zIBd32iyKXp1QlEtn5OjbjLvNt0Y9jmSiUXmb4uA+Pv5afUa5Nm9kEl u5sljQ4a5/FfVms9j1jbo5i2yCMEpfopoAHoQw10VNtXZl1INssbRuMvrMStG9NE ETy1kyi9V2k9b+hDGOUKFkk9b+wqMuYhiFzP1YvCY5QvfWMP9i/LamIhLjJ3BUVj tPYg4BNSC6ocGNsPQ1nTRLdqonQX+502Y+c1+wVLCZCTFrj1dyvXamKBA93ZZM/t De1VgLZRXP4Kw3DYKHtJu2qL9F1HzzKr4qWlX46sxtQzoZWsRwBNYenm -----END CERTIFICATE-----Generated at Tue May 12 22:45:32 2026 by rpki-client