$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer (raw, json) Hash identifier: 4IAwdQ9TyvdntdhnJapq68zjjek37rFV6Pvkr0bRICA= Subject key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 571F0D3F7244A2B6157C899020DD03E24C196A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:12:23 +0000 Certificate not after: Sun 02 May 2027 01:17:23 +0000 Subordinate resources: IP: 103.86.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1f:0d:3f:72:44:a2:b6:15:7c:89:90:20:dd:03:e2:4c:19:6a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:12:23 2026 GMT Not After : May 2 01:17:23 2027 GMT Subject: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:92:ac:70:29:d8:a1:6a:a0:60:f9:a4:72: 46:24:07:f7:c5:43:e2:42:ec:cd:76:67:94:69:ef: 89:c8:b1:bd:7b:c0:3d:2f:b5:8a:d1:f0:a4:2e:61: 70:36:7d:b3:95:b8:ec:13:53:a8:8e:8f:27:bf:d3: bc:c7:e3:03:90:eb:22:ba:99:09:bf:fd:73:fb:59: 99:4b:51:bc:38:22:23:51:28:b0:c0:04:20:b5:ac: 33:1d:1a:72:7d:7d:64:23:6a:7d:6a:45:a1:d9:b1: dd:df:cb:12:05:6c:f0:b5:24:1e:74:7a:ea:15:f6: 68:e3:c0:e4:af:eb:89:22:8a:62:3b:ed:b8:0f:73: dd:ac:a9:70:26:2a:90:f3:e4:42:dc:9e:34:c8:35: 6c:6c:33:d2:86:92:18:f1:c6:e3:4f:ef:01:83:78: bb:de:88:76:a5:04:db:a2:16:f3:f4:c4:b9:44:b3: 17:50:1a:c5:b7:82:bf:1c:da:2f:99:aa:cc:e9:f8: ba:6c:2e:43:e0:15:4c:b7:52:88:8e:b7:73:86:1c: 56:93:8d:9b:c2:f3:94:5a:57:e5:a0:7e:77:de:8e: a6:40:8d:ec:aa:be:d6:22:e5:f5:6a:3a:26:14:d9: c1:fd:16:76:98:02:e3:18:d2:6d:92:c5:fd:00:84: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.116.0/23 Signature Algorithm: sha256WithRSAEncryption 02:f8:31:bc:16:4b:f1:36:b5:96:b0:0e:dd:97:e7:77:9d:dd: 82:db:5c:50:91:96:50:1b:8d:6e:a7:5c:41:c9:82:9e:4a:5e: eb:bc:c5:d8:2a:99:e9:ae:48:31:42:b2:15:d6:b7:a2:37:25: 21:49:78:03:48:ce:1b:0e:cd:aa:29:fb:ef:1b:de:05:c0:8f: b9:61:05:b5:c2:32:5d:ec:e4:10:fc:01:12:32:5d:b2:c1:d9: 41:a2:ea:8d:f2:35:d3:27:d9:ed:52:c4:43:21:4a:b4:8f:e7: 31:01:5c:d3:e1:88:22:d5:1c:e5:b0:44:e5:01:f7:66:dc:14: c6:9d:eb:24:1d:b5:f6:11:6c:78:7d:7c:b5:6e:7c:74:68:bc: 5a:93:ac:0d:8d:fe:ff:0a:3a:a1:0e:06:fe:5e:0d:cf:bf:2a: 99:68:7f:f3:9c:89:c3:94:e0:9a:c5:4e:57:84:76:60:e7:ac: ec:6f:7d:64:22:c9:c3:6f:6f:dd:d6:1d:e1:96:6b:4a:c6:cd: f0:02:f4:97:d0:95:64:0d:2f:8d:cd:d2:0f:a9:84:bc:ad:69: f3:8e:ed:5f:04:c4:3d:03:2c:c9:d0:e1:61:11:cc:0d:e2:95: 49:4b:4e:d9:55:91:0c:56:61:30:cb:94:e4:c6:b4:ba:5e:f2: 17:34:f4:7e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVx8NP3JEorYVfImQIN0D4kwZao8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTIyM1oX DTI3MDUwMjAxMTcyM1owMzExMC8GA1UEAxMoNTQwOTcyMDA2RUM0RDFDRTBFRERD N0RBMTFEMTQxOUY2NzI4MTZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2ckqxwKdihaqBg+aRyRiQH98VD4kLszXZnlGnvicixvXvAPS+1itHwpC5h cDZ9s5W47BNTqI6PJ7/TvMfjA5DrIrqZCb/9c/tZmUtRvDgiI1EosMAEILWsMx0a cn19ZCNqfWpFodmx3d/LEgVs8LUkHnR66hX2aOPA5K/riSKKYjvtuA9z3aypcCYq kPPkQtyeNMg1bGwz0oaSGPHG40/vAYN4u96IdqUE26IW8/TEuUSzF1AaxbeCvxza L5mqzOn4umwuQ+AVTLdSiI63c4YcVpONm8LzlFpX5aB+d96OpkCN7Kq+1iLl9Wo6 JhTZwf0WdpgC4xjSbZLF/QCEEzECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFQJcgBuxNHODt3H2hHRQZ9nKBanMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg5NzE4ZjZiLWI1MTYtNDNhZS1iNTg5LTgzYTI1ZmFhMzBiZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84OTcxOGY2 Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC81NDA5NzIwMDZFQzREMUNF MEVEREM3REExMUQxNDE5RjY3MjgxNkE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ1Z0MA0GCSqGSIb3DQEBCwUAA4IBAQAC+DG8FkvxNrWWsA7dl+d3nd2C21xQ kZZQG41up1xByYKeSl7rvMXYKpnprkgxQrIV1reiNyUhSXgDSM4bDs2qKfvvG94F wI+5YQW1wjJd7OQQ/AESMl2ywdlBouqN8jXTJ9ntUsRDIUq0j+cxAVzT4Ygi1Rzl sETlAfdm3BTGneskHbX2EWx4fXy1bnx0aLxak6wNjf7/CjqhDgb+Xg3PvyqZaH/z nInDlOCaxU5XhHZg56zsb31kIsnDb2/d1h3hlmtKxs3wAvSX0JVkDS+NzdIPqYS8 rWnzju1fBMQ9AyzJ0OFhEcwN4pVJS07ZVZEMVmEwy5TkxrS6XvIXNPR+ -----END CERTIFICATE-----Generated at Tue May 12 22:10:04 2026 by rpki-client