$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.cer (raw, json) Hash identifier: ZY36ERw2AKnLk0Z6phue2RBth3u5PQnuXFf3TSFRzt8= Subject key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0FB57498F939E4A87BE8251A2BEF00E9D4A5BECE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:35:28 +0000 Certificate not after: Sun 02 May 2027 02:40:28 +0000 Subordinate resources: IP: 103.161.184.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b5:74:98:f9:39:e4:a8:7b:e8:25:1a:2b:ef:00:e9:d4:a5:be:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:35:28 2026 GMT Not After : May 2 02:40:28 2027 GMT Subject: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:a4:d9:33:3b:0a:63:5f:9a:aa:65:40:69: 80:d8:27:da:a4:9d:bc:5f:47:2c:d4:90:09:ea:e5: 2f:df:31:3e:ea:27:ee:72:ee:44:83:54:58:60:74: 79:49:17:2f:8d:33:9a:a9:01:3b:2b:87:cf:36:79: e1:c6:e2:c3:c4:10:ca:b2:ed:d4:a3:7c:53:cb:f7: 64:68:8d:8a:6e:55:65:f2:6b:d3:bc:d6:55:17:b2: 4a:31:cf:6c:91:0e:de:a5:c3:29:60:5f:2a:f6:d5: 3f:cb:65:41:38:5b:c4:7f:db:74:13:66:30:15:f6: 07:02:b1:b1:1c:f0:aa:2d:d7:c4:a5:6d:1c:0e:af: 0c:7c:1c:3f:41:84:28:29:46:69:a6:ed:a8:cf:be: 9c:e2:fc:fa:be:3f:c9:af:d3:ee:13:72:7f:b5:5e: 7b:51:d4:d1:0c:fd:0f:a0:ab:98:e6:92:73:8a:05: e0:ec:11:b9:dc:ec:df:40:01:4c:e2:e6:a7:22:d2: 08:0f:6f:80:2c:75:8c:62:40:03:e8:48:52:7b:0c: d2:ed:21:03:f9:4f:51:82:88:6a:be:37:ce:bb:56: 6e:3a:aa:16:07:1a:d9:85:9b:52:c5:23:68:37:01: c1:ab:06:d1:7a:dc:a2:74:76:8c:64:2e:6b:1c:dc: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.184.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:44:22:45:cc:cd:55:5c:47:45:31:5f:20:4e:24:85:a9:d2: 1e:6f:39:eb:b3:04:04:9c:89:3c:7c:c5:64:24:d5:82:b4:2e: 49:13:f1:84:65:47:58:c7:74:7a:c4:58:fd:fa:cc:ce:cf:88: a0:16:a3:11:d1:47:60:6b:6d:31:65:59:04:7c:5d:8c:a5:c5: ee:59:a0:c4:c3:61:83:14:d4:ea:4d:22:0f:98:27:d7:b0:c6: d5:4f:5c:8b:12:44:15:e1:40:6f:08:8a:ee:fa:6b:cf:5b:a4: d9:52:2f:bf:1a:10:9d:4c:6a:84:51:5d:15:2e:fc:6e:68:3a: 68:0e:4b:50:85:e9:46:2d:e1:f4:3d:79:6f:ac:92:f7:28:1e: 3b:bc:a0:6b:1a:0d:32:08:c0:83:81:b2:9d:38:c8:e9:87:e7: 30:b6:28:e5:f0:b3:7c:b2:7f:b3:ae:63:0b:bf:48:66:62:59: 84:f3:20:cf:d9:19:a4:b6:d7:1b:7e:72:6d:a3:08:0f:1b:55: 0a:bb:32:72:51:2b:3a:d7:61:88:54:ce:1d:f7:da:0d:8a:e8: 49:12:01:41:79:4e:b8:59:f7:4a:ea:e4:c8:62:02:64:ee:7a: 20:a5:af:f7:79:6b:89:cd:9d:e7:56:53:31:8a:81:bf:64:7f: f0:28:6d:a4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUD7V0mPk55Kh76CUaK+8A6dSlvs4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzUyOFoX DTI3MDUwMjAyNDAyOFowMzExMC8GA1UEAxMoNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4 RkUxRjI5MzhCRTkzNjc3N0JDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKh5pNkzOwpjX5qqZUBpgNgn2qSdvF9HLNSQCerlL98xPuon7nLuRINUWGB0 eUkXL40zmqkBOyuHzzZ54cbiw8QQyrLt1KN8U8v3ZGiNim5VZfJr07zWVReySjHP bJEO3qXDKWBfKvbVP8tlQThbxH/bdBNmMBX2BwKxsRzwqi3XxKVtHA6vDHwcP0GE KClGaabtqM++nOL8+r4/ya/T7hNyf7Vee1HU0Qz9D6CrmOaSc4oF4OwRudzs30AB TOLmpyLSCA9vgCx1jGJAA+hIUnsM0u0hA/lPUYKIar43zrtWbjqqFgca2YWbUsUj aDcBwasG0XrconR2jGQuaxzcz2sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFReqZKFGvJybc6P4fKTi+k2d3vJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YzZWFjOWMwLWRlMWItNDZkZC1iZjM3LTE4ZmUzYThkNWZiZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mM2VhYzlj MC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC81NDVFQTk5Mjg1MUFGMjcy NkRDRThGRTFGMjkzOEJFOTM2Nzc3QkM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6G4MA0GCSqGSIb3DQEBCwUAA4IBAQCLRCJFzM1VXEdFMV8gTiSFqdIebznr swQEnIk8fMVkJNWCtC5JE/GEZUdYx3R6xFj9+szOz4igFqMR0Udga20xZVkEfF2M pcXuWaDEw2GDFNTqTSIPmCfXsMbVT1yLEkQV4UBvCIru+mvPW6TZUi+/GhCdTGqE UV0VLvxuaDpoDktQhelGLeH0PXlvrJL3KB47vKBrGg0yCMCDgbKdOMjph+cwtijl 8LN8sn+zrmMLv0hmYlmE8yDP2RmkttcbfnJtowgPG1UKuzJyUSs612GIVM4d99oN iuhJEgFBeU64WfdK6uTIYgJk7nogpa/3eWuJzZ3nVlMxioG/ZH/wKG2k -----END CERTIFICATE-----Generated at Tue May 12 22:04:11 2026 by rpki-client