$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer File: 55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer (raw, json) Hash identifier: JPbjoi7eoZHbQfPXfNOnSmU6vn5crjhovjJKEku/IiI= Subject key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 46B11468DE27448CCF3AE5C07C5531658E886A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft caRepository: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:38:14 +0000 Certificate not after: Sun 02 May 2027 00:43:14 +0000 Subordinate resources: IP: 103.6.204.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b1:14:68:de:27:44:8c:cf:3a:e5:c0:7c:55:31:65:8e:88:6a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:38:14 2026 GMT Not After : May 2 00:43:14 2027 GMT Subject: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:9d:ce:bd:f8:19:59:93:cc:7f:5f:ea:1d: 46:f9:0c:4c:8a:b0:8b:29:8a:5a:eb:86:a1:1e:41: 43:f3:84:53:95:67:21:f6:46:98:6d:51:fa:1b:7c: 8c:3b:4a:b2:e6:82:d5:43:40:5a:b8:ef:1f:3b:6a: 21:0e:a6:ca:67:45:31:a3:e5:ff:b2:b4:b3:c5:7f: 83:6b:cf:a8:b8:c0:84:ba:84:41:89:97:fe:f6:22: 1e:99:af:11:bc:f5:c6:fe:b2:ff:86:d4:20:45:60: b7:8c:9d:53:7f:74:e1:fd:19:60:58:ac:5e:68:2b: 93:68:45:40:9a:7e:02:fa:6d:dd:79:29:fa:94:d9: 3f:a6:09:22:15:1c:f7:d0:82:ec:2a:cf:19:d8:a9: 1e:55:04:5d:42:68:eb:f2:49:dc:97:0f:6e:a3:87: 64:cd:77:81:e9:62:a3:b0:7a:2b:f7:fc:5c:26:aa: 45:8b:2e:fe:92:ba:da:c9:4f:19:5c:8a:ae:f2:45: 89:4a:f2:45:9d:bc:48:38:e9:f8:51:5b:b3:8a:19: 77:a6:bc:7c:fb:3e:fa:84:fd:6b:db:3a:3b:d6:79: 9b:cd:f2:4b:91:67:e7:c1:52:00:41:a6:58:ae:55: b5:fd:f9:03:b3:bb:15:8b:6c:ff:a4:ec:a1:0a:47: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.204.0/22 Signature Algorithm: sha256WithRSAEncryption 86:66:41:06:05:01:91:8f:b3:f2:e8:34:db:1f:59:32:7b:5a: 78:9b:c9:b0:2f:4f:23:81:2d:4d:58:02:6a:bf:d8:49:a8:43: b2:f1:43:b4:8c:09:63:1f:f3:a1:cf:56:ec:d0:7e:92:74:6f: 60:b1:02:2a:3d:52:98:14:fb:04:f9:e6:62:40:86:e8:e6:1d: 27:cf:4d:4e:9b:31:64:12:24:44:5d:40:fe:b4:fe:3a:63:8d: 30:ba:d0:dd:2e:de:04:81:7a:d6:67:2d:7e:e7:67:82:33:42: c7:53:c8:25:70:64:bf:63:86:29:7f:b1:80:66:3f:09:73:5e: 78:8d:da:62:64:c4:f0:2c:55:42:a1:f3:93:69:fb:6f:e3:c1: fb:27:e2:63:d5:c3:60:ea:15:a5:d6:0d:82:1f:66:73:96:9c: bd:29:be:6e:3f:ed:31:fa:0f:9b:5e:c9:07:1c:81:d7:d1:eb: 59:2e:aa:50:7b:fd:26:92:9a:86:78:e3:94:ea:39:94:7a:85: 07:55:c4:63:f0:4a:05:42:d6:e1:bb:7b:fd:94:b9:64:4a:ac: f2:d9:5e:7d:14:e6:05:6e:5a:8c:de:6b:31:97:14:8e:a5:d8: 4e:b4:0a:b9:bc:6d:5c:3a:47:a1:6c:4d:00:32:bb:67:6e:8c: 1f:e6:d8:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURrEUaN4nRIzPOuXAfFUxZY6IangwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzgxNFoX DTI3MDUwMjAwNDMxNFowMzExMC8GA1UEAxMoNTVEMEE0QkREMzBBQjBGMjM0NkE3 MjNDRUZCNkM3NkU4QUQ5OTY3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2vnc69+BlZk8x/X+odRvkMTIqwiymKWuuGoR5BQ/OEU5VnIfZGmG1R+ht8 jDtKsuaC1UNAWrjvHztqIQ6mymdFMaPl/7K0s8V/g2vPqLjAhLqEQYmX/vYiHpmv Ebz1xv6y/4bUIEVgt4ydU3904f0ZYFisXmgrk2hFQJp+Avpt3Xkp+pTZP6YJIhUc 99CC7CrPGdipHlUEXUJo6/JJ3JcPbqOHZM13gelio7B6K/f8XCaqRYsu/pK62slP GVyKrvJFiUryRZ28SDjp+FFbs4oZd6a8fPs++oT9a9s6O9Z5m83yS5Fn58FSAEGm WK5Vtf35A7O7FYts/6TsoQpHIO8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFXQpL3TCrDyNGpyPO+2x26K2ZZ3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU4MmYyYjM4LWFkZGYtNGJkMy05MjQ5LWU1YmE1NmNkMDUyZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ODJmMmIz OC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC81NUQwQTRCREQzMEFCMEYy MzQ2QTcyM0NFRkI2Qzc2RThBRDk5Njc3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZwbMMA0GCSqGSIb3DQEBCwUAA4IBAQCGZkEGBQGRj7Py6DTbH1kye1p4m8mw L08jgS1NWAJqv9hJqEOy8UO0jAljH/Ohz1bs0H6SdG9gsQIqPVKYFPsE+eZiQIbo 5h0nz01OmzFkEiREXUD+tP46Y40wutDdLt4EgXrWZy1+52eCM0LHU8glcGS/Y4Yp f7GAZj8Jc154jdpiZMTwLFVCofOTaftv48H7J+Jj1cNg6hWl1g2CH2Zzlpy9Kb5u P+0x+g+bXskHHIHX0etZLqpQe/0mkpqGeOOU6jmUeoUHVcRj8EoFQtbhu3v9lLlk Sqzy2V59FOYFblqM3msxlxSOpdhOtAq5vG1cOkehbE0AMrtnbowf5tjW -----END CERTIFICATE-----Generated at Tue May 12 22:03:39 2026 by rpki-client