$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer File: 5645F0B82898A2A9A354AB086BC696E81297553D.cer (raw, json) Hash identifier: hbjENcEK7CLtEuaO+CCCWR3UwyonzREA6CqxqD8DuyM= Subject key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 708202A0EB872B1D6E62A73972573A576B4E2A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:28:43 +0000 Certificate not after: Sun 02 May 2027 02:33:43 +0000 Subordinate resources: IP: 103.67.69.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:82:02:a0:eb:87:2b:1d:6e:62:a7:39:72:57:3a:57:6b:4e:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:28:43 2026 GMT Not After : May 2 02:33:43 2027 GMT Subject: CN=5645F0B82898A2A9A354AB086BC696E81297553D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fd:c5:1d:a3:52:a2:bc:fd:b5:59:d4:2f:b2: 60:b1:89:3e:d5:52:a7:77:3d:ba:b0:b3:96:54:73: ed:38:d9:53:c4:e4:d9:48:7d:87:88:cb:e5:0a:cd: 61:e0:43:60:58:5b:71:c0:ab:6b:99:e9:cb:04:70: 31:07:ae:d2:e2:9a:d6:7c:63:af:a5:f3:66:4c:17: cc:6b:63:08:a2:85:f4:31:dd:6e:90:f3:bc:59:b6: 99:0e:ae:66:d8:24:7e:c2:10:36:5e:6a:88:45:16: 86:f8:2d:cf:d6:e1:7b:95:2a:e0:a9:01:b1:c4:dd: 5c:85:d5:f3:e0:07:0a:93:58:14:d1:7b:2d:b4:1e: 7f:29:b3:ed:38:32:f5:2e:00:5f:e5:f4:29:9e:77: 6f:2e:44:b8:fa:e6:31:b3:5d:fb:e7:a1:1f:24:67: 64:1e:89:19:43:65:53:a2:24:1d:c3:1a:94:5a:05: d4:91:97:fe:91:20:74:a9:ef:6e:34:e2:01:62:d8: 23:d9:24:7f:85:21:3a:dd:b1:ba:0b:6c:b1:e2:69: 52:4a:9f:35:ab:05:a1:bd:f1:18:e4:e5:e3:8d:6f: 28:1c:67:f7:5e:a7:79:79:55:22:fe:ec:17:67:cf: 68:8f:11:ce:0b:4d:27:67:bf:f3:c8:0f:63:d4:ca: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.69.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:79:53:9a:b7:91:c8:f7:37:4c:09:d4:0e:f1:f5:51:e0:7e: 0d:ab:ff:ba:36:90:85:70:2b:d7:18:71:64:62:a2:ec:64:69: b4:9c:02:a9:50:4b:94:2a:f6:40:0d:e8:6c:a2:7e:39:b6:cf: b9:77:0d:ce:aa:c0:b2:bf:e7:41:fa:6b:6f:4c:77:4f:4e:f3: 81:ef:b1:fb:0c:f0:69:c7:32:3c:79:92:88:5f:e3:e4:23:72: f0:a1:d3:1a:21:e6:f1:3c:ba:67:a4:37:83:47:3c:27:f6:dc: e6:70:a1:c0:69:4d:b6:5f:ca:03:71:0e:2c:97:e5:ce:82:a4: 6a:d4:fe:7c:38:05:4d:28:ce:6c:12:63:13:4a:ff:22:85:40: fd:d1:e5:fb:8f:b1:f3:1c:1c:f9:cf:72:cc:86:8c:59:90:a1: 34:ab:d1:cf:7c:74:fc:7e:c4:c2:4d:f9:7c:ca:c9:a6:57:27: 1c:1c:29:f6:f3:0a:b8:91:10:08:c5:6f:b8:f9:10:92:86:6f: 93:2e:95:17:e8:8f:27:60:38:fe:27:5e:bb:59:13:e2:d0:73: dc:4c:73:e7:9f:f4:09:58:00:29:61:0f:e3:4f:16:71:d2:6d: d8:fc:4e:18:ed:25:66:44:8d:29:56:67:a1:02:ee:d2:39:3e: 92:f9:2e:24 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcIICoOuHKx1uYqc5clc6V2tOKkAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjg0M1oX DTI3MDUwMjAyMzM0M1owMzExMC8GA1UEAxMoNTY0NUYwQjgyODk4QTJBOUEzNTRB QjA4NkJDNjk2RTgxMjk3NTUzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOf9xR2jUqK8/bVZ1C+yYLGJPtVSp3c9urCzllRz7TjZU8Tk2Uh9h4jL5QrN YeBDYFhbccCra5npywRwMQeu0uKa1nxjr6XzZkwXzGtjCKKF9DHdbpDzvFm2mQ6u ZtgkfsIQNl5qiEUWhvgtz9bhe5Uq4KkBscTdXIXV8+AHCpNYFNF7LbQefymz7Tgy 9S4AX+X0KZ53by5EuPrmMbNd++ehHyRnZB6JGUNlU6IkHcMalFoF1JGX/pEgdKnv bjTiAWLYI9kkf4UhOt2xugtsseJpUkqfNasFob3xGOTl441vKBxn916neXlVIv7s F2fPaI8RzgtNJ2e/88gPY9TKc+8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFZF8LgomKKpo1SrCGvGlugSl1U9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YwZDhkYTJkLWE1MDYtNDc2My1iYzNjLWUyODBiZjc1MTdhNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMGQ4ZGEy ZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81NjQ1RjBCODI4OThBMkE5 QTM1NEFCMDg2QkM2OTZFODEyOTc1NTNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ0NFMA0GCSqGSIb3DQEBCwUAA4IBAQB+eVOat5HI9zdMCdQO8fVR4H4Nq/+6 NpCFcCvXGHFkYqLsZGm0nAKpUEuUKvZADehson45ts+5dw3OqsCyv+dB+mtvTHdP TvOB77H7DPBpxzI8eZKIX+PkI3LwodMaIebxPLpnpDeDRzwn9tzmcKHAaU22X8oD cQ4sl+XOgqRq1P58OAVNKM5sEmMTSv8ihUD90eX7j7HzHBz5z3LMhoxZkKE0q9HP fHT8fsTCTfl8ysmmVyccHCn28wq4kRAIxW+4+RCShm+TLpUX6I8nYDj+J167WRPi 0HPcTHPnn/QJWAApYQ/jTxZx0m3Y/E4Y7SVmRI0pVmehAu7SOT6S+S4k -----END CERTIFICATE-----Generated at Tue May 12 22:32:20 2026 by rpki-client