$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer File: 566E09CA4830024428EFAB32BD4C5C0588342F87.cer (raw, json) Hash identifier: kKI34n7bkmp1SKUSvyfKd2SFp7P9BaCnUsku53Mf2ik= Subject key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2A43F969D51B41A3C2649613710831A3B7B9C03C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft caRepository: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:12:06 +0000 Certificate not after: Sun 02 May 2027 00:17:06 +0000 Subordinate resources: IP: 103.105.252.0/22 IP: 2402:35c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:43:f9:69:d5:1b:41:a3:c2:64:96:13:71:08:31:a3:b7:b9:c0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:12:06 2026 GMT Not After : May 2 00:17:06 2027 GMT Subject: CN=566E09CA4830024428EFAB32BD4C5C0588342F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:3c:3f:98:c9:f5:0a:93:a5:83:fc:36:8d: 00:ed:e7:ec:05:e3:74:1f:6b:72:6b:97:f5:c1:f0: a6:af:1a:e3:1f:27:fc:6f:96:ce:25:14:01:02:80: fd:af:76:ad:5e:82:3d:0e:4e:df:19:04:57:7a:54: 06:8a:ff:1c:5c:b2:d2:b1:d8:67:be:51:f6:fd:5e: 6a:ab:75:b0:6b:a3:96:9b:e0:9b:1c:78:a9:51:0c: d9:f8:6a:f2:a6:26:86:fa:93:a3:da:32:b3:74:94: 58:0f:15:03:3d:4e:7b:4d:fa:d2:a6:1d:6f:f8:da: 51:93:3f:49:2a:bf:6f:85:d2:88:e0:7c:28:11:77: af:09:29:ff:23:c2:5d:8c:e9:59:ee:e7:fa:7b:5d: fb:a6:2d:66:81:74:2a:83:e4:eb:60:f7:4b:88:6b: f7:53:d4:9a:3f:41:cf:3d:f3:4b:ac:9d:99:bd:10: ca:3a:fa:7a:00:87:f9:94:a3:65:2c:d2:20:15:77: c7:b4:b1:b1:67:25:9c:6f:32:4a:cc:b9:75:86:12: e1:ab:50:f4:54:ef:e5:82:f6:d5:7f:43:28:6f:99: 15:da:b0:70:59:f9:16:04:56:41:dd:97:62:a0:3e: b1:08:b6:a9:30:69:9a:0f:bd:96:51:89:fa:01:a1: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.252.0/22 IPv6: 2402:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 4c:b4:3e:67:33:30:d7:f1:13:44:fd:ff:83:9a:57:2f:a1:da: 69:52:d1:ec:1a:ec:16:52:d5:06:6c:6e:52:f1:b0:b5:e3:e1: c2:e3:ce:38:50:62:a4:4a:47:60:0f:04:12:1a:fd:ca:5f:63: b2:18:12:6b:cf:06:4b:79:03:da:b9:e0:58:9b:90:ca:97:8b: d3:ef:e4:bd:af:a7:51:f3:79:99:cf:cb:9d:6c:5f:0f:3f:1f: 5b:b9:b0:88:b7:18:19:55:bc:3e:a9:3f:bf:6a:46:17:a1:f5: e9:35:09:e3:97:27:9b:38:8e:ab:77:84:a8:3f:b7:a1:c2:05: 1b:2a:80:d8:6d:31:da:68:a7:76:95:26:c1:5e:0c:f9:d5:34: 49:5a:17:54:d3:da:74:81:9d:f2:99:a3:ce:1c:06:53:ea:82: 5c:c8:db:5e:6a:10:83:6d:95:99:91:b9:b9:21:f7:c4:cb:e9: cb:ea:99:07:56:30:51:44:1e:cd:2c:95:ad:69:4c:27:8d:6e: fa:22:82:29:70:fa:80:9e:f3:93:0c:c3:2b:c4:86:5a:9b:bf: c9:4b:1c:ca:d9:1b:67:4c:1d:5d:2f:a9:c5:48:ec:93:d8:24: 36:c5:a2:b0:41:8e:6d:af:90:2b:bd:42:3b:69:c9:86:0c:98: 39:2b:0a:c9 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUKkP5adUbQaPCZJYTcQgxo7e5wDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTIwNloX DTI3MDUwMjAwMTcwNlowMzExMC8GA1UEAxMoNTY2RTA5Q0E0ODMwMDI0NDI4RUZB QjMyQkQ0QzVDMDU4ODM0MkY4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD+PD+YyfUKk6WD/DaNAO3n7AXjdB9rcmuX9cHwpq8a4x8n/G+WziUUAQKA /a92rV6CPQ5O3xkEV3pUBor/HFyy0rHYZ75R9v1eaqt1sGujlpvgmxx4qVEM2fhq 8qYmhvqTo9oys3SUWA8VAz1Oe0360qYdb/jaUZM/SSq/b4XSiOB8KBF3rwkp/yPC XYzpWe7n+ntd+6YtZoF0KoPk62D3S4hr91PUmj9Bzz3zS6ydmb0Qyjr6egCH+ZSj ZSzSIBV3x7SxsWclnG8ySsy5dYYS4atQ9FTv5YL21X9DKG+ZFdqwcFn5FgRWQd2X YqA+sQi2qTBpmg+9llGJ+gGh7hECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFZuCcpIMAJEKO+rMr1MXAWINC+HMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMxNmFhNTRmLTcxNTgtNDNhZi1iMzM2LWJlNDcxNDgxNmZhZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMTZhYTU0 Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC81NjZFMDlDQTQ4MzAwMjQ0 MjhFRkFCMzJCRDRDNUMwNTg4MzQyRjg3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2n8MA0EAgACMAcDBQAkAjXAMA0GCSqGSIb3DQEBCwUAA4IBAQBMtD5nMzDX 8RNE/f+DmlcvodppUtHsGuwWUtUGbG5S8bC14+HC4844UGKkSkdgDwQSGv3KX2Oy GBJrzwZLeQPaueBYm5DKl4vT7+S9r6dR83mZz8udbF8PPx9bubCItxgZVbw+qT+/ akYXofXpNQnjlyebOI6rd4SoP7ehwgUbKoDYbTHaaKd2lSbBXgz51TRJWhdU09p0 gZ3ymaPOHAZT6oJcyNteahCDbZWZkbm5IffEy+nL6pkHVjBRRB7NLJWtaUwnjW76 IoIpcPqAnvOTDMMrxIZam7/JSxzK2RtnTB1dL6nFSOyT2CQ2xaKwQY5tr5ArvUI7 acmGDJg5KwrJ -----END CERTIFICATE-----Generated at Tue May 12 22:32:26 2026 by rpki-client