$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer File: 583609807E4BA80D0B54C99C333B7590A6907BD4.cer (raw, json) Hash identifier: q5o9TtFZeVQyXa16WshFR7CtwJD8HJ2GsYP7mCln1ug= Subject key identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7D1939E656E4B7DCDE46262827FA10414622EF4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:20:34 +0000 Certificate not after: Sun 02 May 2027 00:25:34 +0000 Subordinate resources: IP: 103.181.129.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:19:39:e6:56:e4:b7:dc:de:46:26:28:27:fa:10:41:46:22:ef:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:20:34 2026 GMT Not After : May 2 00:25:34 2027 GMT Subject: CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f7:98:4c:79:f4:b0:c8:f9:ac:74:42:1b:ca: c0:1f:30:ad:d2:15:99:2c:67:63:90:38:6b:58:b0: 87:02:bd:e5:2a:07:83:55:40:f7:6a:ed:29:1e:a3: 19:80:95:2c:cf:77:3d:bc:ac:cb:c8:7a:82:76:d8: d4:56:ac:c7:19:15:b7:ad:44:12:6e:fc:a1:f9:79: 75:40:1c:9e:39:85:0a:a0:90:05:fc:9d:74:1b:a3: 10:35:10:a9:27:43:43:07:cf:83:d1:97:b5:2a:0b: 21:29:8c:0e:f6:ef:c0:0f:62:d1:a7:dc:b8:e5:e0: 67:7c:29:3f:a6:0a:e1:ba:5c:19:6e:22:56:7d:5b: 3b:a4:66:fb:c4:ac:d5:09:f8:a8:bc:0f:a8:c4:65: 5a:fc:b8:f9:48:47:18:f1:a8:5e:65:23:60:32:f1: dd:22:b4:78:92:43:27:76:4c:99:cf:b0:7f:f6:aa: 07:fc:34:16:cd:50:12:ae:f7:0d:c2:77:dd:ec:3e: c6:5c:67:26:f6:a7:06:44:71:a4:19:f8:2f:60:53: f4:a6:9f:05:a8:83:44:16:d0:5f:22:f3:cd:e7:08: ef:6c:1e:e2:6e:5d:71:7c:ff:42:08:69:b8:eb:7c: 73:cd:f0:89:80:a5:d2:91:c3:02:60:7f:82:c5:04: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.129.0/24 Signature Algorithm: sha256WithRSAEncryption 30:f0:f8:52:c7:4c:02:0b:09:f6:03:e5:07:04:ed:cb:13:44: 14:3f:cf:26:4e:38:5c:ee:31:b0:ba:cf:fa:1b:f0:93:4c:27: 18:72:ca:f2:2e:6f:17:94:8b:de:15:29:20:5d:48:e7:ee:c2: a3:a4:98:b6:eb:36:9d:70:2f:3f:a9:17:db:2a:2b:02:1f:d9: f4:09:01:b0:cf:60:ee:4d:a4:77:0c:09:8e:3c:6b:71:fa:46: d0:6e:e6:d4:3c:2b:71:23:5e:5c:78:c4:af:58:11:21:ae:dc: a9:e8:5f:28:c3:4d:c6:ec:99:c9:51:62:04:84:5e:8b:df:09: cc:a1:2d:52:9d:a0:0a:af:52:ea:fa:a4:a2:e5:ce:4e:79:1f: 33:a5:c1:5c:a0:ca:a2:04:e8:b2:60:ce:70:eb:5e:dd:5c:f0: 66:a6:40:e9:28:bc:9d:4b:f5:28:20:d5:5e:6f:50:43:0c:aa: d2:17:fd:67:53:5d:89:cc:41:2e:92:60:64:8f:a8:fb:a0:de: 86:8b:4c:93:c4:02:46:d9:59:bc:cb:42:1a:fb:3d:f7:f5:9d: 7b:c3:af:dd:35:96:15:1d:46:ea:e1:f1:1c:82:de:ae:f5:8c: 04:4d:d5:4f:79:27:f0:70:7c:8d:13:6c:cc:e5:bf:6f:de:91: ef:e4:b2:51 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfRk55lbkt9zeRiYoJ/oQQUYi708wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjAzNFoX DTI3MDUwMjAwMjUzNFowMzExMC8GA1UEAxMoNTgzNjA5ODA3RTRCQTgwRDBCNTRD OTlDMzMzQjc1OTBBNjkwN0JENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI/3mEx59LDI+ax0QhvKwB8wrdIVmSxnY5A4a1iwhwK95SoHg1VA92rtKR6j GYCVLM93Pbysy8h6gnbY1FasxxkVt61EEm78ofl5dUAcnjmFCqCQBfyddBujEDUQ qSdDQwfPg9GXtSoLISmMDvbvwA9i0afcuOXgZ3wpP6YK4bpcGW4iVn1bO6Rm+8Ss 1Qn4qLwPqMRlWvy4+UhHGPGoXmUjYDLx3SK0eJJDJ3ZMmc+wf/aqB/w0Fs1QEq73 DcJ33ew+xlxnJvanBkRxpBn4L2BT9KafBaiDRBbQXyLzzecI72we4m5dcXz/Qghp uOt8c83wiYCl0pHDAmB/gsUEZvcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFg2CYB+S6gNC1TJnDM7dZCmkHvUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNjYzIyYzJlLWFjYTctNDJmMi05YjhhLThkYTdkNGUyYmEwMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zY2MyMmMy ZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC81ODM2MDk4MDdFNEJBODBE MEI1NEM5OUMzMzNCNzU5MEE2OTA3QkQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7WBMA0GCSqGSIb3DQEBCwUAA4IBAQAw8PhSx0wCCwn2A+UHBO3LE0QUP88m Tjhc7jGwus/6G/CTTCcYcsryLm8XlIveFSkgXUjn7sKjpJi26zadcC8/qRfbKisC H9n0CQGwz2DuTaR3DAmOPGtx+kbQbubUPCtxI15ceMSvWBEhrtyp6F8ow03G7JnJ UWIEhF6L3wnMoS1SnaAKr1Lq+qSi5c5OeR8zpcFcoMqiBOiyYM5w617dXPBmpkDp KLydS/UoINVeb1BDDKrSF/1nU12JzEEukmBkj6j7oN6Gi0yTxAJG2Vm8y0Ia+z33 9Z17w6/dNZYVHUbq4fEcgt6u9YwETdVPeSfwcHyNE2zM5b9v3pHv5LJR -----END CERTIFICATE-----Generated at Tue May 12 22:31:52 2026 by rpki-client