$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer File: 586C54F03B92F22D9291776AE79350296DB382C8.cer (raw, json) Hash identifier: AvHj/cBpmO57ZqoWtnHnvJDzh+EVA0YH1qh1bTpVP6w= Subject key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 357B7CF3A5970009DE6D3B2D3FDC1B39114679AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:58:19 +0000 Certificate not after: Sun 02 May 2027 01:03:19 +0000 Subordinate resources: IP: 103.190.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7b:7c:f3:a5:97:00:09:de:6d:3b:2d:3f:dc:1b:39:11:46:79:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:58:19 2026 GMT Not After : May 2 01:03:19 2027 GMT Subject: CN=586C54F03B92F22D9291776AE79350296DB382C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:b2:13:6d:fb:39:18:db:b9:d7:b7:06:2e: 35:91:12:ac:fe:59:73:2c:a7:c9:3c:f1:c7:0c:1c: 2b:22:ae:cf:70:9c:1d:da:8d:d2:7c:85:59:63:27: 48:e0:b3:27:d7:9d:9a:5c:e0:b0:93:04:8a:95:07: 0c:97:bf:b2:cb:45:1f:91:90:8c:24:f0:58:72:a0: d4:8e:36:5c:b0:1f:19:9b:1b:85:b4:58:74:9b:1a: 65:65:b7:86:66:45:cc:4a:d5:55:c3:da:a9:3c:c0: f4:09:0a:38:e6:13:40:2d:d5:c2:46:d4:e2:3a:83: f7:cb:9d:0e:52:3b:4a:ae:5f:07:96:44:0e:4c:f0: 92:33:25:f9:99:4e:3c:4d:19:e8:39:61:df:37:7a: 01:71:d1:2b:5b:2e:af:02:ec:f1:19:0b:30:42:05: f1:42:6a:8f:a3:b1:b4:49:3f:77:ba:09:b9:1c:09: b5:eb:68:8b:4a:b2:af:75:2a:7f:7b:3b:74:68:2d: 21:5e:0f:0b:50:78:b2:28:5f:8c:48:83:11:13:45: 0e:6a:fb:5a:1f:b0:26:c7:17:6d:56:1d:14:c8:09: 98:1d:d3:8f:c3:9a:de:22:66:fb:94:9d:80:d3:e9: 0b:09:da:ac:38:fd:7b:69:30:11:eb:62:e9:81:30: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.62.0/23 Signature Algorithm: sha256WithRSAEncryption 63:fa:e1:6a:f5:be:dc:96:03:87:40:10:d4:2f:0b:74:7a:26: c9:f8:e2:87:20:fa:37:82:c2:4c:d9:63:99:b2:55:13:4b:1b: 84:28:c8:be:d2:e9:c6:72:97:4c:5c:54:9d:a5:67:1e:a8:92: 6f:1f:22:77:38:5f:b1:c9:7f:b9:58:d6:05:a8:a1:e6:3a:59: f5:4e:3c:9c:03:07:5b:a8:ca:e0:4d:26:2a:48:20:33:3a:8f: cc:e8:59:ef:74:4e:8d:06:7d:31:4f:12:d9:a0:aa:4e:3e:56: 2a:4a:8a:a9:73:f3:2e:2e:51:94:68:1a:8d:a0:ba:e7:e4:a7: 53:94:dd:60:7a:f1:27:8b:1c:0a:d8:78:87:b3:85:14:dd:09: b0:01:3f:1f:00:31:55:a1:44:34:d6:bb:98:86:74:61:df:0d: 18:66:7d:f6:33:fe:97:07:1d:de:50:c6:84:fc:51:35:7a:8b: 53:79:9b:24:d9:5c:42:6e:8b:92:47:94:91:7f:a5:81:17:fc: 0c:cc:08:33:1d:52:65:9e:dd:78:84:18:2b:6c:79:9c:6d:04: 83:c8:af:db:f3:73:60:5e:04:df:d5:ad:7f:56:9f:6b:ff:81: fa:1c:c6:93:ce:47:02:48:58:cb:27:7d:82:fa:5f:83:0a:08: f9:86:cb:a2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNXt886WXAAnebTstP9wbORFGeaswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTgxOVoX DTI3MDUwMjAxMDMxOVowMzExMC8GA1UEAxMoNTg2QzU0RjAzQjkyRjIyRDkyOTE3 NzZBRTc5MzUwMjk2REIzODJDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJYcshNt+zkY27nXtwYuNZESrP5ZcyynyTzxxwwcKyKuz3CcHdqN0nyFWWMn SOCzJ9edmlzgsJMEipUHDJe/sstFH5GQjCTwWHKg1I42XLAfGZsbhbRYdJsaZWW3 hmZFzErVVcPaqTzA9AkKOOYTQC3VwkbU4jqD98udDlI7Sq5fB5ZEDkzwkjMl+ZlO PE0Z6Dlh3zd6AXHRK1surwLs8RkLMEIF8UJqj6OxtEk/d7oJuRwJtetoi0qyr3Uq f3s7dGgtIV4PC1B4sihfjEiDERNFDmr7Wh+wJscXbVYdFMgJmB3Tj8Oa3iJm+5Sd gNPpCwnarDj9e2kwEeti6YEwl8kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFhsVPA7kvItkpF3aueTUClts4LIMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc2MjBiNDIzLWRkNWQtNDQ4Zi1iYmQzLTA0NTMwZWMxNzE1ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NjIwYjQy My1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC81ODZDNTRGMDNCOTJGMjJE OTI5MTc3NkFFNzkzNTAyOTZEQjM4MkM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ74+MA0GCSqGSIb3DQEBCwUAA4IBAQBj+uFq9b7clgOHQBDULwt0eibJ+OKH IPo3gsJM2WOZslUTSxuEKMi+0unGcpdMXFSdpWceqJJvHyJ3OF+xyX+5WNYFqKHm Oln1TjycAwdbqMrgTSYqSCAzOo/M6FnvdE6NBn0xTxLZoKpOPlYqSoqpc/MuLlGU aBqNoLrn5KdTlN1gevEnixwK2HiHs4UU3QmwAT8fADFVoUQ01ruYhnRh3w0YZn32 M/6XBx3eUMaE/FE1eotTeZsk2VxCbouSR5SRf6WBF/wMzAgzHVJlnt14hBgrbHmc bQSDyK/b83NgXgTf1a1/Vp9r/4H6HMaTzkcCSFjLJ32C+l+DCgj5hsui -----END CERTIFICATE-----Generated at Tue May 12 22:02:58 2026 by rpki-client