$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer File: 591286FA978EE719A57E5A972B00E176D16D8BD5.cer (raw, json) Hash identifier: 9qROzPe001kRX5rf2WnV08Hztq1cLgFGAB2j5XcCn9s= Subject key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 51E5611D664DBCB8FE6D792448FDD603DA0FCA68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:34 +0000 Certificate not after: Sun 02 May 2027 01:28:34 +0000 Subordinate resources: IP: 103.120.76.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e5:61:1d:66:4d:bc:b8:fe:6d:79:24:48:fd:d6:03:da:0f:ca:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:23:34 2026 GMT Not After : May 2 01:28:34 2027 GMT Subject: CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:60:71:a6:ce:66:e8:e1:58:41:62:6e:ae: 6a:ef:bc:bd:1d:9d:e9:c9:8f:fe:5b:58:2e:3c:95: 33:fc:8e:4f:d5:49:e9:b7:7a:f7:39:d8:4f:58:21: e7:1f:58:ee:18:93:a3:54:4c:bc:aa:a5:2d:ae:e8: e5:a8:11:be:60:d2:f0:43:0a:1f:7e:66:1c:c7:d7: 76:67:a5:4c:fd:9f:08:97:e5:31:69:5c:49:32:6a: 3d:5a:59:97:d9:67:70:e4:05:31:8c:2c:d1:58:12: fd:d6:5e:8e:99:d2:11:37:3e:62:86:ec:a4:74:2a: 6f:c1:a6:5d:9e:b8:2a:ac:96:2f:2e:fb:6e:0c:8f: 6d:b2:5f:bc:39:41:2e:f1:f5:25:18:02:2c:fd:f3: b4:aa:34:73:e2:62:6c:45:f0:e5:f7:e7:a5:a5:dd: 1e:48:40:9b:6e:81:3c:e0:b1:a6:2e:29:78:b1:31: 9c:97:4c:f9:be:c9:c0:d8:4c:43:9c:b8:0c:8c:b4: e0:78:d5:e1:7e:a4:8c:a4:8e:ab:16:a9:67:40:71: e0:87:f4:a0:bb:9d:ff:85:b4:ef:25:bd:47:aa:9e: ac:bd:49:da:77:fe:57:e5:9f:1c:92:e0:df:1e:ee: f9:a2:fa:9c:4f:69:e1:5d:64:7f:42:d5:26:8e:e6: 00:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.76.0/24 Signature Algorithm: sha256WithRSAEncryption 27:66:71:c7:32:71:d5:45:6c:d5:ae:48:d8:c0:5d:d2:d5:12: f4:30:29:b6:09:f3:14:34:49:15:ad:47:c0:f7:c9:fa:d0:56: 68:90:81:99:20:80:15:f9:ef:90:f9:1f:6b:2f:99:51:13:d0: eb:18:aa:0a:4a:6e:7a:3e:9b:88:a1:1b:8d:04:39:fe:09:04: 99:89:20:c8:31:77:04:4c:43:ed:9f:16:e4:17:2f:5b:ab:74: f7:cc:8e:f7:86:be:90:6d:f2:be:da:34:81:ff:53:56:5b:f5: f1:d9:7a:ce:b3:fe:7f:1f:07:0e:7e:c7:6b:bb:9e:a5:38:18: 8a:94:0f:07:56:4b:ad:6e:39:8e:1a:87:d1:e2:96:34:36:e6: 55:18:b9:e5:f8:25:c9:e6:13:f4:9c:79:62:a2:89:b3:42:62: 49:1b:5d:19:45:68:85:1d:62:37:2c:21:c4:00:28:74:16:ca: b3:27:23:44:26:47:0d:c4:1b:25:4e:f4:58:ae:0e:69:e7:86: 57:a2:1c:e7:f0:cf:aa:25:c7:d1:5c:09:90:37:74:e4:28:cb: 34:59:67:64:2c:cc:62:aa:ab:7c:3a:ca:75:90:78:a0:25:17: 43:40:40:ce:88:6d:6f:d0:a2:bb:2a:0a:97:54:c2:6d:3a:52: 2c:e8:c9:db -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUeVhHWZNvLj+bXkkSP3WA9oPymgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjMzNFoX DTI3MDUwMjAxMjgzNFowMzExMC8GA1UEAxMoNTkxMjg2RkE5NzhFRTcxOUE1N0U1 QTk3MkIwMEUxNzZEMTZEOEJENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZ8YHGmzmbo4VhBYm6uau+8vR2d6cmP/ltYLjyVM/yOT9VJ6bd69znYT1gh 5x9Y7hiTo1RMvKqlLa7o5agRvmDS8EMKH35mHMfXdmelTP2fCJflMWlcSTJqPVpZ l9lncOQFMYws0VgS/dZejpnSETc+YobspHQqb8GmXZ64KqyWLy77bgyPbbJfvDlB LvH1JRgCLP3ztKo0c+JibEXw5ffnpaXdHkhAm26BPOCxpi4peLExnJdM+b7JwNhM Q5y4DIy04HjV4X6kjKSOqxapZ0Bx4If0oLud/4W07yW9R6qerL1J2nf+V+WfHJLg 3x7u+aL6nE9p4V1kf0LVJo7mAPMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFkShvqXjucZpX5alysA4XbRbYvVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlhZGM3NjVhLWZmOGQtNGIxZi1hNTlhLTI1ZmY3YmQ0ZjU4YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YWRjNzY1 YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC81OTEyODZGQTk3OEVFNzE5 QTU3RTVBOTcyQjAwRTE3NkQxNkQ4QkQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3hMMA0GCSqGSIb3DQEBCwUAA4IBAQAnZnHHMnHVRWzVrkjYwF3S1RL0MCm2 CfMUNEkVrUfA98n60FZokIGZIIAV+e+Q+R9rL5lRE9DrGKoKSm56PpuIoRuNBDn+ CQSZiSDIMXcETEPtnxbkFy9bq3T3zI73hr6QbfK+2jSB/1NWW/Xx2XrOs/5/HwcO fsdru56lOBiKlA8HVkutbjmOGofR4pY0NuZVGLnl+CXJ5hP0nHlioomzQmJJG10Z RWiFHWI3LCHEACh0FsqzJyNEJkcNxBslTvRYrg5p54ZXohzn8M+qJcfRXAmQN3Tk KMs0WWdkLMxiqqt8Osp1kHigJRdDQEDOiG1v0KK7KgqXVMJtOlIs6Mnb -----END CERTIFICATE-----Generated at Wed May 13 01:35:24 2026 by rpki-client