$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer File: 5935015AB8D2AA07565ACB7B918A50D49090AA26.cer (raw, json) Hash identifier: p501zAPOjGd2WOo/xDTQ1PuQVTtzOVYn5UZDDGb25gs= Subject key identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4049A3920DC4CACB963A633DC02410DFB002CFDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:16 +0000 Certificate not after: Sun 02 May 2027 02:04:16 +0000 Subordinate resources: IP: 103.239.41.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:49:a3:92:0d:c4:ca:cb:96:3a:63:3d:c0:24:10:df:b0:02:cf:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:59:16 2026 GMT Not After : May 2 02:04:16 2027 GMT Subject: CN=5935015AB8D2AA07565ACB7B918A50D49090AA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:2f:11:39:4c:94:15:d9:84:30:e3:89:a5: 08:bd:23:68:b9:5e:69:8e:49:c3:f4:61:94:09:9a: c6:28:03:c7:6b:32:03:16:cf:63:e8:1e:58:6d:b1: 84:27:1d:3f:fd:2c:6b:91:50:48:7e:c9:99:e2:a3: 1b:38:96:75:88:be:93:fd:61:55:24:37:58:bd:6f: dd:92:03:df:69:22:d7:9d:43:0c:6b:3e:31:cd:77: 8d:a7:e7:a4:dd:c1:f4:f9:00:7f:8a:c4:24:5b:c6: e9:aa:2c:94:62:e3:a0:67:4a:8e:e2:25:42:0f:bb: 95:49:b5:e1:37:9f:80:ed:af:2b:4a:69:a4:22:29: 53:3d:d9:9e:c4:3e:1e:e4:03:d1:65:64:dd:f9:c9: 6c:fd:a4:a2:02:40:90:8d:36:a2:8b:10:70:03:5f: 37:5d:2a:98:47:6a:5c:d9:99:a3:79:12:ad:1a:bb: 8b:8b:af:23:1c:13:b6:9a:2b:81:14:83:3f:9e:10: 58:02:3c:f9:0b:38:fb:fe:e1:7b:20:f2:04:ed:17: 42:11:4e:51:f5:d1:f5:c6:66:02:2a:60:7a:4c:5c: b6:43:aa:59:dd:45:3a:62:5d:bd:63:1c:7f:1e:c6: 93:2c:66:cb:a1:d3:7a:f6:72:ad:db:7c:07:e3:34: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.41.0/24 Signature Algorithm: sha256WithRSAEncryption 31:3d:a6:bb:2f:25:9f:a5:16:42:e1:bb:bf:36:64:a0:d6:f8: 6f:57:b7:44:4f:21:de:89:9c:28:12:55:98:29:02:6b:18:bf: 8d:d9:2d:15:0c:70:ca:fb:e3:81:f6:ad:3c:30:6f:12:a3:c6: c6:0e:38:99:2c:7d:3d:b0:68:eb:f5:41:3a:4b:88:fd:6b:09: 66:2b:a0:03:32:9b:29:5c:ce:bc:67:2c:fa:36:90:12:07:65: 52:fe:c1:90:60:ab:c0:c2:c9:c5:eb:2b:60:17:d2:a6:26:80: 9a:75:99:52:75:af:1f:62:b2:41:81:3e:c7:2b:d7:63:e8:e1: 4e:16:f0:72:59:40:b9:f3:53:aa:ef:7c:cd:8b:d7:62:87:b9: b4:8c:e7:58:27:4b:fc:ff:f8:60:f3:78:a5:48:f0:f0:5f:f3: 14:8d:40:65:7d:35:8a:79:c2:a4:85:98:45:50:47:c0:01:59: 36:db:5d:7d:3f:e8:fc:76:b5:06:33:95:e4:9c:78:05:a7:6a: 98:87:e5:85:e4:81:72:33:0c:3d:5d:d6:9c:ca:c1:8d:51:45: 32:30:6d:b9:1c:44:59:6d:27:33:b3:5f:6c:0f:b1:02:97:7d: a4:93:d4:82:d9:9a:22:f1:fe:df:a2:94:54:04:64:66:90:7a: 44:20:4a:5d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQEmjkg3EysuWOmM9wCQQ37ACz90wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTkxNloX DTI3MDUwMjAyMDQxNlowMzExMC8GA1UEAxMoNTkzNTAxNUFCOEQyQUEwNzU2NUFD QjdCOTE4QTUwRDQ5MDkwQUEyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKidLxE5TJQV2YQw44mlCL0jaLleaY5Jw/RhlAmaxigDx2syAxbPY+geWG2x hCcdP/0sa5FQSH7JmeKjGziWdYi+k/1hVSQ3WL1v3ZID32ki151DDGs+Mc13jafn pN3B9PkAf4rEJFvG6aoslGLjoGdKjuIlQg+7lUm14TefgO2vK0pppCIpUz3ZnsQ+ HuQD0WVk3fnJbP2kogJAkI02oosQcANfN10qmEdqXNmZo3kSrRq7i4uvIxwTtpor gRSDP54QWAI8+Qs4+/7heyDyBO0XQhFOUfXR9cZmAipgekxctkOqWd1FOmJdvWMc fx7Gkyxmy6HTevZyrdt8B+M0A5cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFk1AVq40qoHVlrLe5GKUNSQkKomMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q0YmZjNWMzLWMzOWMtNDVlZC1hZTg3LTM4NGE2ZGNiNzkzOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNGJmYzVj My1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC81OTM1MDE1QUI4RDJBQTA3 NTY1QUNCN0I5MThBNTBENDkwOTBBQTI2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ+8pMA0GCSqGSIb3DQEBCwUAA4IBAQAxPaa7LyWfpRZC4bu/NmSg1vhvV7dE TyHeiZwoElWYKQJrGL+N2S0VDHDK++OB9q08MG8So8bGDjiZLH09sGjr9UE6S4j9 awlmK6ADMpspXM68Zyz6NpASB2VS/sGQYKvAwsnF6ytgF9KmJoCadZlSda8fYrJB gT7HK9dj6OFOFvByWUC581Oq73zNi9dih7m0jOdYJ0v8//hg83ilSPDwX/MUjUBl fTWKecKkhZhFUEfAAVk22119P+j8drUGM5XknHgFp2qYh+WF5IFyMww9XdacysGN UUUyMG25HERZbSczs19sD7ECl32kk9SC2Zoi8f7fopRUBGRmkHpEIEpd -----END CERTIFICATE-----Generated at Tue May 12 22:16:55 2026 by rpki-client