$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer (raw, json) Hash identifier: WoJ0dqeixVRNTSeoh7w0Y7qho/3LQFcFhhhv5tquU0E= Subject key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 35F48F0DB679ED107B4F051A8C49CF164E84D7AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:36 +0000 Certificate not after: Sun 02 May 2027 01:53:36 +0000 Subordinate resources: IP: 103.94.212.0/23 IP: 2001:df1:8500::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f4:8f:0d:b6:79:ed:10:7b:4f:05:1a:8c:49:cf:16:4e:84:d7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:36 2026 GMT Not After : May 2 01:53:36 2027 GMT Subject: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:19:f5:09:6f:19:1a:66:d0:33:39:5f:02: 83:86:9d:3a:b0:87:e6:e5:5d:01:f6:46:05:e5:86: ca:d4:a3:5a:63:a1:20:87:75:90:8e:3e:1d:57:54: c4:4f:f0:c3:3d:fb:55:db:67:5c:d9:fd:b1:5f:07: b8:09:48:7a:7e:d1:3e:e8:84:30:5a:7a:26:d5:e0: 0e:ca:8c:b1:a4:87:df:17:36:8b:9a:b2:52:48:8e: 45:60:be:27:9e:ea:d6:48:90:f4:82:71:3d:66:68: 02:69:73:4c:6f:31:e9:d2:c6:ed:0a:e1:3d:ef:ac: 3b:73:86:8b:d8:43:13:dd:6a:33:74:1a:88:4d:19: 0d:7f:df:97:ff:30:ae:56:56:ed:d2:2d:15:8d:fa: 1f:66:44:86:4c:f0:03:48:e9:c8:07:05:ca:45:a8: cc:e3:8e:58:db:e5:7a:00:03:56:b6:b5:05:bf:4c: f3:1a:4f:43:56:86:bb:82:46:72:8c:05:7e:98:0f: 50:8b:c2:9f:21:4b:37:70:4a:8b:b5:d4:fe:9d:66: 50:eb:05:26:8c:76:98:e2:99:10:b2:de:9f:dd:23: 65:5b:ed:35:aa:b9:c2:78:db:ab:00:9e:f5:12:6a: b9:7a:86:00:88:1a:07:c9:e1:fb:81:d1:7c:42:f4: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.212.0/23 IPv6: 2001:df1:8500::/48 Signature Algorithm: sha256WithRSAEncryption 14:51:d6:3e:45:93:d8:9a:ea:63:95:d6:29:f5:72:af:78:0c: 8f:2d:81:71:81:21:3c:8a:62:d3:d5:4b:9e:fa:52:c8:eb:45: 42:0a:bb:e6:d7:a0:94:97:b9:96:a8:aa:a1:46:d0:d5:62:e7: 97:db:d8:f9:1f:f7:1e:8d:30:b2:85:c2:45:f0:5e:16:c9:15: c5:a9:b1:52:39:cd:0b:18:e5:e5:78:d4:69:be:5a:3e:ad:10: f9:10:3f:a1:a3:91:19:79:73:6c:75:18:0d:cf:e3:90:70:ec: 27:35:50:19:78:31:de:88:c1:1d:e3:09:eb:25:97:3f:0b:68: b1:99:93:23:f3:a6:94:f9:1a:a1:24:49:ae:be:ca:b2:63:8b: 66:14:7b:fa:83:ff:b9:08:10:9a:37:3b:c2:d2:35:0a:a8:29: d0:7e:9a:26:2d:17:63:a7:30:32:da:83:e5:ab:8b:23:9c:04: 1e:db:72:e2:4a:8e:b4:c7:56:a5:ca:49:35:ec:2b:b1:a1:f0: 30:31:b1:e6:b4:2b:b8:68:c9:f9:ad:c6:e0:1d:e2:c3:96:a9: 03:0c:18:f1:59:0d:29:80:0c:ce:1e:2e:f7:2c:62:e8:2a:b4: 07:ed:33:3b:35:84:ed:c2:41:58:6b:cc:97:89:74:3f:d7:fd: 2b:54:4e:0f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUNfSPDbZ57RB7TwUajEnPFk6E16owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDgzNloX DTI3MDUwMjAxNTMzNlowMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5 OThBRjZENEZGNzAzOUE4M0ZGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMb6GfUJbxkaZtAzOV8Cg4adOrCH5uVdAfZGBeWGytSjWmOhIId1kI4+HVdU xE/wwz37VdtnXNn9sV8HuAlIen7RPuiEMFp6JtXgDsqMsaSH3xc2i5qyUkiORWC+ J57q1kiQ9IJxPWZoAmlzTG8x6dLG7QrhPe+sO3OGi9hDE91qM3QaiE0ZDX/fl/8w rlZW7dItFY36H2ZEhkzwA0jpyAcFykWozOOOWNvlegADVra1Bb9M8xpPQ1aGu4JG cowFfpgPUIvCnyFLN3BKi7XU/p1mUOsFJox2mOKZELLen90jZVvtNaq5wnjbqwCe 9RJquXqGAIgaB8nh+4HRfEL0BzcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFocCkliSGOS7j+ZivbU/3A5qD/zMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MyZjI4ODc5LTQ4NDQtNDJkZS1iMmQ5LWE5NjY2ZGUyODJlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMmYyODg3 OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC81QTFDMEE0OTYyNDg2Mzky RUUzRjk5OEFGNkQ0RkY3MDM5QTgzRkYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ17UMA8EAgACMAkDBwAgAQ3xhQAwDQYJKoZIhvcNAQELBQADggEBABRR1j5F k9ia6mOV1in1cq94DI8tgXGBITyKYtPVS576UsjrRUIKu+bXoJSXuZaoqqFG0NVi 55fb2Pkf9x6NMLKFwkXwXhbJFcWpsVI5zQsY5eV41Gm+Wj6tEPkQP6GjkRl5c2x1 GA3P45Bw7Cc1UBl4Md6IwR3jCesllz8LaLGZkyPzppT5GqEkSa6+yrJji2YUe/qD /7kIEJo3O8LSNQqoKdB+miYtF2OnMDLag+WriyOcBB7bcuJKjrTHVqXKSTXsK7Gh 8DAxsea0K7hoyfmtxuAd4sOWqQMMGPFZDSmADM4eLvcsYugqtAftMzs1hO3CQVhr zJeJdD/X/StUTg8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:57 2026 by rpki-client