$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer File: 5ABFE157E467A6732384B658909A9764D5D88AEC.cer (raw, json) Hash identifier: UBh70yZ4AaYakgpBhORb95vc9FL9jF59leVadLUr7gg= Subject key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6F0D76A8BD7AF023C61B7D455409E5B6008024FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:08:01 +0000 Certificate not after: Sun 02 May 2027 00:13:01 +0000 Subordinate resources: IP: 103.157.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0d:76:a8:bd:7a:f0:23:c6:1b:7d:45:54:09:e5:b6:00:80:24:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:08:01 2026 GMT Not After : May 2 00:13:01 2027 GMT Subject: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:bc:3b:ef:f0:57:0d:33:ba:c7:5c:b5:a0: 67:a3:54:3e:a3:98:35:bb:59:54:25:fb:2e:36:95: c1:b2:c0:9b:05:6f:f1:d9:69:42:97:11:be:87:32: 4b:3d:b0:ac:e7:17:45:b2:ac:01:27:94:c3:fa:cd: c0:d8:fb:8c:c0:a2:1d:42:7f:b7:54:16:89:a9:2b: 2f:0b:ed:a1:94:e3:28:45:e1:86:67:2f:cd:16:15: 9f:70:5d:74:90:ad:d0:bd:de:bc:ed:f2:8c:d1:d4: fd:17:be:35:80:66:e6:db:1b:8c:3b:3d:ca:15:ca: 4a:78:82:78:6f:1c:c0:50:50:48:b6:5c:1b:6d:00: 0c:3c:c5:e4:ed:1e:b8:77:84:3a:08:13:ea:ca:80: 77:e0:26:dd:a0:22:b5:18:e1:9c:28:ab:84:d0:b5: 6d:51:b5:2e:8e:a9:2a:12:43:e8:3f:96:d5:bc:21: 3d:a8:89:95:12:8a:12:95:db:01:6b:76:92:64:6c: 60:9b:c0:13:ec:60:71:14:f4:d9:4b:ee:4d:e2:a1: 53:a6:fc:6d:cc:14:34:2d:0d:54:66:19:61:28:81: 11:1c:6e:2a:0b:64:92:6a:05:61:f2:05:61:8e:37: 95:e5:fc:b5:4e:3f:ec:8a:18:32:19:9b:2d:e6:57: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.62.0/23 Signature Algorithm: sha256WithRSAEncryption a8:74:cb:bc:89:7a:37:86:93:c3:a5:f7:4e:8f:67:da:c7:3e: 49:1c:d4:e9:cd:ea:12:39:77:1b:76:01:72:91:5a:5d:2e:a7: 2d:49:4b:01:a8:b2:3f:ef:bb:ea:d3:ad:5c:c2:98:f7:72:f8: 2d:3d:96:6e:52:4c:fa:9b:26:0e:df:ec:8c:3c:c9:55:a0:3f: 94:fd:69:7d:c4:dc:14:55:1a:f2:27:eb:70:a4:72:8f:4e:42: ea:d7:6e:32:53:1a:a0:c2:b3:4c:0c:a9:33:11:89:52:80:05: a3:b7:c5:30:af:1f:08:f4:ff:ee:ff:91:7e:12:5f:fb:4b:46: 98:89:02:7b:d4:65:60:eb:e4:d9:8a:0f:07:91:c4:98:d8:37: 4d:59:74:5d:0d:47:a2:fc:c3:88:32:93:4b:50:90:1e:a5:2f: 4d:e9:ee:fe:56:ed:da:09:d6:7d:96:e8:3f:63:c6:65:21:7f: 83:8d:8b:71:5c:97:c3:b8:0f:35:94:dd:be:2a:70:9e:fc:7c: 18:6d:fa:2e:f0:ca:39:b5:f6:34:cd:6d:a6:2f:bc:ae:49:16: 4e:0d:2f:ad:53:8d:3e:68:ea:f0:53:4c:da:81:2e:1c:7d:d0: b4:d2:32:83:d8:dd:db:f4:6b:d1:7e:91:24:4a:f1:0c:bb:f5: 0a:b0:09:98 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbw12qL168CPGG31FVAnltgCAJPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDgwMVoX DTI3MDUwMjAwMTMwMVowMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRC NjU4OTA5QTk3NjRENUQ4OEFFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOw9vDvv8FcNM7rHXLWgZ6NUPqOYNbtZVCX7LjaVwbLAmwVv8dlpQpcRvocy Sz2wrOcXRbKsASeUw/rNwNj7jMCiHUJ/t1QWiakrLwvtoZTjKEXhhmcvzRYVn3Bd dJCt0L3evO3yjNHU/Re+NYBm5tsbjDs9yhXKSniCeG8cwFBQSLZcG20ADDzF5O0e uHeEOggT6sqAd+Am3aAitRjhnCirhNC1bVG1Lo6pKhJD6D+W1bwhPaiJlRKKEpXb AWt2kmRsYJvAE+xgcRT02UvuTeKhU6b8bcwUNC0NVGYZYSiBERxuKgtkkmoFYfIF YY43leX8tU4/7IoYMhmbLeZXKRkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFq/4VfkZ6ZzI4S2WJCal2TV2IrsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJiZDMwNTg3LWE3Y2EtNDE5NS1hMzU5LTBjMGY2MjdhZjhkYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYmQzMDU4 Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC81QUJGRTE1N0U0NjdBNjcz MjM4NEI2NTg5MDlBOTc2NEQ1RDg4QUVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ50+MA0GCSqGSIb3DQEBCwUAA4IBAQCodMu8iXo3hpPDpfdOj2faxz5JHNTp zeoSOXcbdgFykVpdLqctSUsBqLI/77vq061cwpj3cvgtPZZuUkz6myYO3+yMPMlV oD+U/Wl9xNwUVRryJ+twpHKPTkLq124yUxqgwrNMDKkzEYlSgAWjt8Uwrx8I9P/u /5F+El/7S0aYiQJ71GVg6+TZig8HkcSY2DdNWXRdDUei/MOIMpNLUJAepS9N6e7+ Vu3aCdZ9lug/Y8ZlIX+DjYtxXJfDuA81lN2+KnCe/HwYbfou8Mo5tfY0zW2mL7yu SRZODS+tU40+aOrwU0zagS4cfdC00jKD2N3b9GvRfpEkSvEMu/UKsAmY -----END CERTIFICATE-----Generated at Wed May 13 01:07:11 2026 by rpki-client