$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer (raw, json) Hash identifier: MGLAW5d+65/Jhpm5EUIOGokMBHg7Oc512FOo4i4n8S4= Subject key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 13845B460A4509572FDFF5672FAF38AE0C1CDA5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:35:05 +0000 Certificate not after: Sun 02 May 2027 00:40:05 +0000 Subordinate resources: IP: 103.36.250.0/24 IP: 103.155.113.0/24 IP: 2401:c420::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:84:5b:46:0a:45:09:57:2f:df:f5:67:2f:af:38:ae:0c:1c:da:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:35:05 2026 GMT Not After : May 2 00:40:05 2027 GMT Subject: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:1f:7a:18:01:64:76:f4:01:89:ff:b7:44: 38:76:cf:9f:8e:f9:aa:10:81:61:82:1b:51:7b:e2: 78:01:50:ea:48:dc:46:5a:54:48:17:22:46:df:2b: cf:12:40:72:eb:fe:36:73:32:aa:26:32:ca:21:14: ac:2c:43:44:f1:09:b3:99:b6:ab:db:a5:83:d9:13: e2:3a:db:c6:b4:bd:e7:bc:92:99:06:36:a9:f8:4d: 63:9b:6f:61:56:67:4b:e0:d4:23:84:61:3d:18:ed: e0:a1:bb:c7:a7:e0:7f:0b:4d:23:1c:76:ed:17:26: cd:ff:33:d3:bb:54:98:bb:0d:b1:57:db:7e:d8:a5: 14:b2:bd:c7:d9:07:23:ec:63:cc:df:ec:e2:bb:e9: 77:2d:2f:e1:82:f3:ad:de:65:fa:a6:fe:40:71:67: a4:c3:2d:f3:d1:27:e5:a8:05:79:b3:9e:d3:f1:f5: bf:84:e7:5f:4f:6c:ee:43:69:46:c5:67:27:b9:43: 71:79:8c:4e:a1:ee:61:c2:e1:82:03:09:be:6e:cd: d1:43:74:7a:53:58:fb:b0:9c:31:8f:1d:c4:13:2c: 87:e2:9f:3d:4d:c8:7c:0d:fb:fc:75:e2:a8:7e:9a: 29:79:db:4e:3f:77:a8:00:87:e3:85:fa:6b:e2:7d: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.250.0/24 103.155.113.0/24 IPv6: 2401:c420::/32 Signature Algorithm: sha256WithRSAEncryption 96:e7:e6:ee:29:1b:62:2a:76:13:13:c7:34:52:77:1b:f9:64: 7f:1c:9b:ba:46:93:21:36:18:c1:31:2f:13:05:87:00:14:97: ee:df:1a:9a:89:07:55:6f:50:f5:41:b1:be:96:59:03:ad:b6: 92:d7:1e:aa:77:9d:07:2b:01:1a:11:ce:d6:ae:4b:ee:d3:e4: 05:a2:54:d8:a3:a4:8d:5a:fe:73:ae:2a:f2:ad:44:a4:9d:06: 23:6c:40:d4:55:f3:3c:03:87:dc:3a:a3:1a:cd:36:27:5c:1a: 02:0d:29:66:ee:f1:c4:fb:0c:4c:62:c6:e4:3a:45:d7:17:a1: fe:f7:ab:9b:ff:02:24:ed:7f:76:05:82:83:c8:01:de:6c:21: a9:43:d3:1c:51:a2:c2:d2:4a:3d:32:26:8e:67:a6:ea:46:ee: 5e:34:cd:f2:86:64:8d:39:c1:af:72:ef:25:ec:bf:72:e8:a6: 88:d5:85:b2:38:e3:11:11:27:fd:c8:97:b6:dd:d8:ef:6d:f7: 36:db:d7:3a:de:fe:c3:bd:ca:96:bb:a0:c8:15:da:aa:03:ab: c1:43:97:cd:fc:aa:55:3e:51:e6:91:62:1e:db:b0:4c:6b:2d: 6e:01:3c:0f:8b:ac:71:40:ef:89:7d:66:c9:6f:5c:e6:1b:75: a5:8b:08:c7 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUE4RbRgpFCVcv3/VnL684rgwc2lowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzUwNVoX DTI3MDUwMjAwNDAwNVowMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhE QkRDNTdCMjFFN0QyRjk1QTBDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0vH3oYAWR29AGJ/7dEOHbPn475qhCBYYIbUXvieAFQ6kjcRlpUSBciRt8r zxJAcuv+NnMyqiYyyiEUrCxDRPEJs5m2q9ulg9kT4jrbxrS957ySmQY2qfhNY5tv YVZnS+DUI4RhPRjt4KG7x6fgfwtNIxx27Rcmzf8z07tUmLsNsVfbftilFLK9x9kH I+xjzN/s4rvpdy0v4YLzrd5l+qb+QHFnpMMt89En5agFebOe0/H1v4TnX09s7kNp RsVnJ7lDcXmMTqHuYcLhggMJvm7N0UN0elNY+7CcMY8dxBMsh+KfPU3IfA37/HXi qH6aKXnbTj93qACH44X6a+J9cYUCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFrH/cE4Dpgznyjb3FeyHn0vlaDAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUzYjg1OGY2LWRlMjAtNDEyMS1iY2VhLTkwNzZlZGNjYzA5Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81M2I4NThm Ni1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC81QUM3RkRDMTM4MEU5ODMz OUYyOERCREM1N0IyMUU3RDJGOTVBMEMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQAZyT6AwQAZ5txMA0EAgACMAcDBQAkAcQgMA0GCSqGSIb3DQEBCwUAA4IBAQCW 5+buKRtiKnYTE8c0Uncb+WR/HJu6RpMhNhjBMS8TBYcAFJfu3xqaiQdVb1D1QbG+ llkDrbaS1x6qd50HKwEaEc7Wrkvu0+QFolTYo6SNWv5zriryrUSknQYjbEDUVfM8 A4fcOqMazTYnXBoCDSlm7vHE+wxMYsbkOkXXF6H+96ub/wIk7X92BYKDyAHebCGp Q9McUaLC0ko9MiaOZ6bqRu5eNM3yhmSNOcGvcu8l7L9y6KaI1YWyOOMRESf9yJe2 3djvbfc229c63v7DvcqWu6DIFdqqA6vBQ5fN/KpVPlHmkWIe27BMay1uATwPi6xx QO+JfWbJb1zmG3WliwjH -----END CERTIFICATE-----Generated at Tue May 12 22:10:08 2026 by rpki-client