$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer (raw, json) Hash identifier: N5taWMt8oBErg0T1BJMvGkMlaZusfgrFRRZm6XQjSgE= Subject key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6250C3E8DFEAA653EC00F18A81C35A7D17FE5BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:50:14 +0000 Certificate not after: Sun 02 May 2027 00:55:14 +0000 Subordinate resources: IP: 103.17.76.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:50:c3:e8:df:ea:a6:53:ec:00:f1:8a:81:c3:5a:7d:17:fe:5b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:50:14 2026 GMT Not After : May 2 00:55:14 2027 GMT Subject: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:81:ff:89:ac:56:8c:67:91:e7:ba:8a:f2: 42:3b:04:3f:75:13:51:4e:55:d3:3f:2b:43:35:bf: 61:74:19:c8:e7:ea:9e:6b:b8:9d:56:ae:37:76:77: 29:ff:19:c2:5c:be:69:95:b7:f4:f4:26:44:b3:af: 9a:58:ed:b8:b4:9e:48:59:02:7b:14:45:d0:10:3f: 93:9c:7a:c0:77:1a:91:82:ca:99:d0:9e:4b:25:27: 4c:7b:4e:ba:60:63:77:01:91:93:ea:10:35:15:4c: 54:c9:6d:25:f9:be:09:f6:81:af:d5:ca:8c:8a:5e: 81:ea:be:1e:f9:de:cd:14:83:36:d1:b8:bf:d0:57: 92:54:c9:a0:57:3d:c2:17:b0:a3:9e:fb:b2:80:cd: 3e:10:68:5c:b9:1a:4f:d6:14:47:69:b8:a9:ba:75: df:06:f1:b3:90:a8:61:c3:2c:fe:37:65:78:06:44: 04:d5:72:a3:cd:dd:6d:1b:27:55:bf:46:a8:20:20: e0:78:1d:38:58:ad:58:1f:86:d8:56:51:99:52:73: 94:21:e9:5d:a1:44:7b:bc:0f:40:66:32:1e:4a:46: b3:db:59:51:86:58:33:50:81:23:e1:f3:22:59:b0: 86:82:1b:23:60:eb:9e:c3:b6:a5:fc:eb:7e:6c:9a: da:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.76.0/23 Signature Algorithm: sha256WithRSAEncryption 19:3f:3f:cc:b5:2a:fc:e6:86:ec:5a:2f:59:03:6c:5f:1a:fc: 43:1d:f4:f9:61:3e:63:45:1e:f0:b4:b2:83:ca:ec:28:17:10: 6d:fc:da:56:2d:1a:c2:2c:3b:2e:29:0a:ea:49:8c:b2:8a:ba: 89:e8:e9:12:5b:d2:0c:4a:8b:cf:a1:73:be:48:71:09:30:d4: 4a:8f:5d:eb:57:a8:ab:51:2b:e9:cf:f1:8a:15:52:04:c3:f1: e9:dd:c0:c4:16:68:71:76:b9:6b:93:f3:96:5d:ad:a7:2c:d9: 0b:cb:5e:0b:ed:6c:3b:06:c2:0e:1b:33:db:cb:86:90:0b:d4: 16:fe:1a:f5:03:97:11:93:37:06:c7:3d:17:e7:5c:f9:4e:e7: d2:47:e2:7a:3c:3b:c5:25:61:47:b9:6b:29:8b:13:d6:92:0d: 31:53:dc:da:2e:21:b1:b0:d4:e1:a1:32:64:fe:c3:99:32:60: 1a:1e:5e:dd:76:f2:17:8d:1f:a2:93:c6:2a:1b:f6:1c:7d:5e: 31:f5:c2:0e:10:fc:6e:a1:74:35:aa:15:85:cf:6b:78:2e:29: 30:c9:76:b6:20:ec:a5:bb:e2:fd:f5:41:12:f5:6d:94:f0:6b: 65:56:e0:a4:c6:55:2f:dc:de:e9:06:52:b0:18:c5:80:68:38: fc:1c:4a:d0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYlDD6N/qplPsAPGKgcNafRf+W+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTAxNFoX DTI3MDUwMjAwNTUxNFowMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3 MURDQkE4OEJBQjhCQ0Q5REE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALt8gf+JrFaMZ5HnuoryQjsEP3UTUU5V0z8rQzW/YXQZyOfqnmu4nVauN3Z3 Kf8Zwly+aZW39PQmRLOvmljtuLSeSFkCexRF0BA/k5x6wHcakYLKmdCeSyUnTHtO umBjdwGRk+oQNRVMVMltJfm+CfaBr9XKjIpegeq+HvnezRSDNtG4v9BXklTJoFc9 whewo577soDNPhBoXLkaT9YUR2m4qbp13wbxs5CoYcMs/jdleAZEBNVyo83dbRsn Vb9GqCAg4HgdOFitWB+G2FZRmVJzlCHpXaFEe7wPQGYyHkpGs9tZUYZYM1CBI+Hz IlmwhoIbI2DrnsO2pfzrfmya2gMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFvkwp7qPdk7ocJx3LqIuri82dpqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZhMDcxNTE0LWU0ZGUtNGFjZS1hMGRmLWY3YzRhYjgwNzRhNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YTA3MTUx NC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81QkU0QzI5RUVBM0REOTNC QTFDMjcxRENCQTg4QkFCOEJDRDlEQTZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxFMMA0GCSqGSIb3DQEBCwUAA4IBAQAZPz/MtSr85obsWi9ZA2xfGvxDHfT5 YT5jRR7wtLKDyuwoFxBt/NpWLRrCLDsuKQrqSYyyirqJ6OkSW9IMSovPoXO+SHEJ MNRKj13rV6irUSvpz/GKFVIEw/Hp3cDEFmhxdrlrk/OWXa2nLNkLy14L7Ww7BsIO GzPby4aQC9QW/hr1A5cRkzcGxz0X51z5TufSR+J6PDvFJWFHuWspixPWkg0xU9za LiGxsNThoTJk/sOZMmAaHl7ddvIXjR+ik8YqG/YcfV4x9cIOEPxuoXQ1qhWFz2t4 LikwyXa2IOylu+L99UES9W2U8GtlVuCkxlUv3N7pBlKwGMWAaDj8HErQ -----END CERTIFICATE-----Generated at Tue May 12 22:10:37 2026 by rpki-client