$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer (raw, json) Hash identifier: 6ZIofX7WQreclq46rFo1MJMpVaGFa8/aheFqRB0yEO4= Subject key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5695A054466494DA49B32C010A1FDABC1AEFBE86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:47 +0000 Certificate not after: Sun 02 May 2027 01:24:47 +0000 Subordinate resources: IP: 103.186.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:95:a0:54:46:64:94:da:49:b3:2c:01:0a:1f:da:bc:1a:ef:be:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:47 2026 GMT Not After : May 2 01:24:47 2027 GMT Subject: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:8b:ae:fd:77:da:fa:a8:58:7f:fa:6d:d8: e1:39:da:c6:47:49:34:6b:79:54:f3:55:f3:7e:e1: bc:c8:b9:95:b3:2d:34:35:9c:44:64:3b:80:76:2b: 87:0f:d7:fd:28:e1:2a:d6:a3:40:0f:d6:d5:46:27: 88:fa:02:c6:be:fb:c1:37:02:8c:95:48:36:55:bc: 56:ec:59:d5:2e:5f:5c:98:dc:6a:2a:ab:9b:74:8b: 81:23:2c:ce:32:f2:ea:46:e9:f0:db:3c:c5:31:79: e7:53:ab:f0:aa:c7:fd:3a:9a:fa:c8:92:0f:de:e8: 61:56:69:64:1d:fc:d7:74:30:1a:f4:36:bb:c9:ed: d5:29:68:d5:25:f2:46:02:50:5e:1d:06:ee:ed:88: 20:32:7d:19:08:ad:95:2b:6c:23:0b:03:63:3c:60: 9d:42:ee:7e:26:db:30:a5:e7:2a:e4:f6:9b:9c:53: 2d:7d:8c:76:d9:16:1d:d6:ea:93:87:aa:c7:75:78: b7:57:a7:37:b7:ec:f1:b4:92:11:ee:9c:8e:16:10: a3:6c:f8:4a:a2:56:32:75:62:9f:8d:cc:e9:6c:47: 54:88:ef:27:1e:53:a0:26:df:92:7d:4c:4c:87:df: 35:f4:87:52:96:a5:e5:d6:ae:ad:cf:db:c1:ab:96: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.92.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:d7:a5:fa:cc:cf:6a:8d:90:37:6a:d5:f3:0c:28:84:a1:8d: 36:18:7c:63:e2:20:fc:9f:f9:6b:7f:13:f7:d3:ce:89:04:c4: 1f:c7:5b:e5:79:af:4c:bd:8d:d4:10:b3:b6:24:e3:10:01:cc: 3c:f2:09:f5:75:2b:41:32:a5:be:53:0c:3d:ff:29:63:30:73: 0c:b7:29:d1:6f:35:2e:0c:7e:41:76:5d:bf:87:90:7f:76:91: 53:e5:95:88:bc:2e:15:96:40:3b:d7:76:c0:49:dc:e0:1b:54: 3b:f7:0b:4e:2a:61:db:04:dd:41:1b:0e:3d:b4:2a:04:5d:3b: a2:78:0f:b4:1e:e1:a5:e0:cb:1b:80:c6:01:65:07:38:32:4c: 4a:5c:52:17:b9:a5:fa:fa:e6:c1:dd:24:e3:8a:48:7b:e6:93: bf:ce:1e:1a:8d:2f:d0:d7:04:d2:d2:ee:d0:5a:25:e7:77:fa: 26:2a:ab:35:f3:fa:59:b7:9b:08:af:58:37:52:bc:17:b6:3e: 0b:71:c8:dd:70:17:2f:98:41:82:54:19:00:de:ea:e4:7f:b7: c5:ec:85:ca:81:79:57:39:05:82:69:01:bd:52:27:57:0a:a0: a3:3f:42:ce:db:30:86:63:52:95:97:e2:a1:2f:c9:df:a6:37: 62:35:fb:08 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVpWgVEZklNpJsywBCh/avBrvvoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTk0N1oX DTI3MDUwMjAxMjQ0N1owMzExMC8GA1UEAxMoNUMxRjhCODFCQTk1ODQ4RkE1MTg5 NkUwOTVEQjdBNDI5MjA5N0VGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7ci679d9r6qFh/+m3Y4TnaxkdJNGt5VPNV837hvMi5lbMtNDWcRGQ7gHYr hw/X/SjhKtajQA/W1UYniPoCxr77wTcCjJVINlW8VuxZ1S5fXJjcaiqrm3SLgSMs zjLy6kbp8Ns8xTF551Or8KrH/Tqa+siSD97oYVZpZB3813QwGvQ2u8nt1Slo1SXy RgJQXh0G7u2IIDJ9GQitlStsIwsDYzxgnULufibbMKXnKuT2m5xTLX2MdtkWHdbq k4eqx3V4t1enN7fs8bSSEe6cjhYQo2z4SqJWMnVin43M6WxHVIjvJx5ToCbfkn1M TIffNfSHUpal5daurc/bwauW75cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFwfi4G6lYSPpRiW4JXbekKSCX76MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk0ZTFhYzdjLTkwNGQtNDkzZi1iYTVlLTVlMDgzN2RjYmQyOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NGUxYWM3 Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC81QzFGOEI4MUJBOTU4NDhG QTUxODk2RTA5NURCN0E0MjkyMDk3RUZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7pcMA0GCSqGSIb3DQEBCwUAA4IBAQB816X6zM9qjZA3atXzDCiEoY02GHxj 4iD8n/lrfxP3086JBMQfx1vlea9MvY3UELO2JOMQAcw88gn1dStBMqW+Uww9/ylj MHMMtynRbzUuDH5Bdl2/h5B/dpFT5ZWIvC4VlkA713bASdzgG1Q79wtOKmHbBN1B Gw49tCoEXTuieA+0HuGl4MsbgMYBZQc4MkxKXFIXuaX6+ubB3STjikh75pO/zh4a jS/Q1wTS0u7QWiXnd/omKqs18/pZt5sIr1g3UrwXtj4LccjdcBcvmEGCVBkA3urk f7fF7IXKgXlXOQWCaQG9UidXCqCjP0LO2zCGY1KVl+KhL8nfpjdiNfsI -----END CERTIFICATE-----Generated at Tue May 12 22:02:55 2026 by rpki-client