$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer (raw, json) Hash identifier: BXwTYeC9dLcC0b3sWb3PvAAWFwl8gmsXUBuBEh7ff1Y= Subject key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B733A157E12EA340A4FA1891122949580DAE5C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:47 +0000 Certificate not after: Sun 02 May 2027 00:26:47 +0000 Subordinate resources: IP: 103.39.70.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:73:3a:15:7e:12:ea:34:0a:4f:a1:89:11:22:94:95:80:da:e5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:47 2026 GMT Not After : May 2 00:26:47 2027 GMT Subject: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:ac:f1:45:ea:45:20:4d:c8:46:8a:cf:69: 7b:9a:f5:0a:65:fe:a9:29:ad:f4:93:92:a3:ce:8e: e4:7e:5a:da:b1:99:a3:ce:7d:31:16:6a:05:8b:37: 7d:03:54:27:dd:33:87:30:84:84:33:72:bf:0b:8f: 6f:c5:fb:55:f8:e6:13:19:b5:79:40:ee:ab:2b:fe: 15:1e:78:9a:cf:04:09:c7:29:d8:e6:f5:0f:0f:32: 62:98:73:ba:58:2d:3a:da:8d:6f:84:ae:83:52:4a: 75:83:32:cf:a9:e8:4f:35:97:30:29:a6:df:84:d6: db:7b:2c:73:67:fc:fe:f5:fb:42:b6:f2:d0:aa:ba: 3c:a8:34:4e:cb:d2:de:07:74:c4:f4:87:b0:35:01: fd:0c:d3:64:94:50:ba:69:60:3d:2d:bf:e4:2e:91: b3:c1:30:9e:9a:d8:88:b0:b4:70:2b:47:8f:4f:b6: 67:6d:03:b6:2d:28:c0:c7:0a:6b:2c:2b:d9:ea:70: c4:e6:0c:ca:04:1a:26:85:1c:4e:f1:ea:d1:1d:a0: cf:93:0d:b8:e7:b5:59:8c:44:92:ee:25:e1:73:b5: 79:86:36:50:e9:cb:62:ed:46:cc:91:a2:50:c1:80: 43:6b:fd:18:36:76:1f:37:25:ab:e2:eb:88:2a:0f: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.70.0/23 Signature Algorithm: sha256WithRSAEncryption 05:0f:a5:b6:df:45:08:bb:d0:16:b0:32:ed:b4:c6:c2:ab:5b: 8a:58:33:4f:c5:03:af:2d:1d:b8:d8:79:42:b9:94:48:ae:99: 5a:0c:76:0d:90:a9:db:7c:be:1f:0a:86:1e:39:21:f3:37:d9: 80:a9:38:7d:1d:0a:a0:3a:2c:fd:54:28:fd:d2:cd:f9:ce:c2: a4:fc:ce:60:ad:80:c0:4c:ed:7e:f2:2a:a8:c6:03:68:6d:aa: b6:c3:64:0a:07:6a:c5:03:88:d8:78:35:d3:a6:b9:8c:7b:7f: 43:0c:72:aa:72:c8:cd:2c:77:57:e1:6f:f0:71:7f:8d:2a:3a: f4:69:e0:08:23:0e:f2:b6:0f:24:fb:6a:cf:fe:f3:65:88:a3: 8b:93:01:35:01:b2:86:21:41:51:b9:72:b4:25:ed:ba:7a:5b: 02:6a:99:80:b6:5c:4f:24:9d:88:b8:8d:1d:f3:6f:d8:52:e5: 55:a3:b9:3b:45:78:7c:50:61:25:1a:cc:a9:03:75:93:63:bf: 80:d4:47:57:91:6e:2d:3a:05:ae:ea:ab:e8:87:0b:3a:7d:10: 92:54:2d:1b:44:ac:0f:a3:12:15:ce:80:e0:21:58:59:fa:8b: 8c:14:9b:38:1d:a8:33:c3:34:2c:b0:8b:35:ba:13:42:c4:02: 9e:77:c2:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUW3M6FX4S6jQKT6GJESKUlYDa5ckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjE0N1oX DTI3MDUwMjAwMjY0N1owMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUy RjFFODM3OUE0QkZFMDk4RUIwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0srPFF6kUgTchGis9pe5r1CmX+qSmt9JOSo86O5H5a2rGZo859MRZqBYs3 fQNUJ90zhzCEhDNyvwuPb8X7VfjmExm1eUDuqyv+FR54ms8ECccp2Ob1Dw8yYphz ulgtOtqNb4Sug1JKdYMyz6noTzWXMCmm34TW23ssc2f8/vX7Qrby0Kq6PKg0TsvS 3gd0xPSHsDUB/QzTZJRQumlgPS2/5C6Rs8EwnprYiLC0cCtHj0+2Z20Dti0owMcK aywr2epwxOYMygQaJoUcTvHq0R2gz5MNuOe1WYxEku4l4XO1eYY2UOnLYu1GzJGi UMGAQ2v9GDZ2Hzclq+LriCoP1LsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFw0K0k3FKd/3h4vHoN5pL/gmOsBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNlNTdkNTQzLWJhZjAtNDM0OC04ODU3LTNkMjYwMWMzYTgwMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZTU3ZDU0 My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC81QzM0MkI0OTM3MTRBNzdG REUxRTJGMUU4Mzc5QTRCRkUwOThFQjAxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZydGMA0GCSqGSIb3DQEBCwUAA4IBAQAFD6W230UIu9AWsDLttMbCq1uKWDNP xQOvLR242HlCuZRIrplaDHYNkKnbfL4fCoYeOSHzN9mAqTh9HQqgOiz9VCj90s35 zsKk/M5grYDATO1+8iqoxgNobaq2w2QKB2rFA4jYeDXTprmMe39DDHKqcsjNLHdX 4W/wcX+NKjr0aeAIIw7ytg8k+2rP/vNliKOLkwE1AbKGIUFRuXK0Je26elsCapmA tlxPJJ2IuI0d82/YUuVVo7k7RXh8UGElGsypA3WTY7+A1EdXkW4tOgWu6qvohws6 fRCSVC0bRKwPoxIVzoDgIVhZ+ouMFJs4HagzwzQssIs1uhNCxAKed8LW -----END CERTIFICATE-----Generated at Tue May 12 22:03:10 2026 by rpki-client