$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer File: 5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer (raw, json) Hash identifier: sDki2J2pdAw9HIbc0Q1JMwjjyCDQ5fVl1P6Jv73aNws= Subject key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4057B77DA2FC31CC91E70415548653EC1EAAE15D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft caRepository: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:56:36 +0000 Certificate not after: Sun 02 May 2027 00:01:36 +0000 Subordinate resources: IP: 103.151.222.0/23 IP: 2406:20c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:57:b7:7d:a2:fc:31:cc:91:e7:04:15:54:86:53:ec:1e:aa:e1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:56:36 2026 GMT Not After : May 2 00:01:36 2027 GMT Subject: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:54:e8:cb:b7:ff:c4:fc:cf:44:04:b3:28: 20:eb:f3:20:6a:c0:eb:77:e8:ab:2f:7a:0b:2b:e2: 03:8f:4e:e0:d1:a6:49:ff:78:99:f0:04:79:0c:dc: 72:93:5e:04:fc:fa:21:68:12:54:f5:b8:8b:38:5c: 03:db:8a:91:e3:35:12:86:35:4a:69:4b:e8:27:3f: e5:2a:44:5a:5e:16:b0:e3:5a:fa:2f:b4:1b:4a:e6: ab:ca:49:d5:83:a8:45:78:7d:10:c6:89:4f:c8:54: 7c:c4:03:1c:0a:91:32:60:73:eb:3e:0b:f7:f7:dd: 85:ea:55:91:07:f4:b5:ce:12:f5:27:7d:d7:73:d4: 52:42:77:5e:52:50:f0:95:16:6e:eb:92:30:1b:fc: d0:9d:d2:af:62:03:31:a6:cb:d4:6c:18:41:65:03: 9c:b8:58:42:82:22:0a:74:80:5a:09:17:8c:ef:56: 22:2c:87:33:d8:e6:de:6b:7e:95:42:a0:20:48:4b: a3:3b:8a:75:3e:3a:5e:b6:bf:34:3b:9f:5d:17:fe: 6e:be:62:f1:8a:e9:fb:51:62:12:54:65:9d:21:1d: 9e:c7:71:9c:21:47:ec:c6:3a:60:3c:e4:85:33:5b: 10:89:93:44:15:4a:db:7a:2d:44:c4:8b:3c:16:02: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.222.0/23 IPv6: 2406:20c0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:66:3e:d5:66:ce:8b:53:00:dc:97:8a:dd:00:45:21:26:1c: e4:71:8e:22:3f:70:d3:a4:aa:8b:06:d8:42:5c:ea:42:df:5e: c1:53:51:db:3c:f0:1e:c5:63:d4:fb:69:2b:60:35:28:48:f0: 18:af:7f:82:b6:68:a7:aa:fb:ae:2b:39:cf:1b:b0:03:55:74: 6a:7e:b4:6a:67:37:70:71:fe:fd:1a:77:64:22:6a:2e:80:20: e7:c5:3f:3c:93:7d:65:a6:d0:42:ce:a1:fd:35:e3:b6:ee:14: ec:38:2e:34:12:0b:ea:4d:56:60:4a:9c:7b:c4:2e:a1:e8:6f: 6c:a0:de:f6:9a:93:4d:d7:03:12:64:96:33:54:10:b6:4b:c0: e7:9d:3c:8f:a1:3c:21:a1:94:ad:44:c1:7c:d2:50:53:2a:c0: d2:6b:25:9e:2c:17:19:83:cd:be:2c:81:5c:12:4b:6f:29:96: 1b:68:42:ad:b6:49:80:eb:be:99:41:aa:4a:48:2d:5c:02:4a: 66:4b:06:a9:fd:be:6c:5e:fe:7a:f7:a3:d5:ea:0a:55:3d:bc: 5d:7a:28:0c:a5:44:2c:6f:d1:1e:9b:c6:f2:f2:3a:9b:e9:10: 3c:8c:11:86:3b:f9:f1:20:ce:49:ab:64:97:a3:95:2a:da:a4: 78:90:e4:6a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUQFe3faL8McyR5wQVVIZT7B6q4V0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTYzNloX DTI3MDUwMjAwMDEzNlowMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMy QTJCOUM1QUIxQThCRjMyMkU3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJSVOjLt//E/M9EBLMoIOvzIGrA63foqy96CyviA49O4NGmSf94mfAEeQzc cpNeBPz6IWgSVPW4izhcA9uKkeM1EoY1SmlL6Cc/5SpEWl4WsONa+i+0G0rmq8pJ 1YOoRXh9EMaJT8hUfMQDHAqRMmBz6z4L9/fdhepVkQf0tc4S9Sd913PUUkJ3XlJQ 8JUWbuuSMBv80J3Sr2IDMabL1GwYQWUDnLhYQoIiCnSAWgkXjO9WIiyHM9jm3mt+ lUKgIEhLozuKdT46Xra/NDufXRf+br5i8Yrp+1FiElRlnSEdnsdxnCFH7MY6YDzk hTNbEImTRBVK23otRMSLPBYCRScCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF0nLvH/X5lgPfwqK5xasai/Mi5zMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE5YTAwMzY5LTY4NDAtNGE5NS04OWIxLWE0ODUxOGY5OGRjNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xOWEwMDM2 OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC81RDI3MkVGMUZGNUY5OTYw M0RGQzJBMkI5QzVBQjFBOEJGMzIyRTczLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5feMA0EAgACMAcDBQAkBiDAMA0GCSqGSIb3DQEBCwUAA4IBAQAuZj7VZs6L UwDcl4rdAEUhJhzkcY4iP3DTpKqLBthCXOpC317BU1HbPPAexWPU+2krYDUoSPAY r3+CtminqvuuKznPG7ADVXRqfrRqZzdwcf79GndkImougCDnxT88k31lptBCzqH9 NeO27hTsOC40EgvqTVZgSpx7xC6h6G9soN72mpNN1wMSZJYzVBC2S8DnnTyPoTwh oZStRMF80lBTKsDSayWeLBcZg82+LIFcEktvKZYbaEKttkmA676ZQapKSC1cAkpm Swap/b5sXv5696PV6gpVPbxdeigMpUQsb9Eem8by8jqb6RA8jBGGO/nxIM5Jq2SX o5Uq2qR4kORq -----END CERTIFICATE-----Generated at Tue May 12 22:38:54 2026 by rpki-client