$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer File: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer (raw, json) Hash identifier: 2cB0LG8gDlvzL8jf4lITD6Nm/NKl+YYL7GpLbS76RDM= Subject key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 135337CC92DE4C4310E8BB4BFFA1092991EB91AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:44:13 +0000 Certificate not after: Sat 01 May 2027 23:49:13 +0000 Subordinate resources: IP: 103.179.216.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:53:37:cc:92:de:4c:43:10:e8:bb:4b:ff:a1:09:29:91:eb:91:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:44:13 2026 GMT Not After : May 1 23:49:13 2027 GMT Subject: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:be:36:03:4c:49:76:b1:fc:20:df:60:29: a3:8b:7b:9c:75:21:56:a8:b9:f3:db:34:12:10:af: 78:5d:38:5a:12:6e:e3:ef:50:9c:6f:2c:31:7e:a7: 17:9c:e6:4f:33:af:0e:1b:80:22:33:d6:ee:af:ea: 33:8b:39:55:66:14:4e:a1:23:7f:6a:ef:11:14:cf: 83:2d:00:6b:9a:7e:65:3f:14:20:14:43:da:9f:c9: d5:3a:c5:a7:13:59:85:ed:fd:95:ad:a4:a8:30:5e: c1:89:c4:cf:56:1b:ee:b1:21:4b:bd:64:3b:8d:b1: 91:c2:e2:70:30:72:db:31:86:4b:4b:3a:8f:26:21: 5f:0d:a2:bb:1f:b6:6b:7a:27:cb:a9:17:cb:50:c5: ef:85:32:de:c3:e1:ea:39:01:70:cc:e2:e0:fc:35: fe:ac:4e:dd:e2:80:86:43:23:38:21:9b:2e:8f:99: 9a:e6:be:ef:99:b4:c8:6f:47:17:b7:e6:f7:92:3b: ec:c4:3c:97:ef:16:74:1d:83:7b:e2:63:97:d5:a6: f1:bd:e9:fd:ba:98:57:be:a8:1b:c7:d6:e2:c3:ba: 12:ac:f8:49:1f:aa:32:1d:6f:c1:e1:17:65:d6:25: d7:d8:4f:9f:51:79:9b:7e:38:52:09:fc:56:85:d0: 8b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.216.0/23 Signature Algorithm: sha256WithRSAEncryption 52:6a:6b:26:f8:cd:e2:62:01:6c:e1:a7:70:01:1a:26:42:30: 2b:4c:3d:4f:85:02:ab:73:82:50:cb:b4:2f:a7:6f:5f:8a:86: 86:9d:96:47:ee:4a:f2:0e:64:f0:9f:c1:ff:78:ea:ce:4f:fb: 5f:6e:8e:94:bd:ab:12:94:2a:12:c4:c3:ff:21:5a:b5:18:ca: aa:fe:66:fe:fb:82:87:af:6d:e7:c0:fa:13:a1:f8:d4:e4:aa: fc:d6:92:0e:18:6d:b0:84:a8:b3:ca:ef:09:5b:c3:78:1b:42: ae:0a:24:1c:86:b5:55:f0:5e:36:c8:86:cf:49:74:c7:6b:33: 30:0d:96:93:28:24:1c:27:e7:31:59:f7:da:e0:5a:94:06:c7: 07:f1:20:e6:85:0f:85:38:19:36:6b:d6:05:d6:96:cb:48:4c: 47:a3:fc:77:91:7d:0e:f6:24:ce:d8:79:63:f1:75:cf:24:c5: 3c:14:60:17:fa:ef:e1:5e:61:e5:0a:bd:19:31:fc:86:48:e4: 44:df:82:bb:4a:a1:8e:00:80:f5:a7:a2:e9:97:67:c7:b2:0a: 82:02:86:9c:4c:44:e5:08:a7:f7:13:fa:73:49:1c:08:f7:11: 37:1f:00:24:b7:1f:96:2e:68:80:29:0d:e0:52:26:27:fc:41: 69:1b:13:59 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUE1M3zJLeTEMQ6LtL/6EJKZHrka8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDQxM1oX DTI3MDUwMTIzNDkxM1owMzExMC8GA1UEAxMoNUQ1OTU5QzA0QURFREJBNUVCMTdF NzFGOTVGNkM0MDI1RURFQ0JEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPwvjYDTEl2sfwg32Apo4t7nHUhVqi589s0EhCveF04WhJu4+9QnG8sMX6n F5zmTzOvDhuAIjPW7q/qM4s5VWYUTqEjf2rvERTPgy0Aa5p+ZT8UIBRD2p/J1TrF pxNZhe39la2kqDBewYnEz1Yb7rEhS71kO42xkcLicDBy2zGGS0s6jyYhXw2iux+2 a3ony6kXy1DF74Uy3sPh6jkBcMzi4Pw1/qxO3eKAhkMjOCGbLo+Zmua+75m0yG9H F7fm95I77MQ8l+8WdB2De+Jjl9Wm8b3p/bqYV76oG8fW4sO6Eqz4SR+qMh1vweEX ZdYl19hPn1F5m344Ugn8VoXQi78CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF1ZWcBK3tul6xfnH5X2xAJe3svbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA1ZWFiNDQyLTc0ODAtNDU4MS04MWRkLTIzYTIwMDYxNDM4Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNWVhYjQ0 Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC81RDU5NTlDMDRBREVEQkE1 RUIxN0U3MUY5NUY2QzQwMjVFREVDQkRCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7PYMA0GCSqGSIb3DQEBCwUAA4IBAQBSamsm+M3iYgFs4adwARomQjArTD1P hQKrc4JQy7Qvp29fioaGnZZH7kryDmTwn8H/eOrOT/tfbo6UvasSlCoSxMP/IVq1 GMqq/mb++4KHr23nwPoTofjU5Kr81pIOGG2whKizyu8JW8N4G0KuCiQchrVV8F42 yIbPSXTHazMwDZaTKCQcJ+cxWffa4FqUBscH8SDmhQ+FOBk2a9YF1pbLSExHo/x3 kX0O9iTO2Hlj8XXPJMU8FGAX+u/hXmHlCr0ZMfyGSORE34K7SqGOAID1p6Lpl2fH sgqCAoacTETlCKf3E/pzSRwI9xE3HwAktx+WLmiAKQ3gUiYn/EFpGxNZ -----END CERTIFICATE-----Generated at Tue May 12 22:10:29 2026 by rpki-client