$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer File: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer (raw, json) Hash identifier: VCzk2hhWudYImbPCQJTNUFFyqoC/VdJp/FVi23DZb98= Subject key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 023885967AD609390AEA5C5304D8CF68F056BD83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:50 +0000 Certificate not after: Sun 02 May 2027 00:57:50 +0000 Subordinate resources: IP: 103.124.244.0/22 IP: 2403:e8c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:38:85:96:7a:d6:09:39:0a:ea:5c:53:04:d8:cf:68:f0:56:bd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:50 2026 GMT Not After : May 2 00:57:50 2027 GMT Subject: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:5d:89:e1:4b:6d:ef:65:4c:54:97:86:e1: fc:f6:38:b1:ad:67:f1:1a:6e:62:2c:62:9d:13:2d: 70:a0:1d:e6:c0:b3:11:14:39:2f:a1:e9:8c:a6:f0: ff:19:46:5f:c6:a9:dd:a6:29:6c:58:78:a8:ce:41: 24:12:6a:8c:af:d3:f7:7f:b0:02:65:31:fb:69:88: d5:dd:35:78:90:8a:6e:52:6e:5a:dd:86:47:f1:2f: 39:01:e6:6e:d3:3a:f6:27:42:1c:88:1c:a3:c3:96: 44:88:ef:cc:e6:11:51:62:57:f2:e8:47:18:db:89: 04:b4:bb:68:bb:78:b6:79:a1:56:a6:a5:22:e2:13: 43:a8:23:98:ec:6a:fa:f0:bf:5f:12:a0:cf:b1:9e: 48:5c:7e:37:80:a1:62:05:8e:1e:7f:f5:8b:5c:93: 81:3b:79:fc:37:c7:37:2a:3a:6f:92:17:38:7c:0d: 14:0e:a9:f2:7b:a7:08:c3:f7:35:38:54:5a:bf:20: d5:aa:39:f8:39:96:70:74:c1:ce:89:38:5a:cf:2b: 8d:de:f2:2a:3e:f5:cc:c7:87:da:79:03:42:39:fd: 90:a7:02:eb:77:cd:e5:26:2c:63:09:20:8d:13:26: 99:85:f9:3c:88:c5:fd:ab:86:d0:98:26:a9:d4:f0: cb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.244.0/22 IPv6: 2403:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 07:62:fc:99:68:e4:d8:4d:3a:24:ba:31:e9:c0:b8:33:9e:55: 4a:c4:e8:9d:e2:a5:9f:a1:92:6f:ca:18:c2:4f:b3:75:01:14: 67:5e:9f:2c:37:bc:48:e8:0e:8d:94:00:ad:3b:93:32:3f:eb: d0:e9:b6:1f:91:b3:a2:6b:25:03:65:11:c1:b8:4f:ca:4e:f5: 6e:b2:53:43:53:f3:b9:44:18:42:79:aa:95:07:19:b2:8e:83: 6c:fa:d3:f9:3e:cc:d5:f0:2e:be:48:70:ae:ca:cb:c0:43:44: 68:83:31:79:3f:c4:34:dc:1e:f6:c6:85:c6:94:ee:2b:cf:88: 2f:9a:de:a9:7d:fb:cb:66:30:0d:9d:8a:47:8e:d6:21:bb:cd: aa:10:cf:ce:a7:c9:9e:d7:13:10:c6:ea:b7:af:d1:24:c3:b2: 1a:c3:e2:2a:5a:73:5b:82:cc:0a:5e:de:16:43:d7:a3:42:bd: 3c:42:89:21:8e:c4:31:0b:ba:01:b9:fa:ad:d5:2d:cb:73:2c: d5:95:dd:9c:98:d2:03:55:f2:c4:05:b3:0c:a7:bb:ea:02:23: eb:9d:ea:de:c7:38:db:08:15:0e:b8:b2:00:93:de:70:f0:d6: 77:80:be:8e:6c:32:e6:52:11:5a:1b:eb:1f:01:1a:eb:d6:87: 8e:5b:b3:26 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUAjiFlnrWCTkK6lxTBNjPaPBWvYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTI1MFoX DTI3MDUwMjAwNTc1MFowMzExMC8GA1UEAxMoNUQ3QkI2REJFQTAwRTcwMTc3OTg5 MkFBNjg2Q0NCRjE5NUEzRDIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrJXYnhS23vZUxUl4bh/PY4sa1n8RpuYixinRMtcKAd5sCzERQ5L6HpjKbw /xlGX8ap3aYpbFh4qM5BJBJqjK/T93+wAmUx+2mI1d01eJCKblJuWt2GR/EvOQHm btM69idCHIgco8OWRIjvzOYRUWJX8uhHGNuJBLS7aLt4tnmhVqalIuITQ6gjmOxq +vC/XxKgz7GeSFx+N4ChYgWOHn/1i1yTgTt5/DfHNyo6b5IXOHwNFA6p8nunCMP3 NThUWr8g1ao5+DmWcHTBzok4Ws8rjd7yKj71zMeH2nkDQjn9kKcC63fN5SYsYwkg jRMmmYX5PIjF/auG0JgmqdTwy80CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF17ttvqAOcBd5iSqmhsy/GVo9INMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZlMmM5Mjg1LWMwOWEtNDUwNi1hMzIwLWZkYTFhMDdmZDllYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZTJjOTI4 NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC81RDdCQjZEQkVBMDBFNzAx Nzc5ODkyQUE2ODZDQ0JGMTk1QTNEMjBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3z0MA0EAgACMAcDBQAkA+jAMA0GCSqGSIb3DQEBCwUAA4IBAQAHYvyZaOTY TTokujHpwLgznlVKxOid4qWfoZJvyhjCT7N1ARRnXp8sN7xI6A6NlACtO5MyP+vQ 6bYfkbOiayUDZRHBuE/KTvVuslNDU/O5RBhCeaqVBxmyjoNs+tP5PszV8C6+SHCu ysvAQ0RogzF5P8Q03B72xoXGlO4rz4gvmt6pffvLZjANnYpHjtYhu82qEM/Op8me 1xMQxuq3r9Ekw7Iaw+IqWnNbgswKXt4WQ9ejQr08QokhjsQxC7oBufqt1S3LcyzV ld2cmNIDVfLEBbMMp7vqAiPrnerexzjbCBUOuLIAk95w8NZ3gL6ObDLmUhFaG+sf ARrr1oeOW7Mm -----END CERTIFICATE-----Generated at Wed May 13 02:20:30 2026 by rpki-client