$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer (raw, json) Hash identifier: fp0UVUfO0gcH+btP3olvU2viQlaiKjHloNE7JGvitJY= Subject key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2AB4C898F516AB106C7FCC3F777928A4CE1BB32C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:25:47 +0000 Certificate not after: Sun 02 May 2027 02:30:47 +0000 Subordinate resources: IP: 103.142.88.0/23 IP: 2001:df1:3980::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b4:c8:98:f5:16:ab:10:6c:7f:cc:3f:77:79:28:a4:ce:1b:b3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:25:47 2026 GMT Not After : May 2 02:30:47 2027 GMT Subject: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:b1:2e:65:25:47:bd:97:68:91:51:ee:06: d7:c3:f8:0d:75:16:69:1f:fc:d1:81:2d:93:09:54: f7:4e:1d:fc:9f:96:9c:5e:b1:c9:08:b0:a8:e6:6e: d5:6b:3c:63:59:80:02:bb:38:3b:3a:38:ce:ee:1d: ed:49:3a:c4:a3:bb:9a:12:08:50:e2:33:60:f3:33: 84:14:3b:07:4a:ad:6e:99:19:72:46:ca:70:af:88: 3b:9b:41:28:06:bd:22:d9:1e:2d:b3:00:2e:6f:96: 59:a4:42:6f:bc:71:0f:96:8f:3b:a2:4d:6f:68:e9: 54:ac:10:f3:1d:1e:53:77:24:f5:32:0a:34:f9:18: 29:61:16:df:b0:63:28:48:76:09:f3:b2:74:dd:12: 53:7f:d9:fb:c4:4c:1b:ac:30:a5:ec:e3:c0:68:3e: a3:20:25:07:94:b3:9a:d4:30:ea:48:49:f6:f5:12: 1d:4d:a7:5e:e0:50:9b:a8:66:9a:28:17:af:c9:db: 81:d7:b0:73:9e:02:2b:66:17:3d:1d:5e:ea:c8:dc: 67:61:09:68:93:30:78:e9:4a:d9:8d:85:07:a9:4d: 06:ff:68:79:ec:88:12:c7:d2:da:4d:3b:2c:dd:17: 5a:69:8f:94:a4:c2:50:1d:7a:30:58:4c:28:41:8a: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.88.0/23 IPv6: 2001:df1:3980::/48 Signature Algorithm: sha256WithRSAEncryption 72:71:1a:02:18:c0:f1:ce:b1:3c:8b:40:f2:fa:33:4f:d2:9d: f0:f8:29:98:e7:23:27:f5:6a:7b:89:79:b6:aa:d2:38:85:2e: 45:c7:4d:6a:3c:14:67:e8:ec:93:80:7a:40:98:24:eb:d0:20: 52:c4:b7:99:53:02:96:8b:a1:d3:2b:77:76:71:0b:5e:e6:d0: 8a:34:14:06:14:e3:97:fa:9d:b6:ab:03:09:ee:d4:aa:21:43: 0e:20:1a:7d:75:cd:b2:b5:7c:bc:70:25:2e:4f:0a:17:84:83: 97:f2:5d:15:ad:c4:a0:e5:64:2d:61:44:18:3b:15:79:ba:f7: 59:c6:dd:2f:0a:0c:a3:5f:ae:45:90:80:fd:e1:a2:80:ed:7e: 26:01:62:ed:c8:5d:6c:2b:be:5c:89:9b:61:8a:72:70:89:be: 2b:9e:2c:5d:49:1b:d5:4e:9c:2e:e4:10:50:54:a1:f8:2c:18: 9e:8b:1a:f0:44:15:d3:57:f1:dc:48:1d:67:81:40:a9:dc:97: a3:b1:37:23:73:34:7f:1b:3a:4f:a5:a5:a9:0a:36:08:26:d7: b2:99:d1:be:81:ab:90:1b:5b:57:b3:7f:9d:43:e8:7b:6e:05: 18:d6:ca:f9:77:52:3a:ee:ef:cb:de:1f:df:63:e3:fd:2e:92: ab:55:9b:4f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUKrTImPUWqxBsf8w/d3kopM4bsywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjU0N1oX DTI3MDUwMjAyMzA0N1owMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3 MDg3RDhDQUQ4N0ZCMkE5MTU2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDLsS5lJUe9l2iRUe4G18P4DXUWaR/80YEtkwlU904d/J+WnF6xyQiwqOZu 1Ws8Y1mAArs4Ozo4zu4d7Uk6xKO7mhIIUOIzYPMzhBQ7B0qtbpkZckbKcK+IO5tB KAa9ItkeLbMALm+WWaRCb7xxD5aPO6JNb2jpVKwQ8x0eU3ck9TIKNPkYKWEW37Bj KEh2CfOydN0SU3/Z+8RMG6wwpezjwGg+oyAlB5SzmtQw6khJ9vUSHU2nXuBQm6hm migXr8nbgdewc54CK2YXPR1e6sjcZ2EJaJMweOlK2Y2FB6lNBv9oeeyIEsfS2k07 LN0XWmmPlKTCUB16MFhMKEGKNncCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF3127FI0PTquxpwh9jK2H+yqRVkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VkNDlkNDliLWRhZWEtNDhjMC04ZDc3LTEzNzM4Yjc0NTc3Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZDQ5ZDQ5 Yi1kYWVhLTQ4YzAtOGQ3Ny0xMzczOGI3NDU3NzIvMC81REY1REJCMTQ4RDBGNEVB QkIxQTcwODdEOENBRDg3RkIyQTkxNTY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ45YMA8EAgACMAkDBwAgAQ3xOYAwDQYJKoZIhvcNAQELBQADggEBAHJxGgIY wPHOsTyLQPL6M0/SnfD4KZjnIyf1anuJebaq0jiFLkXHTWo8FGfo7JOAekCYJOvQ IFLEt5lTApaLodMrd3ZxC17m0Io0FAYU45f6nbarAwnu1KohQw4gGn11zbK1fLxw JS5PCheEg5fyXRWtxKDlZC1hRBg7FXm691nG3S8KDKNfrkWQgP3hooDtfiYBYu3I XWwrvlyJm2GKcnCJviueLF1JG9VOnC7kEFBUofgsGJ6LGvBEFdNX8dxIHWeBQKnc l6OxNyNzNH8bOk+lpakKNggm17KZ0b6Bq5AbW1ezf51D6HtuBRjWyvl3Ujru78ve H99j4/0ukqtVm08= -----END CERTIFICATE-----Generated at Tue May 12 22:10:23 2026 by rpki-client