$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer (raw, json) Hash identifier: eAduZDF8j3HgCT6+9k5CXaMO+ZB4ePyi/O2hXwwZcUg= Subject key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7655F179B726119BBA0CAECB813A35CA5ECA83A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:32:49 +0000 Certificate not after: Sun 02 May 2027 02:37:49 +0000 Subordinate resources: IP: 103.148.100.0/23 IP: 2405:ce40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:55:f1:79:b7:26:11:9b:ba:0c:ae:cb:81:3a:35:ca:5e:ca:83:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:32:49 2026 GMT Not After : May 2 02:37:49 2027 GMT Subject: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e0:4f:a7:2e:0c:28:7d:7b:a1:ff:63:6f:3e: ab:30:87:85:c4:33:50:66:24:b7:f1:f6:a3:b3:62: 1d:d2:29:ac:de:59:3b:0b:62:ad:77:dc:4a:cf:17: ef:b9:1e:a0:cd:56:1e:da:16:a1:f1:f1:02:b6:1c: 26:d2:cf:ee:f8:fb:27:f2:fb:0d:da:11:47:58:be: 15:67:5d:be:63:d1:73:a6:aa:7e:f3:45:03:b2:50: 15:bb:52:66:a2:8d:7e:14:3a:23:af:86:e1:64:fc: 16:19:e3:e1:ed:96:f9:75:fc:ac:c4:ba:dc:dd:58: 0f:8d:33:c7:6f:b1:bf:f7:6b:1d:15:6c:92:d0:8d: 27:e6:13:68:39:99:64:2e:94:0f:57:6a:38:f2:88: bf:40:b0:e5:51:07:2b:be:22:2b:16:63:88:2b:45: 09:83:7a:64:67:5b:d0:a4:40:de:8e:ef:71:ac:78: 50:9e:eb:8b:b1:c7:45:62:37:2d:20:d7:1a:96:e1: b8:03:8b:f5:bf:b0:aa:b0:02:3e:d1:e3:b7:12:a6: 07:1e:7b:f6:4a:b5:ba:c1:77:35:98:f2:a3:7b:f6: e5:95:80:85:21:6e:e4:53:9d:60:d6:8d:b1:8c:84: 2c:58:12:4d:1d:16:69:b5:1d:d5:b7:97:80:af:44: 9f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.100.0/23 IPv6: 2405:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 32:70:50:ab:32:9d:00:38:43:d4:6c:8b:4d:98:5d:50:b6:06: 38:87:66:98:5c:df:6f:5f:64:53:fb:1e:84:d9:67:24:49:d4: 24:0c:7c:57:c0:ec:65:12:12:a9:d1:5f:ab:e1:e3:ba:57:b0: 5d:f9:77:9b:ff:a3:4d:07:6e:c6:81:a4:ab:dc:b8:a4:5f:f8: d0:22:83:07:bd:6e:c9:8a:4b:26:07:0e:43:76:8f:6b:cb:f0: cb:ea:08:13:58:d1:cd:53:c4:8f:67:02:50:13:f6:ca:68:11: 7c:26:31:d6:86:9f:65:eb:08:6d:3f:96:a5:3f:87:8c:c7:14: 9c:dc:69:8d:96:72:f7:8e:f2:95:b1:ee:53:16:a9:92:db:e8: 3c:1b:c0:ca:c9:0d:dd:23:b1:8c:4c:a0:d6:2e:48:6b:34:42: 48:78:34:9f:04:22:3f:d0:cb:6e:5e:3f:fa:22:e4:b7:e2:c6: 86:e7:8b:b7:a1:aa:6e:1a:47:02:d0:ad:e9:b6:ca:49:c5:ed: c1:88:ba:d4:97:b0:3e:00:de:7d:ce:9a:eb:30:47:4f:95:a3: 6a:29:35:31:48:c6:09:8b:df:c8:6a:70:d6:fd:3e:49:ae:64: c1:4a:01:11:8c:ff:13:0b:9b:22:9a:27:93:d4:ea:19:59:1b: 2d:cd:74:58 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUdlXxebcmEZu6DK7LgTo1yl7Kg6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzI0OVoX DTI3MDUwMjAyMzc0OVowMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFG QkM4MkUwMzUzM0FENUE2QzVDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObgT6cuDCh9e6H/Y28+qzCHhcQzUGYkt/H2o7NiHdIprN5ZOwtirXfcSs8X 77keoM1WHtoWofHxArYcJtLP7vj7J/L7DdoRR1i+FWddvmPRc6aqfvNFA7JQFbtS ZqKNfhQ6I6+G4WT8Fhnj4e2W+XX8rMS63N1YD40zx2+xv/drHRVsktCNJ+YTaDmZ ZC6UD1dqOPKIv0Cw5VEHK74iKxZjiCtFCYN6ZGdb0KRA3o7vcax4UJ7ri7HHRWI3 LSDXGpbhuAOL9b+wqrACPtHjtxKmBx579kq1usF3NZjyo3v25ZWAhSFu5FOdYNaN sYyELFgSTR0WabUd1beXgK9En4ECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF7Q/J3jxb8PJkH7yC4DUzrVpsXBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YyZDY2ZDEwLWI4NTctNGJlZi05Mzk1LTQ1ZDVhYjJjNDRmOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMmQ2NmQx MC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81RUQwRkM5REUzQzVCRjBG MjY0MUZCQzgyRTAzNTMzQUQ1QTZDNUMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5RkMA0EAgACMAcDBQAkBc5AMA0GCSqGSIb3DQEBCwUAA4IBAQAycFCrMp0A OEPUbItNmF1QtgY4h2aYXN9vX2RT+x6E2WckSdQkDHxXwOxlEhKp0V+r4eO6V7Bd +Xeb/6NNB27GgaSr3LikX/jQIoMHvW7JiksmBw5Ddo9ry/DL6ggTWNHNU8SPZwJQ E/bKaBF8JjHWhp9l6whtP5alP4eMxxSc3GmNlnL3jvKVse5TFqmS2+g8G8DKyQ3d I7GMTKDWLkhrNEJIeDSfBCI/0MtuXj/6IuS34saG54u3oapuGkcC0K3ptspJxe3B iLrUl7A+AN59zprrMEdPlaNqKTUxSMYJi9/IanDW/T5JrmTBSgERjP8TC5simieT 1OoZWRstzXRY -----END CERTIFICATE-----Generated at Tue May 12 22:47:41 2026 by rpki-client