$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer (raw, json) Hash identifier: Jj4zOtdFBMcgNIeIGeqO3Q0wGccSr+xj7phahtXNxo8= Subject key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 31DD4FE35573EDB7C7A0661F331A418C24257FD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:35:20 +0000 Certificate not after: Sun 02 May 2027 01:40:20 +0000 Subordinate resources: IP: 103.136.4.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:dd:4f:e3:55:73:ed:b7:c7:a0:66:1f:33:1a:41:8c:24:25:7f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:35:20 2026 GMT Not After : May 2 01:40:20 2027 GMT Subject: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:a4:5c:fe:e6:55:27:1c:34:a1:dc:57:5f: 4a:1e:ff:53:7f:71:8e:f2:aa:e5:b2:9d:29:83:7e: ae:be:00:d2:99:23:b6:7d:7f:7b:e0:96:2d:bb:46: 6d:cc:b0:5c:ab:d8:9f:16:23:0d:ee:b0:a5:13:8f: 76:ad:4a:e8:e1:50:14:08:98:80:37:93:3a:67:b7: 88:8b:87:57:7e:40:f8:df:29:d2:70:97:5b:90:1e: 36:3a:65:6d:1b:ee:f2:f3:26:86:32:ed:98:82:3e: 7d:fb:47:01:72:5a:66:6c:b9:7c:1b:17:93:50:ea: 65:03:c3:9c:0f:79:8d:b1:7d:dd:8d:1d:de:e1:69: d4:df:60:c6:df:f4:ae:e6:b2:d8:e1:d1:79:79:4b: b7:9b:d8:3d:68:b4:d0:b5:4c:81:a2:74:9a:65:eb: a4:c5:84:6f:43:1a:39:eb:3d:09:5f:a5:2a:08:ce: 63:7b:0d:27:7e:fa:95:00:90:da:79:f1:d2:82:eb: 3a:56:9b:6e:d5:9b:52:77:3c:bc:61:a9:53:5d:5b: 1a:f0:0c:7d:a2:50:cb:9c:b8:ac:46:f3:b7:18:b5: d2:a2:d2:b9:69:a1:53:ea:2c:c2:56:85:5d:8c:c2: eb:35:ee:a2:b6:18:55:96:3a:c9:a1:77:84:7a:8c: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:35:e0:15:c4:b9:9e:05:37:9d:f7:8a:8d:92:6d:e3:38:52: e9:bf:59:99:38:db:68:d2:33:6e:86:e7:d0:35:e1:ee:23:59: db:4d:4a:33:a7:d3:ac:23:ed:44:74:93:ba:4f:67:37:fe:3e: 74:a5:31:55:28:0f:13:e7:39:c5:c4:81:f3:e7:ea:bb:a2:b4: 10:6d:03:be:c6:13:f1:6e:f9:1d:e3:01:6f:9b:80:8b:ab:b7: c4:f5:52:28:e0:17:d0:e9:24:92:96:90:75:a9:cf:e6:23:b4: a1:de:52:00:d8:a5:53:cf:dd:1f:5f:f6:2f:10:4d:69:17:69: 09:94:ef:0a:ee:b4:7f:56:1a:d5:ef:04:27:9b:ff:6d:75:b3: fa:16:ad:28:ec:3a:85:77:f2:57:a8:7d:0e:85:62:6e:d3:71: e1:12:50:a2:37:36:5a:37:b1:f3:71:ac:dd:52:d1:76:e7:2d: f4:e4:1d:d2:6b:f9:d6:6e:9e:ef:b2:b8:72:cd:a5:7d:22:17: 9d:f3:67:1c:44:e4:bb:b1:21:03:0c:b6:44:d3:c5:84:b2:36: 51:7a:42:3d:9f:3f:47:43:71:03:ff:6b:f3:75:10:44:d6:23: d4:a9:90:41:01:59:8e:11:26:4e:97:d5:64:31:89:d0:d5:22: a7:40:31:f8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMd1P41Vz7bfHoGYfMxpBjCQlf9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzUyMFoX DTI3MDUwMjAxNDAyMFowMzExMC8GA1UEAxMoNUZBODg3RDRDNDIyOTY0RkI2OENE RDg3N0Q5QUI0MTczNjBDMkVCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3mpFz+5lUnHDSh3FdfSh7/U39xjvKq5bKdKYN+rr4A0pkjtn1/e+CWLbtG bcywXKvYnxYjDe6wpROPdq1K6OFQFAiYgDeTOme3iIuHV35A+N8p0nCXW5AeNjpl bRvu8vMmhjLtmII+fftHAXJaZmy5fBsXk1DqZQPDnA95jbF93Y0d3uFp1N9gxt/0 ruay2OHReXlLt5vYPWi00LVMgaJ0mmXrpMWEb0MaOes9CV+lKgjOY3sNJ376lQCQ 2nnx0oLrOlabbtWbUnc8vGGpU11bGvAMfaJQy5y4rEbztxi10qLSuWmhU+oswlaF XYzC6zXuorYYVZY6yaF3hHqMg7UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF+oh9TEIpZPtozdh32atBc2DC61MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FjNDVjMjJjLTI3NWItNDI5NS1iNDUzLTYwYTc4M2I5YzQyYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYzQ1YzIy Yy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC81RkE4ODdENEM0MjI5NjRG QjY4Q0REODc3RDlBQjQxNzM2MEMyRUI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4gEMA0GCSqGSIb3DQEBCwUAA4IBAQBcNeAVxLmeBTed94qNkm3jOFLpv1mZ ONto0jNuhufQNeHuI1nbTUozp9OsI+1EdJO6T2c3/j50pTFVKA8T5znFxIHz5+q7 orQQbQO+xhPxbvkd4wFvm4CLq7fE9VIo4BfQ6SSSlpB1qc/mI7Sh3lIA2KVTz90f X/YvEE1pF2kJlO8K7rR/VhrV7wQnm/9tdbP6Fq0o7DqFd/JXqH0OhWJu03HhElCi NzZaN7HzcazdUtF25y305B3Sa/nWbp7vsrhyzaV9Ihed82ccROS7sSEDDLZE08WE sjZRekI9nz9HQ3ED/2vzdRBE1iPUqZBBAVmOESZOl9VkMYnQ1SKnQDH4 -----END CERTIFICATE-----Generated at Tue May 12 22:04:11 2026 by rpki-client