$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.cer (raw, json) Hash identifier: n13A8KNrZ/t5nq/ymLhHLbQEuBBC3OXb/yCyiADX9vs= Subject key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: DAB32C837497D36D1A11CE07A8A1C08C24E79A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:44:22 +0000 Certificate not after: Sun 02 May 2027 01:49:22 +0000 Subordinate resources: IP: 103.155.113.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: da:b3:2c:83:74:97:d3:6d:1a:11:ce:07:a8:a1:c0:8c:24:e7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:44:22 2026 GMT Not After : May 2 01:49:22 2027 GMT Subject: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:f1:17:51:e8:d5:21:ca:f9:11:86:ff:95: 45:6a:b3:7e:ab:d8:7d:14:46:86:9a:32:27:4e:05: 67:30:09:22:48:63:0a:5b:5b:9b:77:99:78:b4:fb: 01:9f:3e:91:fe:12:b5:ac:1c:f6:38:fd:0e:f4:6b: 62:59:81:82:e7:60:a7:b4:92:47:47:28:20:79:4b: 91:d3:cd:8e:b5:a7:bb:50:59:98:ee:1a:b1:84:0a: f1:f7:be:93:3c:20:33:20:c7:1f:6b:a6:56:af:d7: a9:35:bd:b4:fe:d6:73:d1:f3:3c:20:27:1c:fe:31: 9f:67:fc:35:70:f0:77:62:93:7f:a5:d8:84:9f:fc: f5:42:4c:83:f5:c2:55:c5:fe:3a:a6:31:4a:ed:17: 01:51:0f:51:7c:4f:61:25:32:fe:6e:85:af:45:38: 45:39:45:09:04:5f:93:51:d7:bb:d3:6b:ac:1d:40: e6:67:7b:82:c8:68:3e:9b:17:f4:cb:c4:32:61:4f: da:58:28:95:89:50:f5:18:6b:d1:ba:89:75:12:72: 6f:68:fc:51:9b:b3:22:87:9a:a0:14:b5:56:97:bc: 6d:ef:23:62:67:1f:06:9b:ad:66:de:19:f3:fd:a2: 33:4a:7b:47:01:d5:62:93:a9:7e:af:61:e3:e9:b6: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.113.0/24 Signature Algorithm: sha256WithRSAEncryption 23:8f:fe:68:96:f8:f5:39:34:3a:95:f0:e3:b2:13:1c:0e:94: f7:47:15:60:cb:93:81:93:32:cc:7c:31:8e:f3:1c:1f:12:ac: 58:d3:44:7e:62:87:dc:6d:97:eb:f7:a1:20:35:f9:62:d3:44: 8f:ad:66:41:70:b2:55:bd:75:fd:03:27:e1:e8:23:e1:3f:bd: 1b:33:4a:13:e8:f6:65:1b:5b:1a:e0:14:26:22:cb:50:49:ef: 25:97:30:01:53:1d:d9:a0:39:6f:24:5f:c3:1f:ed:cb:2a:a1: 21:04:e2:79:8e:c7:f2:05:ca:50:f6:b4:d2:cb:cb:96:8f:20: e2:1f:df:79:e9:ce:b4:84:9c:b4:ea:c6:98:ed:3e:fe:2f:a5: 6b:c1:64:c9:58:c7:d3:55:19:46:3f:4a:4d:d3:54:5f:83:af: 7e:b5:c3:b0:f9:ad:29:46:84:66:52:a8:47:23:0e:87:2a:8c: 1b:67:3c:52:0a:6b:48:3a:a8:1c:6c:ce:50:c1:39:15:ce:ae: f3:34:09:0a:0e:7f:a3:9f:16:93:ac:ba:8e:93:32:bb:68:b7: 89:95:e3:76:f3:0a:89:94:10:34:98:73:73:9c:9a:26:93:f1: ef:2e:81:ae:e8:48:e6:69:11:11:aa:2e:51:65:b7:92:22:2d: 85:87:4f:6d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUANqzLIN0l9NtGhHOB6ihwIwk55owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDQyMloX DTI3MDUwMjAxNDkyMlowMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1 MzJEMkYyQTgzMDE4NzdDNEFFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7h8RdR6NUhyvkRhv+VRWqzfqvYfRRGhpoyJ04FZzAJIkhjCltbm3eZeLT7 AZ8+kf4Stawc9jj9DvRrYlmBgudgp7SSR0coIHlLkdPNjrWnu1BZmO4asYQK8fe+ kzwgMyDHH2umVq/XqTW9tP7Wc9HzPCAnHP4xn2f8NXDwd2KTf6XYhJ/89UJMg/XC VcX+OqYxSu0XAVEPUXxPYSUy/m6Fr0U4RTlFCQRfk1HXu9NrrB1A5md7gshoPpsX 9MvEMmFP2lgolYlQ9Rhr0bqJdRJyb2j8UZuzIoeaoBS1Vpe8be8jYmcfBputZt4Z 8/2iM0p7RwHVYpOpfq9h4+m2/nECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/ZX0VXVWdsuJpTLS8qgwGHfErsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JiYTk3YjBiLTM5YWUtNGMyYy1iMTNiLTAxZTM5NWI3YTI0Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYmE5N2Iw Yi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC81RkQ5NUY0NTU3NTU2NzZD Qjg5QTUzMkQyRjJBODMwMTg3N0M0QUVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ5txMA0GCSqGSIb3DQEBCwUAA4IBAQAjj/5olvj1OTQ6lfDjshMcDpT3RxVg y5OBkzLMfDGO8xwfEqxY00R+YofcbZfr96EgNfli00SPrWZBcLJVvXX9Ayfh6CPh P70bM0oT6PZlG1sa4BQmIstQSe8llzABUx3ZoDlvJF/DH+3LKqEhBOJ5jsfyBcpQ 9rTSy8uWjyDiH9956c60hJy06saY7T7+L6VrwWTJWMfTVRlGP0pN01Rfg69+tcOw +a0pRoRmUqhHIw6HKowbZzxSCmtIOqgcbM5QwTkVzq7zNAkKDn+jnxaTrLqOkzK7 aLeJleN28wqJlBA0mHNznJomk/HvLoGu6EjmaRERqi5RZbeSIi2Fh09t -----END CERTIFICATE-----Generated at Tue May 12 22:10:11 2026 by rpki-client