$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer File: 657097DED993749F454B2CB2980019AC9335E3AD.cer (raw, json) Hash identifier: H5+n9ID/VEoxStGxPjQIxQZmRTBGOOasPj0cyXebAM8= Subject key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60735B9343CCD2451F396876D9C8ED92EB54EE00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:26:22 +0000 Certificate not after: Sun 02 May 2027 02:31:22 +0000 Subordinate resources: IP: 103.78.232.0/22 IP: 2001:df6:5a00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:73:5b:93:43:cc:d2:45:1f:39:68:76:d9:c8:ed:92:eb:54:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:26:22 2026 GMT Not After : May 2 02:31:22 2027 GMT Subject: CN=657097DED993749F454B2CB2980019AC9335E3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:40:1f:42:6a:dc:30:5b:8b:ba:f9:6f:29: e4:c9:e4:dd:67:42:02:77:8a:d9:d2:cf:8a:da:a7: 60:28:1b:96:dd:4c:87:f4:1a:a6:e4:69:0a:61:dc: 99:d7:60:fc:5b:e4:70:6b:e2:21:60:75:21:0e:be: 49:3c:e9:95:b7:e8:8f:68:7b:bc:76:c2:8f:d7:c3: de:8c:fe:6c:fd:44:06:f0:bf:f0:e3:4f:35:6c:a8: 77:5b:fe:cd:c1:71:4c:4e:26:11:8c:2a:b8:2a:44: 49:ff:52:96:78:9a:ee:2a:d6:d8:b0:e9:00:f7:18: 3c:ad:76:0e:c1:87:02:5a:52:d9:51:bb:9f:e1:af: 4f:f3:83:0d:1a:03:c0:e7:9c:8f:97:72:23:fb:83: ee:5e:79:5e:69:37:2d:b0:39:24:71:8d:22:12:9e: c1:10:81:90:06:24:c2:5e:d9:88:9b:7c:88:5c:18: b7:d3:79:c1:a5:59:8f:4b:db:51:92:cf:14:fb:d5: 57:2c:be:92:0f:e8:ed:b3:b1:c1:05:cd:fb:b9:4d: 91:c4:2e:4a:c8:4a:62:ee:e9:e3:02:f6:86:44:ef: bd:41:18:32:50:03:b6:f3:29:64:bf:3c:98:de:8d: 78:38:97:67:64:45:a7:dc:64:7d:73:57:3c:c6:8e: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.232.0/22 IPv6: 2001:df6:5a00::/48 Signature Algorithm: sha256WithRSAEncryption 49:15:27:09:11:73:4c:21:35:47:38:6a:ed:cd:dc:ac:30:04: 39:93:25:56:6a:01:7e:b9:c5:7f:92:c8:f3:a4:65:f9:6f:07: 73:84:6d:64:27:ea:c9:d6:6f:ce:40:47:0e:9b:cc:c2:df:44: ac:a5:94:93:19:f1:08:95:a7:c8:70:b2:a9:dd:8c:9e:aa:96: aa:1a:56:2d:a6:70:61:48:8e:0e:f3:04:be:cf:f3:d3:e7:db: b2:2d:48:b1:b7:ff:f7:8b:95:19:1e:e0:e3:f5:4b:79:22:c3: e7:af:1b:ee:02:ac:eb:b5:db:4d:25:74:9d:d7:a9:f5:bf:97: f6:c1:0e:34:11:79:9f:ea:0b:89:b3:60:79:2a:7f:2d:e9:71: cd:76:00:77:22:21:36:ad:c9:7c:94:09:60:f8:ff:ea:62:34: f2:91:6b:a5:2d:72:64:4e:f4:34:b6:c8:2d:e2:05:bf:b5:83: 7a:c2:63:ec:e2:d5:ad:88:f3:bc:c1:b7:c6:a1:73:0b:45:4a: 18:64:af:bc:68:c8:f1:d1:cd:ae:f6:ca:09:9d:65:72:74:e8: 3e:c7:4d:8d:b6:27:a1:05:26:b4:7b:09:e1:69:a3:ae:03:6b: 66:89:d2:7c:6f:85:4c:07:4c:5a:94:8e:f5:be:de:03:91:8a: 1c:ff:b9:79 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYHNbk0PM0kUfOWh22cjtkutU7gAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjYyMloX DTI3MDUwMjAyMzEyMlowMzExMC8GA1UEAxMoNjU3MDk3REVEOTkzNzQ5RjQ1NEIy Q0IyOTgwMDE5QUM5MzM1RTNBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3GQB9CatwwW4u6+W8p5Mnk3WdCAneK2dLPitqnYCgblt1Mh/QapuRpCmHc mddg/FvkcGviIWB1IQ6+STzplbfoj2h7vHbCj9fD3oz+bP1EBvC/8ONPNWyod1v+ zcFxTE4mEYwquCpESf9Slnia7irW2LDpAPcYPK12DsGHAlpS2VG7n+GvT/ODDRoD wOecj5dyI/uD7l55Xmk3LbA5JHGNIhKewRCBkAYkwl7ZiJt8iFwYt9N5waVZj0vb UZLPFPvVVyy+kg/o7bOxwQXN+7lNkcQuSshKYu7p4wL2hkTvvUEYMlADtvMpZL88 mN6NeDiXZ2RFp9xkfXNXPMaOzvkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGVwl97Zk3SfRUssspgAGayTNeOtMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VkZGU4ZmI4LTNhNzctNDg3ZS05ZGZjLWY0NzlkNmIzMzgwOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZGRlOGZi OC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC82NTcwOTdERUQ5OTM3NDlG NDU0QjJDQjI5ODAwMTlBQzkzMzVFM0FELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ07oMA8EAgACMAkDBwAgAQ32WgAwDQYJKoZIhvcNAQELBQADggEBAEkVJwkR c0whNUc4au3N3KwwBDmTJVZqAX65xX+SyPOkZflvB3OEbWQn6snWb85ARw6bzMLf RKyllJMZ8QiVp8hwsqndjJ6qlqoaVi2mcGFIjg7zBL7P89Pn27ItSLG3//eLlRke 4OP1S3kiw+evG+4CrOu1200ldJ3XqfW/l/bBDjQReZ/qC4mzYHkqfy3pcc12AHci ITatyXyUCWD4/+piNPKRa6UtcmRO9DS2yC3iBb+1g3rCY+zi1a2I87zBt8ahcwtF Shhkr7xoyPHRza72ygmdZXJ06D7HTY22J6EFJrR7CeFpo64Da2aJ0nxvhUwHTFqU jvW+3gORihz/uXk= -----END CERTIFICATE-----Generated at Tue May 12 22:47:41 2026 by rpki-client