$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer (raw, json) Hash identifier: ejH7AyYNEKfUhFH/ofh8srod1Z+88i+/YKvewUJ87VM= Subject key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0330ED2F8C8FBA203C24C90E0034C1E4166546E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:44 +0000 Certificate not after: Sun 02 May 2027 00:44:44 +0000 Subordinate resources: IP: 103.29.10.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:30:ed:2f:8c:8f:ba:20:3c:24:c9:0e:00:34:c1:e4:16:65:46:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:44 2026 GMT Not After : May 2 00:44:44 2027 GMT Subject: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:a6:5e:f0:36:ca:2d:50:d2:69:41:43:b3: 19:05:91:98:ad:03:41:a7:a6:b9:23:52:07:b0:67: 5c:16:4f:84:88:5a:72:00:9b:c3:33:1c:65:be:51: dc:a6:08:2a:ba:df:c7:26:1e:87:90:0d:72:60:82: e5:9e:3e:b4:92:69:9b:20:19:f1:06:67:ff:07:87: 13:67:88:3f:b2:de:ad:7c:72:a3:c8:b1:7c:06:2e: 4a:0d:4b:20:83:69:a5:da:91:89:2c:16:fb:f8:43: 03:25:89:cf:fe:0a:21:ff:3d:f3:9c:14:0b:e6:87: 45:7c:7c:6b:08:f7:1e:a5:e0:2f:ef:87:a5:5e:de: a0:37:af:6e:61:ed:45:8b:9e:c7:e4:d6:59:4f:4a: 50:da:31:77:68:89:23:97:2f:2c:d1:d8:07:0e:fe: e0:a9:f6:aa:66:33:e7:12:90:a8:54:8c:45:f3:07: 2d:19:f1:8d:3e:93:0c:8e:e9:f4:a3:c6:39:c3:3e: bd:c4:23:01:d1:06:00:a5:36:90:48:a4:40:ed:23: 5a:3d:66:0b:5e:43:ea:34:39:b7:da:89:00:0a:25: 50:68:07:c4:16:38:7d:40:f4:78:2a:1e:26:bd:c2: 76:3a:bb:0b:45:eb:78:ea:fe:b8:5d:7d:a1:16:1d: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.10.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:2f:9d:36:bc:c8:1e:f4:d3:5e:2a:9a:17:e5:cd:50:7d:eb: ad:4e:72:79:c0:ab:8d:5d:5e:b0:23:7f:3d:f4:b1:09:bb:55: 89:12:43:95:69:57:3d:fe:51:a9:5e:7d:8e:e3:a2:2a:3d:2b: ff:38:db:a5:3b:86:bb:2e:c0:79:e0:04:0b:ee:29:03:8c:85: 76:72:e4:b8:10:de:f4:da:e9:1b:2e:82:30:aa:06:37:a8:3a: c0:18:d2:57:ee:27:dc:7c:88:8f:30:03:6d:fd:7f:a2:ea:75: 69:0f:a4:2f:c6:53:f4:3b:2f:12:75:f4:52:39:e9:fa:cf:80: 87:82:f1:9f:16:3d:c0:41:d0:b2:4d:e1:3b:47:a8:13:7e:2a: b7:dd:42:0e:b9:a2:da:61:10:27:8f:30:4b:2a:ca:a9:d7:90: 45:8b:1a:54:37:9e:f2:1a:f4:48:3b:6e:89:72:0f:60:80:e0: 49:ee:c1:8d:47:82:e6:42:23:57:39:5a:e2:af:92:6e:09:d1: 86:18:9b:95:39:50:85:d0:84:8c:e7:e3:e0:e9:44:97:cc:a1: 7a:55:e2:68:1d:10:20:99:46:6f:c1:94:6a:4c:6a:be:88:0b: 49:05:8d:d5:7d:ae:3b:76:bb:5c:46:4e:73:c5:c5:77:35:3b: b6:67:04:b6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAzDtL4yPuiA8JMkOADTB5BZlRuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzk0NFoX DTI3MDUwMjAwNDQ0NFowMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4 MDBDQTcxRDRDMURENzdFMkI4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAIpl7wNsotUNJpQUOzGQWRmK0DQaemuSNSB7BnXBZPhIhacgCbwzMcZb5R 3KYIKrrfxyYeh5ANcmCC5Z4+tJJpmyAZ8QZn/weHE2eIP7LerXxyo8ixfAYuSg1L IINppdqRiSwW+/hDAyWJz/4KIf8985wUC+aHRXx8awj3HqXgL++HpV7eoDevbmHt RYuex+TWWU9KUNoxd2iJI5cvLNHYBw7+4Kn2qmYz5xKQqFSMRfMHLRnxjT6TDI7p 9KPGOcM+vcQjAdEGAKU2kEikQO0jWj1mC15D6jQ5t9qJAAolUGgHxBY4fUD0eCoe Jr3Cdjq7C0XreOr+uF19oRYd7OUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGcwYv/7uH1Usk+ADKcdTB3XfiuHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVhNTMyYzY1LTgwYmUtNGZkZS04N2QwLTM2YzViZDI4OGNkOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YTUzMmM2 NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC82NzMwNjJGRkZCQjg3RDU0 QjI0RjgwMENBNzFENEMxREQ3N0UyQjg3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZx0KMA0GCSqGSIb3DQEBCwUAA4IBAQAfL502vMge9NNeKpoX5c1QfeutTnJ5 wKuNXV6wI3899LEJu1WJEkOVaVc9/lGpXn2O46IqPSv/ONulO4a7LsB54AQL7ikD jIV2cuS4EN702ukbLoIwqgY3qDrAGNJX7ifcfIiPMANt/X+i6nVpD6QvxlP0Oy8S dfRSOen6z4CHgvGfFj3AQdCyTeE7R6gTfiq33UIOuaLaYRAnjzBLKsqp15BFixpU N57yGvRIO26Jcg9ggOBJ7sGNR4LmQiNXOVrir5JuCdGGGJuVOVCF0ISM5+Pg6USX zKF6VeJoHRAgmUZvwZRqTGq+iAtJBY3Vfa47drtcRk5zxcV3NTu2ZwS2 -----END CERTIFICATE-----Generated at Tue May 12 22:16:34 2026 by rpki-client