$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer File: 700131DE51ECE4C881CAC783B29EDC61B1D04592.cer (raw, json) Hash identifier: 2XEbKYAezMuc0Qk/Him/zS9cyjN0lv/cH3hKPU53ADw= Subject key identifier: 70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: E1E512FF3EE872A27A55A481B3FD9FCFC1C535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft caRepository: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:07:05 +0000 Certificate not after: Sun 02 May 2027 01:12:05 +0000 Subordinate resources: IP: 103.250.128.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e1:e5:12:ff:3e:e8:72:a2:7a:55:a4:81:b3:fd:9f:cf:c1:c5:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:07:05 2026 GMT Not After : May 2 01:12:05 2027 GMT Subject: CN=700131DE51ECE4C881CAC783B29EDC61B1D04592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:ac:b0:5a:1a:34:e6:e4:d5:11:db:c9:16: 11:d0:67:6f:4a:d3:82:49:c8:56:3e:b9:8f:19:c2: 91:86:4f:ad:94:0b:a1:8d:61:f2:69:2d:b7:b8:83: 90:6a:85:cb:8a:af:8f:3f:f8:88:63:e8:df:e4:b7: 42:67:b7:aa:aa:15:d7:63:38:87:e9:90:3e:60:b0: 90:01:b3:0f:86:3a:93:22:ee:b8:29:a7:d9:d8:b0: 27:39:59:bc:2c:aa:5d:47:79:96:f6:4e:cb:5c:96: 79:72:f3:25:a4:a4:65:11:73:da:3d:9b:eb:38:89: db:fe:4a:35:a3:ee:53:4e:92:21:06:89:4f:98:72: 5e:3e:d3:28:64:de:1f:57:54:16:d3:7b:f8:3f:21: aa:63:75:a1:da:87:e3:b2:ba:46:fa:2f:46:49:32: 0a:98:75:2a:57:13:cf:25:dd:58:e5:43:70:7a:3f: f7:9e:00:e7:be:bf:a8:2d:9b:ba:67:b0:58:a9:25: 97:9f:6e:6a:35:bd:9b:1d:c1:6b:29:96:68:8f:48: 84:82:0d:c0:17:ad:39:4f:77:95:77:ce:71:f5:cd: 9b:9c:56:84:dd:f3:37:29:74:38:b8:65:03:e6:2d: 55:49:8b:d7:2e:d2:66:93:fd:93:00:1c:30:fb:7d: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.128.0/24 Signature Algorithm: sha256WithRSAEncryption 42:8e:11:84:56:b7:fc:f9:2f:f9:43:5c:0d:97:0f:07:1f:f0: f0:7b:71:1a:07:fd:23:ff:ff:83:46:da:5e:26:be:99:bb:3d: a0:2f:c4:7e:fa:c7:67:19:7f:97:01:92:fd:b5:e5:63:da:ca: c0:97:59:d8:32:be:a4:14:90:8f:2e:9a:9b:2d:dd:4f:3b:49: fb:3f:a1:0c:06:50:f9:d5:db:b4:36:79:e4:4a:81:ff:4c:3e: aa:63:b7:e7:47:f6:b9:00:23:ff:58:28:d9:fb:d5:80:db:d6: 6f:27:7d:8c:3f:8f:95:e9:95:14:72:ac:10:7c:65:b3:60:6e: c9:89:cc:88:c2:2d:77:3a:e2:c8:a7:ab:84:f2:97:a5:58:ee: a4:93:30:6a:fa:35:da:ce:24:27:53:14:c9:35:01:42:96:3b: fc:90:2d:43:ac:56:b1:e2:cd:5b:64:ed:08:0f:31:7c:05:6c: 1f:e7:92:d9:67:48:70:04:ce:7e:63:35:38:bd:f7:3e:a2:8d: ad:3b:cd:75:87:98:91:84:85:b6:19:a7:a9:7e:5f:fb:f5:a3: 11:45:4d:0e:68:cf:87:d3:af:d7:52:01:bf:e8:f5:9e:a4:33: 42:37:75:d0:da:1c:49:71:db:41:c8:88:86:1b:3c:61:10:39: c3:e7:11:d0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAOHlEv8+6HKielWkgbP9n8/BxTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDcwNVoX DTI3MDUwMjAxMTIwNVowMzExMC8GA1UEAxMoNzAwMTMxREU1MUVDRTRDODgxQ0FD NzgzQjI5RURDNjFCMUQwNDU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/trLBaGjTm5NUR28kWEdBnb0rTgknIVj65jxnCkYZPrZQLoY1h8mktt7iD kGqFy4qvjz/4iGPo3+S3Qme3qqoV12M4h+mQPmCwkAGzD4Y6kyLuuCmn2diwJzlZ vCyqXUd5lvZOy1yWeXLzJaSkZRFz2j2b6ziJ2/5KNaPuU06SIQaJT5hyXj7TKGTe H1dUFtN7+D8hqmN1odqH47K6RvovRkkyCph1KlcTzyXdWOVDcHo/954A576/qC2b umewWKkll59uajW9mx3BaymWaI9IhIINwBetOU93lXfOcfXNm5xWhN3zNyl0OLhl A+YtVUmL1y7SZpP9kwAcMPt9gh0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHABMd5R7OTIgcrHg7Ke3GGx0EWSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgxNmI1OTlkLTdmYmItNDQ5OC04NmVmLTE4NjQ1YWU5OGUzZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MTZiNTk5 ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC83MDAxMzFERTUxRUNFNEM4 ODFDQUM3ODNCMjlFREM2MUIxRDA0NTkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ/qAMA0GCSqGSIb3DQEBCwUAA4IBAQBCjhGEVrf8+S/5Q1wNlw8HH/Dwe3Ea B/0j//+DRtpeJr6Zuz2gL8R++sdnGX+XAZL9teVj2srAl1nYMr6kFJCPLpqbLd1P O0n7P6EMBlD51du0NnnkSoH/TD6qY7fnR/a5ACP/WCjZ+9WA29ZvJ32MP4+V6ZUU cqwQfGWzYG7JicyIwi13OuLIp6uE8pelWO6kkzBq+jXaziQnUxTJNQFCljv8kC1D rFax4s1bZO0IDzF8BWwf55LZZ0hwBM5+YzU4vfc+oo2tO811h5iRhIW2Gaepfl/7 9aMRRU0OaM+H06/XUgG/6PWepDNCN3XQ2hxJcdtByIiGGzxhEDnD5xHQ -----END CERTIFICATE-----Generated at Tue May 12 22:02:57 2026 by rpki-client