$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer File: 71468BECC53B96325385ED8BB32F3639F1F5E487.cer (raw, json) Hash identifier: Cs1S78VmRkcNCBzGCRjWJ2spVtX+Ojs7UvSJ+mWi1FE= Subject key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 514696D49432BBE4E8A4DF4389D7C3029E1054F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft caRepository: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:33 +0000 Certificate not after: Sun 02 May 2027 00:39:33 +0000 Subordinate resources: IP: 103.66.36.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:46:96:d4:94:32:bb:e4:e8:a4:df:43:89:d7:c3:02:9e:10:54:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:34:33 2026 GMT Not After : May 2 00:39:33 2027 GMT Subject: CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:9e:f0:83:b9:08:9b:2f:60:23:6f:fe:88: ec:82:13:54:6c:31:90:97:99:93:42:2e:b5:e0:56: 45:a2:d7:77:51:36:43:97:86:c5:a5:da:21:ae:92: e3:ca:41:81:01:6d:d9:a8:80:86:0a:c2:13:0f:14: f8:d5:7f:f9:4d:a5:2d:56:29:16:56:91:42:87:d3: 78:46:82:05:77:d1:ef:b5:50:54:be:81:44:91:4a: ad:f7:78:12:df:8b:60:ce:4c:62:1f:3a:d8:90:b9: 3c:6b:7f:ba:6f:6c:a0:e1:1f:aa:10:11:fe:ea:22: 03:cf:c4:8b:01:9e:b8:79:f9:5d:17:e5:5f:61:0e: b0:4e:85:6f:97:98:75:b9:c1:e8:6d:04:9c:9c:62: 97:c4:0f:c7:ad:ca:e2:05:4e:88:87:0a:7a:28:42: ff:ed:04:2c:9d:b7:3a:1d:c6:b4:76:52:c9:27:38: 35:8b:03:b4:8a:ec:0b:fc:4d:79:9f:93:cc:22:70: 5b:36:14:35:d9:7f:ca:03:26:32:c3:ea:c9:77:3e: 64:fe:14:c3:d1:87:50:8c:39:aa:74:29:16:ca:8e: 7b:47:ff:83:8b:82:d7:d9:15:70:3d:76:26:e7:43: 4f:65:06:60:a7:2f:8d:0e:3a:49:d9:ea:e4:a7:af: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.36.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:4c:8a:da:c1:42:da:7e:d7:9c:97:de:78:be:c1:fc:09:f0: 13:c3:39:f4:c9:bd:2d:ce:26:2d:70:f6:b3:fd:fd:aa:5d:b5: 5f:fe:45:d2:7d:99:dd:7b:d5:60:a7:9e:fd:53:1f:10:a9:89: b8:fb:48:47:5b:be:cf:b4:1d:84:ba:5b:aa:23:33:25:72:45: 09:a6:83:b9:95:d1:8a:8b:62:4b:98:6b:23:b5:4e:08:72:28: b1:a1:b2:c5:f3:20:d4:ca:ff:95:50:d5:89:fe:b4:bb:63:56: ca:8d:70:42:71:e8:3a:3c:68:e2:db:95:62:dc:09:65:ad:be: 31:76:fc:26:95:1e:9c:83:5c:08:e0:0e:97:2f:d2:29:9a:5e: 31:c6:58:04:c5:0d:db:e1:96:c2:3d:a3:15:b7:7b:5a:4a:df: 68:5d:ce:d2:b6:4d:c0:0c:a4:4b:b1:9e:28:68:1a:df:18:49: c8:7a:5f:f7:58:40:13:69:d0:a7:ae:86:73:45:c3:25:52:44: 08:c3:eb:35:92:de:d5:f6:4f:2b:aa:d6:33:5e:37:7e:1c:88: ef:07:06:49:36:d9:ec:a9:15:a9:81:c0:09:cf:eb:86:31:3e: d0:2c:ea:88:60:9c:a2:c9:a4:c2:a7:bd:03:ac:21:51:9a:42: ba:e7:31:c3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUUaW1JQyu+TopN9DidfDAp4QVPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzQzM1oX DTI3MDUwMjAwMzkzM1owMzExMC8GA1UEAxMoNzE0NjhCRUNDNTNCOTYzMjUzODVF RDhCQjMyRjM2MzlGMUY1RTQ4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeznvCDuQibL2Ajb/6I7IITVGwxkJeZk0IuteBWRaLXd1E2Q5eGxaXaIa6S 48pBgQFt2aiAhgrCEw8U+NV/+U2lLVYpFlaRQofTeEaCBXfR77VQVL6BRJFKrfd4 Et+LYM5MYh862JC5PGt/um9soOEfqhAR/uoiA8/EiwGeuHn5XRflX2EOsE6Fb5eY dbnB6G0EnJxil8QPx63K4gVOiIcKeihC/+0ELJ23Oh3GtHZSySc4NYsDtIrsC/xN eZ+TzCJwWzYUNdl/ygMmMsPqyXc+ZP4Uw9GHUIw5qnQpFsqOe0f/g4uC19kVcD12 JudDT2UGYKcvjQ46Sdnq5KevVz0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHFGi+zFO5YyU4Xti7MvNjnx9eSHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUyZGJkNzg1LTZiY2EtNDkzYi04YTY1LTNiNTI3NzAwN2ZlZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MmRiZDc4 NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC83MTQ2OEJFQ0M1M0I5NjMy NTM4NUVEOEJCMzJGMzYzOUYxRjVFNDg3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ0IkMA0GCSqGSIb3DQEBCwUAA4IBAQANTIrawULaftecl954vsH8CfATwzn0 yb0tziYtcPaz/f2qXbVf/kXSfZnde9Vgp579Ux8QqYm4+0hHW77PtB2EuluqIzMl ckUJpoO5ldGKi2JLmGsjtU4IciixobLF8yDUyv+VUNWJ/rS7Y1bKjXBCceg6PGji 25Vi3Allrb4xdvwmlR6cg1wI4A6XL9Ipml4xxlgExQ3b4ZbCPaMVt3taSt9oXc7S tk3ADKRLsZ4oaBrfGEnIel/3WEATadCnroZzRcMlUkQIw+s1kt7V9k8rqtYzXjd+ HIjvBwZJNtnsqRWpgcAJz+uGMT7QLOqIYJyiyaTCp70DrCFRmkK65zHD -----END CERTIFICATE-----Generated at Tue May 12 22:04:01 2026 by rpki-client