$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer (raw, json) Hash identifier: lTNhVLhLptjRuamXD18m1/a3Q/2XLrWNGRZLfeFeU5s= Subject key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 269CC237D96ED55A56B257063986BEFFF9DE9735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft caRepository: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:07 +0000 Certificate not after: Sun 02 May 2027 01:00:07 +0000 Subordinate resources: IP: 103.56.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:c2:37:d9:6e:d5:5a:56:b2:57:06:39:86:be:ff:f9:de:97:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:07 2026 GMT Not After : May 2 01:00:07 2027 GMT Subject: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2f:64:30:8f:3c:20:22:bb:3b:7a:52:3d:4d: 28:1b:bc:9b:41:8c:1d:28:99:bc:60:59:e2:2e:a8: 17:91:3c:36:96:18:6e:c0:5d:ab:10:30:f4:e8:9c: 6c:3d:4d:38:d8:e7:86:1f:51:51:22:32:54:e7:ef: 71:a2:b0:a9:1d:26:7a:8c:ec:f2:98:c1:55:46:01: cd:a2:2e:74:23:89:24:f0:d2:4c:99:0c:75:df:bd: ed:7f:95:db:b4:5d:22:92:cf:dd:db:43:47:57:01: 99:01:1e:b8:8f:22:c6:f4:ce:b0:e9:a8:b0:54:2a: 81:c1:c2:57:97:2a:cd:29:44:1c:17:32:1d:43:8a: ac:7a:a1:05:bf:cd:9b:9c:25:90:ff:9f:d5:86:49: 61:07:f2:d7:9f:b9:24:e6:98:df:5f:4c:3f:33:a3: 6d:fe:2b:2e:8d:da:bc:19:ed:0a:05:2e:f1:15:df: cf:63:99:91:7b:b3:35:ae:76:54:f5:a6:08:04:84: 4a:69:96:69:39:77:54:b1:ef:0d:bb:f3:da:2f:08: bb:84:f0:0c:b1:f5:75:63:38:00:ac:9f:f5:8a:2d: 09:1e:06:f0:26:80:ea:bb:5a:dd:b2:64:f8:1d:15: 94:52:bc:4f:fe:d9:a2:77:0e:52:58:b3:35:42:78: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.92.0/23 Signature Algorithm: sha256WithRSAEncryption 23:41:80:72:71:e3:cc:e6:06:7a:93:0e:52:d5:15:85:d3:f5: e5:77:7f:e5:7a:01:5b:b8:a8:e0:b6:50:da:a9:03:90:c1:31: 0f:83:2a:64:62:cf:7d:3d:7a:28:d2:03:80:2e:ee:cc:0f:f6: 5e:e2:d7:06:0b:6a:b8:5a:e9:8c:a4:1b:1c:c5:b8:e4:a1:64: 14:2c:7a:43:22:51:e5:61:10:b1:4a:18:37:64:6f:0d:8e:3f: a5:14:35:ce:26:b1:59:96:32:63:38:1c:fa:b9:8b:7e:c5:38: 96:40:e4:b5:37:3b:be:6e:49:a1:11:ac:32:7c:02:e2:5c:da: d4:05:4b:89:a0:b2:e1:6c:ab:61:ae:43:71:06:ce:9c:46:29: 35:3b:ec:54:67:ac:0d:02:7c:5b:a5:b8:f5:3c:28:b2:76:b6: 7f:4a:9d:2e:ba:98:54:a9:ca:d1:14:35:3e:71:97:6f:b7:13: 1f:fa:4d:cd:20:32:36:97:91:cf:d7:b4:af:8c:ae:05:39:fd: 9d:b3:3f:07:1c:be:ff:6b:1a:87:f1:c0:43:e4:03:d3:1a:a6: af:8d:76:8f:5d:66:ac:ad:7d:1c:86:aa:bc:6c:73:5d:4b:84: b0:69:87:dd:51:58:32:de:21:1a:f6:03:4d:5a:11:af:a6:a0: fa:be:07:72 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJpzCN9lu1VpWslcGOYa+//nelzUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTUwN1oX DTI3MDUwMjAxMDAwN1owMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlD M0IwNjA3NTM1REIyQjkwNkIzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOYvZDCPPCAiuzt6Uj1NKBu8m0GMHSiZvGBZ4i6oF5E8NpYYbsBdqxAw9Oic bD1NONjnhh9RUSIyVOfvcaKwqR0meozs8pjBVUYBzaIudCOJJPDSTJkMdd+97X+V 27RdIpLP3dtDR1cBmQEeuI8ixvTOsOmosFQqgcHCV5cqzSlEHBcyHUOKrHqhBb/N m5wlkP+f1YZJYQfy15+5JOaY319MPzOjbf4rLo3avBntCgUu8RXfz2OZkXuzNa52 VPWmCASESmmWaTl3VLHvDbvz2i8Iu4TwDLH1dWM4AKyf9YotCR4G8CaA6rta3bJk +B0VlFK8T/7ZoncOUlizNUJ4vscCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHGkXAXX1d+dFunDsGB1NdsrkGsyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcyNmNkMjZmLWZiZGEtNGNkOC1hMDFjLWIwMTU1NTEzMDE1Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MjZjZDI2 Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC83MUE0NUMwNUQ3RDVERjlE MTZFOUMzQjA2MDc1MzVEQjJCOTA2QjMyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzhcMA0GCSqGSIb3DQEBCwUAA4IBAQAjQYBycePM5gZ6kw5S1RWF0/Xld3/l egFbuKjgtlDaqQOQwTEPgypkYs99PXoo0gOALu7MD/Ze4tcGC2q4WumMpBscxbjk oWQULHpDIlHlYRCxShg3ZG8Njj+lFDXOJrFZljJjOBz6uYt+xTiWQOS1Nzu+bkmh EawyfALiXNrUBUuJoLLhbKthrkNxBs6cRik1O+xUZ6wNAnxbpbj1PCiydrZ/Sp0u uphUqcrRFDU+cZdvtxMf+k3NIDI2l5HP17SvjK4FOf2dsz8HHL7/axqH8cBD5APT GqavjXaPXWasrX0chqq8bHNdS4SwaYfdUVgy3iEa9gNNWhGvpqD6vgdy -----END CERTIFICATE-----Generated at Tue May 12 22:38:50 2026 by rpki-client