$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer File: 71BEA54A40125136212043443871943E11E47CE8.cer (raw, json) Hash identifier: KX47UQqD4HiJasByaJuavXWi6H6dXBSgtlqCjROWSzY= Subject key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A7E14F0B4F00FACA9B75081B950BA41A4B516F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:22 +0000 Certificate not after: Sun 02 May 2027 00:22:22 +0000 Subordinate resources: IP: 103.234.18.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7e:14:f0:b4:f0:0f:ac:a9:b7:50:81:b9:50:ba:41:a4:b5:16:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:22 2026 GMT Not After : May 2 00:22:22 2027 GMT Subject: CN=71BEA54A40125136212043443871943E11E47CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:eb:87:e7:67:42:94:bd:fa:40:67:7c:55: d5:49:95:73:fd:a8:3d:78:2b:88:ac:09:e8:20:c2: 2c:30:2c:d2:b6:17:47:7c:75:c0:09:18:f0:8d:be: 84:24:87:f0:7a:1b:9a:5d:03:ca:14:0c:cf:fa:d6: d9:86:aa:25:30:af:6a:5c:42:8e:37:0f:25:3f:8c: 0a:04:d2:dd:b7:0b:79:5a:1d:ae:ae:3b:93:26:23: a1:74:3d:57:cf:db:f4:8d:f7:71:63:dc:6c:cd:52: b7:c4:d9:28:9b:40:75:95:d4:91:52:93:a4:87:6e: 25:90:8b:f2:6a:91:db:23:89:ff:3d:96:d8:2f:c1: 44:c3:0f:a6:52:84:08:3d:eb:8b:56:b0:e6:bb:2b: 87:30:a2:73:e5:a7:83:6d:9c:f4:f8:74:7a:a1:bd: b7:fd:cb:ad:ca:89:10:d2:19:89:00:f3:2c:57:dc: 61:1f:e1:92:94:db:e7:50:6f:b2:80:b6:9b:cd:04: fa:f8:22:c7:3f:4c:15:05:48:8a:b4:97:98:15:4b: 0d:68:ad:8d:d9:3c:b4:da:9a:8d:e2:f5:57:38:b2: 95:6f:eb:94:50:d1:b9:f6:cc:ef:54:c2:3c:20:c4: 50:e9:e7:16:2d:65:7f:f7:1e:c7:1b:fa:df:77:4a: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.18.0/23 Signature Algorithm: sha256WithRSAEncryption 54:22:6d:f5:cf:db:4a:a8:f0:f8:39:21:47:9f:ae:bd:68:0b: ee:51:54:94:46:b1:3e:87:44:69:9e:7c:9e:a1:c0:9a:4c:f6: b7:4b:69:9c:d6:39:af:a8:07:37:a4:a3:a6:86:cb:ea:42:9d: 4e:17:30:d6:b0:d1:07:44:70:a1:8a:b7:c9:04:e0:18:46:e6: 6c:9f:9d:31:81:d4:2c:cf:df:21:b0:a5:67:50:70:d6:f7:f6: 0d:47:cd:95:c0:c1:d7:7f:d4:dc:de:19:7e:ea:88:2d:7c:44: 2b:14:87:dc:f9:78:d0:4c:5b:37:68:6c:7d:89:9f:cc:d3:28: b4:75:d6:cd:e0:eb:87:df:b2:33:85:47:c0:48:6b:74:51:d2: ae:05:2c:6f:6e:df:03:18:7c:82:56:f5:59:70:db:25:ce:88: ef:91:a9:72:81:62:9e:e2:d5:a1:48:40:ce:79:11:90:dd:0d: a2:d1:2c:f7:b1:df:ca:d8:54:5b:26:6c:22:90:a1:63:3f:bc: ab:af:ea:05:03:0e:30:5b:03:60:be:53:43:03:13:06:e4:d9: 59:94:73:e8:f4:ee:30:bf:a5:9d:30:93:b3:bb:af:7d:c1:e2: 3c:f3:f5:32:ad:27:4d:8e:bd:ea:cf:35:52:6e:8c:32:56:a2: 13:ca:6f:af -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWn4U8LTwD6ypt1CBuVC6QaS1FvEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTcyMloX DTI3MDUwMjAwMjIyMlowMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0 MzQ0Mzg3MTk0M0UxMUU0N0NFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+V64fnZ0KUvfpAZ3xV1UmVc/2oPXgriKwJ6CDCLDAs0rYXR3x1wAkY8I2+ hCSH8Hobml0DyhQMz/rW2YaqJTCvalxCjjcPJT+MCgTS3bcLeVodrq47kyYjoXQ9 V8/b9I33cWPcbM1St8TZKJtAdZXUkVKTpIduJZCL8mqR2yOJ/z2W2C/BRMMPplKE CD3ri1aw5rsrhzCic+Wng22c9Ph0eqG9t/3LrcqJENIZiQDzLFfcYR/hkpTb51Bv soC2m80E+vgixz9MFQVIirSXmBVLDWitjdk8tNqajeL1VziylW/rlFDRufbM71TC PCDEUOnnFi1lf/cexxv633dKQzcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHG+pUpAElE2ISBDRDhxlD4R5HzoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM4ODMyOWNhLWU4ZjctNGQzZC1hY2U0LTgwN2Y4YWE1OGFlMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zODgzMjlj YS1lOGY3LTRkM2QtYWNlNC04MDdmOGFhNThhZTAvMC83MUJFQTU0QTQwMTI1MTM2 MjEyMDQzNDQzODcxOTQzRTExRTQ3Q0U4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+oSMA0GCSqGSIb3DQEBCwUAA4IBAQBUIm31z9tKqPD4OSFHn669aAvuUVSU RrE+h0RpnnyeocCaTPa3S2mc1jmvqAc3pKOmhsvqQp1OFzDWsNEHRHChirfJBOAY RuZsn50xgdQsz98hsKVnUHDW9/YNR82VwMHXf9Tc3hl+6ogtfEQrFIfc+XjQTFs3 aGx9iZ/M0yi0ddbN4OuH37IzhUfASGt0UdKuBSxvbt8DGHyCVvVZcNslzojvkaly gWKe4tWhSEDOeRGQ3Q2i0Sz3sd/K2FRbJmwikKFjP7yrr+oFAw4wWwNgvlNDAxMG 5NlZlHPo9O4wv6WdMJOzu699weI88/UyrSdNjr3qzzVSbowyVqITym+v -----END CERTIFICATE-----Generated at Wed May 13 02:50:52 2026 by rpki-client