$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer (raw, json) Hash identifier: DOPLiUInlzXUtS+w/KbNt2HiCGeLlfEBlxGWEuH7jrE= Subject key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37DA38D531B2C300707EE25ADDC4C7B85021B290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:07:11 +0000 Certificate not after: Sun 02 May 2027 00:12:11 +0000 Subordinate resources: IP: 103.144.102.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:da:38:d5:31:b2:c3:00:70:7e:e2:5a:dd:c4:c7:b8:50:21:b2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:07:11 2026 GMT Not After : May 2 00:12:11 2027 GMT Subject: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:67:b4:86:af:2c:cb:f7:a5:8a:60:8f:66: 85:6b:f8:d6:d4:86:5c:3c:e0:a9:5e:d8:75:c8:95: 9a:51:7c:f0:35:9f:8d:cc:95:8c:bd:ae:00:d0:d4: ed:38:a5:77:06:45:96:06:9a:70:52:dc:80:b6:72: 61:1a:68:8a:06:29:1d:5f:34:57:0a:a4:a2:e4:05: 54:7b:54:7e:72:8e:f8:20:57:45:0b:68:69:40:dc: ae:67:41:a6:af:59:f9:fd:d0:43:9b:c5:11:51:1e: 06:dd:01:6a:15:43:fe:b8:dd:44:ca:74:d0:97:0c: 24:c7:d0:be:35:21:af:33:ab:92:3b:57:23:95:39: b7:74:0b:fb:48:82:7d:f6:44:75:36:a8:d8:f9:c7: b3:4c:66:a5:86:d7:0b:e7:1f:8e:a1:f2:80:f6:b4: a6:47:e9:c5:80:fb:8e:6c:32:18:17:04:e7:0b:e1: 11:24:ed:8e:42:3c:54:fa:d1:ea:d7:1f:7a:95:b7: 0a:f2:a7:64:57:15:3a:0a:57:2e:43:99:eb:cc:50: 85:ec:91:9e:48:24:f1:16:b5:95:1c:3e:02:c9:c4: 05:3d:f7:e1:83:bb:41:89:17:5c:28:6f:3e:b9:e6: b6:b6:b4:55:48:57:8d:0b:7b:87:1d:e5:c3:df:c9: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.102.0/23 Signature Algorithm: sha256WithRSAEncryption 16:33:55:84:bd:80:71:64:87:c6:30:ab:6c:19:fa:3b:4f:a0: 5a:58:81:40:20:02:f8:3d:52:96:15:79:7c:78:c3:7a:58:34: 39:96:65:fc:16:68:ff:23:41:76:96:bd:84:0d:05:1b:82:f8: 95:00:1a:34:52:1c:3d:d2:98:e3:42:67:6b:7b:7f:52:7b:61: 82:e0:68:6a:81:ba:7c:bc:57:dd:69:f0:19:21:16:9e:ca:45: 7d:02:c7:a3:c5:bc:34:37:6c:d4:22:fe:2f:10:02:38:7f:26: e1:6e:93:18:c1:76:6c:18:45:5a:5b:e0:dd:0d:a0:35:1a:06: 05:4a:db:56:31:98:27:62:36:76:e0:c3:cd:9d:c5:0c:ac:8a: 71:1b:00:9c:19:b3:92:46:c9:fa:bd:89:87:25:9f:31:f9:1d: 7b:f7:a8:a7:89:c2:9d:0a:59:aa:a9:b3:71:95:94:16:09:f5: 41:29:e5:01:c1:bf:2d:47:71:9e:a7:da:9b:f7:6a:4f:04:f0: 69:05:10:89:b4:a3:53:11:48:0b:13:e1:16:47:0e:9f:46:c2: f7:aa:70:26:9a:da:a0:e8:30:39:d3:df:6e:f4:6d:62:a8:48: d9:b4:03:80:5c:0c:1e:82:19:78:ca:72:51:e7:01:a2:c8:3b: eb:dc:b4:46 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUN9o41TGywwBwfuJa3cTHuFAhspAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDcxMVoX DTI3MDUwMjAwMTIxMVowMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1 MkY3MjBCQkU1RUE3OEVGREU1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1+Z7SGryzL96WKYI9mhWv41tSGXDzgqV7YdciVmlF88DWfjcyVjL2uANDU 7TildwZFlgaacFLcgLZyYRpoigYpHV80VwqkouQFVHtUfnKO+CBXRQtoaUDcrmdB pq9Z+f3QQ5vFEVEeBt0BahVD/rjdRMp00JcMJMfQvjUhrzOrkjtXI5U5t3QL+0iC ffZEdTao2PnHs0xmpYbXC+cfjqHygPa0pkfpxYD7jmwyGBcE5wvhESTtjkI8VPrR 6tcfepW3CvKnZFcVOgpXLkOZ68xQheyRnkgk8Ra1lRw+AsnEBT334YO7QYkXXChv Prnmtra0VUhXjQt7hx3lw9/J95sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHHqrpS0uXxe1TpS9yC75ep4795bMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJhNTM0MWU4LTIyZDgtNDQ5Yy1hNzUzLWU0N2JiZmM0ODUzOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYTUzNDFl OC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC83MUVBQUU5NEI0Qjk3QzVF RDUzQTUyRjcyMEJCRTVFQTc4RUZERTVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5BmMA0GCSqGSIb3DQEBCwUAA4IBAQAWM1WEvYBxZIfGMKtsGfo7T6BaWIFA IAL4PVKWFXl8eMN6WDQ5lmX8Fmj/I0F2lr2EDQUbgviVABo0Uhw90pjjQmdre39S e2GC4Ghqgbp8vFfdafAZIRaeykV9Asejxbw0N2zUIv4vEAI4fybhbpMYwXZsGEVa W+DdDaA1GgYFSttWMZgnYjZ24MPNncUMrIpxGwCcGbOSRsn6vYmHJZ8x+R1796in icKdClmqqbNxlZQWCfVBKeUBwb8tR3Gep9qb92pPBPBpBRCJtKNTEUgLE+EWRw6f RsL3qnAmmtqg6DA5099u9G1iqEjZtAOAXAweghl4ynJR5wGiyDvr3LRG -----END CERTIFICATE-----Generated at Tue May 12 22:32:18 2026 by rpki-client