$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer (raw, json) Hash identifier: YfBnKIYClRwksOEl+3HOwRcvuEaaFghtzvTOctvJJMc= Subject key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29F30A94559AB60AB18E40CADB6153A7E8797254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:29 +0000 Certificate not after: Sun 02 May 2027 02:09:29 +0000 Subordinate resources: IP: 103.18.132.0/22 IP: 116.254.100.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f3:0a:94:55:9a:b6:0a:b1:8e:40:ca:db:61:53:a7:e8:79:72:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:29 2026 GMT Not After : May 2 02:09:29 2027 GMT Subject: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:89:94:03:63:ad:62:1b:b1:b7:dc:75:94: e0:f6:bb:47:f4:9c:70:e2:07:7e:26:33:a7:0d:c0: c9:55:2a:59:90:92:8d:16:f9:5a:fa:7a:14:bb:7c: 53:33:d5:74:cf:73:3c:ec:fa:74:5f:26:bc:b1:4f: 53:2b:f2:58:08:c2:fd:14:2d:f7:c7:f5:a0:43:42: 96:97:35:9d:99:5a:a9:d2:26:48:83:94:f3:f1:0b: 0c:a7:22:14:76:8b:50:1a:ec:15:71:3a:8b:fe:2a: 6a:93:8f:3a:ad:ee:11:da:57:cf:3a:d3:87:53:59: 76:38:0a:93:78:7f:64:0b:a2:bb:cc:ba:d1:8b:6c: 8d:78:5a:f8:97:ad:12:6c:e3:cc:44:d9:48:42:74: 7f:50:bb:46:d0:9b:c2:5e:07:a6:6c:fb:67:e3:2f: c7:49:7a:0c:f8:f7:a8:a5:59:f5:d7:2b:00:fc:b1: 08:08:01:04:99:5c:e1:b1:a5:a2:8a:cb:c4:60:83: fd:23:c7:14:73:fe:d7:a4:6d:7c:ee:6c:98:69:6b: f2:92:ed:0c:19:6f:4c:f7:e2:3c:48:99:af:16:d2: 70:a7:3e:c7:c1:78:d4:de:dc:a7:b5:20:69:9d:04: 9f:1d:12:de:38:89:f9:60:9d:74:08:8e:89:5d:f3: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.132.0/22 116.254.100.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:24:d2:19:10:18:71:53:54:26:f2:e4:fe:7b:90:52:92:d4: e8:01:38:32:f6:36:0e:28:9d:e4:57:1e:8e:a6:fd:e6:62:13: 6b:d9:b8:0a:5d:68:2f:f4:1d:86:2f:2e:c3:16:08:fc:71:91: f2:7b:30:87:b6:b5:f0:f2:f6:59:67:d5:15:d6:8d:0f:7e:ac: 22:74:5e:f0:f2:8f:6b:c0:3e:12:56:51:22:90:3a:a2:71:a6: 62:07:1d:c4:01:ab:0d:06:a6:b6:af:bc:2f:c3:c6:68:8b:2a: 01:a3:c4:53:de:23:21:72:d4:b4:4d:09:54:66:7d:14:1e:7c: 1c:d1:60:f0:4e:50:7c:b2:6d:5d:0c:9f:48:9e:e0:c2:6b:ea: 3a:9d:bf:13:28:80:6b:f0:ac:5f:e8:73:24:0a:21:2a:56:8d: 45:4c:f7:31:1e:d1:91:4d:cb:48:26:cb:e6:69:f4:77:f5:e0: 8f:b8:ad:4b:a2:11:dd:b9:da:28:a1:48:2b:87:3f:9c:4f:08: 2a:b3:2f:7c:01:f9:5c:98:02:ad:21:d1:a7:f8:df:21:71:45: 54:72:f0:c8:eb:c1:70:e5:90:23:85:54:67:7e:bf:b3:f4:5e: 96:10:70:4a:c5:d7:f6:fa:04:af:bc:32:50:bc:dd:7c:58:28: 60:d4:87:81 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUKfMKlFWatgqxjkDK22FTp+h5clQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQyOVoX DTI3MDUwMjAyMDkyOVowMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVG QUMxRkMzM0U1QkY1QzQ2MEE5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1IiZQDY61iG7G33HWU4Pa7R/SccOIHfiYzpw3AyVUqWZCSjRb5Wvp6FLt8 UzPVdM9zPOz6dF8mvLFPUyvyWAjC/RQt98f1oENClpc1nZlaqdImSIOU8/ELDKci FHaLUBrsFXE6i/4qapOPOq3uEdpXzzrTh1NZdjgKk3h/ZAuiu8y60YtsjXha+Jet EmzjzETZSEJ0f1C7RtCbwl4Hpmz7Z+Mvx0l6DPj3qKVZ9dcrAPyxCAgBBJlc4bGl oorLxGCD/SPHFHP+16RtfO5smGlr8pLtDBlvTPfiPEiZrxbScKc+x8F41N7cp7Ug aZ0Enx0S3jiJ+WCddAiOiV3zOHsCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHJRidvn2WRDaoX6wfwz5b9cRgqXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RkNTRiNGUyLTJlNTgtNDY1Yi1hZmFhLTFjOTQ2NWM4ODJlNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZDU0YjRl Mi0yZTU4LTQ2NWItYWZhYS0xYzk0NjVjODgyZTYvMC83MjUxODlEQkU3RDk2NDQz NkE4NUZBQzFGQzMzRTVCRjVDNDYwQTk3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCZxKEAwQCdP5kMA0GCSqGSIb3DQEBCwUAA4IBAQBOJNIZEBhxU1Qm8uT+e5BS ktToATgy9jYOKJ3kVx6Opv3mYhNr2bgKXWgv9B2GLy7DFgj8cZHyezCHtrXw8vZZ Z9UV1o0PfqwidF7w8o9rwD4SVlEikDqicaZiBx3EAasNBqa2r7wvw8ZoiyoBo8RT 3iMhctS0TQlUZn0UHnwc0WDwTlB8sm1dDJ9InuDCa+o6nb8TKIBr8Kxf6HMkCiEq Vo1FTPcxHtGRTctIJsvmafR39eCPuK1LohHdudoooUgrhz+cTwgqsy98AflcmAKt IdGn+N8hcUVUcvDI68Fw5ZAjhVRnfr+z9F6WEHBKxdf2+gSvvDJQvN18WChg1IeB -----END CERTIFICATE-----Generated at Tue May 12 22:03:42 2026 by rpki-client