$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/73483E979EB0C13C4D940FE4756ABDD01C5CCC42.cer File: 73483E979EB0C13C4D940FE4756ABDD01C5CCC42.cer (raw, json) Hash identifier: mWo+RFUaxg3dgaZU8EDvqPq45pI2OcnvCzv60DEJnr4= Subject key identifier: 73:48:3E:97:9E:B0:C1:3C:4D:94:0F:E4:75:6A:BD:D0:1C:5C:CC:42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0458E58A22016D5E7306264E90102FB6BED002DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/73483E979EB0C13C4D940FE4756ABDD01C5CCC42.mft caRepository: rsync://rpki-rsync.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:57 +0000 Certificate not after: Sun 02 May 2027 01:10:57 +0000 Subordinate resources: IP: 103.179.214.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:58:e5:8a:22:01:6d:5e:73:06:26:4e:90:10:2f:b6:be:d0:02:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:05:57 2026 GMT Not After : May 2 01:10:57 2027 GMT Subject: CN=73483E979EB0C13C4D940FE4756ABDD01C5CCC42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:04:d3:61:29:ff:e7:bf:df:2c:60:83:c2: 5b:9d:09:dd:89:f4:74:92:5b:55:f7:5f:09:81:cf: 1d:8d:28:c3:96:a2:54:0f:93:20:bb:35:da:5c:0b: 59:03:05:20:30:71:66:30:32:d0:2b:46:0f:21:19: 2f:0d:1c:75:60:dc:39:ea:b6:cf:fc:f2:7f:6b:b4: e0:ef:49:20:5e:32:5d:d3:8c:da:ab:22:84:b0:88: 01:3b:c7:84:9d:c6:e3:0d:a0:45:3b:96:a5:e2:a3: da:54:08:63:19:da:6e:40:34:bf:a6:05:d8:c6:b2: f1:b3:f5:dc:6f:91:b3:71:11:56:66:35:49:dc:7c: fd:4d:b3:e3:db:cb:a6:12:ed:ec:24:c2:e6:f9:12: a1:53:05:1a:a7:7f:a6:12:7a:a7:4c:ff:53:95:40: 23:64:6e:b6:d0:1a:38:f7:bd:40:e8:39:38:10:6f: 38:23:57:37:f2:58:2b:06:78:38:ed:4a:5b:d7:96: 93:c6:89:3a:80:75:05:7e:fa:a0:8f:58:14:0c:94: 31:24:a1:e5:52:79:fa:c1:68:5d:57:18:24:67:7c: ba:a4:05:8f:b0:f6:86:bf:30:a1:0d:6c:3b:50:69: 3e:4e:74:ac:fd:1d:1b:4b:a6:d4:89:fd:3d:0d:6e: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:48:3E:97:9E:B0:C1:3C:4D:94:0F:E4:75:6A:BD:D0:1C:5C:CC:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/73483E979EB0C13C4D940FE4756ABDD01C5CCC42.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.214.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:31:c9:02:1e:5e:e9:98:64:74:42:9b:99:4e:74:57:05:09: 7a:85:13:5a:b7:5c:c4:f3:22:55:f9:38:40:e4:ab:a3:56:00: b6:6c:bc:e1:b0:2e:fd:9d:ed:bc:0a:6b:2c:bd:4e:67:db:0a: b4:29:89:1d:33:8a:ff:86:64:17:d5:ab:fe:f8:c0:43:b0:95: c1:21:97:3a:ac:61:61:fa:ed:8f:28:8e:95:8b:be:6e:b4:a0: 0b:e8:c3:24:d3:37:65:ad:18:ee:52:cf:45:ea:93:75:ae:41: ef:8c:0c:4a:9a:61:7e:5c:bb:86:11:fc:27:30:13:95:2e:7a: 96:34:12:eb:1e:3a:e4:d7:1b:8d:a7:9a:a1:28:da:87:85:a4: c0:4e:93:50:c5:83:36:5c:7d:34:ad:3c:98:41:7e:8e:4c:c7: c4:5d:9c:fe:58:a9:9c:50:60:50:e9:8d:a3:16:51:3d:5f:3d: 3d:2c:59:cc:a2:bc:08:88:1a:9e:e1:23:14:07:ba:b5:95:4f: df:4f:1f:21:bc:4e:1a:2c:59:80:6b:3a:64:44:d1:db:f1:a4: fb:62:0e:cd:86:ef:09:d2:e8:70:de:cb:86:cf:c8:be:5c:fb: 60:ea:15:40:1e:40:84:68:bf:a0:73:e7:0b:27:23:c8:fc:cd: 75:2f:f1:0c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBFjliiIBbV5zBiZOkBAvtr7QAtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDU1N1oX DTI3MDUwMjAxMTA1N1owMzExMC8GA1UEAxMoNzM0ODNFOTc5RUIwQzEzQzREOTQw RkU0NzU2QUJERDAxQzVDQ0M0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfkBNNhKf/nv98sYIPCW50J3Yn0dJJbVfdfCYHPHY0ow5aiVA+TILs12lwL WQMFIDBxZjAy0CtGDyEZLw0cdWDcOeq2z/zyf2u04O9JIF4yXdOM2qsihLCIATvH hJ3G4w2gRTuWpeKj2lQIYxnabkA0v6YF2May8bP13G+Rs3ERVmY1Sdx8/U2z49vL phLt7CTC5vkSoVMFGqd/phJ6p0z/U5VAI2RuttAaOPe9QOg5OBBvOCNXN/JYKwZ4 OO1KW9eWk8aJOoB1BX76oI9YFAyUMSSh5VJ5+sFoXVcYJGd8uqQFj7D2hr8woQ1s O1BpPk50rP0dG0um1In9PQ1uzE0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHNIPpeesME8TZQP5HVqvdAcXMxCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwODI3Y2I4LTFiMmMtNDRiMS04MTkwLTk4NWQ4MjA1YTQ2NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MDgyN2Ni OC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC83MzQ4M0U5NzlFQjBDMTND NEQ5NDBGRTQ3NTZBQkREMDFDNUNDQzQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7PWMA0GCSqGSIb3DQEBCwUAA4IBAQAuMckCHl7pmGR0QpuZTnRXBQl6hRNa t1zE8yJV+ThA5KujVgC2bLzhsC79ne28CmssvU5n2wq0KYkdM4r/hmQX1av++MBD sJXBIZc6rGFh+u2PKI6Vi75utKAL6MMk0zdlrRjuUs9F6pN1rkHvjAxKmmF+XLuG EfwnMBOVLnqWNBLrHjrk1xuNp5qhKNqHhaTATpNQxYM2XH00rTyYQX6OTMfEXZz+ WKmcUGBQ6Y2jFlE9Xz09LFnMorwIiBqe4SMUB7q1lU/fTx8hvE4aLFmAazpkRNHb 8aT7Yg7Nhu8J0uhw3suGz8i+XPtg6hVAHkCEaL+gc+cLJyPI/M11L/EM -----END CERTIFICATE-----Generated at Tue May 12 22:10:02 2026 by rpki-client