$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer (raw, json) Hash identifier: cDmjjEOD84t9Yl1AszIEAe4o57ZrieUcHzMy0TduImU= Subject key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 679A90FACC0F15FC0AEAFCA3E773684C4CEEDB39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:07 +0000 Certificate not after: Sun 02 May 2027 01:37:07 +0000 Subordinate resources: IP: 103.113.166.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9a:90:fa:cc:0f:15:fc:0a:ea:fc:a3:e7:73:68:4c:4c:ee:db:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:07 2026 GMT Not After : May 2 01:37:07 2027 GMT Subject: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ce:9d:07:8d:63:d9:39:aa:95:96:b6:bb:0e: 9f:d1:cb:64:57:d8:fd:a6:4c:e6:ad:87:e4:9e:50: d3:11:1b:e2:13:ee:a3:fe:a4:8a:67:94:fa:bb:66: 8d:83:58:6b:ff:a4:45:88:15:b5:74:1c:57:17:14: 0b:31:20:c2:36:c8:94:57:6b:3b:fb:17:3f:f8:e7: b8:d3:4b:63:22:06:c2:3e:e4:3d:35:59:db:11:26: 77:f2:a2:da:0f:0a:ea:f7:92:4e:62:25:92:0f:96: d2:c7:19:53:07:c4:8c:ac:7f:bc:b7:a8:f6:63:0e: 73:b7:9b:f6:5c:2b:ee:9f:8f:65:58:64:45:7b:20: db:ba:3e:d4:c6:d7:5b:aa:20:5a:09:ce:85:d0:0c: 66:b6:8c:26:1d:5b:8a:ec:f6:45:85:4d:ba:74:55: 5b:86:23:69:be:aa:f8:c6:58:dc:df:a2:68:27:a6: 80:6a:ad:96:7d:92:55:76:65:32:50:ac:0c:f5:a0: 98:0e:99:21:c9:74:b8:95:ae:09:d3:4f:50:ec:02: dd:19:5a:d2:6d:c8:c6:28:2b:01:a6:b2:11:4d:f9: 20:8a:74:3e:9b:74:67:ad:78:a1:3a:4d:c1:f0:5f: 30:04:0a:e5:6f:05:c2:c9:cf:6b:22:a7:fe:95:19: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.113.166.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:39:a6:00:6f:46:8d:1a:89:93:9c:7a:77:f3:42:72:86:e7: bd:53:cf:07:44:93:23:27:c1:cc:e2:03:cd:45:e7:61:c4:a5: 71:be:f6:a8:05:e4:16:f4:bb:95:09:ab:21:e9:7b:f8:93:f2: dd:42:41:8c:6c:e3:af:2a:be:4f:24:c7:3a:9a:4f:bd:0d:26: 34:42:98:e3:da:5d:e6:8d:63:be:cd:ee:6f:63:cb:52:c1:bb: 8e:53:d2:94:f1:a7:b4:42:54:a6:e6:03:8f:59:94:96:73:08: 03:f3:58:1a:78:24:d8:46:b6:2e:90:9e:28:99:87:eb:c9:f2: 7f:7a:16:db:17:f3:33:28:e5:9e:d9:fa:a8:ef:9c:f5:2b:74: 88:af:b3:10:55:6c:7b:e2:f2:16:6a:b5:ba:1a:15:76:39:32: fe:f6:35:33:aa:5d:9d:1a:d5:68:03:b1:29:76:6e:4c:e2:6c: 46:83:22:17:f5:c2:7f:bd:47:a8:1a:a7:7f:cf:fe:af:94:06: 64:a0:2b:b9:15:9d:79:8d:60:d9:82:48:29:d0:4a:13:98:f2: 27:a7:32:c7:5a:21:ff:15:82:e4:8e:67:69:b4:81:0e:a3:d6: 9e:60:d7:f6:11:8c:52:eb:05:1d:f3:e6:f7:7b:9e:9b:a7:47: b0:28:60:93 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZ5qQ+swPFfwK6vyj53NoTEzu2zkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzIwN1oX DTI3MDUwMjAxMzcwN1owMzExMC8GA1UEAxMoNzNBRUJFRTMyNDlGRDhCNkE3REJG NjBDNzhBOThBRTM4QTIxODFGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrOnQeNY9k5qpWWtrsOn9HLZFfY/aZM5q2H5J5Q0xEb4hPuo/6kimeU+rtm jYNYa/+kRYgVtXQcVxcUCzEgwjbIlFdrO/sXP/jnuNNLYyIGwj7kPTVZ2xEmd/Ki 2g8K6veSTmIlkg+W0scZUwfEjKx/vLeo9mMOc7eb9lwr7p+PZVhkRXsg27o+1MbX W6ogWgnOhdAMZraMJh1biuz2RYVNunRVW4Yjab6q+MZY3N+iaCemgGqtln2SVXZl MlCsDPWgmA6ZIcl0uJWuCdNPUOwC3Rla0m3IxigrAaayEU35IIp0Ppt0Z614oTpN wfBfMAQK5W8FwsnPayKn/pUZGUECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHOuvuMkn9i2p9v2DHipiuOKIYH9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E3MmJiODcxLTAxOGQtNGQyMS05OTEzLWZjOTQ2YzM4Nzk0Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNzJiYjg3 MS0wMThkLTRkMjEtOTkxMy1mYzk0NmMzODc5NGYvMC83M0FFQkVFMzI0OUZEOEI2 QTdEQkY2MEM3OEE5OEFFMzhBMjE4MUZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3GmMA0GCSqGSIb3DQEBCwUAA4IBAQALOaYAb0aNGomTnHp380Jyhue9U88H RJMjJ8HM4gPNRedhxKVxvvaoBeQW9LuVCash6Xv4k/LdQkGMbOOvKr5PJMc6mk+9 DSY0Qpjj2l3mjWO+ze5vY8tSwbuOU9KU8ae0QlSm5gOPWZSWcwgD81gaeCTYRrYu kJ4omYfryfJ/ehbbF/MzKOWe2fqo75z1K3SIr7MQVWx74vIWarW6GhV2OTL+9jUz ql2dGtVoA7Epdm5M4mxGgyIX9cJ/vUeoGqd/z/6vlAZkoCu5FZ15jWDZgkgp0EoT mPInpzLHWiH/FYLkjmdptIEOo9aeYNf2EYxS6wUd8+b3e56bp0ewKGCT -----END CERTIFICATE-----Generated at Tue May 12 22:10:30 2026 by rpki-client