$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer File: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer (raw, json) Hash identifier: BCqviXVXLQz3nATthXsgU+p5L4bpoGRKXvaMzXaE190= Subject key identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6421229BDD15B57813BAA2BE4DD1F888EEF21FEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:14:55 +0000 Certificate not after: Sun 02 May 2027 00:19:55 +0000 Subordinate resources: IP: 103.166.44.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:21:22:9b:dd:15:b5:78:13:ba:a2:be:4d:d1:f8:88:ee:f2:1f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:14:55 2026 GMT Not After : May 2 00:19:55 2027 GMT Subject: CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:58:31:e7:c8:c8:20:d0:ab:d5:d7:3c:a1: 2a:31:46:ba:25:54:d9:5d:e7:ca:32:76:bd:de:99: 0e:15:ec:d1:4a:0d:21:00:44:12:47:0b:f4:18:cb: 79:e9:a4:e3:1e:5e:ce:da:aa:e5:76:73:0d:ec:0a: cf:59:52:3a:84:e0:5b:cf:40:90:97:21:2d:80:43: b2:b7:1f:43:2f:12:45:5b:75:36:8e:8d:b6:78:f0: 8c:9f:ba:d4:a6:29:68:0e:78:58:32:e2:2d:cb:dd: 4a:81:bb:85:41:cc:8a:17:28:e1:8c:f9:76:49:06: 06:0f:f4:16:a9:9a:db:63:ac:71:e0:12:81:fa:e5: c3:83:e7:a3:cf:d1:15:59:21:ee:8d:1a:ff:d2:11: c0:f0:c6:25:40:cf:7e:27:8f:69:f3:b3:98:19:2b: 3c:e8:88:c3:cf:c8:8b:99:1b:82:5b:65:db:c7:f8: 14:65:d3:bd:4e:dd:58:70:f1:17:34:b5:25:b4:29: 5e:d3:73:4a:2e:88:9d:0f:ab:6e:d1:89:34:1d:88: 6c:5f:0f:74:a4:f8:46:92:4b:06:b5:bf:e9:9c:c3: 56:ec:0c:ea:bb:5c:1d:93:0d:62:96:4c:6d:03:81: 23:62:c0:72:05:0c:e6:af:2d:a0:12:22:64:66:a0: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.44.0/23 Signature Algorithm: sha256WithRSAEncryption 95:15:b3:01:7c:df:ea:b7:56:55:b1:86:f8:88:30:ea:5e:12: 3c:bc:21:c1:c1:ae:c5:86:50:20:f2:3e:e3:a6:61:62:3f:dd: 86:3a:dd:07:84:14:61:86:d3:58:99:45:1e:ae:3d:47:dd:c6: 83:40:46:18:64:6b:d5:6e:90:99:18:40:d0:c0:43:a2:cb:38: cd:ea:6b:77:23:c9:b3:49:21:6b:fa:c1:dd:c2:2c:0c:b3:c4: b9:96:4b:83:52:f9:a4:ba:bf:13:2a:bc:75:e0:00:b7:82:f0: 41:b0:de:4f:2f:df:31:52:11:29:7b:72:17:b3:7d:20:54:23: 8e:59:5e:9a:46:1a:a6:8e:33:d5:8b:db:9b:f5:c0:40:46:11: 74:a7:4e:e3:c5:b6:1f:0a:2c:17:52:5d:d6:2a:4c:8d:50:9f: 9d:6b:ce:d0:db:48:01:23:b2:89:8b:f6:4d:8c:fb:25:4b:8f: 27:93:c7:b3:a9:17:bb:46:f6:3e:b4:26:77:48:a8:ec:aa:ba: c4:1d:fe:83:95:e3:72:a7:ac:ff:93:46:da:05:69:28:f2:a9: 03:cc:07:f7:83:04:63:74:27:58:52:15:b8:24:90:47:f7:b3: 2e:d0:75:10:6a:37:4d:7d:89:e2:2a:8a:f7:e4:92:ae:b7:00: e3:26:18:10 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZCEim90VtXgTuqK+TdH4iO7yH+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTQ1NVoX DTI3MDUwMjAwMTk1NVowMzExMC8GA1UEAxMoNzU5OTFDNDYzRkM3OTYxRUQzMDVF RDk4OUFBQTRDMEVBMkMwQjMwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANsZWDHnyMgg0KvV1zyhKjFGuiVU2V3nyjJ2vd6ZDhXs0UoNIQBEEkcL9BjL eemk4x5eztqq5XZzDewKz1lSOoTgW89AkJchLYBDsrcfQy8SRVt1No6NtnjwjJ+6 1KYpaA54WDLiLcvdSoG7hUHMihco4Yz5dkkGBg/0Fqma22OsceASgfrlw4Pno8/R FVkh7o0a/9IRwPDGJUDPfiePafOzmBkrPOiIw8/Ii5kbgltl28f4FGXTvU7dWHDx FzS1JbQpXtNzSi6InQ+rbtGJNB2IbF8PdKT4RpJLBrW/6ZzDVuwM6rtcHZMNYpZM bQOBI2LAcgUM5q8toBIiZGagSS0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHWZHEY/x5Ye0wXtmJqqTA6iwLMOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM0OWRjNWViLTMyNjAtNDI4YS1hNmMwLWRjMGY2MzZiMzMwNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNDlkYzVl Yi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC83NTk5MUM0NjNGQzc5NjFF RDMwNUVEOTg5QUFBNEMwRUEyQzBCMzBFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6YsMA0GCSqGSIb3DQEBCwUAA4IBAQCVFbMBfN/qt1ZVsYb4iDDqXhI8vCHB wa7FhlAg8j7jpmFiP92GOt0HhBRhhtNYmUUerj1H3caDQEYYZGvVbpCZGEDQwEOi yzjN6mt3I8mzSSFr+sHdwiwMs8S5lkuDUvmkur8TKrx14AC3gvBBsN5PL98xUhEp e3IXs30gVCOOWV6aRhqmjjPVi9ub9cBARhF0p07jxbYfCiwXUl3WKkyNUJ+da87Q 20gBI7KJi/ZNjPslS48nk8ezqRe7RvY+tCZ3SKjsqrrEHf6DleNyp6z/k0baBWko 8qkDzAf3gwRjdCdYUhW4JJBH97Mu0HUQajdNfYniKor35JKutwDjJhgQ -----END CERTIFICATE-----Generated at Tue May 12 22:03:44 2026 by rpki-client