$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer File: 76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer (raw, json) Hash identifier: DRdeRsD4CKvtKdB9Al3w1VhHm1me7u8/pawFD3EInrE= Subject key identifier: 76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45892A1401087A867C9BEF5787C64327F6A0C578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:04:39 +0000 Certificate not after: Sun 02 May 2027 01:09:39 +0000 Subordinate resources: IP: 103.129.48.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:89:2a:14:01:08:7a:86:7c:9b:ef:57:87:c6:43:27:f6:a0:c5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:04:39 2026 GMT Not After : May 2 01:09:39 2027 GMT Subject: CN=76349EBC1654E6903E60A473DF6E8CE5B84C2592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8a:99:7c:38:fe:ad:a8:87:c5:93:bd:5e:0d: 94:1d:5b:95:f8:aa:83:92:34:32:90:df:54:36:f7: 86:b8:3e:ca:66:bb:25:43:47:95:de:1a:f5:d8:d5: a7:8f:75:ab:c7:db:f9:c9:e3:94:3a:52:02:ba:0a: f4:4e:08:ea:81:a6:f8:94:30:5f:2d:38:9f:70:7a: 41:aa:80:8c:5c:35:73:fd:bd:75:78:a9:29:8f:e2: ff:a8:10:3b:2c:6f:b4:00:b4:3d:ae:3c:b4:63:80: ed:bb:a4:29:19:5b:5a:4c:1b:bc:9a:5e:31:b8:14: 02:68:71:31:df:b3:41:d9:fd:ff:d3:4b:3f:e8:cc: 5d:12:7d:ef:e6:d1:85:51:a7:6b:55:11:c5:92:c3: e3:70:09:ec:26:8f:c4:8e:9c:67:7f:03:7a:88:02: c2:11:a9:f9:be:d1:2d:a3:ce:1e:16:1e:07:87:ea: 82:2e:38:2d:b7:e0:f9:15:4a:8d:b2:73:1f:1b:c7: c0:8f:ca:53:ce:ba:96:d5:d6:e9:65:ce:93:a9:cf: 3f:a4:0f:66:77:13:fe:0f:6d:8d:03:63:d1:f2:c6: 6a:48:1f:65:b6:36:e6:bf:31:73:8d:e1:34:d7:59: 09:42:81:97:5d:d5:c4:6a:04:dc:19:e9:ae:c8:e8: 4a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.48.0/22 Signature Algorithm: sha256WithRSAEncryption 05:ad:5f:be:b5:54:02:6e:7b:18:30:1f:92:a0:5a:aa:da:05: e9:19:d6:7b:1e:e6:c3:d5:2a:7f:4e:6d:c4:9b:7c:dc:a4:97: 16:5e:d0:67:b4:12:a9:6c:1f:12:f1:34:30:6d:00:cf:ba:39: f5:bc:d6:c9:ab:3f:76:76:10:5a:bf:1a:3d:e5:63:65:cf:4b: f2:a7:79:17:c4:12:88:0b:3c:21:bf:04:85:62:8b:fa:12:2b: 52:55:7c:c2:8d:78:e8:1a:54:a1:35:c7:92:be:3d:57:a9:6a: 3e:63:ea:06:0d:3f:06:0a:79:f6:d8:92:5e:15:f8:d3:f8:5c: 6a:f3:4d:f6:3b:b7:2b:6a:ab:08:1d:e2:d3:16:04:93:e2:c7: 68:24:e8:13:70:cc:a2:2b:79:1c:35:9e:56:3a:82:34:4c:30: ab:6e:02:19:67:4f:4e:6e:b1:a4:7a:f2:c4:14:a1:fe:7f:32: 42:1c:bd:a7:cb:b0:44:df:00:73:c1:5b:93:da:56:f2:2e:c3: 96:80:d6:29:c9:f1:3e:94:7a:b8:2c:17:c1:dd:55:7b:62:a1: 10:b4:31:16:d6:0c:f6:2a:df:1f:25:a4:74:51:f9:29:4a:bf: 3c:64:c7:33:52:b2:4f:58:a8:32:7f:72:9b:6c:4f:61:78:d2: ce:b4:4d:d7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURYkqFAEIeoZ8m+9Xh8ZDJ/agxXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDQzOVoX DTI3MDUwMjAxMDkzOVowMzExMC8GA1UEAxMoNzYzNDlFQkMxNjU0RTY5MDNFNjBB NDczREY2RThDRTVCODRDMjU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmKmXw4/q2oh8WTvV4NlB1blfiqg5I0MpDfVDb3hrg+yma7JUNHld4a9djV p491q8fb+cnjlDpSAroK9E4I6oGm+JQwXy04n3B6QaqAjFw1c/29dXipKY/i/6gQ OyxvtAC0Pa48tGOA7bukKRlbWkwbvJpeMbgUAmhxMd+zQdn9/9NLP+jMXRJ97+bR hVGna1URxZLD43AJ7CaPxI6cZ38DeogCwhGp+b7RLaPOHhYeB4fqgi44Lbfg+RVK jbJzHxvHwI/KU866ltXW6WXOk6nPP6QPZncT/g9tjQNj0fLGakgfZbY25r8xc43h NNdZCUKBl13VxGoE3BnprsjoSpkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHY0nrwWVOaQPmCkc99ujOW4TCWSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlNmJmZjlkLWZiMTMtNDdiOS05Y2MwLWRkNmEwNzMwYTFjNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZTZiZmY5 ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC83NjM0OUVCQzE2NTRFNjkw M0U2MEE0NzNERjZFOENFNUI4NEMyNTkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4EwMA0GCSqGSIb3DQEBCwUAA4IBAQAFrV++tVQCbnsYMB+SoFqq2gXpGdZ7 HubD1Sp/Tm3Em3zcpJcWXtBntBKpbB8S8TQwbQDPujn1vNbJqz92dhBavxo95WNl z0vyp3kXxBKICzwhvwSFYov6EitSVXzCjXjoGlShNceSvj1XqWo+Y+oGDT8GCnn2 2JJeFfjT+Fxq8032O7craqsIHeLTFgST4sdoJOgTcMyiK3kcNZ5WOoI0TDCrbgIZ Z09ObrGkevLEFKH+fzJCHL2ny7BE3wBzwVuT2lbyLsOWgNYpyfE+lHq4LBfB3VV7 YqEQtDEW1gz2Kt8fJaR0UfkpSr88ZMczUrJPWKgyf3KbbE9heNLOtE3X -----END CERTIFICATE-----Generated at Tue May 12 22:16:17 2026 by rpki-client