$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer File: 797581F67816C4132050EC6348DBB15EBC5C0189.cer (raw, json) Hash identifier: oiYhiXCFb0DXjptZZ8BvZsyQs/7NL2QgZq2DH40Tauk= Subject key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03334218E2A84E29F6D958042BA745C7071744EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft caRepository: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:50:08 +0000 Certificate not after: Sun 02 May 2027 00:55:08 +0000 Subordinate resources: IP: 43.254.124.0/22 IP: 103.28.224.0/22 IP: 2404:f900::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:33:42:18:e2:a8:4e:29:f6:d9:58:04:2b:a7:45:c7:07:17:44:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:50:08 2026 GMT Not After : May 2 00:55:08 2027 GMT Subject: CN=797581F67816C4132050EC6348DBB15EBC5C0189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ac:df:fe:b7:ba:7c:3d:9b:61:d8:05:89:d4: 7c:44:36:fc:c0:fd:26:dc:94:d4:1d:0b:c6:c2:63: 21:11:95:4c:67:1e:39:3e:af:5c:be:c0:bb:fd:01: dd:1c:23:e5:0d:b4:03:db:0c:3b:8b:62:76:7d:a6: d3:b2:2f:4d:22:d8:c6:70:73:e0:90:9f:37:24:ad: 8e:6a:7e:6a:3d:64:e0:69:26:6f:73:02:cb:de:2b: 82:19:2d:a2:15:45:00:03:4d:98:c1:03:d4:74:19: 54:cd:a0:bf:d7:82:05:e4:f7:33:33:46:de:38:2c: 23:9f:7f:74:df:bb:2f:4b:28:39:db:4a:cf:cf:ae: a6:ed:98:89:ca:19:3a:67:ae:bb:92:e9:18:18:b1: db:29:69:a3:fb:4a:77:17:ad:ec:93:a5:f4:e6:af: 93:b0:78:27:be:ce:f7:1b:82:79:cf:2d:f5:9c:5d: 3d:15:70:15:2e:37:e5:2e:37:c3:d6:16:9f:5a:d4: 7d:17:24:b1:3a:17:50:03:bd:eb:9f:fb:ea:e7:9b: a0:37:c3:a1:da:d0:b5:42:14:40:36:8c:e3:ef:e5: 1c:2c:1a:9f:33:87:8d:29:ac:2d:74:c8:38:3d:f4: ca:1c:45:fc:df:49:2e:7a:07:40:98:a1:ce:d0:f9: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.124.0/22 103.28.224.0/22 IPv6: 2404:f900::/32 Signature Algorithm: sha256WithRSAEncryption 1e:2b:52:64:f2:7e:53:85:0b:fd:92:c8:0d:cb:6d:bc:b7:60: 18:fe:15:64:fd:9f:38:b2:42:f9:ab:19:fa:79:c2:ac:75:7a: 40:52:b1:9a:af:d2:4e:44:be:af:15:82:ef:4d:70:fe:db:ef: dd:27:5c:60:af:42:78:f4:1e:ae:c0:65:a6:60:bc:c5:6b:6b: c0:1d:a3:ec:9e:ec:c4:72:83:17:08:71:d7:cf:4f:ef:0c:7f: 55:ee:fb:df:f2:fc:de:f7:f7:94:7b:2b:76:e3:22:02:27:13: 47:4f:a9:56:56:a2:67:49:3f:20:29:01:ae:eb:75:0a:a6:c1: 9e:e7:a5:56:64:fb:ad:da:14:f3:c5:b2:60:f2:7e:a6:0f:4b: 7a:a6:ae:b3:3b:05:26:0e:93:48:ec:ba:78:fa:6c:54:c1:c5: c5:b5:af:48:e8:7c:03:0e:a3:67:a1:4f:c7:31:56:84:11:f6: da:b8:d6:e4:92:1c:2f:d1:33:85:0d:88:2c:df:bf:45:fd:f5: e0:ba:6e:65:58:b4:cd:3c:c0:11:29:fd:b2:a6:99:8f:65:bc: cd:6a:16:84:22:79:df:81:a4:e1:71:a9:2a:12:68:96:c4:d5: 48:10:de:66:f9:85:24:18:30:cb:69:a3:a8:2f:4e:f1:37:88: 6c:c9:fe:ba -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUAzNCGOKoTin22VgEK6dFxwcXROwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTAwOFoX DTI3MDUwMjAwNTUwOFowMzExMC8GA1UEAxMoNzk3NTgxRjY3ODE2QzQxMzIwNTBF QzYzNDhEQkIxNUVCQzVDMDE4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKs3/63unw9m2HYBYnUfEQ2/MD9JtyU1B0LxsJjIRGVTGceOT6vXL7Au/0B 3Rwj5Q20A9sMO4tidn2m07IvTSLYxnBz4JCfNyStjmp+aj1k4Gkmb3MCy94rghkt ohVFAANNmMED1HQZVM2gv9eCBeT3MzNG3jgsI59/dN+7L0soOdtKz8+upu2YicoZ Omeuu5LpGBix2ylpo/tKdxet7JOl9Oavk7B4J77O9xuCec8t9ZxdPRVwFS435S43 w9YWn1rUfRcksToXUAO965/76ueboDfDodrQtUIUQDaM4+/lHCwanzOHjSmsLXTI OD30yhxF/N9JLnoHQJihztD5+uECAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHl1gfZ4FsQTIFDsY0jbsV68XAGJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY5ZTJmM2JkLWQ0ZWMtNDJjYi1hYWNmLWFkYzI4MjVjMTg0Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82OWUyZjNi ZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC83OTc1ODFGNjc4MTZDNDEz MjA1MEVDNjM0OERCQjE1RUJDNUMwMTg5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCK/58AwQCZxzgMA0EAgACMAcDBQAkBPkAMA0GCSqGSIb3DQEBCwUAA4IBAQAe K1Jk8n5ThQv9ksgNy228t2AY/hVk/Z84skL5qxn6ecKsdXpAUrGar9JORL6vFYLv TXD+2+/dJ1xgr0J49B6uwGWmYLzFa2vAHaPsnuzEcoMXCHHXz0/vDH9V7vvf8vze 9/eUeyt24yICJxNHT6lWVqJnST8gKQGu63UKpsGe56VWZPut2hTzxbJg8n6mD0t6 pq6zOwUmDpNI7Lp4+mxUwcXFta9I6HwDDqNnoU/HMVaEEfbauNbkkhwv0TOFDYgs 379F/fXgum5lWLTNPMARKf2yppmPZbzNahaEInnfgaThcakqEmiWxNVIEN5m+YUk GDDLaaOoL07xN4hsyf66 -----END CERTIFICATE-----Generated at Tue May 12 22:10:14 2026 by rpki-client