$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/80117DDDA92CEB015665BA52420E9AFF403CD87A.cer File: 80117DDDA92CEB015665BA52420E9AFF403CD87A.cer (raw, json) Hash identifier: s4/ItQGLpzeYH+RgulEqjPqfuBFm2iDcSYWaSPGlM3E= Subject key identifier: 80:11:7D:DD:A9:2C:EB:01:56:65:BA:52:42:0E:9A:FF:40:3C:D8:7A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 582FB46057A8A1C8A97C68A5BDA859863E18C45A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/80117DDDA92CEB015665BA52420E9AFF403CD87A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:28 +0000 Certificate not after: Sun 02 May 2027 00:46:28 +0000 Subordinate resources: IP: 103.225.17.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2f:b4:60:57:a8:a1:c8:a9:7c:68:a5:bd:a8:59:86:3e:18:c4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:28 2026 GMT Not After : May 2 00:46:28 2027 GMT Subject: CN=80117DDDA92CEB015665BA52420E9AFF403CD87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:e6:58:48:29:cd:11:6d:3b:9d:1f:19:4a: 24:fd:97:5b:46:7f:61:09:be:dd:fd:b2:c0:d4:10: 6c:b7:52:21:b7:01:87:83:fb:7a:e1:de:c2:11:ef: 9c:6f:29:df:3d:c8:c0:78:ca:38:e5:df:04:98:1b: 4e:59:a8:6f:a7:7d:61:43:ed:42:d2:e9:07:08:93: f7:c0:1d:fb:7d:ed:93:0c:99:7e:9a:83:a3:bd:2c: 0e:5c:ae:42:e4:dd:37:d5:16:b6:33:e8:88:05:e5: 1b:71:ec:aa:66:b8:ab:88:cc:c1:99:80:65:e9:88: bb:ba:be:58:cb:75:68:f2:ae:8a:59:36:4f:d8:f2: bf:dd:c2:f6:c4:1e:76:ee:3c:78:da:d3:85:52:c3: 0b:5d:3c:22:75:0f:ba:fd:6f:f4:fe:ad:eb:0b:4d: 2d:6e:f8:71:c0:ab:d6:a8:74:72:e5:b4:b5:01:ad: be:dc:fb:ea:4a:2b:fc:4d:50:a3:6c:02:21:29:fe: 57:ef:9b:56:50:93:10:ad:0d:23:dd:87:6d:5e:64: ea:07:4c:f9:b1:02:7a:2c:4f:f4:7d:00:d4:cc:f3: 14:8e:bb:62:38:f2:0d:84:95:36:ba:dd:05:99:00: 84:e7:d3:b8:60:67:b1:7b:67:ec:cf:57:fb:5b:5f: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:11:7D:DD:A9:2C:EB:01:56:65:BA:52:42:0E:9A:FF:40:3C:D8:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/80117DDDA92CEB015665BA52420E9AFF403CD87A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.17.0/24 Signature Algorithm: sha256WithRSAEncryption 13:46:16:71:90:ff:e0:10:76:ce:90:ca:b8:83:c9:30:26:f8: 8f:f0:52:2a:b4:0a:5c:f4:3f:7a:37:b6:4e:12:8e:90:27:23: cf:df:54:16:6e:2d:4c:5b:4a:bc:b0:e3:f2:55:cd:8e:7b:ca: e7:87:5c:ba:7a:ea:3c:72:10:26:85:1e:22:f8:12:ce:b9:8d: 18:68:2d:73:04:fb:9a:29:31:8a:0b:78:f5:ab:36:80:29:f7: 2f:8a:6b:cf:93:92:89:0c:1c:dc:a5:40:3a:cb:51:6c:a5:cb: 35:b8:56:4f:56:0a:a0:02:7e:43:dc:ad:8f:fb:53:9f:bc:86: 22:e4:cc:4b:ec:d0:ea:d2:28:fd:a7:03:9a:e5:cb:e3:b0:9e: a6:0e:b8:3f:9d:5b:9b:02:a7:14:2d:55:5c:8c:c7:a9:01:8c: 7e:da:49:4d:a6:18:b7:99:a5:cc:e5:30:88:f6:b5:77:19:cf: 12:9c:78:58:aa:ba:be:b3:48:fe:c5:68:c4:bd:3d:61:1c:2b: 04:77:09:a4:a9:92:2d:71:f6:b3:8e:f2:41:ac:83:ee:fa:d2: 59:df:1b:73:5a:39:83:a6:1a:f2:7b:b3:a2:17:41:69:bf:76: 21:de:d2:34:22:95:0c:85:36:db:07:aa:54:bd:81:67:ff:1f: 2f:ad:23:10 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWC+0YFeoocipfGilvahZhj4YxFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDEyOFoX DTI3MDUwMjAwNDYyOFowMzExMC8GA1UEAxMoODAxMTdERERBOTJDRUIwMTU2NjVC QTUyNDIwRTlBRkY0MDNDRDg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzk5lhIKc0RbTudHxlKJP2XW0Z/YQm+3f2ywNQQbLdSIbcBh4P7euHewhHv nG8p3z3IwHjKOOXfBJgbTlmob6d9YUPtQtLpBwiT98Ad+33tkwyZfpqDo70sDlyu QuTdN9UWtjPoiAXlG3Hsqma4q4jMwZmAZemIu7q+WMt1aPKuilk2T9jyv93C9sQe du48eNrThVLDC108InUPuv1v9P6t6wtNLW74ccCr1qh0cuW0tQGtvtz76kor/E1Q o2wCISn+V++bVlCTEK0NI92HbV5k6gdM+bECeixP9H0A1MzzFI67YjjyDYSVNrrd BZkAhOfTuGBnsXtn7M9X+1tf4FECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIARfd2pLOsBVmW6UkIOmv9APNh6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVjNzJkM2Y1LWRkNTMtNGI3NC05NDdjLTZiYjUxMGY0ZjUwMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YzcyZDNm NS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC84MDExN0REREE5MkNFQjAx NTY2NUJBNTI0MjBFOUFGRjQwM0NEODdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ+ERMA0GCSqGSIb3DQEBCwUAA4IBAQATRhZxkP/gEHbOkMq4g8kwJviP8FIq tApc9D96N7ZOEo6QJyPP31QWbi1MW0q8sOPyVc2Oe8rnh1y6euo8chAmhR4i+BLO uY0YaC1zBPuaKTGKC3j1qzaAKfcvimvPk5KJDBzcpUA6y1Fspcs1uFZPVgqgAn5D 3K2P+1OfvIYi5MxL7NDq0ij9pwOa5cvjsJ6mDrg/nVubAqcULVVcjMepAYx+2klN phi3maXM5TCI9rV3Gc8SnHhYqrq+s0j+xWjEvT1hHCsEdwmkqZItcfazjvJBrIPu +tJZ3xtzWjmDphrye7OiF0Fpv3Yh3tI0IpUMhTbbB6pUvYFn/x8vrSMQ -----END CERTIFICATE-----Generated at Tue May 12 22:09:59 2026 by rpki-client