$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer (raw, json) Hash identifier: /coLDtNf9w5Gd5mmofumJzCUWeuI8INwuaG1WYPWYuU= Subject key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45B6DED5FCFD168541F09BBFD7E3BE52338EB19D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:03:21 +0000 Certificate not after: Sun 02 May 2027 02:08:21 +0000 Subordinate resources: IP: 103.180.198.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b6:de:d5:fc:fd:16:85:41:f0:9b:bf:d7:e3:be:52:33:8e:b1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:03:21 2026 GMT Not After : May 2 02:08:21 2027 GMT Subject: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:dd:c1:7a:3e:27:4c:4f:4d:b6:79:b0:0f: 34:16:6c:df:60:ea:71:86:c3:27:57:05:27:eb:a0: 8a:26:0f:b1:74:da:53:5a:30:d1:62:25:a3:dd:fd: 68:38:e4:6a:6f:90:a3:f4:88:4c:27:de:f9:6c:17: fc:c3:4d:65:74:3c:18:03:85:42:9f:a8:ff:bc:3d: a5:33:f6:c3:72:e1:ac:59:8e:72:d7:e3:7e:73:e3: 39:18:3f:28:60:4f:f6:fd:8f:1b:4a:a5:a6:c0:45: 63:8c:02:7a:dc:4c:30:51:21:17:5b:ff:1c:1d:eb: c9:49:13:98:cc:09:4f:f5:f4:ea:2b:25:41:6a:f4: 43:1e:a7:8e:12:fd:57:60:14:39:48:c8:cb:87:75: 3c:85:ad:c3:97:b2:af:15:c8:1f:2d:df:47:ac:3e: ed:2b:ab:76:3f:e4:64:9a:a5:a6:8b:a2:29:88:36: 39:51:f2:5b:59:7c:de:5d:8a:14:80:0e:56:b8:7a: e8:5c:12:7d:11:a6:c0:9a:0c:bb:3e:a3:05:d2:d9: 68:e2:31:89:d0:c2:c6:a8:3a:6a:65:b8:25:19:fd: 6a:30:17:92:ef:9b:5b:30:85:50:f4:eb:42:f7:ee: 3e:21:59:f2:7e:55:a4:25:45:c1:06:10:4a:82:43: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.198.0/23 Signature Algorithm: sha256WithRSAEncryption 96:e2:ef:0f:1c:97:7a:0e:ae:5b:31:56:09:bb:de:36:50:10: 70:d1:d1:87:2a:d1:50:57:35:84:42:44:64:89:28:68:7d:bf: 93:5e:eb:c5:12:e6:e5:33:9d:b1:e6:54:2a:e1:68:65:d9:9f: 82:1a:cb:07:5c:05:cd:8f:93:c7:33:2b:ca:90:4c:99:fb:82: 96:5b:fd:73:7d:fd:c3:f9:90:cf:8f:98:5e:89:aa:c5:5e:29: d7:7e:65:b7:d1:1c:7b:31:58:9a:93:ea:86:b0:aa:15:58:7e: 84:24:63:2d:dc:f8:1b:c8:ca:2f:93:d7:9f:70:0f:da:28:66: dc:df:86:6c:ee:49:3f:0a:8c:76:5a:d1:58:20:72:c5:85:5d: 2f:3d:29:31:b1:e8:64:d3:ec:fe:1b:18:8b:82:26:0a:8f:d7: bc:91:44:ed:37:af:bd:d2:5d:79:9c:ad:89:be:be:1b:d4:c0: 8e:3a:3b:fb:87:72:a5:a2:23:11:2a:4c:d1:05:79:fe:6d:34: 5d:85:4c:dd:06:81:f2:50:3f:a9:69:f2:b5:ae:1a:f4:65:02: b3:ab:ee:76:9a:5a:af:03:96:b2:c1:23:61:c2:c6:99:ed:96: db:d6:64:ba:e7:8f:09:f3:5a:6e:66:9d:e0:bd:91:f7:ee:1a: 33:a5:26:94 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURbbe1fz9FoVB8Ju/1+O+UjOOsZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDMyMVoX DTI3MDUwMjAyMDgyMVowMzExMC8GA1UEAxMoODAxRDFCNEVFNkJCNjlEM0Y3REEy REE5REZCREFFRkIyOTc4MzcyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZ13cF6PidMT022ebAPNBZs32DqcYbDJ1cFJ+ugiiYPsXTaU1ow0WIlo939 aDjkam+Qo/SITCfe+WwX/MNNZXQ8GAOFQp+o/7w9pTP2w3LhrFmOctfjfnPjORg/ KGBP9v2PG0qlpsBFY4wCetxMMFEhF1v/HB3ryUkTmMwJT/X06islQWr0Qx6njhL9 V2AUOUjIy4d1PIWtw5eyrxXIHy3fR6w+7Surdj/kZJqlpouiKYg2OVHyW1l83l2K FIAOVrh66FwSfRGmwJoMuz6jBdLZaOIxidDCxqg6amW4JRn9ajAXku+bWzCFUPTr QvfuPiFZ8n5VpCVFwQYQSoJD4bsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIAdG07mu2nT99otqd+9rvspeDckMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RhYzgwMWEwLTc5MTItNGIwMS1hMjgxLTg4MDI0NjI0YTJkNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYWM4MDFh MC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC84MDFEMUI0RUU2QkI2OUQz RjdEQTJEQTlERkJEQUVGQjI5NzgzNzI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7TGMA0GCSqGSIb3DQEBCwUAA4IBAQCW4u8PHJd6Dq5bMVYJu942UBBw0dGH KtFQVzWEQkRkiShofb+TXuvFEublM52x5lQq4Whl2Z+CGssHXAXNj5PHMyvKkEyZ +4KWW/1zff3D+ZDPj5heiarFXinXfmW30Rx7MViak+qGsKoVWH6EJGMt3PgbyMov k9efcA/aKGbc34Zs7kk/Cox2WtFYIHLFhV0vPSkxsehk0+z+GxiLgiYKj9e8kUTt N6+90l15nK2Jvr4b1MCOOjv7h3KloiMRKkzRBXn+bTRdhUzdBoHyUD+pafK1rhr0 ZQKzq+52mlqvA5aywSNhwsaZ7Zbb1mS6548J81puZp3gvZH37hozpSaU -----END CERTIFICATE-----Generated at Tue May 12 22:10:10 2026 by rpki-client