$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer File: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer (raw, json) Hash identifier: h8fzFGlmeY6s0X5pScPHUqZYUdj5zh7r7XIaRnSFSU8= Subject key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 32FD7B15C00CD8240D3CF57AC672FD12A497E3F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:31:52 +0000 Certificate not after: Sun 02 May 2027 01:36:52 +0000 Subordinate resources: IP: 103.55.226.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fd:7b:15:c0:0c:d8:24:0d:3c:f5:7a:c6:72:fd:12:a4:97:e3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:31:52 2026 GMT Not After : May 2 01:36:52 2027 GMT Subject: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:0c:cd:e3:10:7f:21:18:ce:e7:96:c8:5d: 3e:44:b1:52:f8:c4:77:22:12:cc:36:4d:85:59:aa: ef:da:5f:a1:00:ac:cc:af:40:2f:90:4c:a7:42:5a: ef:8a:82:9b:f4:ff:49:d2:31:fb:d8:c6:ce:71:2f: ec:93:c2:0d:e1:4f:af:85:19:7e:55:06:cb:51:a7: ce:76:c6:46:a6:22:64:ae:8c:73:ff:ee:d7:c9:5e: fd:ca:4a:4b:87:01:6e:31:39:98:32:59:ac:85:44: e3:a7:78:c6:e4:9f:fb:cc:a9:39:53:e9:a0:49:46: d4:61:e4:37:2c:c3:cb:ad:47:2f:c9:7b:20:05:48: d6:2c:dd:da:7c:af:9a:ff:1c:b7:c6:5a:89:27:74: 01:49:91:f3:50:3e:eb:1c:a2:ae:85:bf:d2:92:9d: 00:ba:cf:1d:b7:85:23:5b:cb:e6:86:b2:d0:a2:e4: aa:87:52:5c:78:80:4b:cd:3f:74:74:28:00:4f:f8: 06:cd:21:3f:24:10:c5:2d:92:8f:f5:b9:5e:86:8f: 71:10:ac:d8:38:c8:c1:20:57:64:46:62:7e:0b:ec: 1d:cb:fd:d5:f7:85:cc:f0:74:e3:4a:91:85:7b:d1: ad:ff:16:e5:51:33:0d:f1:fe:81:a0:39:e1:d7:7b: 22:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.226.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:e3:cb:a7:64:aa:50:8d:31:ec:19:55:54:78:52:c7:d7:05: 43:63:8a:7b:65:69:0c:00:52:05:bd:69:d2:f8:4c:51:f5:74: f4:f2:a7:13:49:fc:78:e7:2b:9f:1b:0d:72:fd:ce:77:d0:76: 2f:7d:fc:bd:12:33:fa:83:4f:8d:04:9a:c3:72:64:44:fc:ed: 4b:84:9b:7a:6a:f8:e6:46:d2:08:f7:de:59:5f:67:79:33:d6: 00:c3:6f:16:ed:99:60:a6:69:f4:08:da:7b:b1:10:af:ae:7d: 15:d8:f2:0b:6c:5d:ea:f3:2b:bb:6e:36:bc:93:15:0b:c6:01: 3c:8c:81:84:e9:bb:80:7d:bd:5d:cf:bf:bf:9d:c4:87:a3:e1: 35:61:3d:ee:4b:87:70:a8:f0:16:5b:e8:26:7b:57:c1:c1:c8: 19:6f:e0:ab:96:dd:c9:d0:fc:45:93:a6:83:52:74:66:53:69: 75:59:ac:ab:e8:64:81:54:19:f3:57:3e:db:f1:bc:2f:06:f9: 19:15:84:88:6c:b8:4c:c6:6f:75:60:a8:ac:22:dc:6e:25:39: bf:25:7a:87:b9:5b:2c:96:25:b2:e3:5d:44:73:6e:4b:bf:11: a3:bb:91:91:05:e8:78:97:3c:4c:f3:a0:0c:d7:64:d6:78:6c: 05:07:ea:54 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMv17FcAM2CQNPPV6xnL9EqSX4/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzE1MloX DTI3MDUwMjAxMzY1MlowMzExMC8GA1UEAxMoODAyQzJDQjFBNTQ4NjY0NDM0MDlF M0ZERTEyRjc3RUM2RkI4N0Y1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4qDM3jEH8hGM7nlshdPkSxUvjEdyISzDZNhVmq79pfoQCszK9AL5BMp0Ja 74qCm/T/SdIx+9jGznEv7JPCDeFPr4UZflUGy1GnznbGRqYiZK6Mc//u18le/cpK S4cBbjE5mDJZrIVE46d4xuSf+8ypOVPpoElG1GHkNyzDy61HL8l7IAVI1izd2nyv mv8ct8ZaiSd0AUmR81A+6xyiroW/0pKdALrPHbeFI1vL5oay0KLkqodSXHiAS80/ dHQoAE/4Bs0hPyQQxS2Sj/W5XoaPcRCs2DjIwSBXZEZifgvsHcv91feFzPB040qR hXvRrf8W5VEzDfH+gaA54dd7IocCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIAsLLGlSGZENAnj/eEvd+xvuH9VMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2ZTNkZDk1LTJhODUtNDM5ZS04NGYyLTk3MmEyM2UzMjcxZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNmUzZGQ5 NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC84MDJDMkNCMUE1NDg2NjQ0 MzQwOUUzRkRFMTJGNzdFQzZGQjg3RjU1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzfiMA0GCSqGSIb3DQEBCwUAA4IBAQCO48unZKpQjTHsGVVUeFLH1wVDY4p7 ZWkMAFIFvWnS+ExR9XT08qcTSfx45yufGw1y/c530HYvffy9EjP6g0+NBJrDcmRE /O1LhJt6avjmRtII995ZX2d5M9YAw28W7Zlgpmn0CNp7sRCvrn0V2PILbF3q8yu7 bja8kxULxgE8jIGE6buAfb1dz7+/ncSHo+E1YT3uS4dwqPAWW+gme1fBwcgZb+Cr lt3J0PxFk6aDUnRmU2l1Wayr6GSBVBnzVz7b8bwvBvkZFYSIbLhMxm91YKisItxu JTm/JXqHuVssliWy411Ec25LvxGju5GRBeh4lzxM86AM12TWeGwFB+pU -----END CERTIFICATE-----Generated at Tue May 12 22:45:38 2026 by rpki-client