$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer File: 80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer (raw, json) Hash identifier: OkmATWYixttDxF+48iM1u/NMdxpBmLaub8dGkHxXED4= Subject key identifier: 80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1E3C3B76AD5A0E4668286BB5AE9A07336EFED83B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:41:22 +0000 Certificate not after: Sun 02 May 2027 01:46:22 +0000 Subordinate resources: IP: 103.41.247.0/24 IP: 103.141.61.0/24 IP: 2001:df4:6c00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3c:3b:76:ad:5a:0e:46:68:28:6b:b5:ae:9a:07:33:6e:fe:d8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:41:22 2026 GMT Not After : May 2 01:46:22 2027 GMT Subject: CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:2a:f0:f5:61:5d:5b:da:a0:0c:5d:6f:21: d2:db:55:8c:30:30:f7:fa:c6:5b:38:4d:51:88:c5: cc:8f:e9:25:55:80:07:18:0e:cb:bd:f3:5a:46:68: 61:43:1f:6e:c2:70:0e:f4:1d:96:d0:b1:f6:43:09: 60:cf:2e:c9:4b:6b:22:17:8c:8c:13:f7:2e:a1:3f: 25:d9:c9:8d:86:07:17:0b:d0:fc:ea:24:10:df:50: 27:8e:b1:30:71:81:49:f9:8c:32:82:62:a2:b3:e3: c4:55:96:13:2c:01:59:73:c5:f3:6f:2b:44:bb:5c: cc:a5:8a:ef:b2:48:56:67:cb:d2:d7:c4:9a:2b:b8: 70:df:1e:39:7c:c5:09:15:c3:0e:06:65:b9:69:19: 2e:a0:53:05:c3:b2:11:aa:e9:fc:55:f5:de:ff:e8: 24:eb:6c:94:d1:9e:08:94:33:3b:67:73:b6:3e:d4: 7f:ed:9b:a3:89:4a:25:83:c4:31:b2:5d:11:f1:a5: 0a:b1:d8:c3:f8:a6:62:8c:82:b7:60:eb:09:80:28: fc:58:99:d9:97:8b:5a:fd:7b:45:01:56:fd:48:0f: 54:dd:8e:c9:6d:a8:07:8a:05:39:39:81:ae:83:0c: 8a:b3:b0:b6:66:0c:12:08:e0:9e:f0:4c:7c:31:42: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.247.0/24 103.141.61.0/24 IPv6: 2001:df4:6c00::/48 Signature Algorithm: sha256WithRSAEncryption 81:61:d7:34:49:4b:04:d8:0d:63:8c:30:93:c1:6c:e3:e2:64: 42:f2:6f:a7:d2:0d:a4:c3:d3:54:ec:06:fb:2d:58:a0:2b:ad: 0f:44:48:3b:64:f7:d2:e9:75:4a:5b:2a:90:c3:bf:7a:1c:e8: 3c:ee:8a:a6:1f:09:7e:5b:1c:d3:69:e6:bb:b2:12:fa:5b:76: bd:af:2d:c3:64:60:66:86:0e:f4:1b:df:09:3a:30:b9:48:36: 20:13:6c:32:26:13:d2:19:cb:89:a1:8f:88:4d:bb:1b:ec:d0: d3:26:ca:a6:1d:b0:0c:2e:c5:bd:50:ec:85:27:08:da:6c:34: 59:d9:8b:5f:e7:54:61:09:76:3c:7d:c8:a0:2a:ff:a3:ab:57: aa:d1:23:10:8e:7b:c3:aa:f8:24:76:0e:67:69:7b:55:54:cf: 2b:0a:db:56:7b:94:01:5a:59:eb:86:58:40:81:4f:0a:2b:b7: 74:b9:65:d1:f4:ea:9f:e2:81:79:d5:ba:8a:5c:b6:2e:d1:e8: b9:6f:2a:ba:84:54:0b:3d:c3:17:7c:a4:19:37:e6:66:ba:33: 76:40:62:2b:3a:d6:52:fa:79:ad:81:25:d6:b9:9f:6d:59:70: e6:e2:1e:c7:31:55:4f:2f:b3:d4:52:08:34:63:30:d4:75:8c: ad:06:e1:b2 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUHjw7dq1aDkZoKGu1rpoHM27+2DswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDEyMloX DTI3MDUwMjAxNDYyMlowMzExMC8GA1UEAxMoODAzMDE4MDFFNTlENkI1NUJERDRE RDBDM0NCRDhFRjlBQ0Y1QjZBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnMKvD1YV1b2qAMXW8h0ttVjDAw9/rGWzhNUYjFzI/pJVWABxgOy73zWkZo YUMfbsJwDvQdltCx9kMJYM8uyUtrIheMjBP3LqE/JdnJjYYHFwvQ/OokEN9QJ46x MHGBSfmMMoJiorPjxFWWEywBWXPF828rRLtczKWK77JIVmfL0tfEmiu4cN8eOXzF CRXDDgZluWkZLqBTBcOyEarp/FX13v/oJOtslNGeCJQzO2dztj7Uf+2bo4lKJYPE MbJdEfGlCrHYw/imYoyCt2DrCYAo/FiZ2ZeLWv17RQFW/UgPVN2OyW2oB4oFOTmB roMMirOwtmYMEgjgnvBMfDFCLdsCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIAwGAHlnWtVvdTdDDy9jvms9bamMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I1OWNmZDA0LTY5ZDAtNGQ0Yy04ZDA5LTJkMjIxMzg0MmMyYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNTljZmQw NC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC84MDMwMTgwMUU1OUQ2QjU1 QkRENEREMEMzQ0JEOEVGOUFDRjVCNkE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZyn3AwQAZ409MA8EAgACMAkDBwAgAQ30bAAwDQYJKoZIhvcNAQELBQADggEB AIFh1zRJSwTYDWOMMJPBbOPiZELyb6fSDaTD01TsBvstWKArrQ9ESDtk99LpdUpb KpDDv3oc6DzuiqYfCX5bHNNp5ruyEvpbdr2vLcNkYGaGDvQb3wk6MLlINiATbDIm E9IZy4mhj4hNuxvs0NMmyqYdsAwuxb1Q7IUnCNpsNFnZi1/nVGEJdjx9yKAq/6Or V6rRIxCOe8Oq+CR2Dmdpe1VUzysK21Z7lAFaWeuGWECBTwort3S5ZdH06p/igXnV uopcti7R6LlvKrqEVAs9wxd8pBk35ma6M3ZAYis61lL6ea2BJda5n21ZcObiHscx VU8vs9RSCDRjMNR1jK0G4bI= -----END CERTIFICATE-----Generated at Wed May 13 02:25:31 2026 by rpki-client