$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer File: 80810D47BA27B751C4A9441187D412B7B4FA5089.cer (raw, json) Hash identifier: sxWN3QmJpw+CklG6R3hofBQEB7Gg6+f++wSn0t+1R2o= Subject key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78A58B2063CDDFDF389FB4C573D5B5FB3B50F7E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:08:58 +0000 Certificate not after: Sun 02 May 2027 00:13:58 +0000 Subordinate resources: IP: 103.18.144.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a5:8b:20:63:cd:df:df:38:9f:b4:c5:73:d5:b5:fb:3b:50:f7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:08:58 2026 GMT Not After : May 2 00:13:58 2027 GMT Subject: CN=80810D47BA27B751C4A9441187D412B7B4FA5089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:17:d2:fd:8a:8e:9d:d5:57:a0:85:5e:39: 74:8e:96:41:82:6f:9a:cf:ff:cd:ce:a2:c5:67:9a: 27:4b:b8:90:05:1d:60:59:68:c2:03:7c:ac:0f:b0: f0:a1:a3:04:de:45:ce:c7:b5:fd:a5:4b:78:88:c3: a5:6f:ce:73:74:9f:b0:5b:1a:de:04:13:f9:0b:5c: e7:31:d5:3d:3c:91:14:c9:41:f6:48:29:ca:0a:4d: a6:1b:b2:19:13:5b:09:92:64:05:27:37:7e:40:bd: d7:19:e8:07:16:aa:62:2a:fc:48:6b:27:63:a7:23: 4b:dd:51:87:09:fa:fb:8d:84:5c:6e:dc:da:76:d0: 4d:eb:24:08:19:62:40:67:89:2a:15:22:cc:21:c3: 35:df:a3:c9:61:c1:60:56:49:7b:53:c6:5a:e8:8f: 89:db:b5:77:ed:9d:e0:f2:81:30:0b:1b:17:5c:8f: 76:a1:7f:e7:46:16:f4:fc:ca:a3:55:e3:d9:76:ed: c4:40:a3:4e:b3:da:c0:f4:e2:e2:14:f9:aa:ea:e8: 21:89:f3:c9:72:28:1e:ba:26:11:e3:cd:97:68:45: f2:b6:93:c4:c0:33:d8:55:d0:ee:af:30:09:db:e3: 7f:61:37:e7:b1:be:ac:66:e3:13:17:1f:4f:c7:42: 77:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.144.0/22 Signature Algorithm: sha256WithRSAEncryption 38:83:0b:03:7d:60:89:82:51:10:05:74:9e:8e:d6:71:5b:7c: 93:83:c1:02:0a:e0:3f:69:d5:a0:1b:53:95:f1:28:fa:8b:49: 3e:eb:a2:21:45:7e:fb:4c:ea:11:55:29:26:8a:f6:9b:2c:91: d7:04:7d:5b:4e:09:e4:78:fc:44:a4:27:c4:a5:a9:e6:11:27: 80:ce:b4:78:1b:8e:92:07:d0:a2:3f:46:07:7b:04:e8:b2:35: a5:6e:18:72:68:f4:b5:dd:94:de:a1:8f:a5:c7:ee:7d:4f:cf: 9d:23:9d:14:54:c6:77:03:13:c0:e0:08:79:d8:77:7b:4e:6f: f9:c7:a4:b9:e0:47:7f:7d:02:1d:f8:a9:fa:fc:f6:03:4d:28: 1f:fb:e1:8d:0b:d8:01:49:84:4b:ee:0d:68:65:ba:21:9c:9b: 86:af:ec:70:10:5d:73:f2:9c:08:ab:de:f3:20:48:aa:0f:d4: 4a:03:7c:b2:8e:d2:b5:89:d7:93:5f:25:83:fb:7d:55:ed:df: e5:eb:fb:fc:4f:2f:ce:2f:0c:30:ea:1f:4c:7d:c1:4a:93:6e: 6c:ec:d3:83:a4:ab:17:8a:ee:dc:35:19:13:3b:60:43:a3:07: 84:d1:f7:3f:a5:99:85:dc:69:93:94:6a:84:17:ab:c0:c9:ea: 4a:fa:77:25 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeKWLIGPN3984n7TFc9W1+ztQ9+kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDg1OFoX DTI3MDUwMjAwMTM1OFowMzExMC8GA1UEAxMoODA4MTBENDdCQTI3Qjc1MUM0QTk0 NDExODdENDEyQjdCNEZBNTA4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbDF9L9io6d1VeghV45dI6WQYJvms//zc6ixWeaJ0u4kAUdYFlowgN8rA+w 8KGjBN5Fzse1/aVLeIjDpW/Oc3SfsFsa3gQT+Qtc5zHVPTyRFMlB9kgpygpNphuy GRNbCZJkBSc3fkC91xnoBxaqYir8SGsnY6cjS91Rhwn6+42EXG7c2nbQTeskCBli QGeJKhUizCHDNd+jyWHBYFZJe1PGWuiPidu1d+2d4PKBMAsbF1yPdqF/50YW9PzK o1Xj2XbtxECjTrPawPTi4hT5quroIYnzyXIoHromEePNl2hF8raTxMAz2FXQ7q8w Cdvjf2E357G+rGbjExcfT8dCd0UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFICBDUe6J7dRxKlEEYfUEre0+lCJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJjYjFmMTA5LWI5ZmUtNDMyMy04NGUzLWI2MGJiNGRjMWVjYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yY2IxZjEw OS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC84MDgxMEQ0N0JBMjdCNzUx QzRBOTQ0MTE4N0Q0MTJCN0I0RkE1MDg5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZxKQMA0GCSqGSIb3DQEBCwUAA4IBAQA4gwsDfWCJglEQBXSejtZxW3yTg8EC CuA/adWgG1OV8Sj6i0k+66IhRX77TOoRVSkmivabLJHXBH1bTgnkePxEpCfEpanm ESeAzrR4G46SB9CiP0YHewTosjWlbhhyaPS13ZTeoY+lx+59T8+dI50UVMZ3AxPA 4Ah52Hd7Tm/5x6S54Ed/fQId+Kn6/PYDTSgf++GNC9gBSYRL7g1oZbohnJuGr+xw EF1z8pwIq97zIEiqD9RKA3yyjtK1ideTXyWD+31V7d/l6/v8Ty/OLwww6h9MfcFK k25s7NODpKsXiu7cNRkTO2BDoweE0fc/pZmF3GmTlGqEF6vAyepK+ncl -----END CERTIFICATE-----Generated at Tue May 12 22:16:21 2026 by rpki-client