$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer File: 82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer (raw, json) Hash identifier: 7bgYcrJJY24OLJvX1v3k+zlKF+kdAFl/L4lNmC+7hKA= Subject key identifier: 82:CA:7D:AD:0F:E5:B4:D0:AB:39:47:32:0D:10:D9:55:19:3B:63:D5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A6A6B01CDE77A0AE1E02F359E52F48A5D0F339F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:51:45 +0000 Certificate not after: Sun 02 May 2027 01:56:45 +0000 Subordinate resources: IP: 103.177.153.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6a:6b:01:cd:e7:7a:0a:e1:e0:2f:35:9e:52:f4:8a:5d:0f:33:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:51:45 2026 GMT Not After : May 2 01:56:45 2027 GMT Subject: CN=82CA7DAD0FE5B4D0AB3947320D10D955193B63D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:6c:aa:31:e5:bf:29:90:77:27:a7:ea:8c: 73:51:84:73:a2:6b:52:7f:14:0f:3d:0f:0f:67:03: 00:1e:0e:80:cf:62:35:b3:55:34:47:38:11:16:42: 8b:73:5e:29:a7:b9:94:ee:a5:b1:63:26:10:c7:4a: 66:f9:60:4d:2d:47:99:49:ca:55:67:cf:ed:2f:2d: 90:17:b5:81:95:fc:1d:fe:49:de:2a:58:d6:0d:6a: 45:20:a5:59:07:9e:4d:d8:b5:4b:7f:15:ee:85:95: 4e:2e:d9:1d:3a:1c:ae:0d:fa:98:87:0a:8e:30:fb: 69:a3:39:d7:a0:b9:34:04:a0:f6:85:a0:a1:bd:b3: af:17:ae:90:49:a1:d1:2b:a4:cd:d7:4c:50:8c:c2: ba:b9:df:ec:dd:7e:d5:20:bc:ec:55:73:c3:c9:9e: 8f:0b:51:b0:94:0f:fc:12:bf:b2:fa:d8:59:2f:5b: 7c:55:28:8f:9a:40:4d:61:fd:39:c9:69:60:b1:61: d8:57:ba:2c:78:b9:f0:e9:25:77:6c:d1:03:1b:fc: ea:5b:75:ce:d1:2d:03:44:01:cb:76:17:e3:89:42: 99:01:ee:a0:d1:d3:39:39:dc:80:f3:61:fd:bb:11: 89:ce:4c:d7:1f:8c:b9:f4:f5:78:5f:fb:9d:cd:62: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:CA:7D:AD:0F:E5:B4:D0:AB:39:47:32:0D:10:D9:55:19:3B:63:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.153.0/24 Signature Algorithm: sha256WithRSAEncryption 62:20:cd:01:12:6b:50:54:5e:4d:63:9d:7c:54:75:02:9f:e1: 01:e8:a3:d9:5c:32:a1:b1:b3:c6:cf:eb:81:27:2a:f4:f8:8d: 9d:69:e9:44:f5:8d:37:0d:81:79:58:e1:43:62:62:f7:5d:99: 33:aa:53:ca:72:72:d1:03:40:58:5b:e3:9e:e6:92:15:ce:cf: 6a:b1:a3:12:c6:44:2d:91:65:97:75:19:be:03:4b:35:ad:ce: 46:5d:35:a2:82:bd:24:e9:65:f5:46:a7:91:f9:83:58:e2:76: bf:8b:e5:31:b6:78:52:2e:d7:ba:2a:92:b1:70:0e:20:02:a7: 2e:07:a0:11:f6:bb:87:4b:53:0e:1c:bf:17:f3:8f:d1:be:83: 3e:eb:5c:de:56:ca:03:5d:52:db:61:68:56:90:86:14:f0:2f: 10:d1:1d:90:3c:a6:7a:96:7f:de:42:0b:54:93:9e:6c:5d:32: 04:6f:11:a6:50:7a:63:1b:8b:c8:84:80:68:ea:a8:76:77:94: 8e:d6:07:d8:8c:87:7c:87:c8:0f:33:d8:56:49:6e:9b:ad:47: 02:0d:00:04:64:8c:2b:ca:f3:03:59:36:b0:e4:ec:4f:b5:20: ad:c6:41:da:81:7c:a1:3f:49:06:84:1e:66:b7:d3:5e:f6:23: a6:c2:d6:61 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUemprAc3negrh4C81nlL0il0PM58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTE0NVoX DTI3MDUwMjAxNTY0NVowMzExMC8GA1UEAxMoODJDQTdEQUQwRkU1QjREMEFCMzk0 NzMyMEQxMEQ5NTUxOTNCNjNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALS9bKox5b8pkHcnp+qMc1GEc6JrUn8UDz0PD2cDAB4OgM9iNbNVNEc4ERZC i3NeKae5lO6lsWMmEMdKZvlgTS1HmUnKVWfP7S8tkBe1gZX8Hf5J3ipY1g1qRSCl WQeeTdi1S38V7oWVTi7ZHTocrg36mIcKjjD7aaM516C5NASg9oWgob2zrxeukEmh 0SukzddMUIzCurnf7N1+1SC87FVzw8mejwtRsJQP/BK/svrYWS9bfFUoj5pATWH9 OclpYLFh2Fe6LHi58Okld2zRAxv86lt1ztEtA0QBy3YX44lCmQHuoNHTOTncgPNh /bsRic5M1x+MufT1eF/7nc1iAJECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFILKfa0P5bTQqzlHMg0Q2VUZO2PVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M3MzFmYjI3LTYxMzMtNDdlYS1iN2NjLTIyMjdlMDRjYTI2NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNzMxZmIy Ny02MTMzLTQ3ZWEtYjdjYy0yMjI3ZTA0Y2EyNjUvMC84MkNBN0RBRDBGRTVCNEQw QUIzOTQ3MzIwRDEwRDk1NTE5M0I2M0Q1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7GZMA0GCSqGSIb3DQEBCwUAA4IBAQBiIM0BEmtQVF5NY518VHUCn+EB6KPZ XDKhsbPGz+uBJyr0+I2daelE9Y03DYF5WOFDYmL3XZkzqlPKcnLRA0BYW+Oe5pIV zs9qsaMSxkQtkWWXdRm+A0s1rc5GXTWigr0k6WX1RqeR+YNY4na/i+UxtnhSLte6 KpKxcA4gAqcuB6AR9ruHS1MOHL8X84/RvoM+61zeVsoDXVLbYWhWkIYU8C8Q0R2Q PKZ6ln/eQgtUk55sXTIEbxGmUHpjG4vIhIBo6qh2d5SO1gfYjId8h8gPM9hWSW6b rUcCDQAEZIwryvMDWTaw5OxPtSCtxkHagXyhP0kGhB5mt9Ne9iOmwtZh -----END CERTIFICATE-----Generated at Tue May 12 22:03:06 2026 by rpki-client