$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer File: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer (raw, json) Hash identifier: PUO9t8TFjLF+mlvng1yp87Efq+XjkDnchtKgKLcBK+4= Subject key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7385EDBD79C92ACEF4F807DE8489E01398D452C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:26:11 +0000 Certificate not after: Sun 02 May 2027 00:31:11 +0000 Subordinate resources: IP: 103.124.196.0/22 IP: 2403:e440::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:85:ed:bd:79:c9:2a:ce:f4:f8:07:de:84:89:e0:13:98:d4:52:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:26:11 2026 GMT Not After : May 2 00:31:11 2027 GMT Subject: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:8a:e7:17:e3:5f:04:8f:59:5b:ec:33:9b: f7:d7:30:39:98:86:8c:fc:e0:25:13:cc:84:54:94: 73:65:f1:63:6c:6b:6a:c5:fb:95:64:ce:9b:63:0a: a1:48:91:97:5c:ea:34:d6:ec:24:4a:13:8e:76:fb: 92:84:0a:94:dc:50:30:97:2c:e7:74:c7:c1:86:bf: 64:19:52:74:af:23:35:e3:03:c9:96:51:45:82:89: 49:9a:d6:9e:0e:e3:55:42:cf:d0:93:30:12:9d:86: 36:20:20:4e:2d:2b:c5:ef:52:ff:b2:9f:71:1f:19: 20:8e:fd:ea:62:1c:9c:bd:31:30:fc:b1:8e:e4:90: da:d8:b4:75:9a:e4:07:f6:b2:5d:52:e9:95:6a:c0: a8:77:6b:a7:68:a6:8e:b6:c3:20:9c:e8:19:56:71: 0d:c3:61:ba:1f:d4:81:30:8f:8e:d6:01:c1:36:00: 57:36:59:aa:ec:d9:7e:d9:05:d0:94:cf:61:f4:23: f8:f2:4d:60:d9:6e:11:87:af:da:61:76:12:a1:b7: 24:61:f2:f5:dd:cf:c9:93:17:94:40:ae:66:d4:65: 0a:5b:e6:b5:33:19:e0:f7:93:60:ac:db:b3:3a:e7: 2b:d7:29:ca:8b:1c:45:0a:9c:cc:c7:34:2b:67:db: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.196.0/22 IPv6: 2403:e440::/32 Signature Algorithm: sha256WithRSAEncryption 2e:5b:0e:c2:13:25:59:ce:d4:6b:e2:37:a9:7c:ce:41:26:b3: ac:36:7d:a5:e8:3f:be:c7:1f:0e:a0:b9:d4:5d:cf:6e:f1:08: a9:90:7f:98:30:c7:b4:c7:d3:ad:f9:e0:7a:3a:58:2a:5c:67: db:60:ec:13:a0:97:75:41:48:11:f7:73:fd:05:b7:96:c6:cc: 47:d7:ae:4e:f1:69:12:4d:56:e4:87:4b:dc:40:81:17:e2:e6: b7:93:d6:0c:aa:49:71:4a:d1:dd:db:cc:0f:67:40:d2:13:e5: da:28:e2:c0:37:b9:ee:cb:87:9a:45:7a:da:f6:9a:73:08:9e: e9:cd:99:c3:c5:cf:a4:6d:07:e2:dd:a7:9e:b4:b1:58:2d:15: ef:df:bb:9e:f6:c9:a4:ab:45:c9:ab:76:a2:f4:9e:19:bd:7e: 12:e3:14:9b:25:4e:5a:65:b2:29:0c:13:38:fe:14:eb:6e:fd: 97:3a:6b:ef:e4:8e:9b:71:d3:5f:77:cf:29:14:3a:7c:c4:bd: da:b6:9c:85:10:fa:18:b9:7f:ff:92:64:e8:49:97:12:ef:e0: fd:3a:87:2a:3e:92:6d:7a:a7:9d:40:33:5c:07:54:fe:30:63: 21:3a:01:40:57:ba:45:b4:b7:9c:cb:70:04:ef:f5:15:0f:92: fb:ec:cf:d3 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUc4XtvXnJKs70+AfehIngE5jUUsgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjYxMVoX DTI3MDUwMjAwMzExMVowMzExMC8GA1UEAxMoODUzRUREN0FCM0VGOUExM0EwNzc5 RjI2MTI3ODZGNkQyRDdDMDhCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3xiucX418Ej1lb7DOb99cwOZiGjPzgJRPMhFSUc2XxY2xrasX7lWTOm2MK oUiRl1zqNNbsJEoTjnb7koQKlNxQMJcs53THwYa/ZBlSdK8jNeMDyZZRRYKJSZrW ng7jVULP0JMwEp2GNiAgTi0rxe9S/7KfcR8ZII796mIcnL0xMPyxjuSQ2ti0dZrk B/ayXVLplWrAqHdrp2imjrbDIJzoGVZxDcNhuh/UgTCPjtYBwTYAVzZZquzZftkF 0JTPYfQj+PJNYNluEYev2mF2EqG3JGHy9d3PyZMXlECuZtRlClvmtTMZ4PeTYKzb szrnK9cpyoscRQqczMc0K2fbezcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIU+3Xqz75oToHefJhJ4b20tfAi+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ1ZGZmOWIzLTkwNDEtNGRkNi1iN2FiLTAyMDYwZDY1ZDA5YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NWRmZjli My05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC84NTNFREQ3QUIzRUY5QTEz QTA3NzlGMjYxMjc4NkY2RDJEN0MwOEJFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3zEMA0EAgACMAcDBQAkA+RAMA0GCSqGSIb3DQEBCwUAA4IBAQAuWw7CEyVZ ztRr4jepfM5BJrOsNn2l6D++xx8OoLnUXc9u8QipkH+YMMe0x9Ot+eB6OlgqXGfb YOwToJd1QUgR93P9BbeWxsxH165O8WkSTVbkh0vcQIEX4ua3k9YMqklxStHd28wP Z0DSE+XaKOLAN7nuy4eaRXra9ppzCJ7pzZnDxc+kbQfi3aeetLFYLRXv37ue9smk q0XJq3ai9J4ZvX4S4xSbJU5aZbIpDBM4/hTrbv2XOmvv5I6bcdNfd88pFDp8xL3a tpyFEPoYuX//kmToSZcS7+D9OocqPpJteqedQDNcB1T+MGMhOgFAV7pFtLecy3AE 7/UVD5L77M/T -----END CERTIFICATE-----Generated at Tue May 12 22:03:43 2026 by rpki-client