$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.cer (raw, json) Hash identifier: W5/9qoYLmhExou6eGp2luZ0KVIK9C7vvRj5OqSvuCDQ= Subject key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7BB39B071AD125469252049890BA881F05AE2501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:40 +0000 Certificate not after: Sun 02 May 2027 01:00:40 +0000 Subordinate resources: IP: 103.189.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b3:9b:07:1a:d1:25:46:92:52:04:98:90:ba:88:1f:05:ae:25:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:40 2026 GMT Not After : May 2 01:00:40 2027 GMT Subject: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:69:f5:42:d0:31:42:fa:63:8c:38:c4:46: da:d7:7a:a0:e3:9f:96:c6:41:06:da:7c:33:c5:20: df:9f:73:93:13:bd:ef:97:cd:ce:9e:23:32:9c:f1: cd:7e:40:c3:f4:91:19:a7:7a:29:fc:da:b5:c1:63: 0c:23:63:19:31:90:6d:d1:3c:ff:15:45:21:b1:5e: d3:eb:c1:b8:21:7f:ab:9e:d0:4c:19:16:f5:64:2e: c9:3c:15:23:41:f6:cf:f9:f4:d8:0f:60:d5:3a:17: 97:ae:e1:0f:af:63:3f:ee:5e:98:d7:94:70:0c:49: 48:8f:3e:a3:4a:6c:0b:20:97:53:e8:50:e9:78:62: b0:f3:93:40:0d:6a:ec:af:9b:26:42:0f:ad:10:94: bc:62:e8:5a:8d:20:06:1e:f5:71:95:87:c8:14:a6: 30:77:36:20:22:0d:15:b4:2f:e1:bd:c4:57:63:b8: da:a4:e2:0f:d6:54:db:6a:eb:65:5e:47:cf:46:83: 46:81:e4:16:a9:53:fe:23:e0:80:8e:8b:9a:05:09: e6:76:16:d7:d1:b0:bb:50:84:ce:d5:9a:83:de:71: b9:c8:6c:28:c3:ae:9a:14:d0:8a:66:b3:85:eb:b1: 43:65:9f:6c:e8:ad:56:5c:19:af:00:0b:1d:8f:6a: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.116.0/23 Signature Algorithm: sha256WithRSAEncryption 16:53:f6:fd:b8:a6:e9:a2:ee:2b:6f:7d:63:71:41:17:4b:79: 07:67:13:7c:69:17:94:9e:d2:9a:ce:58:9b:1c:e6:e7:3f:f9: 29:fc:dc:9e:ab:1d:ec:85:10:c7:83:d6:8e:d9:3f:ad:db:b2: ac:48:23:38:27:bd:81:98:93:14:c9:78:3b:dd:92:60:93:b3: b1:58:c0:ce:3e:2e:fe:de:f5:ad:07:88:4e:be:42:6b:6a:4a: 10:f8:b6:31:7b:ab:d9:78:0a:31:4b:30:32:72:b8:e4:01:e8: 61:d2:7b:a4:b8:8a:be:52:58:e8:43:d5:3b:e9:11:28:58:a6: 15:40:52:18:5e:57:4f:c8:2a:c0:df:96:8d:38:a3:4e:a2:63: 56:d1:c6:5f:ed:e3:e9:86:91:cf:26:14:4e:c5:60:ae:10:f9: fa:02:87:02:1e:8a:93:ec:b0:a9:09:51:7a:41:52:58:30:be: 88:37:f7:0b:8d:d1:4d:15:e4:f7:a3:04:2f:c8:0e:57:29:19: fa:e1:51:6f:4a:bd:cb:64:6c:2e:c1:b5:de:22:1a:f3:95:d7: bc:6b:f7:3d:67:92:7d:23:97:88:08:52:f4:bb:9c:51:06:db: c0:60:7f:b6:4e:28:3a:56:3e:90:47:18:28:5e:f1:cb:a3:2e: 9c:c4:91:aa -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUe7ObBxrRJUaSUgSYkLqIHwWuJQEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTU0MFoX DTI3MDUwMjAxMDA0MFowMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYz OUU2N0MwMkZBNzhBMjE5Nzk2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOR4afVC0DFC+mOMOMRG2td6oOOflsZBBtp8M8Ug359zkxO975fNzp4jMpzx zX5Aw/SRGad6KfzatcFjDCNjGTGQbdE8/xVFIbFe0+vBuCF/q57QTBkW9WQuyTwV I0H2z/n02A9g1ToXl67hD69jP+5emNeUcAxJSI8+o0psCyCXU+hQ6XhisPOTQA1q 7K+bJkIPrRCUvGLoWo0gBh71cZWHyBSmMHc2ICINFbQv4b3EV2O42qTiD9ZU22rr ZV5Hz0aDRoHkFqlT/iPggI6LmgUJ5nYW19Gwu1CEztWag95xuchsKMOumhTQimaz heuxQ2WfbOitVlwZrwALHY9qeFsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIcuMZ+AC6LGtO855nwC+niiGXlvMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzczMDVhYjMwLTU2NTMtNDJiYy05YzNmLWFhZjU2N2VhZTcwMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MzA1YWIz MC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC84NzJFMzE5RjgwMEJBMkM2 QjRFRjM5RTY3QzAyRkE3OEEyMTk3OTZGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ710MA0GCSqGSIb3DQEBCwUAA4IBAQAWU/b9uKbpou4rb31jcUEXS3kHZxN8 aReUntKazlibHObnP/kp/Nyeqx3shRDHg9aO2T+t27KsSCM4J72BmJMUyXg73ZJg k7OxWMDOPi7+3vWtB4hOvkJrakoQ+LYxe6vZeAoxSzAycrjkAehh0nukuIq+Uljo Q9U76REoWKYVQFIYXldPyCrA35aNOKNOomNW0cZf7ePphpHPJhROxWCuEPn6AocC HoqT7LCpCVF6QVJYML6IN/cLjdFNFeT3owQvyA5XKRn64VFvSr3LZGwuwbXeIhrz lde8a/c9Z5J9I5eICFL0u5xRBtvAYH+2Tig6Vj6QRxgoXvHLoy6cxJGq -----END CERTIFICATE-----Generated at Tue May 12 22:33:13 2026 by rpki-client