$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer File: 873409842DEE948D3DE05C618194C87A259E04BF.cer (raw, json) Hash identifier: K+YvpnDd1STtUqgVoXyZtDQuJ9drLmZIWlzbDbytN5I= Subject key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7E63A936D35590FB98FA013AE41B79E8764A4982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:15:39 +0000 Certificate not after: Sun 02 May 2027 01:20:39 +0000 Subordinate resources: IP: 103.153.246.0/23 IP: 2406:4ec0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:63:a9:36:d3:55:90:fb:98:fa:01:3a:e4:1b:79:e8:76:4a:49:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:15:39 2026 GMT Not After : May 2 01:20:39 2027 GMT Subject: CN=873409842DEE948D3DE05C618194C87A259E04BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:52:f2:98:c8:ea:09:ce:6a:ae:c2:fc:d5:41: 48:49:17:a0:52:a8:21:6e:bb:b9:e9:9e:5d:47:19: 07:c9:b6:4c:3b:6b:fa:69:50:79:17:da:cb:a3:e5: b1:c0:78:26:ab:2e:ac:b3:df:63:a1:69:ff:95:88: ed:f1:f6:61:38:43:5f:98:5f:8a:28:ba:cb:b9:44: bd:bd:2b:12:b3:a1:4a:d0:d8:5b:cd:3a:76:19:aa: 42:f2:3d:1a:59:6c:c1:16:f5:77:c7:dc:fd:e7:e6: 3b:ae:48:23:07:03:4a:b3:b7:de:b7:1b:a0:ca:55: 7f:b2:a8:37:27:b1:50:59:8e:c2:8c:e4:f6:0f:c3: 73:1f:e4:90:94:5d:49:0e:fa:e4:5a:2b:31:b9:28: 8e:f9:5d:bd:8b:fe:6d:7d:65:ae:8c:c3:96:1e:f7: 28:07:0a:a9:f2:a6:2a:83:fe:9f:fc:fb:ef:67:7c: 23:68:c8:0a:60:05:33:2a:78:43:45:ce:30:ef:1d: 25:a6:44:17:ac:ce:b1:fb:5d:2e:03:95:1b:b7:df: aa:95:55:b2:4c:e2:b6:5a:6e:76:41:a5:fd:76:df: 0b:8e:a7:26:e8:8a:c8:26:73:ed:7c:5f:85:f3:ad: 3e:20:cb:20:4e:f3:32:a2:7c:8f:13:49:ad:77:33: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.246.0/23 IPv6: 2406:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 91:a4:11:fa:a9:34:f4:ae:bf:d6:93:13:6e:02:25:28:8a:35: 3c:09:43:09:bc:25:52:10:79:2e:ff:47:37:06:c6:31:55:38: d3:84:8d:59:2d:2d:3e:62:d8:6e:f8:f6:80:20:81:e3:2d:c9: ea:d8:dd:e9:75:82:6a:9c:81:dd:08:f9:98:7d:76:78:5e:d6: ef:be:2b:fe:4a:50:82:61:24:90:50:12:e9:2b:66:b6:29:da: 1a:8b:9d:62:07:5e:4e:24:74:cb:d0:08:46:3e:6c:bf:8b:fb: e2:4b:d6:90:a6:e2:34:a4:25:3f:28:36:69:5e:26:ae:ca:dd: e7:b9:45:3c:64:06:ee:b2:64:8d:f9:00:34:ba:a4:a4:c0:6d: ec:3e:ae:81:1b:9a:c1:68:8d:ca:39:9d:5f:d5:d5:9d:6f:4a: 2d:f1:c8:0b:a9:bd:1b:6e:01:b6:b0:5a:9d:5a:0b:4f:ea:e7: a4:28:07:51:4b:26:c8:cb:10:2c:44:03:b9:07:b8:da:90:ad: 0a:b2:69:90:1a:c4:b7:9a:b9:b9:5a:bd:2a:12:1e:5a:86:54: e5:4b:2a:85:e4:3f:4c:af:fb:2c:5b:c1:b3:13:d1:b2:22:83: ad:a8:96:9e:11:8a:80:b7:fd:e8:06:3c:14:cb:5b:69:98:b8: 3f:11:aa:2c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUfmOpNtNVkPuY+gE65Bt56HZKSYIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTUzOVoX DTI3MDUwMjAxMjAzOVowMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1 QzYxODE5NEM4N0EyNTlFMDRCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPlS8pjI6gnOaq7C/NVBSEkXoFKoIW67uemeXUcZB8m2TDtr+mlQeRfay6Pl scB4JqsurLPfY6Fp/5WI7fH2YThDX5hfiii6y7lEvb0rErOhStDYW806dhmqQvI9 GllswRb1d8fc/efmO65IIwcDSrO33rcboMpVf7KoNyexUFmOwozk9g/Dcx/kkJRd SQ765ForMbkojvldvYv+bX1lrozDlh73KAcKqfKmKoP+n/z772d8I2jICmAFMyp4 Q0XOMO8dJaZEF6zOsftdLgOVG7ffqpVVskzitlpudkGl/XbfC46nJuiKyCZz7Xxf hfOtPiDLIE7zMqJ8jxNJrXczdlMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIc0CYQt7pSNPeBcYYGUyHolngS/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhkY2Y0MDY3LWE2OWQtNDkwOC1iZWU4LWI0NjU1YmRjMTVmOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ZGNmNDA2 Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC84NzM0MDk4NDJERUU5NDhE M0RFMDVDNjE4MTk0Qzg3QTI1OUUwNEJGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5n2MA0EAgACMAcDBQAkBk7AMA0GCSqGSIb3DQEBCwUAA4IBAQCRpBH6qTT0 rr/WkxNuAiUoijU8CUMJvCVSEHku/0c3BsYxVTjThI1ZLS0+Ythu+PaAIIHjLcnq 2N3pdYJqnIHdCPmYfXZ4Xtbvviv+SlCCYSSQUBLpK2a2Kdoai51iB15OJHTL0AhG Pmy/i/viS9aQpuI0pCU/KDZpXiauyt3nuUU8ZAbusmSN+QA0uqSkwG3sPq6BG5rB aI3KOZ1f1dWdb0ot8cgLqb0bbgG2sFqdWgtP6uekKAdRSybIyxAsRAO5B7jakK0K smmQGsS3mrm5Wr0qEh5ahlTlSyqF5D9Mr/ssW8GzE9GyIoOtqJaeEYqAt/3oBjwU y1tpmLg/Eaos -----END CERTIFICATE-----Generated at Tue May 12 22:32:16 2026 by rpki-client