$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer (raw, json) Hash identifier: 19Lep9PJxj5+EIkqwB8wjQvPWpM7dBXMVkoqgdG1Vx4= Subject key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7218AA7914C424605D0BE84E86BD7737FD9D0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:29:32 +0000 Certificate not after: Sun 02 May 2027 00:34:32 +0000 Subordinate resources: IP: 103.178.146.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:18:aa:79:14:c4:24:60:5d:0b:e8:4e:86:bd:77:37:fd:9d:05:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:29:32 2026 GMT Not After : May 2 00:34:32 2027 GMT Subject: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:34:bd:cf:2c:73:de:c4:aa:06:ae:17:81: 7e:19:90:ea:7e:14:34:94:d3:62:ba:51:59:95:9e: 90:5a:7d:5d:1e:d5:f0:09:80:87:1d:fa:a2:17:87: 7e:3d:1b:84:b0:82:b9:43:88:ff:8d:05:90:03:3e: 56:34:eb:35:ea:83:f2:e3:d9:73:c5:70:a3:fc:d6: 19:a5:e0:c7:34:e2:f6:a8:a6:66:08:d3:81:ef:36: 3f:f2:b4:e3:49:48:41:89:ad:f8:7b:01:75:47:d5: 8e:39:7a:fb:91:39:c3:62:f1:a3:38:cf:aa:df:0c: dd:df:1e:cb:3c:50:16:c4:9f:3f:25:aa:21:91:aa: 3f:b0:fe:20:b5:c0:41:8b:3c:85:29:c3:65:b7:18: a3:e7:3a:37:b5:ac:27:b6:12:f4:b5:d0:97:da:73: d1:a7:3e:b1:c6:5c:a1:fe:09:54:2b:50:70:39:79: 21:49:76:65:9b:af:e0:89:80:0e:b7:f3:d1:c4:77: 45:4c:80:dd:7d:8c:2c:67:a3:be:dd:8c:25:2c:f3: 60:1f:88:a3:83:44:be:6b:aa:c1:01:77:cd:96:7c: 28:24:f5:3b:02:06:87:00:97:e5:13:e1:6d:64:09: 0a:97:21:51:12:f4:8f:92:26:4b:19:f9:40:df:3e: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.146.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:39:87:b8:97:3a:f7:58:b3:31:f6:44:f0:d7:48:e4:1a:87: 3b:ec:2e:b2:cb:39:22:b4:a2:9e:e5:e3:a6:b2:46:a7:a9:b0: 3f:ec:fc:29:24:24:ad:b8:62:2d:26:a5:db:2a:cc:5a:64:8a: c5:79:16:cd:b8:74:7e:c3:93:9e:4c:39:dc:b3:52:db:5b:a6: fb:12:bc:fe:f4:ce:b8:7b:04:8f:1b:95:45:27:82:26:28:09: c5:43:ab:11:cf:4d:b8:f5:b3:28:a1:10:d7:c4:66:3e:97:dd: a8:ed:aa:ee:e8:ad:2b:31:c4:9a:b2:af:ba:98:fe:58:c4:01: d8:c9:15:fa:74:7b:2e:4d:67:a3:f8:ce:53:15:ee:16:3f:75: a9:2c:02:53:08:ba:60:6a:2a:88:de:72:7f:4e:b3:ae:3a:d8: 2d:52:0a:bd:e1:98:f9:ce:7f:e6:75:d7:58:39:62:e9:5d:d5: 27:81:f8:6b:86:76:31:a5:aa:f9:49:8c:54:69:98:13:6a:96: 24:b1:e7:a9:e8:ec:c1:1c:ff:9c:a8:13:a6:68:ea:5e:da:f8: 72:3b:32:89:87:fe:0e:11:91:08:e1:8a:b1:3e:0c:43:66:0a: fc:38:11:01:cc:5c:bc:f3:bb:21:20:f2:19:6a:34:b6:e7:68: b0:d5:00:2c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUchiqeRTEJGBdC+hOhr13N/2dBXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjkzMloX DTI3MDUwMjAwMzQzMlowMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVE RjRCMzNEQTNGMzE1MDY5OEQ1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNuNL3PLHPexKoGrheBfhmQ6n4UNJTTYrpRWZWekFp9XR7V8AmAhx36oheH fj0bhLCCuUOI/40FkAM+VjTrNeqD8uPZc8Vwo/zWGaXgxzTi9qimZgjTge82P/K0 40lIQYmt+HsBdUfVjjl6+5E5w2LxozjPqt8M3d8eyzxQFsSfPyWqIZGqP7D+ILXA QYs8hSnDZbcYo+c6N7WsJ7YS9LXQl9pz0ac+scZcof4JVCtQcDl5IUl2ZZuv4ImA Drfz0cR3RUyA3X2MLGejvt2MJSzzYB+Io4NEvmuqwQF3zZZ8KCT1OwIGhwCX5RPh bWQJCpchURL0j5ImSxn5QN8+PQ0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJSqDupICsMwA2XfSzPaPzFQaY1VMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRiYWI4MDQyLTBlMWMtNDNiMS1iNzAzLTYzNDM4YmUyMzI1Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmFiODA0 Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC85NEFBMEVFQTQ4MEFDMzMw MDM2NURGNEIzM0RBM0YzMTUwNjk4RDU1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7KSMA0GCSqGSIb3DQEBCwUAA4IBAQAtOYe4lzr3WLMx9kTw10jkGoc77C6y yzkitKKe5eOmskanqbA/7PwpJCStuGItJqXbKsxaZIrFeRbNuHR+w5OeTDncs1Lb W6b7Erz+9M64ewSPG5VFJ4ImKAnFQ6sRz0249bMooRDXxGY+l92o7aru6K0rMcSa sq+6mP5YxAHYyRX6dHsuTWej+M5TFe4WP3WpLAJTCLpgaiqI3nJ/TrOuOtgtUgq9 4Zj5zn/mdddYOWLpXdUngfhrhnYxpar5SYxUaZgTapYkseep6OzBHP+cqBOmaOpe 2vhyOzKJh/4OEZEI4YqxPgxDZgr8OBEBzFy887shIPIZajS252iw1QAs -----END CERTIFICATE-----Generated at Tue May 12 22:52:34 2026 by rpki-client