$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer File: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer (raw, json) Hash identifier: sFVfSLJZJ+8nK0C0r2RS9AwzQ3BzklGZGzDe/bxhZ4s= Subject key identifier: A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 464C94CF7A346FEA3AF1691B29BDD5966C053DE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:49:34 +0000 Certificate not after: Sat 01 May 2027 23:54:34 +0000 Subordinate resources: IP: 103.250.129.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4c:94:cf:7a:34:6f:ea:3a:f1:69:1b:29:bd:d5:96:6c:05:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:49:34 2026 GMT Not After : May 1 23:54:34 2027 GMT Subject: CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:38:8f:40:68:8f:22:eb:5d:94:5c:f4:f5: 99:c0:9e:9a:0d:bb:e6:a0:52:d7:03:67:65:28:ca: 84:c1:9f:38:fb:12:a7:66:4b:80:18:88:38:d9:95: 0d:f9:bd:40:a3:02:51:19:de:f5:9c:6e:9f:b3:f8: 76:63:59:f3:15:8a:be:13:0c:a5:04:bb:b9:b8:a7: da:ab:9b:19:f4:df:70:80:35:62:9f:30:ff:53:8d: c1:2d:16:31:87:48:ef:b4:dd:01:22:c8:2b:ed:6b: b4:dc:f8:3d:44:ec:05:57:ee:31:94:d1:d9:b7:7c: 0c:9a:b1:94:c3:eb:65:6e:41:5d:df:7c:b2:4e:59: c0:1b:a7:51:0f:7b:51:e4:9b:48:0d:19:ff:b1:69: ac:f4:4e:6a:6f:f3:4a:25:34:d9:e6:b7:b4:67:8b: f9:c5:e5:52:52:ff:2f:a5:c6:31:77:38:ba:72:15: 2d:a7:57:92:33:63:38:51:69:33:02:a7:39:97:d3: fe:c0:a9:fa:32:0b:0a:3e:f8:be:92:15:d8:ce:37: f1:c8:0b:0a:db:53:ab:7e:cc:7a:79:09:b1:52:46: 86:f0:4a:2a:0c:05:5c:a6:b9:9b:ba:25:a0:42:55: f3:92:93:44:a0:79:5a:53:64:30:ca:3e:2c:af:41: 78:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.129.0/24 Signature Algorithm: sha256WithRSAEncryption 50:d4:6f:5b:8b:84:b2:f3:a9:d3:5a:ad:59:8e:88:58:cd:d2: 09:83:fd:22:79:b1:d8:49:dd:ce:94:de:10:1e:76:5d:0b:4a: 20:d0:af:ab:66:a3:66:6e:3a:d9:e3:d5:87:91:cd:1b:8c:16: e9:8c:d2:fd:e8:46:7e:c8:b9:24:e7:01:0c:20:a0:f2:c6:a5: 44:5a:a8:10:6e:df:b8:68:12:a1:5f:69:a5:a3:d2:d5:1c:2e: 6e:45:98:22:e8:6c:b2:c4:2d:a8:a5:fa:b0:03:40:21:96:6a: 0f:fb:ea:dd:22:e1:89:77:64:16:c4:23:16:77:63:6f:f1:27: 7f:aa:2c:c0:86:b5:f9:b5:19:3b:48:3f:39:59:e3:c3:a6:f2: d0:5d:06:1e:b3:b6:76:5f:6e:4d:af:10:d8:30:bf:5b:64:28: 34:53:11:26:5c:cd:71:14:6b:25:66:d8:d1:6a:b6:53:fc:40: fa:2b:bb:80:21:53:fd:24:aa:bd:a2:16:18:1f:33:93:fa:49: 55:7e:c2:2f:46:b8:2a:f9:5b:38:fb:ed:be:6a:01:7c:5a:37: 74:e5:4b:5c:51:78:23:dc:12:c9:38:cd:e1:d6:15:c5:27:13: cf:a7:2c:ae:e2:a7:48:b1:fe:cf:20:0d:7e:03:8a:41:a1:a1: 38:7e:2a:18 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURkyUz3o0b+o68WkbKb3VlmwFPeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDkzNFoX DTI3MDUwMTIzNTQzNFowMzExMC8GA1UEAxMoQTI3NkIwOERBRTdGQTI1REUxQTAz RkI3MTJGNTc4MjFFQUZFRjEyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuZOI9AaI8i612UXPT1mcCemg275qBS1wNnZSjKhMGfOPsSp2ZLgBiIONmV Dfm9QKMCURne9Zxun7P4dmNZ8xWKvhMMpQS7ubin2qubGfTfcIA1Yp8w/1ONwS0W MYdI77TdASLIK+1rtNz4PUTsBVfuMZTR2bd8DJqxlMPrZW5BXd98sk5ZwBunUQ97 UeSbSA0Z/7FprPROam/zSiU02ea3tGeL+cXlUlL/L6XGMXc4unIVLadXkjNjOFFp MwKnOZfT/sCp+jILCj74vpIV2M438cgLCttTq37MenkJsVJGhvBKKgwFXKa5m7ol oEJV85KTRKB5WlNkMMo+LK9BeLkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKJ2sI2uf6Jd4aA/txL1eCHq/vEgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmYTgxZTZlLTRiMTYtNGI2Mi04ZjE4LTUyODkyZTU0YjkwZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZmE4MWU2 ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC9BMjc2QjA4REFFN0ZBMjVE RTFBMDNGQjcxMkY1NzgyMUVBRkVGMTIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ/qBMA0GCSqGSIb3DQEBCwUAA4IBAQBQ1G9bi4Sy86nTWq1ZjohYzdIJg/0i ebHYSd3OlN4QHnZdC0og0K+rZqNmbjrZ49WHkc0bjBbpjNL96EZ+yLkk5wEMIKDy xqVEWqgQbt+4aBKhX2mlo9LVHC5uRZgi6GyyxC2opfqwA0AhlmoP++rdIuGJd2QW xCMWd2Nv8Sd/qizAhrX5tRk7SD85WePDpvLQXQYes7Z2X25NrxDYML9bZCg0UxEm XM1xFGslZtjRarZT/ED6K7uAIVP9JKq9ohYYHzOT+klVfsIvRrgq+Vs4++2+agF8 Wjd05UtcUXgj3BLJOM3h1hXFJxPPpyyu4qdIsf7PIA1+A4pBoaE4fioY -----END CERTIFICATE-----Generated at Tue May 12 22:15:52 2026 by rpki-client