$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer File: A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer (raw, json) Hash identifier: Qv2ExBeCwgNfiRH+AQ1/yus6I1JwH8uFCfqbb1ezpzo= Subject key identifier: A5:0D:32:CA:0D:93:19:C5:3E:E2:32:2D:BF:EE:15:84:84:2A:B3:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F1B0D6DB90E2D9101BB3ABAC1706F1565DCBA1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:41 +0000 Certificate not after: Sun 02 May 2027 01:45:41 +0000 Subordinate resources: IP: 103.169.192.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1b:0d:6d:b9:0e:2d:91:01:bb:3a:ba:c1:70:6f:15:65:dc:ba:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:41 2026 GMT Not After : May 2 01:45:41 2027 GMT Subject: CN=A50D32CA0D9319C53EE2322DBFEE1584842AB3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:9e:fd:97:f6:42:78:56:2d:9c:da:e6:b1: 3a:47:c2:4e:78:8e:f5:1e:e0:57:2e:a8:70:fb:5b: 8c:a8:76:40:26:55:54:29:ae:ba:25:a5:4a:c3:80: bd:0f:f9:22:1f:18:8c:66:9a:09:0f:88:25:c2:36: 81:2e:89:87:e4:64:d6:77:61:39:ca:af:4b:c2:7a: d8:3d:22:d6:83:2f:8e:ac:e1:c4:66:2d:91:29:94: ae:7a:2d:36:47:4c:cc:1b:05:60:11:a9:42:4b:51: 60:50:03:51:fb:cd:0a:f2:90:87:dd:6e:2a:71:96: a5:4d:bf:b8:ee:ba:08:63:6a:a8:b9:f7:30:fc:53: fa:d4:6a:8e:38:a7:2d:58:fb:da:46:02:00:84:e3: 21:1a:03:36:5f:fe:d0:2a:b8:2a:d9:83:e7:51:79: 9d:7f:55:aa:01:d3:40:0f:1e:2c:91:93:01:dc:ae: 4b:6a:4b:e5:b4:7e:9e:ee:02:b6:94:6a:83:cd:1f: ba:47:32:7f:ff:3a:9b:ee:b4:a8:6d:84:7c:39:10: 5a:57:1c:a5:6d:a9:2b:be:b3:65:ef:87:f8:1e:a6: 14:43:98:7d:21:f0:7b:65:41:5a:67:aa:4a:1f:93: 58:e4:bb:99:3c:e8:63:9e:6e:40:fa:d1:bb:94:75: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:0D:32:CA:0D:93:19:C5:3E:E2:32:2D:BF:EE:15:84:84:2A:B3:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.192.0/23 Signature Algorithm: sha256WithRSAEncryption 26:08:cf:df:95:c3:ba:7d:81:c4:c4:a4:47:aa:67:74:1c:3f: 45:c4:ad:a7:d0:77:94:6d:e3:21:58:27:e9:12:ea:b5:8b:d8: 68:e3:b8:f1:dd:f7:17:33:fc:b0:25:39:8b:70:2f:c6:98:cc: 7c:70:4c:ab:a0:72:f5:2a:03:fc:7e:22:d3:c9:6d:fb:0b:39: 55:95:2a:55:74:93:d0:99:3f:96:17:96:bb:63:73:0e:11:90: 1d:a1:9b:03:22:2e:0c:10:22:de:97:93:b3:d5:ea:82:a8:90: 10:2d:da:7e:74:d4:b7:00:e3:97:e2:5f:28:cc:e6:a4:d2:a3: 6f:41:6c:d2:ad:a3:9d:92:ce:1d:5e:c0:d5:27:31:96:74:f1: ed:03:af:f8:04:7c:7d:24:9a:49:d6:11:93:f6:25:1a:f6:6e: 2a:61:5e:98:82:c5:7a:19:94:75:87:de:c2:96:41:21:ec:6e: 9c:e6:78:1b:77:35:36:3f:95:ff:9b:43:f7:d0:66:c7:de:43: 26:ac:b5:f6:ff:a5:6d:13:f2:23:98:c3:0e:2d:90:6c:b9:2f: c1:d9:5e:53:7c:43:b0:62:27:d9:81:2f:ef:ea:62:d2:9f:17: 44:2d:30:69:f0:cc:e2:b8:76:69:54:5b:9f:78:04:34:5f:0b: 83:9e:d7:c9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfxsNbbkOLZEBuzq6wXBvFWXcuh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDA0MVoX DTI3MDUwMjAxNDU0MVowMzExMC8GA1UEAxMoQTUwRDMyQ0EwRDkzMTlDNTNFRTIz MjJEQkZFRTE1ODQ4NDJBQjNBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxCnv2X9kJ4Vi2c2uaxOkfCTniO9R7gVy6ocPtbjKh2QCZVVCmuuiWlSsOA vQ/5Ih8YjGaaCQ+IJcI2gS6Jh+Rk1ndhOcqvS8J62D0i1oMvjqzhxGYtkSmUrnot NkdMzBsFYBGpQktRYFADUfvNCvKQh91uKnGWpU2/uO66CGNqqLn3MPxT+tRqjjin LVj72kYCAITjIRoDNl/+0Cq4KtmD51F5nX9VqgHTQA8eLJGTAdyuS2pL5bR+nu4C tpRqg80fukcyf/86m+60qG2EfDkQWlccpW2pK76zZe+H+B6mFEOYfSHwe2VBWmeq Sh+TWOS7mTzoY55uQPrRu5R1BukCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKUNMsoNkxnFPuIyLb/uFYSEKrOmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I0YTAyZDM3LTNiOWQtNDUzYS04YzgxLTMyOGU1NDAxNDFmZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNGEwMmQz Ny0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9BNTBEMzJDQTBEOTMxOUM1 M0VFMjMyMkRCRkVFMTU4NDg0MkFCM0E2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6nAMA0GCSqGSIb3DQEBCwUAA4IBAQAmCM/flcO6fYHExKRHqmd0HD9FxK2n 0HeUbeMhWCfpEuq1i9ho47jx3fcXM/ywJTmLcC/GmMx8cEyroHL1KgP8fiLTyW37 CzlVlSpVdJPQmT+WF5a7Y3MOEZAdoZsDIi4MECLel5Oz1eqCqJAQLdp+dNS3AOOX 4l8ozOak0qNvQWzSraOdks4dXsDVJzGWdPHtA6/4BHx9JJpJ1hGT9iUa9m4qYV6Y gsV6GZR1h97ClkEh7G6c5ngbdzU2P5X/m0P30GbH3kMmrLX2/6VtE/IjmMMOLZBs uS/B2V5TfEOwYifZgS/v6mLSnxdELTBp8MziuHZpVFufeAQ0XwuDntfJ -----END CERTIFICATE-----Generated at Wed May 13 01:07:21 2026 by rpki-client