$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer (raw, json) Hash identifier: soVf5FEuFHsWs9TsB0OG0cZBGu/apk8R1K3DS8wjInE= Subject key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 152599476164216D933673D4A1A5BADCC19BD5AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:47:29 +0000 Certificate not after: Sat 01 May 2027 23:52:29 +0000 Subordinate resources: IP: 103.125.12.0/22 IP: 2001:df7:1f00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:25:99:47:61:64:21:6d:93:36:73:d4:a1:a5:ba:dc:c1:9b:d5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:47:29 2026 GMT Not After : May 1 23:52:29 2027 GMT Subject: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:97:88:95:37:e5:e0:ec:bf:dd:25:d1:ad: a6:72:e0:96:54:6f:28:c8:92:d1:4b:f0:bd:01:1d: 1e:b7:b6:87:33:c1:55:8e:88:ee:e0:54:a8:cf:26: 9b:3d:54:18:43:2f:19:4d:f7:e7:d4:ac:3a:41:b5: 98:af:e2:6b:cb:52:48:2d:76:94:a4:15:9e:cd:6a: 35:32:ac:54:7b:60:7c:ee:5f:b2:bb:bf:b9:2e:82: 87:5d:f0:cc:3f:19:24:ff:ab:b6:fd:16:b7:b1:a8: 93:5b:10:4c:0a:4d:ee:eb:d3:dc:7c:a1:94:7d:02: d5:17:26:ae:c0:81:1d:fb:c9:11:41:57:e9:c0:d6: 06:7b:39:37:4f:7b:6a:33:22:33:12:2d:ef:02:8e: e4:40:a1:fd:9c:a2:4b:81:05:44:1c:7a:f5:4b:be: 0e:a2:ce:f3:fd:9f:eb:19:ff:9a:91:2d:e4:01:51: ff:01:d5:0e:fb:2f:fd:8b:46:f4:ce:20:ce:ff:fb: 75:ac:f6:19:7d:af:19:3e:61:67:6e:a0:97:98:bc: 0b:4a:1f:cd:72:47:44:7b:b8:f1:11:ce:af:90:fb: 88:2b:85:39:4a:ce:73:1e:eb:e5:94:42:f0:52:4e: bc:ca:cc:27:f8:02:18:b4:10:2a:7d:7b:fe:bf:00: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.12.0/22 IPv6: 2001:df7:1f00::/48 Signature Algorithm: sha256WithRSAEncryption 5f:e2:1a:18:61:9f:fd:02:79:a8:0f:72:e4:4e:46:27:37:57: 81:28:9e:04:7e:73:a9:08:9b:9e:66:a3:ba:70:2c:a6:c6:96: c4:2a:c2:cc:a4:62:88:ac:4f:39:c4:3a:6d:ec:82:f0:68:3d: 7d:aa:2f:35:f0:cd:61:34:ba:08:f3:a5:6e:90:98:55:a0:3e: 97:a6:f8:73:1d:02:ee:4f:e5:19:bd:1c:8b:a3:58:5f:9a:71: 01:8c:a6:5f:50:fe:9c:cd:e3:29:6b:4e:44:7f:81:7e:fe:3f: bb:0b:f7:5c:50:e8:09:44:eb:83:77:e6:03:5c:59:0e:f6:7c: 0f:3b:70:f5:1d:9e:bd:9f:75:e5:73:13:66:23:64:d1:62:ee: 8d:33:6d:64:45:89:27:97:44:e5:b7:e5:e0:3f:63:cf:61:14: 3a:ee:24:be:6f:84:2e:32:ae:a4:04:19:10:83:12:14:df:a5: de:09:89:72:85:45:8a:85:8c:e1:04:6a:30:4b:13:ea:42:40: 25:f2:33:9e:f7:54:c2:e5:41:3b:aa:1f:c8:51:92:b2:6a:0e: d9:db:76:c7:48:0a:bf:e4:7d:cb:a1:07:01:5e:29:1a:80:46: 80:7c:40:f4:70:3a:2f:32:3e:e6:e7:8a:d3:18:b0:13:14:78: 39:32:72:a8 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFSWZR2FkIW2TNnPUoaW63MGb1a4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDcyOVoX DTI3MDUwMTIzNTIyOVowMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5 NTRFNTNDNEM5QzVFMjJBQjgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcdl4iVN+Xg7L/dJdGtpnLgllRvKMiS0UvwvQEdHre2hzPBVY6I7uBUqM8m mz1UGEMvGU3359SsOkG1mK/ia8tSSC12lKQVns1qNTKsVHtgfO5fsru/uS6Ch13w zD8ZJP+rtv0Wt7Gok1sQTApN7uvT3HyhlH0C1RcmrsCBHfvJEUFX6cDWBns5N097 ajMiMxIt7wKO5ECh/ZyiS4EFRBx69Uu+DqLO8/2f6xn/mpEt5AFR/wHVDvsv/YtG 9M4gzv/7daz2GX2vGT5hZ26gl5i8C0ofzXJHRHu48RHOr5D7iCuFOUrOcx7r5ZRC 8FJOvMrMJ/gCGLQQKn17/r8ARu0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKUzb+/xEdW5JaiVTlPEycXiKrgAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBjNTRiZTlhLTliNWQtNGM2NC1iNGU4LTYxYzc0ZTllY2VkYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wYzU0YmU5 YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC9BNTMzNkZFRkYxMTFENUI5 MjVBODk1NEU1M0M0QzlDNUUyMkFCODAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ30MMA8EAgACMAkDBwAgAQ33HwAwDQYJKoZIhvcNAQELBQADggEBAF/iGhhh n/0CeagPcuRORic3V4EongR+c6kIm55mo7pwLKbGlsQqwsykYoisTznEOm3sgvBo PX2qLzXwzWE0ugjzpW6QmFWgPpem+HMdAu5P5Rm9HIujWF+acQGMpl9Q/pzN4ylr TkR/gX7+P7sL91xQ6AlE64N35gNcWQ72fA87cPUdnr2fdeVzE2YjZNFi7o0zbWRF iSeXROW35eA/Y89hFDruJL5vhC4yrqQEGRCDEhTfpd4JiXKFRYqFjOEEajBLE+pC QCXyM573VMLlQTuqH8hRkrJqDtnbdsdICr/kfcuhBwFeKRqARoB8QPRwOi8yPubn itMYsBMUeDkycqg= -----END CERTIFICATE-----Generated at Tue May 12 22:16:17 2026 by rpki-client