$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer (raw, json) Hash identifier: ms+QMmARdzUU4TkUSxRSNs1ec0PoQF1yFv1ISeXA/x4= Subject key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 518340011CF3B6EECB128C31285BD7553897ED91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:47:56 +0000 Certificate not after: Sun 02 May 2027 02:52:56 +0000 Subordinate resources: IP: 103.54.168.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:83:40:01:1c:f3:b6:ee:cb:12:8c:31:28:5b:d7:55:38:97:ed:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:47:56 2026 GMT Not After : May 2 02:52:56 2027 GMT Subject: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:d8:6f:8a:e5:a9:f9:f4:04:0b:3f:0b:1c: 1d:2e:77:90:15:a9:84:17:a4:24:db:3f:3a:a4:bc: 92:e3:6f:5c:4c:80:94:29:7e:33:17:ac:06:1e:6d: 91:7d:fe:69:2e:c9:84:90:c5:20:95:ca:90:41:ea: c8:2f:1d:cf:d2:ce:f7:17:b7:1c:c6:f0:5e:c8:6f: 1d:5a:96:42:66:ce:60:17:27:c2:dc:a7:ed:d8:21: 2e:bb:8b:19:d1:bf:b3:29:c0:fe:d7:a2:40:fb:55: b8:05:e7:69:fc:ff:34:b4:d1:a3:67:9d:5b:2b:9c: 6e:c1:6b:f8:52:26:9b:1b:d5:38:f7:48:31:c0:a0: 02:74:59:28:94:86:11:8e:71:63:90:9b:b4:53:b3: 32:38:66:22:37:6d:59:d4:e5:d4:09:81:a3:e0:e5: f2:e3:9d:11:37:d7:f7:52:3b:d5:f4:ca:c4:2f:16: 44:f9:57:8c:eb:e5:c1:74:d1:a4:95:30:76:c3:3a: c8:86:e1:0c:59:79:59:ba:3a:26:7c:e3:ba:ca:06: 6e:a0:dd:7a:97:27:4c:44:72:cc:c5:70:31:9d:73: 2b:53:d7:e9:65:9f:be:53:d9:de:53:57:53:be:e3: 99:29:b2:32:04:4c:8d:02:16:1e:43:92:b5:6c:23: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.168.0/23 Signature Algorithm: sha256WithRSAEncryption 04:70:56:b5:e7:e1:ed:0a:e6:24:9f:2e:42:a9:5f:12:2c:62: bf:49:60:e3:3d:fa:25:e9:c7:96:16:d7:b4:e0:23:e9:fc:a1: 12:fd:0b:af:05:1f:da:24:be:31:e8:6f:7e:a7:3e:31:99:84: 21:01:66:56:3c:07:28:f7:7d:f3:2c:e1:20:3b:b5:7f:ef:db: 92:83:3c:c7:46:fc:bf:a5:38:63:d6:c9:92:99:a1:9a:a4:61: e6:b0:80:8f:aa:f4:0e:90:6c:30:6b:ad:22:e1:77:b8:16:32: ec:7c:b2:38:ba:63:01:81:29:ce:03:66:28:9f:35:e1:0b:14: f5:c4:39:ff:67:74:89:e7:04:b2:d5:87:7d:eb:40:d4:df:3f: a5:7e:6f:2c:aa:f9:87:98:27:05:a2:58:b6:68:c2:55:87:ec: e9:07:b6:53:c4:70:c9:5e:22:82:e9:55:01:50:68:55:af:4e: e9:e3:89:6e:12:45:08:23:98:51:0f:23:c9:ff:37:0c:e1:ce: e7:12:41:3c:c8:67:99:b8:d7:ee:dc:37:c8:78:c8:ec:fa:0a: d5:9f:13:99:9f:4e:8b:f0:d2:80:b6:e3:6d:d4:62:6c:d9:b6: c7:46:cd:94:f2:36:7c:6b:b7:28:8a:5f:28:1a:1a:2c:4d:7d: 46:04:24:7b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUYNAARzztu7LEowxKFvXVTiX7ZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDc1NloX DTI3MDUwMjAyNTI1NlowMzExMC8GA1UEAxMoQTU1RjdGNkI3RkRGRDI0NDg5OEZD ODM2QjMwNkY4ODg0Rjk0QThFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUU2G+K5an59AQLPwscHS53kBWphBekJNs/OqS8kuNvXEyAlCl+MxesBh5t kX3+aS7JhJDFIJXKkEHqyC8dz9LO9xe3HMbwXshvHVqWQmbOYBcnwtyn7dghLruL GdG/synA/teiQPtVuAXnafz/NLTRo2edWyucbsFr+FImmxvVOPdIMcCgAnRZKJSG EY5xY5CbtFOzMjhmIjdtWdTl1AmBo+Dl8uOdETfX91I71fTKxC8WRPlXjOvlwXTR pJUwdsM6yIbhDFl5Wbo6JnzjusoGbqDdepcnTERyzMVwMZ1zK1PX6WWfvlPZ3lNX U77jmSmyMgRMjQIWHkOStWwjV68CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKVff2t/39JEiY/INrMG+IhPlKjrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZlMzMwNjMzLWE3ZDEtNGQwYS1hMWNjLWI2YzNlZWRmYmMxNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZTMzMDYz My1hN2QxLTRkMGEtYTFjYy1iNmMzZWVkZmJjMTcvMC9BNTVGN0Y2QjdGREZEMjQ0 ODk4RkM4MzZCMzA2Rjg4ODRGOTRBOEVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzaoMA0GCSqGSIb3DQEBCwUAA4IBAQAEcFa15+HtCuYkny5CqV8SLGK/SWDj Pfol6ceWFte04CPp/KES/QuvBR/aJL4x6G9+pz4xmYQhAWZWPAco933zLOEgO7V/ 79uSgzzHRvy/pThj1smSmaGapGHmsICPqvQOkGwwa60i4Xe4FjLsfLI4umMBgSnO A2YonzXhCxT1xDn/Z3SJ5wSy1Yd960DU3z+lfm8sqvmHmCcFoli2aMJVh+zpB7ZT xHDJXiKC6VUBUGhVr07p44luEkUII5hRDyPJ/zcM4c7nEkE8yGeZuNfu3DfIeMjs +grVnxOZn06L8NKAtuNt1GJs2bbHRs2U8jZ8a7coil8oGhosTX1GBCR7 -----END CERTIFICATE-----Generated at Tue May 12 22:10:17 2026 by rpki-client