$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer File: A655C14C173A3BE852B5A2C52C501937C4340242.cer (raw, json) Hash identifier: KTS39f7XqgKqPj7BZKli/366BRtoqUIuFAJRzjr4W9o= Subject key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 664433CAD9392F0905BB72065A7D477F8C643454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft caRepository: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:38:11 +0000 Certificate not after: Sun 02 May 2027 00:43:11 +0000 Subordinate resources: IP: 202.47.162.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:44:33:ca:d9:39:2f:09:05:bb:72:06:5a:7d:47:7f:8c:64:34:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:38:11 2026 GMT Not After : May 2 00:43:11 2027 GMT Subject: CN=A655C14C173A3BE852B5A2C52C501937C4340242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:22:bf:ff:25:22:63:96:de:69:80:92:11: d9:c1:ac:56:56:f5:4f:93:8e:3c:aa:6d:c2:9a:42: 8c:ea:07:c2:ef:8a:d0:08:95:15:db:fa:0e:3e:ba: 24:84:b9:9e:83:f0:e4:98:f8:b4:c7:80:df:d7:69: 20:a4:fc:91:80:ce:8c:6c:b1:5d:90:20:8a:44:5c: 0f:55:d8:61:19:d6:ee:d2:cf:b0:0c:74:8d:ac:fa: 12:ed:35:7a:db:3d:e9:79:df:53:86:82:ac:ab:a5: ef:30:17:21:62:90:05:81:97:eb:ce:c0:0f:bf:8b: 65:64:29:a9:4c:95:52:6b:02:60:ef:a4:0f:42:29: f0:ad:0f:1c:a8:6f:21:a2:92:08:a8:4e:30:c6:c5: 26:7c:a4:8e:9a:66:57:f8:4b:de:d0:64:f0:2c:df: 05:ea:45:78:02:c7:a1:8f:13:18:80:82:6f:c9:59: dd:d4:90:00:bd:1e:4a:97:e4:3a:a5:ab:01:83:ed: d2:6f:75:fc:14:98:bb:b1:b6:aa:22:1d:af:64:2c: fb:08:14:86:39:56:78:48:8e:1e:f7:1b:42:49:d1: 53:cd:d1:3a:c1:0a:6b:7f:97:f1:ea:80:c2:f2:31: e6:b9:d9:6b:c5:ee:e0:56:15:d8:94:7c:8b:e5:bf: f2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.162.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:62:ad:10:69:71:fc:f6:ff:f9:5b:40:dc:32:fb:0d:fe:58: b3:8f:90:82:1d:7b:b7:16:1f:85:5c:e4:85:65:9e:4f:1c:e6: 30:43:5d:2b:4b:0e:4d:02:14:f4:33:09:0a:33:40:27:f3:c4: a2:93:f1:d8:cc:a9:a8:22:58:4f:f5:90:97:a3:59:28:47:a4: 3b:45:b8:be:4d:c7:67:fc:9d:74:20:73:f5:2a:16:ef:df:71: ae:1c:b1:50:6f:41:d1:9f:cf:47:e7:38:46:bd:02:08:2a:3a: b9:8a:85:6f:76:15:e6:db:05:51:52:ff:0f:5c:dc:0d:b3:54: c4:a0:4f:b1:15:c3:9e:48:f2:14:70:b4:45:0a:82:7c:7d:d0: de:fe:e8:f8:fe:91:d1:16:c9:e0:5e:a2:23:40:c7:4f:38:0c: 5a:a6:80:98:82:17:87:fe:11:5d:c5:dd:9c:c1:c4:16:92:e0: f7:d9:57:d8:2a:e4:49:85:a9:7f:71:3e:ec:fc:31:4c:bf:35: 7c:15:23:62:58:eb:b1:43:fc:68:c5:bc:02:86:42:da:84:de: a4:7f:bd:1b:a3:5d:0f:8e:60:d3:d7:8b:0e:86:a5:35:8a:32: b1:b1:87:52:82:3b:7a:81:73:c4:22:2d:90:fa:7e:09:f1:5f: 77:1e:78:fe -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZkQzytk5LwkFu3IGWn1Hf4xkNFQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzgxMVoX DTI3MDUwMjAwNDMxMVowMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVB MkM1MkM1MDE5MzdDNDM0MDI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqfIr//JSJjlt5pgJIR2cGsVlb1T5OOPKptwppCjOoHwu+K0AiVFdv6Dj66 JIS5noPw5Jj4tMeA39dpIKT8kYDOjGyxXZAgikRcD1XYYRnW7tLPsAx0jaz6Eu01 ets96XnfU4aCrKul7zAXIWKQBYGX687AD7+LZWQpqUyVUmsCYO+kD0Ip8K0PHKhv IaKSCKhOMMbFJnykjppmV/hL3tBk8CzfBepFeALHoY8TGICCb8lZ3dSQAL0eSpfk OqWrAYPt0m91/BSYu7G2qiIdr2Qs+wgUhjlWeEiOHvcbQknRU83ROsEKa3+X8eqA wvIx5rnZa8Xu4FYV2JR8i+W/8gkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKZVwUwXOjvoUrWixSxQGTfENAJCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU4MTI3NGFmLTdjZDAtNDBhZi1hMzIxLTY3Njg5OGQ1OGRiOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ODEyNzRh Zi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC9BNjU1QzE0QzE3M0EzQkU4 NTJCNUEyQzUyQzUwMTkzN0M0MzQwMjQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQByi+iMA0GCSqGSIb3DQEBCwUAA4IBAQBPYq0QaXH89v/5W0DcMvsN/lizj5CC HXu3Fh+FXOSFZZ5PHOYwQ10rSw5NAhT0MwkKM0An88Sik/HYzKmoIlhP9ZCXo1ko R6Q7Rbi+Tcdn/J10IHP1Khbv33GuHLFQb0HRn89H5zhGvQIIKjq5ioVvdhXm2wVR Uv8PXNwNs1TEoE+xFcOeSPIUcLRFCoJ8fdDe/uj4/pHRFsngXqIjQMdPOAxapoCY gheH/hFdxd2cwcQWkuD32VfYKuRJhal/cT7s/DFMvzV8FSNiWOuxQ/xoxbwChkLa hN6kf70bo10PjmDT14sOhqU1ijKxsYdSgjt6gXPEIi2Q+n4J8V93Hnj+ -----END CERTIFICATE-----Generated at Tue May 12 22:15:56 2026 by rpki-client