$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer File: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer (raw, json) Hash identifier: Eug/4USFeUMnWAusLlFLd7e5yTTTFdUSmHR+ABDRCQI= Subject key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59B9DE9AF571814DAA9C982E7261D4B499119098 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:06:21 +0000 Certificate not after: Sun 02 May 2027 00:11:21 +0000 Subordinate resources: IP: 103.94.248.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b9:de:9a:f5:71:81:4d:aa:9c:98:2e:72:61:d4:b4:99:11:90:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:06:21 2026 GMT Not After : May 2 00:11:21 2027 GMT Subject: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:c8:a8:98:9a:d4:36:8a:94:74:50:2f:13: 33:ee:38:67:ca:be:ba:6d:a2:1c:55:60:11:d7:31: 3f:36:44:e2:44:34:84:0d:89:dd:77:1b:2e:51:2f: e1:6e:5a:98:29:43:7d:08:dc:b0:9f:78:94:8f:eb: 27:11:9d:37:aa:45:e3:c6:b9:ee:27:d3:fe:6e:0c: 24:99:4a:ca:ef:6b:87:49:12:31:c3:a7:d6:f2:4f: 7d:12:d5:35:0e:55:36:f9:ab:ef:c9:fa:9b:d3:a8: d1:ae:91:4a:8c:21:45:80:29:ff:8f:41:9d:79:ec: bd:c4:b7:1d:07:cb:42:2b:a5:40:71:b2:81:e8:98: 0b:e6:ba:08:81:31:d1:1f:63:94:84:16:d4:b3:68: 12:c3:66:c8:a5:9f:21:07:9d:f5:41:39:71:f3:ba: 09:06:b3:13:a0:74:1c:bc:98:88:44:a5:81:6b:b9: 3e:08:32:d2:0b:1b:5b:d2:5c:f8:ed:2a:3f:75:7d: 5f:27:98:92:fc:52:68:ec:d0:29:3d:77:7e:89:21: 6b:69:2c:e7:0e:a7:3c:8e:b8:14:e2:e3:2d:dc:20: 17:ed:a4:16:b2:71:7c:ad:88:b2:33:ee:b1:22:2e: 9c:a4:7f:24:91:8a:15:6c:49:99:60:45:32:23:49: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.248.0/23 Signature Algorithm: sha256WithRSAEncryption 71:2a:6d:21:02:18:84:2d:01:a2:09:3a:49:0a:4e:9a:45:59: cc:2b:b1:83:d0:ed:7c:1f:03:80:b8:ac:51:68:37:2b:f0:60: 13:e6:1c:67:9a:25:74:5f:45:be:66:92:07:f9:aa:41:47:59: 08:9f:29:cd:6e:43:a0:5b:50:0e:d5:71:f5:f4:ca:18:15:4a: cb:2d:27:14:5e:02:26:16:20:46:17:54:4b:34:8c:8f:4c:ae: da:44:c7:1e:e9:31:8c:e9:62:1c:d7:0d:79:f1:59:54:de:55: bc:6f:8e:e2:a2:2a:4e:3d:46:4a:da:7f:65:ec:d7:0d:c5:5a: a3:9d:92:48:0e:68:b2:47:50:a5:e7:a9:49:8a:63:14:5e:0c: cc:85:39:b1:04:ad:e0:16:fc:30:18:84:97:d0:1e:f3:5f:64: 9d:58:ac:ce:79:b7:f5:fc:85:06:24:e4:34:36:ad:1f:7f:8f: 72:b5:a0:1e:1d:4a:ab:bd:e5:55:b2:49:11:4f:d1:b3:7a:43: be:80:1e:19:2e:44:70:db:35:f2:8e:89:a2:4f:f0:81:ac:e0: 39:19:fb:e0:e9:a9:fa:e3:45:0e:5e:ea:a7:06:1b:0d:42:09: 8d:f7:df:53:83:19:8a:a8:1d:ec:02:22:f3:5e:f1:35:ae:c1: e4:f4:aa:6d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWbnemvVxgU2qnJgucmHUtJkRkJgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDYyMVoX DTI3MDUwMjAwMTEyMVowMzExMC8GA1UEAxMoQTcxRTJDNjAwNzdGNkE4Q0E4RDNF Rjc4QUZDNzFCMDcyOTQ1OEY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFjyKiYmtQ2ipR0UC8TM+44Z8q+um2iHFVgEdcxPzZE4kQ0hA2J3XcbLlEv 4W5amClDfQjcsJ94lI/rJxGdN6pF48a57ifT/m4MJJlKyu9rh0kSMcOn1vJPfRLV NQ5VNvmr78n6m9Oo0a6RSowhRYAp/49BnXnsvcS3HQfLQiulQHGygeiYC+a6CIEx 0R9jlIQW1LNoEsNmyKWfIQed9UE5cfO6CQazE6B0HLyYiESlgWu5Pggy0gsbW9Jc +O0qP3V9XyeYkvxSaOzQKT13fokha2ks5w6nPI64FOLjLdwgF+2kFrJxfK2IsjPu sSIunKR/JJGKFWxJmWBFMiNJx9UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKceLGAHf2qMqNPveK/HGwcpRY9MMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI4ZDZjYTliLTU4NGYtNDBmMS1iZDYxLTE4NThlN2ViYTNlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yOGQ2Y2E5 Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9BNzFFMkM2MDA3N0Y2QThD QThEM0VGNzhBRkM3MUIwNzI5NDU4RjRDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ174MA0GCSqGSIb3DQEBCwUAA4IBAQBxKm0hAhiELQGiCTpJCk6aRVnMK7GD 0O18HwOAuKxRaDcr8GAT5hxnmiV0X0W+ZpIH+apBR1kInynNbkOgW1AO1XH19MoY FUrLLScUXgImFiBGF1RLNIyPTK7aRMce6TGM6WIc1w158VlU3lW8b47ioipOPUZK 2n9l7NcNxVqjnZJIDmiyR1Cl56lJimMUXgzMhTmxBK3gFvwwGISX0B7zX2SdWKzO ebf1/IUGJOQ0Nq0ff49ytaAeHUqrveVVskkRT9GzekO+gB4ZLkRw2zXyjomiT/CB rOA5Gfvg6an640UOXuqnBhsNQgmN999TgxmKqB3sAiLzXvE1rsHk9Kpt -----END CERTIFICATE-----Generated at Tue May 12 22:03:38 2026 by rpki-client