$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer (raw, json) Hash identifier: Y+8wHbkidBGAQZQdWtdW2WdpaUki0XvIHJWd9oOmvLw= Subject key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 428CBE7E5CFFF94C50AEE9E15BD607D30F5B6982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:26:20 +0000 Certificate not after: Sun 02 May 2027 02:31:20 +0000 Subordinate resources: IP: 103.144.46.0/23 IP: 2405:6640::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8c:be:7e:5c:ff:f9:4c:50:ae:e9:e1:5b:d6:07:d3:0f:5b:69:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:26:20 2026 GMT Not After : May 2 02:31:20 2027 GMT Subject: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:ae:61:a1:56:7b:96:55:d0:86:1f:9c:aa: 12:7c:e5:80:f9:38:67:e2:05:6e:73:b4:da:e5:dd: 92:8a:de:0b:6b:90:b3:d3:3b:a9:97:4c:90:7d:4c: 24:22:7c:14:06:f8:6b:01:a8:93:cf:21:cc:6f:a2: 3b:74:bc:83:c3:88:04:02:eb:54:aa:ff:40:59:20: a8:d8:82:7c:b7:5d:95:4a:88:39:dd:85:5b:d3:c2: a5:04:d2:93:cc:2a:7b:c6:2b:16:1c:36:5a:4e:1c: e4:c6:3f:8e:bf:c7:ee:f3:bc:f2:78:fc:7a:98:e6: 2a:48:f6:7d:19:03:a9:a5:24:f1:73:57:03:ed:b9: 2d:0d:7a:35:97:04:69:0d:b7:5c:29:8d:91:c8:bc: 1f:61:ab:37:42:89:cc:e4:3d:4b:ce:d4:01:4b:91: f7:36:c3:a5:e5:9a:3e:4c:87:32:d0:a9:11:30:b2: 4b:74:f2:c9:54:47:c8:d4:8c:1d:b4:5e:d6:72:87: c9:79:57:4a:08:24:e8:e2:9c:97:21:e6:4b:81:8c: 57:29:6d:66:95:08:33:fa:63:ca:e9:a7:8f:58:b0: c5:cf:f5:17:8e:17:93:04:ea:44:c9:21:7e:c6:ee: 1c:78:03:89:a4:5a:c0:99:a9:79:22:3d:d6:87:8e: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.46.0/23 IPv6: 2405:6640::/32 Signature Algorithm: sha256WithRSAEncryption 6f:61:5f:40:3c:77:b9:80:17:b0:9a:d1:22:8e:6a:7f:fe:0a: e3:13:22:ac:06:ff:5e:ba:b3:03:ed:58:21:a6:5a:20:70:91: 70:74:6e:37:d8:8d:ca:00:c9:92:cc:47:b3:1c:96:30:79:27: ec:c1:8f:b0:bb:00:a1:9a:e4:b9:62:bb:1c:58:72:01:45:41: ef:71:07:cf:b4:89:a3:75:63:b9:e0:30:9d:06:b9:96:9e:ed: 50:f9:8c:7d:73:46:e7:64:be:19:fd:60:9e:e4:ac:1a:9c:b6: 52:2e:1e:4c:2c:33:72:cf:9d:13:96:bf:0c:5e:1b:4f:2b:39: f6:ee:68:f8:56:04:a3:84:67:cf:00:6e:ca:ff:e8:3a:f0:13: 26:33:83:08:15:46:16:97:00:5c:ac:17:26:54:13:c8:e0:76: 66:96:4b:d3:63:9b:0d:1a:15:80:29:d1:18:7e:87:3f:82:33: 5a:6d:fa:b6:e5:81:d2:f4:8f:2f:43:fd:5d:69:3e:fa:a3:15: 90:69:7d:bb:01:10:98:83:90:64:eb:78:ba:82:35:ed:75:26: ae:85:f5:cf:4c:51:e5:cb:7a:2f:69:99:f6:6c:12:dd:f3:b6: f2:bd:1c:cc:72:44:cd:6a:e3:72:34:f4:49:2f:d0:47:de:51: 10:c6:6c:7d -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUQoy+flz/+UxQrunhW9YH0w9baYIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjYyMFoX DTI3MDUwMjAyMzEyMFowMzExMC8GA1UEAxMoQUI1NzExNDg2MDIzRjhGMERCRkVE MzhCQzdGRDdCQzkxNzM1RkZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFsrmGhVnuWVdCGH5yqEnzlgPk4Z+IFbnO02uXdkoreC2uQs9M7qZdMkH1M JCJ8FAb4awGok88hzG+iO3S8g8OIBALrVKr/QFkgqNiCfLddlUqIOd2FW9PCpQTS k8wqe8YrFhw2Wk4c5MY/jr/H7vO88nj8epjmKkj2fRkDqaUk8XNXA+25LQ16NZcE aQ23XCmNkci8H2GrN0KJzOQ9S87UAUuR9zbDpeWaPkyHMtCpETCyS3TyyVRHyNSM HbRe1nKHyXlXSggk6OKclyHmS4GMVyltZpUIM/pjyumnj1iwxc/1F44XkwTqRMkh fsbuHHgDiaRawJmpeSI91oeOvHkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKtXEUhgI/jw2/7Ti8f9e8kXNf/NMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VkYWVjNjZjLTllMWQtNDMyMS1iMDY5LWVlYWI0NzkzYTAwYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZGFlYzY2 Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC9BQjU3MTE0ODYwMjNGOEYw REJGRUQzOEJDN0ZEN0JDOTE3MzVGRkNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5AuMA0EAgACMAcDBQAkBWZAMA0GCSqGSIb3DQEBCwUAA4IBAQBvYV9APHe5 gBewmtEijmp//grjEyKsBv9eurMD7VghplogcJFwdG432I3KAMmSzEezHJYweSfs wY+wuwChmuS5YrscWHIBRUHvcQfPtImjdWO54DCdBrmWnu1Q+Yx9c0bnZL4Z/WCe 5KwanLZSLh5MLDNyz50Tlr8MXhtPKzn27mj4VgSjhGfPAG7K/+g68BMmM4MIFUYW lwBcrBcmVBPI4HZmlkvTY5sNGhWAKdEYfoc/gjNabfq25YHS9I8vQ/1daT76oxWQ aX27ARCYg5Bk63i6gjXtdSauhfXPTFHly3ovaZn2bBLd87byvRzMckTNauNyNPRJ L9BH3lEQxmx9 -----END CERTIFICATE-----Generated at Tue May 12 22:10:44 2026 by rpki-client