$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer File: AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer (raw, json) Hash identifier: Hf7O3S7YyjSr+8VMir6vUXLGCc2MyZfrmmhfD/8gFLs= Subject key identifier: AD:75:BC:ED:2E:34:06:C9:BA:AE:2A:04:ED:A7:60:9B:B7:90:84:0B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 52D7D77625ECB8B09EF07832E3C88D882944D682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:49:51 +0000 Certificate not after: Sat 01 May 2027 23:54:51 +0000 Subordinate resources: IP: 103.180.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:d7:76:25:ec:b8:b0:9e:f0:78:32:e3:c8:8d:88:29:44:d6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:49:51 2026 GMT Not After : May 1 23:54:51 2027 GMT Subject: CN=AD75BCED2E3406C9BAAE2A04EDA7609BB790840B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:a2:cd:6e:62:30:d7:93:f6:1b:1d:6d:bd: bf:37:56:d7:ca:95:5c:fb:03:ba:25:78:60:f8:c9: 85:01:17:26:6e:f7:54:03:17:b8:80:9f:8f:f0:21: 58:4d:c2:06:af:7c:2b:75:ce:77:03:64:32:b7:8f: 8a:6e:72:16:48:31:24:a4:7a:a2:f8:e4:fe:c0:83: 8a:ba:5b:9b:70:17:d1:54:9f:3d:8d:c0:7e:9c:de: e6:b8:be:11:2f:bf:00:ee:f7:0a:98:59:4b:59:27: 4f:43:80:7e:79:d6:df:98:bf:dd:a9:ab:bb:39:9b: 20:c0:4a:16:74:b2:d7:9e:80:3b:51:84:e2:28:c0: d3:98:ed:6d:ff:71:d5:0b:4e:9a:54:24:43:b3:b1: 42:79:a0:6b:80:df:38:7a:b3:96:7c:5f:58:c9:5d: 10:14:d4:8b:4a:fe:7b:26:00:b5:29:0c:98:54:32: 2f:5e:d0:fe:ab:f7:25:c5:50:9c:26:52:1a:50:e5: a6:c0:86:00:b8:c3:21:6e:37:22:3e:30:c8:1b:15: 31:c7:fe:d5:4d:84:d1:e1:bb:53:b5:53:e0:a0:33: 62:3f:d9:66:8c:85:3c:1a:65:7c:c8:50:8c:ba:c8: e3:ba:a3:24:58:e4:8c:a7:63:7a:f5:8a:9a:ea:b9: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:75:BC:ED:2E:34:06:C9:BA:AE:2A:04:ED:A7:60:9B:B7:90:84:0B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.116.0/23 Signature Algorithm: sha256WithRSAEncryption 97:b1:16:7c:f0:60:96:71:89:23:a2:a0:78:75:f7:5d:9c:ea: 05:f7:6b:22:c5:cc:ab:9c:4f:ee:07:08:6a:5b:59:39:a9:7e: ce:10:74:bb:f0:6c:84:e3:2e:85:ad:02:68:81:1d:b8:1a:80: 14:b7:88:e4:98:96:c7:53:7f:32:c1:0e:e2:69:eb:8c:ee:76: 72:bf:13:6e:6c:3f:56:8a:5c:57:b0:fd:17:62:b0:e8:2f:d2: c4:cc:ee:eb:89:cc:fd:83:1a:9a:82:75:4b:53:3a:18:eb:5b: e9:ff:3b:19:9d:41:b9:dc:e4:ae:5b:37:fc:74:4e:a3:0b:25: 46:21:34:d2:61:62:46:8c:65:14:3d:74:d2:70:51:dc:2b:20: 5d:46:8a:e1:e8:ac:4a:98:d0:62:9a:9d:89:b1:12:a0:c3:25: 88:58:02:8b:e3:26:f5:9b:b0:78:e3:bd:77:b8:65:75:d1:66: b6:10:5e:46:c2:b0:f1:e9:06:d9:97:38:72:3e:6c:6c:12:a9: 47:d2:10:ec:d7:a5:36:e5:3f:c1:96:72:c1:9f:05:00:83:4b: 58:91:39:9e:4e:3b:72:6c:26:96:f7:99:68:c9:96:71:3b:b1: b3:d0:29:1f:bd:44:0e:fc:a0:3a:f0:60:1b:41:4c:55:a7:42: d6:9c:bb:de -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUtfXdiXsuLCe8Hgy48iNiClE1oIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDk1MVoX DTI3MDUwMTIzNTQ1MVowMzExMC8GA1UEAxMoQUQ3NUJDRUQyRTM0MDZDOUJBQUUy QTA0RURBNzYwOUJCNzkwODQwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALe7os1uYjDXk/YbHW29vzdW18qVXPsDuiV4YPjJhQEXJm73VAMXuICfj/Ah WE3CBq98K3XOdwNkMrePim5yFkgxJKR6ovjk/sCDirpbm3AX0VSfPY3Afpze5ri+ ES+/AO73CphZS1knT0OAfnnW35i/3amruzmbIMBKFnSy156AO1GE4ijA05jtbf9x 1QtOmlQkQ7OxQnmga4DfOHqzlnxfWMldEBTUi0r+eyYAtSkMmFQyL17Q/qv3JcVQ nCZSGlDlpsCGALjDIW43Ij4wyBsVMcf+1U2E0eG7U7VT4KAzYj/ZZoyFPBplfMhQ jLrI47qjJFjkjKdjevWKmuq5VI8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK11vO0uNAbJuq4qBO2nYJu3kIQLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmZDA4YjM4LTNmNWYtNDAxOS1iMmEzLTIzNjA0Zjk0MmM4Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZmQwOGIz OC0zZjVmLTQwMTktYjJhMy0yMzYwNGY5NDJjODcvMC9BRDc1QkNFRDJFMzQwNkM5 QkFBRTJBMDRFREE3NjA5QkI3OTA4NDBCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7R0MA0GCSqGSIb3DQEBCwUAA4IBAQCXsRZ88GCWcYkjoqB4dfddnOoF92si xcyrnE/uBwhqW1k5qX7OEHS78GyE4y6FrQJogR24GoAUt4jkmJbHU38ywQ7iaeuM 7nZyvxNubD9WilxXsP0XYrDoL9LEzO7ricz9gxqagnVLUzoY61vp/zsZnUG53OSu Wzf8dE6jCyVGITTSYWJGjGUUPXTScFHcKyBdRorh6KxKmNBimp2JsRKgwyWIWAKL 4yb1m7B44713uGV10Wa2EF5GwrDx6QbZlzhyPmxsEqlH0hDs16U25T/BlnLBnwUA g0tYkTmeTjtybCaW95loyZZxO7Gz0CkfvUQO/KA68GAbQUxVp0LWnLve -----END CERTIFICATE-----Generated at Tue May 12 22:03:47 2026 by rpki-client