$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.cer File: AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.cer (raw, json) Hash identifier: C8+cEy2DJ/28WIt/WYp9pcEXo4vHQLfqKOY1LhFnW90= Subject key identifier: AD:82:FC:BA:68:C1:F9:FD:FD:5C:AC:0E:4B:60:47:09:90:AF:EF:AC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7D699286682257BF11B55F5ED8DF0593375C894A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:14 +0000 Certificate not after: Sun 02 May 2027 01:00:14 +0000 Subordinate resources: IP: 103.4.76.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:69:92:86:68:22:57:bf:11:b5:5f:5e:d8:df:05:93:37:5c:89:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:14 2026 GMT Not After : May 2 01:00:14 2027 GMT Subject: CN=AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:a3:ee:7c:6e:d1:23:1c:a0:ff:5a:ab:91: a8:c1:eb:75:b2:08:a8:75:e6:19:d3:b8:29:0b:da: f8:dc:af:5b:cf:f6:f1:e6:ea:ef:2a:c0:3d:ab:c6: 07:d9:15:8c:b3:a4:d0:1f:f9:ba:d6:f0:82:9d:ce: b2:95:97:30:e6:43:07:8e:98:f0:a7:11:84:a6:d7: 41:34:e9:fa:a2:2b:65:4f:7c:3f:9e:ee:77:29:08: 6f:57:8d:96:e1:43:a7:4b:cd:7d:bf:68:48:5d:31: 52:3f:94:1d:e5:72:f5:47:0f:af:54:0d:51:9d:41: c0:85:1e:e0:36:e8:78:1f:32:64:7d:08:eb:f3:70: 1d:f3:27:dc:fc:78:2b:1c:b5:08:b5:50:41:8a:d9: cb:77:5b:ee:df:c4:5e:4f:c5:ac:d4:b8:e4:ce:3d: d0:9c:7c:1f:70:e7:49:d9:ee:73:18:81:2a:88:7b: b9:55:fe:77:bc:79:fe:ff:f5:22:16:e2:ff:99:63: a6:2e:75:ab:f5:bf:68:ef:e4:1a:7b:3a:06:51:2f: f8:56:fa:94:77:19:7e:d7:e8:2c:08:9c:ae:7d:da: d3:38:8c:ca:e6:0b:58:e6:a7:0e:6a:70:12:f0:25: ab:ce:02:51:a4:46:ee:14:f1:3a:7b:0f:9b:91:a0: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:82:FC:BA:68:C1:F9:FD:FD:5C:AC:0E:4B:60:47:09:90:AF:EF:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.76.0/23 Signature Algorithm: sha256WithRSAEncryption 74:58:ae:e3:0b:ce:05:cb:ef:fc:fa:11:21:04:31:bc:71:b4: d9:04:46:5d:62:be:b0:57:ef:50:f9:c8:bb:82:c6:21:d5:1c: 5a:4d:75:f7:0b:ea:52:fd:75:4d:15:f1:d9:d4:2e:e0:1e:ed: f8:b4:da:3b:14:b1:bc:5b:8a:63:fb:7a:ac:fd:15:39:02:5d: 04:43:82:58:96:8f:88:f3:7b:7e:fe:18:e7:96:2f:e5:3d:b9: 9b:ca:a4:6c:64:56:f6:55:e2:51:42:2f:9e:b0:0b:33:0f:ac: 03:f4:a6:78:0e:d6:d3:2f:46:79:11:ff:9c:88:5c:f5:5f:86: ae:e5:bd:43:be:84:fb:a4:5b:8d:aa:ef:56:d0:3f:db:b0:c9: 22:27:18:15:e1:95:a4:a2:86:92:0a:29:12:2f:d4:34:46:fe: 0a:bb:04:e7:8a:f9:7d:92:26:c3:30:c1:36:69:64:67:d8:a1: 0e:07:2f:7f:76:72:7c:9d:62:59:57:ae:08:1c:fa:05:b2:f2: f8:51:53:c6:fc:40:ca:2f:05:b1:ae:73:1c:16:7a:51:a0:9f: 01:90:7c:9a:1b:1e:2f:bc:dc:81:64:b5:99:cd:6d:a5:55:4f: 2f:9d:d0:95:75:78:f2:91:ad:10:d3:78:eb:f9:4f:de:7a:2e: f5:57:8a:36 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfWmShmgiV78RtV9e2N8FkzdciUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTUxNFoX DTI3MDUwMjAxMDAxNFowMzExMC8GA1UEAxMoQUQ4MkZDQkE2OEMxRjlGREZENUNB QzBFNEI2MDQ3MDk5MEFGRUZBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuAo+58btEjHKD/WquRqMHrdbIIqHXmGdO4KQva+NyvW8/28ebq7yrAPavG B9kVjLOk0B/5utbwgp3OspWXMOZDB46Y8KcRhKbXQTTp+qIrZU98P57udykIb1eN luFDp0vNfb9oSF0xUj+UHeVy9UcPr1QNUZ1BwIUe4DboeB8yZH0I6/NwHfMn3Px4 Kxy1CLVQQYrZy3db7t/EXk/FrNS45M490Jx8H3DnSdnucxiBKoh7uVX+d7x5/v/1 Ihbi/5ljpi51q/W/aO/kGns6BlEv+Fb6lHcZftfoLAicrn3a0ziMyuYLWOanDmpw EvAlq84CUaRG7hTxOnsPm5Ggw1kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK2C/Lpowfn9/VysDktgRwmQr++sMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcyOTQwMWQwLTI2YTctNDc4Ny1iNjhhLTE4MmIxNTJhOTUxMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83Mjk0MDFk MC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC9BRDgyRkNCQTY4QzFGOUZE RkQ1Q0FDMEU0QjYwNDcwOTkwQUZFRkFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZwRMMA0GCSqGSIb3DQEBCwUAA4IBAQB0WK7jC84Fy+/8+hEhBDG8cbTZBEZd Yr6wV+9Q+ci7gsYh1RxaTXX3C+pS/XVNFfHZ1C7gHu34tNo7FLG8W4pj+3qs/RU5 Al0EQ4JYlo+I83t+/hjnli/lPbmbyqRsZFb2VeJRQi+esAszD6wD9KZ4DtbTL0Z5 Ef+ciFz1X4au5b1DvoT7pFuNqu9W0D/bsMkiJxgV4ZWkooaSCikSL9Q0Rv4KuwTn ivl9kibDMME2aWRn2KEOBy9/dnJ8nWJZV64IHPoFsvL4UVPG/EDKLwWxrnMcFnpR oJ8BkHyaGx4vvNyBZLWZzW2lVU8vndCVdXjyka0Q03jr+U/eei71V4o2 -----END CERTIFICATE-----Generated at Tue May 12 22:10:36 2026 by rpki-client