$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer File: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer (raw, json) Hash identifier: PNfMkqcsS3O4ACKvPGwVYjxSVQhWvNLM8UHahCHy9dQ= Subject key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 158CD6A742EA027DF51D5F6B47BEC1E759C7CDE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft caRepository: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:50 +0000 Certificate not after: Sun 02 May 2027 00:49:50 +0000 Subordinate resources: IP: 103.147.254.0/23 IP: 2405:c5c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8c:d6:a7:42:ea:02:7d:f5:1d:5f:6b:47:be:c1:e7:59:c7:cd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:50 2026 GMT Not After : May 2 00:49:50 2027 GMT Subject: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:dc:d6:55:20:52:49:35:47:3c:3a:0a:40: fc:12:b3:13:82:6d:a2:bc:85:3b:b1:4f:cf:72:68: a2:c8:3c:47:9d:1b:80:7c:27:6e:72:8d:e9:b5:e2: d2:44:ca:ff:f0:61:36:6a:9a:4c:a4:5f:10:af:c3: 2e:26:55:4e:5c:88:72:6f:4b:59:00:ff:4c:a9:93: 08:f2:23:59:90:56:f1:f2:8b:19:79:83:3f:10:89: 2d:4f:7e:7f:dc:fb:72:f6:f5:18:9d:9a:70:29:a6: 86:f4:2e:ba:fa:89:23:b9:df:bb:4c:5d:0f:76:20: 44:92:a9:b6:d2:73:70:f6:a5:70:72:ca:e6:55:a7: d5:61:af:33:c6:74:59:ff:09:d9:44:52:86:88:43: b7:73:55:1a:bf:28:f9:fc:5d:38:34:60:48:ad:d3: 6a:25:05:d4:0b:70:c4:6f:83:c6:76:38:b8:ac:62: e8:11:a7:5e:f3:54:02:cf:87:66:1d:67:bb:fb:da: db:ee:57:d4:ab:e9:27:a1:ab:8b:f2:b0:5d:fe:6c: 20:8e:7b:f9:17:5b:39:b7:90:b6:c5:54:ec:5a:5b: 87:6b:86:73:e9:ce:25:fc:5e:64:eb:32:d3:e7:a9: 96:22:48:7c:f8:a4:2b:57:63:fe:7f:18:05:80:57: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.254.0/23 IPv6: 2405:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption a1:03:0b:99:ff:d3:52:29:85:f7:cd:ed:22:88:ab:3e:56:25: cd:fb:9c:15:3e:7e:b9:47:7c:89:9b:bf:4b:83:25:f8:40:71: 17:3f:a1:92:e2:a1:ce:af:d7:ee:3a:e5:7a:c9:55:28:00:4e: 4c:6f:d8:75:c4:53:3c:05:d0:7b:f7:ac:5c:d1:b5:69:5b:31: 69:8b:3a:00:c9:d3:d2:3d:fb:8f:34:37:40:13:7a:6a:8b:a4: ce:e9:82:5a:f3:6b:f1:26:ca:4d:9e:5c:b6:6c:76:19:a8:8a: c1:2d:92:55:4d:b3:25:10:0f:5c:63:ee:36:50:d0:61:72:3b: ac:b7:32:62:db:f4:e6:30:af:8f:13:32:c1:80:05:f5:2f:7c: 9a:89:3c:df:a4:c7:a4:f1:55:a0:fd:68:40:66:1d:ae:d6:1c: 9f:68:85:57:47:21:51:08:88:9e:a2:dd:68:f3:e0:46:cf:4e: ae:f6:c1:bb:ef:d4:2a:71:ad:63:ac:fa:89:13:8d:18:06:5d: 20:73:12:ce:8a:d7:17:bd:4b:d1:89:e8:82:84:11:b0:ea:f3: 7a:65:0d:d7:22:8f:f1:80:25:28:62:95:82:d5:51:9b:94:42: 25:b5:02:29:0f:8c:6e:00:e8:2e:c6:5f:8d:b6:31:bf:a5:4b: d4:92:cb:47 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUFYzWp0LqAn31HV9rR77B51nHzeQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQ1MFoX DTI3MDUwMjAwNDk1MFowMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0 Qzk3NjI2NDVGN0I4QjRFRTc1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1v3NZVIFJJNUc8OgpA/BKzE4JtoryFO7FPz3Joosg8R50bgHwnbnKN6bXi 0kTK//BhNmqaTKRfEK/DLiZVTlyIcm9LWQD/TKmTCPIjWZBW8fKLGXmDPxCJLU9+ f9z7cvb1GJ2acCmmhvQuuvqJI7nfu0xdD3YgRJKpttJzcPalcHLK5lWn1WGvM8Z0 Wf8J2URShohDt3NVGr8o+fxdODRgSK3TaiUF1AtwxG+DxnY4uKxi6BGnXvNUAs+H Zh1nu/va2+5X1KvpJ6Gri/KwXf5sII57+RdbObeQtsVU7Fpbh2uGc+nOJfxeZOsy 0+epliJIfPikK1dj/n8YBYBXti8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLpXiLnZvqc0zklMl2JkX3uLTudQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYwZTQ3NTBlLTQzOTMtNDNlYy05YWI1LWQyNDdiYmMwN2Q4Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MGU0NzUw ZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9CQTU3ODhCOUQ5QkVBNzM0 Q0U0OTRDOTc2MjY0NUY3QjhCNEVFNzUwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5P+MA0EAgACMAcDBQAkBcXAMA0GCSqGSIb3DQEBCwUAA4IBAQChAwuZ/9NS KYX3ze0iiKs+ViXN+5wVPn65R3yJm79LgyX4QHEXP6GS4qHOr9fuOuV6yVUoAE5M b9h1xFM8BdB796xc0bVpWzFpizoAydPSPfuPNDdAE3pqi6TO6YJa82vxJspNnly2 bHYZqIrBLZJVTbMlEA9cY+42UNBhcjustzJi2/TmMK+PEzLBgAX1L3yaiTzfpMek 8VWg/WhAZh2u1hyfaIVXRyFRCIieot1o8+BGz06u9sG779Qqca1jrPqJE40YBl0g cxLOitcXvUvRieiChBGw6vN6ZQ3XIo/xgCUoYpWC1VGblEIltQIpD4xuAOguxl+N tjG/pUvUkstH -----END CERTIFICATE-----Generated at Tue May 12 22:02:47 2026 by rpki-client