$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer (raw, json) Hash identifier: Vf7eEUmvsXAx7GMEW1oqNypCoDHHwycp6NGa2jQmvSc= Subject key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 36A92373B549CAE719CB7B91656D02C36F321F51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:16 +0000 Certificate not after: Sun 02 May 2027 01:38:16 +0000 Subordinate resources: IP: 103.105.58.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a9:23:73:b5:49:ca:e7:19:cb:7b:91:65:6d:02:c3:6f:32:1f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:16 2026 GMT Not After : May 2 01:38:16 2027 GMT Subject: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:98:88:0c:2a:a9:aa:00:f9:4a:bd:b9:71: bd:1a:ae:75:ea:17:a2:86:d2:a9:60:bd:13:36:10: 7b:99:56:53:96:31:47:ab:c8:15:8c:6a:0d:3a:ca: d3:9c:4f:87:73:0a:b7:27:2d:4a:4b:bc:75:9a:41: f5:21:5f:14:a1:f3:2b:e4:5c:1c:3a:38:7d:33:ff: 6e:cd:9b:b8:a0:0c:26:42:70:99:0c:bd:7a:79:05: a8:30:1e:21:0a:33:0a:2c:ad:f3:c4:e1:d6:8e:ea: f2:af:0d:0b:89:6e:23:c1:a9:43:e5:f0:9f:a4:b3: 18:4d:48:ad:39:b9:76:83:f8:58:31:9c:2b:74:65: 09:b5:c0:d6:ce:5e:3c:74:47:56:12:c1:cb:71:11: 1f:06:06:33:2d:f2:38:be:87:9e:a9:fc:ba:fd:70: 45:44:d9:d4:f6:dc:8d:69:07:36:ce:cf:ae:80:d2: 0f:f9:41:99:74:94:ec:46:74:88:1c:1e:99:33:06: 08:4e:0b:a9:0b:97:d1:c0:57:0a:6d:98:ce:03:c3: 2f:8f:59:e4:bb:19:cb:e1:62:b9:3d:8e:b5:59:0d: 07:3a:4a:3f:36:13:ac:2c:5f:b3:bb:59:ff:e9:c8: a2:4c:f1:7b:9b:55:a6:d5:f4:42:fb:02:84:93:66: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.58.0/23 Signature Algorithm: sha256WithRSAEncryption 44:b3:51:9a:c2:20:fa:71:40:c0:9c:de:d5:1b:fe:e4:d7:d6: d3:c3:5f:b1:03:ab:6c:6f:8f:fe:1d:63:fe:9c:1b:14:54:8f: d5:25:6e:5d:2d:96:5d:84:eb:27:c4:fb:16:ca:e8:14:e7:e8: a3:84:d4:10:98:c4:04:b0:a6:7a:e5:2c:41:a0:27:ff:ec:7e: 38:4c:b3:15:e5:75:47:c8:6a:93:ae:b4:cf:69:fe:18:75:e5: a5:94:5b:57:e9:68:e2:0d:e4:56:5b:05:d0:b8:93:61:32:d3: 6e:38:66:27:15:6b:5a:d7:b9:79:1f:30:cb:f9:a9:b8:3c:8e: 89:e7:28:62:2c:fc:60:43:20:51:88:8f:4f:b4:b3:d5:d9:79: f3:8f:11:13:98:cb:f9:0c:17:e8:4d:69:e9:e6:b2:24:66:0a: 4e:b8:0d:ca:3a:a6:22:77:e4:f7:93:2e:9e:e1:7c:f9:5d:7a: 90:a9:7f:e4:04:fd:fe:fb:ad:21:ff:76:2d:4c:d6:06:b0:e9: 56:19:08:5e:83:23:94:38:8b:24:2d:e4:e6:51:06:7c:d6:44: bb:53:8f:5e:b1:3e:7b:dd:75:ef:64:93:a8:27:12:9c:8c:84: 37:b6:89:47:58:3c:d2:28:f1:2a:8c:94:1b:0b:fb:59:2e:e9: c3:4d:66:80 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNqkjc7VJyucZy3uRZW0Cw28yH1EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMxNloX DTI3MDUwMjAxMzgxNlowMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0 NTcyRDE1Q0MyQzQ3RTBEMDJEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLpmIgMKqmqAPlKvblxvRqudeoXoobSqWC9EzYQe5lWU5YxR6vIFYxqDTrK 05xPh3MKtyctSku8dZpB9SFfFKHzK+RcHDo4fTP/bs2buKAMJkJwmQy9enkFqDAe IQozCiyt88Th1o7q8q8NC4luI8GpQ+Xwn6SzGE1IrTm5doP4WDGcK3RlCbXA1s5e PHRHVhLBy3ERHwYGMy3yOL6Hnqn8uv1wRUTZ1PbcjWkHNs7ProDSD/lBmXSU7EZ0 iBwemTMGCE4LqQuX0cBXCm2YzgPDL49Z5LsZy+FiuT2OtVkNBzpKPzYTrCxfs7tZ /+nIokzxe5tVptX0QvsChJNm7pECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL1egk1G4SKrXRdFctFcwsR+DQLRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4ZGU0YWY3LWJmNDgtNGNiOC04ZjYzLTgxY2FlMTczNjRkZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOGRlNGFm Ny1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC9CRDVFODI0RDQ2RTEyMkFC NUQxNzQ1NzJEMTVDQzJDNDdFMEQwMkQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2k6MA0GCSqGSIb3DQEBCwUAA4IBAQBEs1GawiD6cUDAnN7VG/7k19bTw1+x A6tsb4/+HWP+nBsUVI/VJW5dLZZdhOsnxPsWyugU5+ijhNQQmMQEsKZ65SxBoCf/ 7H44TLMV5XVHyGqTrrTPaf4YdeWllFtX6WjiDeRWWwXQuJNhMtNuOGYnFWta17l5 HzDL+am4PI6J5yhiLPxgQyBRiI9PtLPV2XnzjxETmMv5DBfoTWnp5rIkZgpOuA3K OqYid+T3ky6e4Xz5XXqQqX/kBP3++60h/3YtTNYGsOlWGQhegyOUOIskLeTmUQZ8 1kS7U49esT573XXvZJOoJxKcjIQ3tolHWDzSKPEqjJQbC/tZLunDTWaA -----END CERTIFICATE-----Generated at Tue May 12 22:32:34 2026 by rpki-client