$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer (raw, json) Hash identifier: xWQQ4S+X39D1V1/SzH9n1Tgqemq7kzUA5q+kOriq4/M= Subject key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 24C6AAA967387159E2F60BFF9E4A58C2834C8420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:57:57 +0000 Certificate not after: Sun 02 May 2027 02:02:57 +0000 Subordinate resources: IP: 103.152.118.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c6:aa:a9:67:38:71:59:e2:f6:0b:ff:9e:4a:58:c2:83:4c:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:57:57 2026 GMT Not After : May 2 02:02:57 2027 GMT Subject: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:87:c7:cf:29:17:37:e4:25:eb:f9:53:0a: 4e:17:e1:49:58:22:53:a9:ca:b0:57:c2:a2:86:dc: e3:8e:68:f2:ba:dc:91:52:4a:30:55:9d:26:f7:26: f2:44:06:37:28:fa:a5:20:c6:70:df:7e:34:80:37: 8a:ce:f9:61:fd:21:08:98:16:2b:c9:7c:47:38:3b: 3f:bf:cb:fc:18:68:17:81:99:8d:dd:f9:91:f9:2e: f1:e1:d5:1f:66:dd:0b:d8:24:26:aa:16:c2:b4:2c: 8e:d3:fb:c7:73:fa:5a:c4:26:ea:77:36:98:4a:fa: 77:f6:8d:5c:6d:f0:1e:8f:f3:82:14:28:58:46:7d: 43:a8:09:c9:a7:51:e2:45:9c:6c:e9:6e:fe:60:96: 7f:53:50:2a:81:5d:cf:6f:e3:2a:3a:28:b7:29:0f: 2b:dc:66:f5:6f:61:36:72:06:92:68:b1:7f:8a:02: 46:58:44:3a:8b:06:98:87:11:ee:c7:f3:67:ca:3c: 92:0e:53:c8:33:28:bd:e5:2e:71:02:e5:c7:30:78: 90:e7:99:55:b2:d3:a0:1d:04:c8:a6:33:64:6b:b0: f4:3d:4f:1d:84:35:0d:42:24:22:85:90:a6:8a:a3: 02:ae:cd:eb:e0:1a:f3:d7:65:82:b0:12:a7:45:16: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.118.0/23 Signature Algorithm: sha256WithRSAEncryption 39:04:bf:ba:2c:60:af:02:69:24:32:2c:9c:0f:6d:54:3e:18: 47:92:bf:4b:33:62:10:1a:a9:69:36:2e:a5:68:c0:39:79:20: 93:5c:39:46:85:4e:bf:84:ed:96:ef:10:41:bd:b9:6e:d8:b0: 37:e4:65:54:7b:0a:30:6e:4f:fa:2e:39:c0:c1:72:2a:8e:c7: 4b:03:75:a5:0a:a6:df:60:3b:26:81:c1:ed:eb:4a:bf:97:d9: 6b:10:92:58:42:2a:a8:0b:ca:c4:cd:2a:1c:33:43:56:2d:67: cd:55:18:09:b8:f0:24:57:72:41:b7:63:d2:bb:89:d8:3e:21: 40:4a:05:34:60:45:4e:cb:f7:6d:a1:6e:bd:e0:c1:7f:53:04: f3:33:7b:94:33:be:ab:f1:29:e4:9f:84:cd:68:ef:5f:5e:74: bb:ab:23:10:33:21:de:37:42:50:8f:5b:ef:b0:84:e5:26:50: cd:d4:73:53:1c:7c:7d:04:a6:c7:1b:8a:e6:ba:a4:b6:7e:df: 09:ee:c4:64:e5:68:1a:05:b2:e8:ed:d7:1b:e2:26:7a:b6:54: a9:44:4d:e1:76:4b:43:5d:c6:0b:8c:33:76:ec:69:b3:ee:d8: 0e:e4:49:5c:85:ba:31:f0:e3:79:3b:49:c1:58:7b:05:77:4f: 51:ff:f7:b5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJMaqqWc4cVni9gv/nkpYwoNMhCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTc1N1oX DTI3MDUwMjAyMDI1N1owMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4 NjQwM0QzQjUxRDE5QUIxQzc4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTYh8fPKRc35CXr+VMKThfhSVgiU6nKsFfCoobc445o8rrckVJKMFWdJvcm 8kQGNyj6pSDGcN9+NIA3is75Yf0hCJgWK8l8Rzg7P7/L/BhoF4GZjd35kfku8eHV H2bdC9gkJqoWwrQsjtP7x3P6WsQm6nc2mEr6d/aNXG3wHo/zghQoWEZ9Q6gJyadR 4kWcbOlu/mCWf1NQKoFdz2/jKjootykPK9xm9W9hNnIGkmixf4oCRlhEOosGmIcR 7sfzZ8o8kg5TyDMoveUucQLlxzB4kOeZVbLToB0EyKYzZGuw9D1PHYQ1DUIkIoWQ poqjAq7N6+Aa89dlgrASp0UWIaMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMUsEqubE1m5PGyGQD07UdGascePMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QyMDczYWNlLWE2OTEtNDg2My05YzFjLTU5YjJkYjljYjQ2My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMjA3M2Fj ZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC9DNTJDMTJBQjlCMTM1OUI5 M0M2Qzg2NDAzRDNCNTFEMTlBQjFDNzhGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5h2MA0GCSqGSIb3DQEBCwUAA4IBAQA5BL+6LGCvAmkkMiycD21UPhhHkr9L M2IQGqlpNi6laMA5eSCTXDlGhU6/hO2W7xBBvblu2LA35GVUewowbk/6LjnAwXIq jsdLA3WlCqbfYDsmgcHt60q/l9lrEJJYQiqoC8rEzSocM0NWLWfNVRgJuPAkV3JB t2PSu4nYPiFASgU0YEVOy/dtoW694MF/UwTzM3uUM76r8Snkn4TNaO9fXnS7qyMQ MyHeN0JQj1vvsITlJlDN1HNTHHx9BKbHG4rmuqS2ft8J7sRk5WgaBbLo7dcb4iZ6 tlSpRE3hdktDXcYLjDN27Gmz7tgO5Elchbox8ON5O0nBWHsFd09R//e1 -----END CERTIFICATE-----Generated at Tue May 12 22:38:51 2026 by rpki-client