$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer File: C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer (raw, json) Hash identifier: YBjMT9hhz5Zae4Ocw4sOTPewT5s0x2c1Ws3nGQKjRH0= Subject key identifier: C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59B7BAED3F20AAFA113BA6C725387A3649833CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:44:41 +0000 Certificate not after: Sat 01 May 2027 23:49:41 +0000 Subordinate resources: IP: 103.175.44.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b7:ba:ed:3f:20:aa:fa:11:3b:a6:c7:25:38:7a:36:49:83:3c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:44:41 2026 GMT Not After : May 1 23:49:41 2027 GMT Subject: CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:0a:69:ba:04:e0:85:a1:81:0f:d9:a4:16: 24:2f:ab:45:78:f2:26:0b:6f:81:e0:79:07:fb:30: 0c:31:e1:20:34:3f:47:f4:b5:72:33:d5:02:c1:6b: 02:d2:f3:9f:b9:d0:3e:f6:d1:a0:ac:17:80:37:97: b4:47:f2:4f:a8:c3:01:01:6d:0a:2e:62:a4:6e:1c: 16:b5:44:28:d3:75:39:9a:2e:74:05:d5:a7:e7:75: 4f:ec:c1:32:96:be:aa:72:64:d4:38:23:a4:63:23: 37:0d:eb:4b:ff:c0:6a:78:5f:a2:f4:de:7b:7f:09: 88:26:e8:72:d9:9d:63:63:d2:03:ad:c1:23:0c:6e: 6a:0d:73:5e:e0:ab:3b:5a:e2:6f:83:e5:40:4b:d6: 99:03:10:1b:3f:80:6d:50:d7:51:d9:d7:e4:9a:a4: ee:4b:37:a3:2f:5f:4d:81:b7:68:b7:46:b7:d1:b3: 23:16:c3:1f:78:86:5b:3a:f8:e3:2f:66:80:c9:b0: a7:01:91:98:0f:c4:47:f1:8a:da:a8:6c:36:ba:1e: a0:b9:be:68:e3:4d:66:d6:93:7f:ae:26:2c:cd:d5: 70:b7:b2:15:d0:0a:a0:5d:2d:36:7b:89:27:0c:1f: 95:08:5b:4d:e7:66:92:7f:30:fa:d2:41:82:ac:9c: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.44.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:00:ae:11:7a:79:95:bb:5f:b8:fa:38:6f:ee:3d:ff:b3:58: e4:49:1e:7e:52:83:f7:fb:5d:ba:2e:9d:10:5c:96:d2:65:45: 5a:03:0d:94:2a:92:9a:04:d2:19:f3:bf:e6:76:78:b3:18:26: e0:c1:39:14:84:6e:b6:15:1b:18:ba:65:c2:37:db:f3:bf:db: 37:f7:38:ea:c5:ea:01:55:89:6e:f8:32:d4:c7:d1:a7:22:73: 8a:2b:d4:94:95:0d:a0:f1:59:32:64:cb:14:70:f1:f7:a8:fe: d2:24:c5:c7:a0:0a:c8:81:59:fc:2a:fd:48:2a:34:11:40:66: 94:d0:29:b7:2b:86:87:7e:bb:25:d4:bb:bf:ff:01:58:65:91: 61:8e:e7:31:19:45:a4:cf:c2:71:ae:88:2d:ed:58:2a:54:37: 90:f6:1b:dd:9b:38:7c:16:84:63:d3:be:30:12:69:d0:d5:d4: 37:0a:f6:d8:15:17:a6:a7:11:84:34:49:05:88:d5:65:02:f8: 46:07:33:37:43:69:3f:1d:93:3f:5c:9f:3f:2e:54:92:fd:16: 71:e0:5d:9e:bd:48:15:39:37:65:3f:c6:ab:51:6b:57:1d:49: 99:9e:76:28:bb:ac:4b:44:0e:77:16:16:db:97:59:33:46:e6: 5b:ee:b4:06 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWbe67T8gqvoRO6bHJTh6NkmDPL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDQ0MVoX DTI3MDUwMTIzNDk0MVowMzExMC8GA1UEAxMoQzUzRUUzQUZFMEIyNjVFQTMxNERC QkFCN0MwMTVDODA1MDAwQThFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8hCmm6BOCFoYEP2aQWJC+rRXjyJgtvgeB5B/swDDHhIDQ/R/S1cjPVAsFr AtLzn7nQPvbRoKwXgDeXtEfyT6jDAQFtCi5ipG4cFrVEKNN1OZoudAXVp+d1T+zB Mpa+qnJk1DgjpGMjNw3rS//AanhfovTee38JiCboctmdY2PSA63BIwxuag1zXuCr O1rib4PlQEvWmQMQGz+AbVDXUdnX5Jqk7ks3oy9fTYG3aLdGt9GzIxbDH3iGWzr4 4y9mgMmwpwGRmA/ER/GK2qhsNroeoLm+aONNZtaTf64mLM3VcLeyFdAKoF0tNnuJ JwwflQhbTedmkn8w+tJBgqycBwkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMU+46/gsmXqMU27q3wBXIBQAKjpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA2MzA1NGY2LThkMDktNGQxMi1iMTliLTUwMGQ2ZDkyMWZjMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNjMwNTRm Ni04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC9DNTNFRTNBRkUwQjI2NUVB MzE0REJCQUI3QzAxNUM4MDUwMDBBOEU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ68sMA0GCSqGSIb3DQEBCwUAA4IBAQBcAK4RenmVu1+4+jhv7j3/s1jkSR5+ UoP3+126Lp0QXJbSZUVaAw2UKpKaBNIZ87/mdnizGCbgwTkUhG62FRsYumXCN9vz v9s39zjqxeoBVYlu+DLUx9GnInOKK9SUlQ2g8VkyZMsUcPH3qP7SJMXHoArIgVn8 Kv1IKjQRQGaU0Cm3K4aHfrsl1Lu//wFYZZFhjucxGUWkz8Jxrogt7VgqVDeQ9hvd mzh8FoRj074wEmnQ1dQ3CvbYFRempxGENEkFiNVlAvhGBzM3Q2k/HZM/XJ8/LlSS /RZx4F2evUgVOTdlP8arUWtXHUmZnnYou6xLRA53Fhbbl1kzRuZb7rQG -----END CERTIFICATE-----Generated at Tue May 12 22:39:11 2026 by rpki-client