$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer (raw, json) Hash identifier: cMpG+nz3kdoSIrPxnE+EEQNIVvhDR1rk2OGOeZuJLUE= Subject key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45425E3E5C73A0A014E250909007265C584D01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:03 +0000 Certificate not after: Sun 02 May 2027 01:10:03 +0000 Subordinate resources: IP: 103.149.180.0/24 IP: 2001:df3:3580::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:42:5e:3e:5c:73:a0:a0:14:e2:50:90:90:07:26:5c:58:4d:01:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:05:03 2026 GMT Not After : May 2 01:10:03 2027 GMT Subject: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:02:41:b7:3a:1b:20:42:15:50:ad:3b:f1: 33:73:89:d5:77:cb:b4:14:e2:2a:1f:00:19:0e:6e: 16:dc:6b:b0:49:5e:21:ca:37:12:40:3c:f8:e1:23: b9:0c:99:48:2e:e4:92:77:d6:2f:57:bf:32:c2:9f: ab:db:83:4d:78:90:2f:27:4d:5c:67:6f:47:ee:79: 45:be:1e:4e:bb:89:d1:63:a6:30:d0:b9:0e:e9:b7: 1a:4d:e8:db:08:9a:4b:38:bc:12:9c:83:13:c4:29: 60:6d:1f:4a:18:76:cb:6b:15:c5:e4:4d:32:44:22: 1d:6a:b6:16:24:6a:0c:77:e7:0b:c5:6d:08:0a:ab: 64:6c:cd:24:05:96:65:18:a8:ed:18:71:f1:c0:53: e6:17:85:20:87:b7:39:9c:e9:c9:66:aa:4b:95:51: 69:73:c2:c0:90:2e:b7:29:8c:53:08:8c:a5:f0:20: 18:da:ff:3d:75:e5:bc:a3:5f:63:a2:d9:bf:3d:54: 13:db:fe:2a:2c:22:c2:1c:50:b2:ed:e1:f7:79:b7: 83:ca:3a:6c:b8:a4:a9:bf:54:5a:2f:7a:64:2b:50: 87:b7:f4:f8:a8:35:69:d9:79:da:69:11:cb:02:33: 5e:8c:d2:fa:e2:df:81:3e:16:67:05:c3:f3:73:bf: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.180.0/24 IPv6: 2001:df3:3580::/48 Signature Algorithm: sha256WithRSAEncryption 11:d7:5b:1f:ea:47:58:6c:c8:10:2b:56:68:ec:74:a2:f5:91: f4:68:6a:33:04:7b:88:51:87:db:bf:7d:64:e5:a8:4b:56:d9: 2b:41:8b:6b:de:30:3c:84:9e:cc:82:d3:ce:55:66:17:cf:6b: 17:f4:e4:c6:cc:b2:0f:33:ec:66:d7:df:ba:f7:85:b3:56:f7: 33:be:2a:60:9c:03:ff:d6:f8:a6:f7:06:0d:02:3f:d1:a9:37: 44:11:6d:f3:c1:6e:03:64:2d:32:80:20:7f:cf:2d:02:dc:b1: 88:7b:b0:0b:21:f2:db:7d:fb:48:25:5e:26:e1:d1:95:68:97: 9e:5a:01:8e:b4:b7:c8:d0:2e:ea:ad:f4:0f:15:e5:b1:32:d5: 9f:e4:c4:f2:c4:32:61:b0:09:04:79:5b:31:13:91:f3:cf:02: 6d:48:b8:83:6e:91:cc:c0:03:6d:23:95:ac:f5:1e:e2:16:d6: ee:e7:97:f9:7e:bf:cf:10:78:61:f4:9e:31:f4:58:8c:be:4b: e1:85:75:d4:f0:d1:80:ca:29:80:89:db:91:2b:57:c6:b6:1a: 8b:7e:9d:59:d6:4a:46:1f:c3:a3:cc:74:97:ae:fb:2e:cd:ca: e7:b1:a3:3a:ef:35:7e:85:e6:5b:0c:3e:a9:73:38:68:9b:b4: 2e:71:b6:c2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIURUJePlxzoKAU4lCQkAcmXFhNAckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDUwM1oX DTI3MDUwMjAxMTAwM1owMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5 ODI4QzAzMTQxQjI2Q0I3NDA2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd9AkG3OhsgQhVQrTvxM3OJ1XfLtBTiKh8AGQ5uFtxrsEleIco3EkA8+OEj uQyZSC7kknfWL1e/MsKfq9uDTXiQLydNXGdvR+55Rb4eTruJ0WOmMNC5Dum3Gk3o 2wiaSzi8EpyDE8QpYG0fShh2y2sVxeRNMkQiHWq2FiRqDHfnC8VtCAqrZGzNJAWW ZRio7Rhx8cBT5heFIIe3OZzpyWaqS5VRaXPCwJAutymMUwiMpfAgGNr/PXXlvKNf Y6LZvz1UE9v+KiwiwhxQsu3h93m3g8o6bLikqb9UWi96ZCtQh7f0+Kg1adl52mkR ywIzXozS+uLfgT4WZwXD83O/mv0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMXdLeiiWyq528KYKMAxQbJst0BpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlOWUwMWJhLTU5YzktNDA0Ny1hYzBiLWU5YjJmZTY1ODUzYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZTllMDFi YS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC9DNUREMkRFOEEyNUIyQUI5 REJDMjk4MjhDMDMxNDFCMjZDQjc0MDY5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5W0MA8EAgACMAkDBwAgAQ3zNYAwDQYJKoZIhvcNAQELBQADggEBABHXWx/q R1hsyBArVmjsdKL1kfRoajMEe4hRh9u/fWTlqEtW2StBi2veMDyEnsyC085VZhfP axf05MbMsg8z7GbX37r3hbNW9zO+KmCcA//W+Kb3Bg0CP9GpN0QRbfPBbgNkLTKA IH/PLQLcsYh7sAsh8tt9+0glXibh0ZVol55aAY60t8jQLuqt9A8V5bEy1Z/kxPLE MmGwCQR5WzETkfPPAm1IuINukczAA20jlaz1HuIW1u7nl/l+v88QeGH0njH0WIy+ S+GFddTw0YDKKYCJ25ErV8a2Got+nVnWSkYfw6PMdJeu+y7NyuexozrvNX6F5lsM PqlzOGibtC5xtsI= -----END CERTIFICATE-----Generated at Tue May 12 22:04:08 2026 by rpki-client