$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer File: CA547F005E84823E6A8A471723C17168E8E44644.cer (raw, json) Hash identifier: cqBoT/zPby6EMzZHPogLpMjYDsVZnWTdcoWf7Q1pY3s= Subject key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 13EA2C971664E612E813F79F34EA5E5B4376CD82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:14:38 +0000 Certificate not after: Sun 02 May 2027 01:19:38 +0000 Subordinate resources: IP: 103.10.136.0/22 IP: 114.199.80.0/20 IP: 202.47.64.0/20 IP: 202.52.8.0/22 IP: 202.58.216.0/21 IP: 2402:fc00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ea:2c:97:16:64:e6:12:e8:13:f7:9f:34:ea:5e:5b:43:76:cd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:14:38 2026 GMT Not After : May 2 01:19:38 2027 GMT Subject: CN=CA547F005E84823E6A8A471723C17168E8E44644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:d4:a8:ec:b7:35:22:de:6e:ff:7d:ec:b6: f2:95:b6:d5:d7:3d:bd:d3:14:8c:43:11:a9:9f:57: 19:84:d9:b9:1f:c7:62:f8:71:a7:68:d1:1f:99:35: 66:be:73:ef:83:2e:e7:d0:b0:9e:0c:6b:8b:83:3c: 4e:91:08:d2:24:e0:e4:15:5e:c8:8d:76:c1:42:ea: 0c:c8:1e:cf:44:b2:c7:d3:af:1d:ec:d8:6a:22:f5: 35:98:e4:9b:f1:bc:9b:87:17:94:f2:93:8d:af:84: ab:bb:01:ec:29:43:49:09:8e:1b:21:ba:71:dc:fc: 02:fa:fe:17:2a:94:cd:c5:4c:71:e9:a7:3b:ff:93: f5:26:73:ba:8e:da:94:4e:94:58:82:53:44:0d:c7: 99:03:46:0e:d7:6a:ee:c7:95:84:96:ab:a6:6f:65: d7:6b:51:82:3f:8f:34:cd:7d:8b:97:61:22:4a:99: ae:49:ab:3e:79:95:64:01:f9:ad:57:23:33:29:19: 75:25:af:d8:ab:52:d6:54:f1:47:06:86:89:0e:3f: 0c:29:53:b2:df:4c:64:d4:08:c8:57:29:69:80:d6: 00:d2:a1:70:2a:17:47:04:c0:5b:12:b6:3e:83:bb: f7:e0:c8:ba:c6:ab:c6:a9:2e:9f:1f:c5:51:ad:74: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.136.0/22 114.199.80.0/20 202.47.64.0/20 202.52.8.0/22 202.58.216.0/21 IPv6: 2402:fc00::/32 Signature Algorithm: sha256WithRSAEncryption a6:ff:21:de:bf:c2:5d:7c:9d:e8:7e:85:4d:fc:57:54:3a:89: db:22:a0:5d:ec:3e:09:26:0f:84:f9:bd:06:61:3d:1c:8f:7b: 4e:c4:e5:41:9a:e5:fb:be:fd:52:1f:20:31:80:36:16:46:26: 1c:3f:a9:78:3f:d1:f7:95:cf:f1:ba:f8:83:e8:1b:e3:98:2b: fe:b2:64:13:ff:b6:f6:54:7b:16:d7:4a:5d:d2:aa:21:20:9e: 56:79:43:a3:7d:53:a2:2c:0a:eb:2b:c8:25:eb:43:68:f1:76: 21:10:16:d0:10:1d:f3:d2:e3:e9:59:b7:4d:8d:f9:85:71:5d: 12:38:f5:31:fc:d1:0f:56:2c:33:08:fb:d5:61:62:fc:4c:7e: 84:12:24:b8:5f:2b:71:39:83:15:4c:e0:ad:24:69:65:25:ee: 05:c7:ff:eb:81:1d:00:cb:6d:66:f5:ce:75:f3:e1:d0:3e:04: 04:68:fe:01:c3:d4:90:79:ba:96:cb:30:30:2f:2d:a2:cd:e2: 63:24:63:8c:2d:ac:c1:e3:fe:dc:57:ef:98:6f:6c:90:a9:86: 63:c4:f9:fe:e9:66:0e:7f:4d:d2:e2:93:5c:99:cc:95:c9:e3: e1:f5:d2:70:6a:9e:ea:2a:8e:09:53:7f:4d:52:74:1e:8e:7d: fd:1e:61:1c -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUE+oslxZk5hLoE/efNOpeW0N2zYIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTQzOFoX DTI3MDUwMjAxMTkzOFowMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0 NzE3MjNDMTcxNjhFOEU0NDY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8F1KjstzUi3m7/fey28pW21dc9vdMUjEMRqZ9XGYTZuR/HYvhxp2jRH5k1 Zr5z74Mu59Cwngxri4M8TpEI0iTg5BVeyI12wULqDMgez0Syx9OvHezYaiL1NZjk m/G8m4cXlPKTja+Eq7sB7ClDSQmOGyG6cdz8Avr+FyqUzcVMcemnO/+T9SZzuo7a lE6UWIJTRA3HmQNGDtdq7seVhJarpm9l12tRgj+PNM19i5dhIkqZrkmrPnmVZAH5 rVcjMykZdSWv2KtS1lTxRwaGiQ4/DClTst9MZNQIyFcpaYDWANKhcCoXRwTAWxK2 PoO79+DIusarxqkunx/FUa10tC0CAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMpUfwBehII+aopHFyPBcWjo5EZEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhjZWJmMTE2LWZlMmEtNDkxYi1hYWM4LTIyMGVhZDBiNTRlMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84Y2ViZjEx Ni1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9DQTU0N0YwMDVFODQ4MjNF NkE4QTQ3MTcyM0MxNzE2OEU4RTQ0NjQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAe AwQCZwqIAwQEcsdQAwQEyi9AAwQCyjQIAwQDyjrYMA0EAgACMAcDBQAkAvwAMA0G CSqGSIb3DQEBCwUAA4IBAQCm/yHev8JdfJ3ofoVN/FdUOonbIqBd7D4JJg+E+b0G YT0cj3tOxOVBmuX7vv1SHyAxgDYWRiYcP6l4P9H3lc/xuviD6BvjmCv+smQT/7b2 VHsW10pd0qohIJ5WeUOjfVOiLArrK8gl60No8XYhEBbQEB3z0uPpWbdNjfmFcV0S OPUx/NEPViwzCPvVYWL8TH6EEiS4XytxOYMVTOCtJGllJe4Fx//rgR0Ay21m9c51 8+HQPgQEaP4Bw9SQebqWyzAwLy2izeJjJGOMLazB4/7cV++Yb2yQqYZjxPn+6WYO f03S4pNcmcyVyePh9dJwap7qKo4JU39NUnQejn39HmEc -----END CERTIFICATE-----Generated at Wed May 13 02:47:35 2026 by rpki-client