$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer File: CD845730E45E4D531071D97C1EDC23DA378D662F.cer (raw, json) Hash identifier: GF9gZDCJc46hjzDC/ZlQVawNursaOM7GUsmsFeX66BA= Subject key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5ECCA348359E7DDD6C037F2CD9C4156259F6AF75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:57:07 +0000 Certificate not after: Sun 02 May 2027 02:02:07 +0000 Subordinate resources: IP: 103.114.52.0/23 IP: 2001:df4:f300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cc:a3:48:35:9e:7d:dd:6c:03:7f:2c:d9:c4:15:62:59:f6:af:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:57:07 2026 GMT Not After : May 2 02:02:07 2027 GMT Subject: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:cd:2b:c0:06:f1:3d:a4:1d:20:30:e9:44: 86:dd:67:23:7c:69:1e:60:71:53:3a:2a:68:71:88: 49:a2:f2:0e:e6:53:3f:a1:97:ee:84:a5:aa:57:5e: 16:c1:67:0a:62:e5:e8:a5:4b:2e:72:cc:e0:4c:87: bd:6e:0f:bc:a6:23:e6:0e:99:5d:2e:66:31:fb:ec: f5:3c:8e:9a:7e:8f:be:78:58:21:50:91:de:10:b7: 83:8e:6d:ff:02:a8:2a:0f:af:fb:2d:90:a2:14:76: 96:b6:03:7c:59:0a:5d:84:63:b2:65:d7:71:78:0f: 76:92:61:c2:f1:a9:79:cb:28:69:4d:f7:bc:fe:c2: af:5a:9b:24:31:c0:17:19:e9:8c:c6:bc:22:16:7e: 61:fc:88:30:86:a1:ea:22:86:bd:82:18:fc:be:96: e3:6c:f4:ae:51:d1:c5:31:9d:47:8e:c6:df:da:f1: 3a:2d:d0:ab:9d:ce:fd:87:af:83:c5:1d:36:7b:8d: 2d:c4:72:30:80:14:fd:ac:f3:b3:59:38:b4:6f:29: a7:c8:b2:24:bf:78:24:53:5b:36:40:c2:a7:8b:fc: 21:94:cb:91:d7:62:2a:65:19:70:ff:36:8f:21:b5: ee:f6:ed:f6:66:2b:1c:1f:b9:b4:b1:71:77:17:0e: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.52.0/23 IPv6: 2001:df4:f300::/48 Signature Algorithm: sha256WithRSAEncryption 43:bb:8a:89:29:94:ef:2f:71:dd:62:dd:4e:a1:99:c2:59:e9: 89:3b:f7:79:5f:08:37:ab:97:a3:75:73:33:2b:9d:c8:da:c7: 72:f3:25:94:48:ae:c8:41:15:58:98:a7:2c:74:8d:96:9c:19: 42:49:cc:98:bc:a2:eb:cf:87:42:2b:6a:d0:53:de:56:55:63: bd:44:f2:48:4d:62:4b:5d:ec:80:a1:29:e5:5b:99:23:46:7d: f3:f7:55:d2:75:49:49:17:05:25:e1:a7:8f:64:1c:bb:c2:3b: e8:34:8f:04:23:9b:70:57:3a:eb:80:29:f5:61:47:dc:c0:c7: 6c:18:6d:f2:8d:60:9c:76:bf:78:9d:bb:a8:26:d9:e0:54:61: 11:c7:63:e8:04:f1:19:bb:73:de:9e:3d:79:94:6b:9c:01:f8: 26:c1:74:22:a7:21:e5:78:fe:77:39:a4:b6:6b:43:f8:2c:0e: d9:08:41:79:8d:33:40:29:1d:3f:b2:2b:c0:5c:15:fb:5e:62: 2b:3b:b0:92:20:00:b8:94:1b:60:bd:fa:eb:98:ba:68:98:c8: ba:b4:ad:b3:93:8d:77:91:32:00:31:95:c4:2b:85:19:d3:50: aa:06:98:e8:75:39:07:b9:45:64:e7:7f:3d:c2:34:c8:04:48: fe:3b:19:f1 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXsyjSDWefd1sA38s2cQVYln2r3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTcwN1oX DTI3MDUwMjAyMDIwN1owMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFE OTdDMUVEQzIzREEzNzhENjYyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOgzSvABvE9pB0gMOlEht1nI3xpHmBxUzoqaHGISaLyDuZTP6GX7oSlqlde FsFnCmLl6KVLLnLM4EyHvW4PvKYj5g6ZXS5mMfvs9TyOmn6PvnhYIVCR3hC3g45t /wKoKg+v+y2QohR2lrYDfFkKXYRjsmXXcXgPdpJhwvGpecsoaU33vP7Cr1qbJDHA FxnpjMa8IhZ+YfyIMIah6iKGvYIY/L6W42z0rlHRxTGdR47G39rxOi3Qq53O/Yev g8UdNnuNLcRyMIAU/azzs1k4tG8pp8iyJL94JFNbNkDCp4v8IZTLkddiKmUZcP82 jyG17vbt9mYrHB+5tLFxdxcOHpsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM2EVzDkXk1TEHHZfB7cI9o3jWYvMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QwOTYyYzZlLTU5NWEtNDdjNC1hYTdjLWVmOGU3N2NhZTY0Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMDk2MmM2 ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9DRDg0NTczMEU0NUU0RDUz MTA3MUQ5N0MxRURDMjNEQTM3OEQ2NjJGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ3I0MA8EAgACMAkDBwAgAQ308wAwDQYJKoZIhvcNAQELBQADggEBAEO7iokp lO8vcd1i3U6hmcJZ6Yk793lfCDerl6N1czMrncjax3LzJZRIrshBFViYpyx0jZac GUJJzJi8ouvPh0IratBT3lZVY71E8khNYktd7IChKeVbmSNGffP3VdJ1SUkXBSXh p49kHLvCO+g0jwQjm3BXOuuAKfVhR9zAx2wYbfKNYJx2v3idu6gm2eBUYRHHY+gE 8Rm7c96ePXmUa5wB+CbBdCKnIeV4/nc5pLZrQ/gsDtkIQXmNM0ApHT+yK8BcFfte Yis7sJIgALiUG2C9+uuYumiYyLq0rbOTjXeRMgAxlcQrhRnTUKoGmOh1OQe5RWTn fz3CNMgESP47GfE= -----END CERTIFICATE-----Generated at Wed May 13 01:07:09 2026 by rpki-client