$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer File: D280C077A9E801FBA933C9D0085012E09D686927.cer (raw, json) Hash identifier: SZX/DnjLGBbqir1wAc3vg3ukHcSH7Ys9tCp/T2VDxhg= Subject key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 464B960E296AD24D8605CFFE4AFC54169BF6723B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft caRepository: rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:08:12 +0000 Certificate not after: Sun 02 May 2027 01:13:12 +0000 Subordinate resources: IP: 103.187.114.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4b:96:0e:29:6a:d2:4d:86:05:cf:fe:4a:fc:54:16:9b:f6:72:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:08:12 2026 GMT Not After : May 2 01:13:12 2027 GMT Subject: CN=D280C077A9E801FBA933C9D0085012E09D686927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:91:cb:32:9b:96:84:fc:a2:95:d2:07:42: ad:3d:cb:e7:0e:8f:72:80:02:b3:50:52:07:15:f1: 23:6f:5f:62:79:b9:3c:49:4b:63:0c:4e:38:db:f4: 03:dc:d9:7f:d2:c4:76:49:ae:ff:91:2d:52:15:38: b2:a8:7d:c2:4a:3e:02:85:6e:c4:93:c1:ba:dc:b9: 78:86:2b:10:75:15:5b:c7:bd:8c:95:54:85:38:29: 23:b2:16:0b:db:bb:64:0c:22:49:07:1b:0d:7f:48: e0:97:7b:5e:16:e0:2d:46:17:17:6f:ee:59:7c:a7: d6:63:78:09:85:0d:61:17:69:c1:ce:54:9d:b0:f8: 7f:0a:b6:e2:f1:09:6d:c2:0b:a6:ae:06:6b:0f:98: 34:64:e5:0a:61:e1:bb:d1:67:d3:9e:8a:23:ab:b6: 1f:63:4d:de:7a:62:7e:42:bb:f2:9e:f8:01:35:8e: 08:7e:65:15:e2:15:0b:b7:f4:51:90:21:2f:00:a9: dd:b8:a7:fb:fa:56:94:03:10:07:b8:98:4a:3b:ef: bf:9a:cf:9e:a7:48:ad:f7:ba:a4:86:54:f8:a0:0b: c6:8c:08:a8:f1:69:d0:4b:b4:70:c9:c8:d6:c5:0c: 36:37:78:1c:5f:78:41:3c:f7:ef:44:32:d1:b1:b5: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.114.0/24 Signature Algorithm: sha256WithRSAEncryption 57:fd:99:99:82:3f:45:c6:ac:d0:78:ee:d4:ec:da:10:d1:a1: 43:5a:81:45:b9:46:ea:8d:4f:59:47:c7:7e:cd:90:6e:ca:ef: a9:99:81:be:17:24:57:a8:6c:cb:1e:09:04:51:83:bd:32:f6: 67:5d:b4:b7:2e:d3:c2:c9:8f:fc:78:70:75:6b:90:33:51:79: 50:0b:b2:59:c6:7c:e9:7b:ba:3c:13:60:d8:01:36:51:e4:1f: a3:35:e0:ef:d9:75:0f:a5:0b:b2:47:cb:84:c5:8e:bb:8b:dc: cd:a9:cd:ad:46:3b:52:10:b5:a9:7c:e6:be:7f:29:8b:d0:29: e5:f2:fd:a4:bb:10:cb:18:f0:0a:fb:17:83:79:53:d3:a8:ce: e8:db:0d:d8:9c:07:6e:b3:f4:71:9f:e6:ba:51:f0:8b:56:1a: 03:13:b7:65:d6:e9:67:5b:a3:85:3c:ea:3e:7e:95:57:a4:5a: 9c:28:c2:76:ad:d6:f9:93:2a:b2:e6:0e:d5:6d:2c:bb:5f:bd: 19:4f:5c:c7:45:3f:92:5b:2e:bb:94:28:2f:95:05:c8:d7:74: 36:df:92:fc:22:26:e6:5b:5d:bc:df:b1:72:8f:8b:22:19:90: 1f:ea:7f:21:98:e2:97:b9:9a:dc:49:38:5d:81:0a:ac:1b:ea: ef:ef:99:fe -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURkuWDilq0k2GBc/+SvxUFpv2cjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDgxMloX DTI3MDUwMjAxMTMxMlowMzExMC8GA1UEAxMoRDI4MEMwNzdBOUU4MDFGQkE5MzND OUQwMDg1MDEyRTA5RDY4NjkyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtBkcsym5aE/KKV0gdCrT3L5w6PcoACs1BSBxXxI29fYnm5PElLYwxOONv0 A9zZf9LEdkmu/5EtUhU4sqh9wko+AoVuxJPButy5eIYrEHUVW8e9jJVUhTgpI7IW C9u7ZAwiSQcbDX9I4Jd7XhbgLUYXF2/uWXyn1mN4CYUNYRdpwc5UnbD4fwq24vEJ bcILpq4Gaw+YNGTlCmHhu9Fn056KI6u2H2NN3npifkK78p74ATWOCH5lFeIVC7f0 UZAhLwCp3bin+/pWlAMQB7iYSjvvv5rPnqdIrfe6pIZU+KALxowIqPFp0Eu0cMnI 1sUMNjd4HF94QTz370Qy0bG1DjUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNKAwHep6AH7qTPJ0AhQEuCdaGknMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgyZmFiNjExLThiZTMtNGI0NC05NTYxLTc1MmExZWRhMDY1Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MmZhYjYx MS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC9EMjgwQzA3N0E5RTgwMUZC QTkzM0M5RDAwODUwMTJFMDlENjg2OTI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7tyMA0GCSqGSIb3DQEBCwUAA4IBAQBX/ZmZgj9FxqzQeO7U7NoQ0aFDWoFF uUbqjU9ZR8d+zZBuyu+pmYG+FyRXqGzLHgkEUYO9MvZnXbS3LtPCyY/8eHB1a5Az UXlQC7JZxnzpe7o8E2DYATZR5B+jNeDv2XUPpQuyR8uExY67i9zNqc2tRjtSELWp fOa+fymL0Cnl8v2kuxDLGPAK+xeDeVPTqM7o2w3YnAdus/Rxn+a6UfCLVhoDE7dl 1ulnW6OFPOo+fpVXpFqcKMJ2rdb5kyqy5g7VbSy7X70ZT1zHRT+SWy67lCgvlQXI 13Q235L8IibmW12837Fyj4siGZAf6n8hmOKXuZrcSThdgQqsG+rv75n+ -----END CERTIFICATE-----Generated at Wed May 13 01:07:07 2026 by rpki-client