$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer File: D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer (raw, json) Hash identifier: esR8WfDF2e/x3Lxh8AFO0XrZahbNrW2t1q7iqBlAKIs= Subject key identifier: D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 100F443C06F3ED0CC143A2D692ACB0F969162E94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:12:11 +0000 Certificate not after: Sun 02 May 2027 01:17:11 +0000 Subordinate resources: IP: 103.172.30.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0f:44:3c:06:f3:ed:0c:c1:43:a2:d6:92:ac:b0:f9:69:16:2e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:12:11 2026 GMT Not After : May 2 01:17:11 2027 GMT Subject: CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:4a:bd:aa:e1:e1:f5:04:a3:f9:74:7b:6c: 39:71:59:6b:4e:cf:03:79:6e:9e:7f:57:93:14:db: ea:83:32:86:ba:90:84:57:b2:17:1a:75:17:72:84: 9f:b9:39:46:73:e1:2e:9d:d7:1c:e1:32:52:54:1b: 32:35:ef:ed:35:fd:67:69:00:13:37:3e:38:74:ea: 84:57:dd:6c:81:0c:11:74:7d:de:06:9b:8b:f4:c6: 17:f6:c1:48:b2:cf:64:e8:da:14:b3:63:c2:88:ff: 1d:ae:d5:13:45:3b:99:2f:92:93:4f:cc:03:b4:22: 1a:fc:9f:47:bf:0e:a2:dd:5b:b5:ca:94:82:5b:07: 87:8c:17:12:e9:43:b1:0d:67:c5:a5:77:61:fa:55: af:03:18:3f:a3:d5:c9:c2:fd:9e:1b:53:ed:62:0e: 50:4c:9c:b7:d1:ac:05:05:94:19:82:b7:f9:58:fe: 34:0c:27:74:34:aa:72:65:92:21:dd:78:b6:2d:43: 0f:ea:f0:60:13:dd:c0:83:ad:ee:22:62:67:97:fd: 6d:51:a0:7e:cb:1b:98:2a:b7:b6:48:b8:22:22:d0: 0f:e9:84:eb:b7:d1:e8:9e:2a:b8:28:0c:1a:37:20: 15:7f:e7:45:ea:5e:44:b3:37:da:5b:17:1c:20:eb: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.30.0/24 Signature Algorithm: sha256WithRSAEncryption 70:1a:14:7f:0d:06:ee:ba:a1:58:5d:ff:b5:ff:c9:6a:26:c7: 67:e8:b1:07:27:2a:5c:06:eb:b5:f1:59:c9:9c:c4:46:06:53: 1b:c1:77:80:ed:f5:bc:c8:2f:7c:8b:25:eb:7c:76:eb:94:95: e9:fe:50:8e:ce:80:13:5b:9f:b7:e0:49:dd:67:17:f1:88:4c: 62:df:72:24:67:c8:cc:de:d6:10:73:ec:43:34:81:43:73:b8: bb:49:fc:b2:9a:54:bb:bb:3d:e6:5a:6f:ac:5d:9e:79:29:0b: 73:db:90:9d:7d:ca:fc:7d:62:04:56:62:f7:0a:0d:0e:e3:fc: f9:fd:e4:7d:bb:a4:f6:4a:47:be:03:e1:03:14:38:f4:fb:bb: ee:44:7a:9e:ab:c0:06:2f:62:9d:85:80:d1:20:2d:45:a1:b3: 8c:d0:d6:a2:33:92:f6:7b:a7:cc:42:9b:1e:ea:09:0e:d7:a5: 13:a1:0b:e4:44:e5:a5:47:94:44:6e:f1:89:f6:05:49:6e:9e: 03:db:46:0b:79:f1:38:9a:86:4d:57:0b:6e:64:da:3d:8a:df: 91:5e:58:42:8f:eb:fc:10:4e:9f:5d:48:b7:0f:06:8d:7c:51: 28:31:39:d0:64:7a:15:6c:2f:4c:a0:aa:9b:a9:d3:89:9b:f7: 8a:87:f9:77 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEA9EPAbz7QzBQ6LWkqyw+WkWLpQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTIxMVoX DTI3MDUwMjAxMTcxMVowMzExMC8GA1UEAxMoRDQ2OUU2QzQ4MkYwNURGRDUyOEVC OUQxRTEzN0E5ODk4NkMyQUE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVkSr2q4eH1BKP5dHtsOXFZa07PA3lunn9XkxTb6oMyhrqQhFeyFxp1F3KE n7k5RnPhLp3XHOEyUlQbMjXv7TX9Z2kAEzc+OHTqhFfdbIEMEXR93gabi/TGF/bB SLLPZOjaFLNjwoj/Ha7VE0U7mS+Sk0/MA7QiGvyfR78Oot1btcqUglsHh4wXEulD sQ1nxaV3YfpVrwMYP6PVycL9nhtT7WIOUEyct9GsBQWUGYK3+Vj+NAwndDSqcmWS Id14ti1DD+rwYBPdwIOt7iJiZ5f9bVGgfssbmCq3tki4IiLQD+mE67fR6J4quCgM GjcgFX/nRepeRLM32lsXHCDr0BkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNRp5sSC8F39Uo650eE3qYmGwqpkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg5MTliODBkLTQ2OTMtNDA5NS1hOWUzLTQxMmUxMjgyOGZmMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84OTE5Yjgw ZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC9ENDY5RTZDNDgyRjA1REZE NTI4RUI5RDFFMTM3QTk4OTg2QzJBQTY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6weMA0GCSqGSIb3DQEBCwUAA4IBAQBwGhR/DQbuuqFYXf+1/8lqJsdn6LEH JypcBuu18VnJnMRGBlMbwXeA7fW8yC98iyXrfHbrlJXp/lCOzoATW5+34EndZxfx iExi33IkZ8jM3tYQc+xDNIFDc7i7SfyymlS7uz3mWm+sXZ55KQtz25Cdfcr8fWIE VmL3Cg0O4/z5/eR9u6T2Ske+A+EDFDj0+7vuRHqeq8AGL2KdhYDRIC1FobOM0Nai M5L2e6fMQpse6gkO16UToQvkROWlR5REbvGJ9gVJbp4D20YLefE4moZNVwtuZNo9 it+RXlhCj+v8EE6fXUi3DwaNfFEoMTnQZHoVbC9MoKqbqdOJm/eKh/l3 -----END CERTIFICATE-----Generated at Tue May 12 22:47:51 2026 by rpki-client