$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer (raw, json) Hash identifier: 208eANB7uc4p8/mvwWXuKR2KKYYxBV4qrqPuCfLxYUU= Subject key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E96F4369FE18DE359E98A7DEBD0C983AB359F06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:31:44 +0000 Certificate not after: Sun 02 May 2027 02:36:44 +0000 Subordinate resources: IP: 103.23.224.0/22 IP: 203.6.148.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:96:f4:36:9f:e1:8d:e3:59:e9:8a:7d:eb:d0:c9:83:ab:35:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:31:44 2026 GMT Not After : May 2 02:36:44 2027 GMT Subject: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:84:df:75:91:2a:d9:12:c6:bb:03:91:61: 44:f2:31:23:d1:cd:55:d8:22:60:6a:ec:37:31:37: ba:f9:ba:0e:b0:8b:de:52:1e:41:f4:7f:26:c1:75: f4:a0:65:14:0e:1b:15:30:d1:6b:75:ed:d0:1f:23: cf:15:4b:cb:f3:e6:1a:6a:d9:3d:64:fe:52:5a:7c: 3d:e5:af:11:7a:58:15:52:a9:5c:64:d1:0f:59:3f: 97:10:e9:7d:a5:52:77:26:f4:e3:06:6a:41:e6:31: 96:42:2d:09:df:a8:6b:73:d8:e3:3c:7c:da:e8:8c: 61:2c:2f:c9:01:ce:67:74:0c:36:37:3e:b2:00:5b: 8f:b2:bd:4f:71:9c:7a:2c:8e:85:2e:bf:92:34:05: 16:6f:6a:dc:12:95:56:c0:31:4d:8f:ce:2e:9b:fe: ba:7b:9c:02:23:9a:41:09:75:5e:ea:62:4a:d8:fd: ad:6d:22:f6:ce:5f:40:ba:2c:34:06:64:03:7b:bd: 45:35:60:40:f8:f9:e9:75:dd:d7:39:da:7b:06:a5: ae:e3:c5:84:58:ac:13:9e:57:e2:dc:d1:2b:d3:05: ee:33:15:a9:1b:1f:3a:8b:f5:09:99:cb:de:3a:08: c1:55:e6:42:7e:a2:70:12:b8:93:c4:90:4c:95:1e: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.224.0/22 203.6.148.0/23 Signature Algorithm: sha256WithRSAEncryption 89:80:6a:f9:c6:58:be:4a:07:c7:8d:b6:ba:47:c1:fe:a4:26: d2:02:34:10:dd:04:b9:f6:a9:66:5a:fc:49:86:a7:bb:c2:79: 8d:3f:10:be:4b:1a:bd:3c:ee:df:be:79:87:9d:d3:4a:31:2c: 82:17:1d:b6:ca:ae:3a:81:7c:5c:50:cc:89:73:9c:da:93:cb: 9d:90:ab:39:85:38:34:bc:0c:cf:3e:44:ba:52:eb:52:e8:8f: 2d:57:ec:16:63:64:44:95:b7:0c:68:cf:fb:8e:ad:f9:d2:ed: c9:92:bc:55:50:f3:b7:54:1f:71:70:5f:ff:93:ca:0e:3b:0d: c9:81:6c:04:bb:83:97:0f:c5:ae:33:7f:fa:14:54:9e:17:b8: f4:7e:93:ca:e9:ec:3b:70:c3:1d:4b:9c:ed:bb:be:fc:83:62: dc:e2:c8:43:a5:0f:cd:6c:e7:4d:ad:7a:2a:29:49:8f:80:d3: 82:f1:5f:10:99:3a:02:bd:fc:db:8a:18:ce:6c:c0:bc:93:2e: f7:2f:8c:81:9e:94:a6:c6:7c:38:34:aa:83:e5:41:d7:08:d8: 84:c2:96:0e:37:7f:cf:aa:f0:5d:20:23:08:49:01:55:d3:59: 39:a4:17:c7:69:16:37:3c:5d:43:25:d5:6e:f8:c0:ac:e6:94: f4:0a:26:44 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIULpb0Np/hjeNZ6Yp969DJg6s1nwYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzE0NFoX DTI3MDUwMjAyMzY0NFowMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4 RTk4MTY0QTdDNUQwMDEyRTRBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCxhN91kSrZEsa7A5FhRPIxI9HNVdgiYGrsNzE3uvm6DrCL3lIeQfR/JsF1 9KBlFA4bFTDRa3Xt0B8jzxVLy/PmGmrZPWT+Ulp8PeWvEXpYFVKpXGTRD1k/lxDp faVSdyb04wZqQeYxlkItCd+oa3PY4zx82uiMYSwvyQHOZ3QMNjc+sgBbj7K9T3Gc eiyOhS6/kjQFFm9q3BKVVsAxTY/OLpv+unucAiOaQQl1XupiStj9rW0i9s5fQLos NAZkA3u9RTVgQPj56XXd1znaewalruPFhFisE55X4tzRK9MF7jMVqRsfOov1CZnL 3joIwVXmQn6icBK4k8SQTJUeTksCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNRypQx/ESbx2X6OmBZKfF0AEuSrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YxZTQ2MzY1LTc0ZDMtNGU2MC05NTJhLWY5NDI4MDk2MDAxZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMWU0NjM2 NS03NGQzLTRlNjAtOTUyYS1mOTQyODA5NjAwMWQvMC9ENDcyQTUwQzdGMTEyNkYx RDk3RThFOTgxNjRBN0M1RDAwMTJFNEFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCZxfgAwQBywaUMA0GCSqGSIb3DQEBCwUAA4IBAQCJgGr5xli+SgfHjba6R8H+ pCbSAjQQ3QS59qlmWvxJhqe7wnmNPxC+Sxq9PO7fvnmHndNKMSyCFx22yq46gXxc UMyJc5zak8udkKs5hTg0vAzPPkS6UutS6I8tV+wWY2RElbcMaM/7jq350u3JkrxV UPO3VB9xcF//k8oOOw3JgWwEu4OXD8WuM3/6FFSeF7j0fpPK6ew7cMMdS5ztu778 g2Lc4shDpQ/NbOdNrXoqKUmPgNOC8V8QmToCvfzbihjObMC8ky73L4yBnpSmxnw4 NKqD5UHXCNiEwpYON3/PqvBdICMISQFV01k5pBfHaRY3PF1DJdVu+MCs5pT0CiZE -----END CERTIFICATE-----Generated at Tue May 12 22:16:38 2026 by rpki-client