$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer File: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer (raw, json) Hash identifier: HQdmaFOXwtTHy1aKJ8o7hdgaZZY/sDLyVhKvIIjypNE= Subject key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 560D1DD71D4FF9530322203641CA93739D5BAB78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:26 +0000 Certificate not after: Sun 02 May 2027 01:41:26 +0000 Subordinate resources: IP: 103.145.66.0/23 IP: 2001:df1:ff80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0d:1d:d7:1d:4f:f9:53:03:22:20:36:41:ca:93:73:9d:5b:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:36:26 2026 GMT Not After : May 2 01:41:26 2027 GMT Subject: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:3a:50:38:30:72:11:10:58:0b:7e:2c:bb: 6e:10:59:54:d6:d1:6d:f7:2a:43:dd:36:b7:43:3b: ea:e7:63:43:3c:01:4e:49:00:2d:54:ab:36:12:d1: 3d:bd:3a:8c:3a:a2:86:19:3d:75:26:39:21:0b:ba: ba:a8:f9:20:a0:2c:62:7d:2c:39:ed:dc:c7:f3:ba: d9:42:ef:a9:93:5e:7b:a8:26:7a:e5:9b:dd:cd:cb: 50:06:04:30:c1:e6:49:2b:0f:a0:50:5c:14:ed:f2: 89:ae:57:17:fc:8a:8f:e2:e6:1d:47:9c:ce:88:c1: 67:b9:30:83:ef:fa:80:6c:d6:4b:14:2c:6b:42:ab: cc:2f:f3:18:57:46:d1:9d:ef:8f:98:d0:1b:d9:c9: 85:bf:37:42:47:18:b6:aa:d2:0c:78:e7:2a:27:e1: ad:b3:49:c0:29:a4:b1:e0:94:1f:f6:48:1b:74:ca: 2c:4c:73:cd:79:77:10:51:60:9e:2f:4a:45:87:71: 51:f5:30:75:5d:3d:67:6d:19:c0:17:96:af:24:24: c0:14:f0:30:7e:9e:9d:bc:1a:2d:e1:06:78:89:e8: 82:81:de:d5:e2:d2:7c:39:ba:88:ee:62:ad:5b:91: 04:c0:47:4f:92:2c:4a:16:7a:32:59:cf:96:6e:c0: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.66.0/23 IPv6: 2001:df1:ff80::/48 Signature Algorithm: sha256WithRSAEncryption 6f:2d:07:be:3b:81:8c:e8:65:63:21:12:a9:4e:ec:0b:6b:cd: 46:61:ac:88:f2:1a:21:79:27:9d:af:f4:ed:a4:bd:9c:84:2b: f8:1d:28:0f:bb:34:ee:df:f1:d2:88:9d:a8:de:8c:12:4f:c9: 0b:b3:bc:d8:5f:d4:47:7a:ae:03:ae:59:b7:cd:61:3f:2e:41: 36:64:bd:01:95:50:75:1d:1a:90:d1:f2:6b:c2:8c:5e:09:b8: a0:b0:9b:85:e4:c3:29:c5:ed:a6:29:98:a2:0a:82:13:0d:f6: 5a:64:fd:c6:09:ca:d6:b6:63:9b:42:9c:8d:d5:18:c4:d9:43: 44:50:22:27:b2:7e:ec:2a:f7:cf:56:4c:82:66:1a:87:31:41: 72:6f:49:56:93:a1:2a:6b:7b:95:40:f3:ae:42:8f:aa:90:bd: d9:4e:f2:2a:36:d8:e5:fd:c9:7b:9e:45:bb:23:83:bc:7a:53: 2b:73:06:1a:c4:ac:d5:ea:e3:01:b2:a8:66:ba:93:04:18:54: 4f:ca:c7:ca:43:51:54:f4:2a:68:2f:5c:64:fb:eb:50:75:69: 26:cf:15:b1:29:ba:a0:2e:5d:33:7a:52:14:b0:d5:76:1f:fd: 3c:64:97:b1:3b:fe:fd:57:f6:6d:7d:04:c3:b3:e3:af:ce:95: c6:23:90:9f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUVg0d1x1P+VMDIiA2QcqTc51bq3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzYyNloX DTI3MDUwMjAxNDEyNlowMzExMC8GA1UEAxMoRDRCNTNBNkE1QkVGOTlCNUNENjhC MTQ2NzQ0QTg3RTE2MzJDMjRGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkpOlA4MHIREFgLfiy7bhBZVNbRbfcqQ902t0M76udjQzwBTkkALVSrNhLR Pb06jDqihhk9dSY5IQu6uqj5IKAsYn0sOe3cx/O62ULvqZNee6gmeuWb3c3LUAYE MMHmSSsPoFBcFO3yia5XF/yKj+LmHUeczojBZ7kwg+/6gGzWSxQsa0KrzC/zGFdG 0Z3vj5jQG9nJhb83QkcYtqrSDHjnKifhrbNJwCmkseCUH/ZIG3TKLExzzXl3EFFg ni9KRYdxUfUwdV09Z20ZwBeWryQkwBTwMH6enbwaLeEGeInogoHe1eLSfDm6iO5i rVuRBMBHT5IsShZ6MlnPlm7ANSUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNS1Ompb75m1zWixRnRKh+FjLCT4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FlMTkxMWI5LTFkMmYtNGJiNC05ZDc1LTlhYTNjMzUxMDBlOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZTE5MTFi OS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC9ENEI1M0E2QTVCRUY5OUI1 Q0Q2OEIxNDY3NDRBODdFMTYzMkMyNEY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5FCMA8EAgACMAkDBwAgAQ3x/4AwDQYJKoZIhvcNAQELBQADggEBAG8tB747 gYzoZWMhEqlO7AtrzUZhrIjyGiF5J52v9O2kvZyEK/gdKA+7NO7f8dKInajejBJP yQuzvNhf1Ed6rgOuWbfNYT8uQTZkvQGVUHUdGpDR8mvCjF4JuKCwm4XkwynF7aYp mKIKghMN9lpk/cYJyta2Y5tCnI3VGMTZQ0RQIieyfuwq989WTIJmGocxQXJvSVaT oSpre5VA865Cj6qQvdlO8io22OX9yXueRbsjg7x6UytzBhrErNXq4wGyqGa6kwQY VE/Kx8pDUVT0KmgvXGT761B1aSbPFbEpuqAuXTN6UhSw1XYf/Txkl7E7/v1X9m19 BMOz46/OlcYjkJ8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:09 2026 by rpki-client