$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer File: D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer (raw, json) Hash identifier: uLB7FxZNgDel8iR0/doowdfA+s8lodt7sgRoqLZnh+U= Subject key identifier: D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4AD771BCD064044D5C16991F47700305ABBE9CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:50:03 +0000 Certificate not after: Sun 02 May 2027 00:55:03 +0000 Subordinate resources: IP: 103.162.106.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d7:71:bc:d0:64:04:4d:5c:16:99:1f:47:70:03:05:ab:be:9c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:50:03 2026 GMT Not After : May 2 00:55:03 2027 GMT Subject: CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:cd:6e:1a:ec:fe:4d:5e:5a:f2:75:ab:4d: 72:b4:ef:d7:00:c6:43:65:37:76:aa:cc:ea:7c:a5: 9b:f9:89:b8:f9:a7:74:6f:62:bc:79:0f:d1:55:0b: ce:46:6d:63:61:64:d7:34:60:d0:35:a3:25:7f:1f: 9f:3e:bb:e4:83:bd:c9:91:c0:a2:7b:c8:18:20:b6: 80:6b:79:32:9f:d9:ab:c8:e4:70:ee:a3:94:90:b5: 02:5d:e3:58:21:ba:cc:69:75:6c:1e:43:e3:7e:d3: ad:f0:2b:e3:f5:60:3b:b3:25:4b:43:c6:a5:e6:d5: e8:bf:b4:78:8f:86:b1:b4:a6:f4:a7:e7:d4:11:81: eb:3b:2e:b1:bc:76:9b:de:da:cf:41:2f:ff:bc:61: cb:54:a9:20:b6:7a:7d:6a:27:23:e2:63:97:59:76: 5a:1b:b6:43:92:3e:15:36:e3:3e:a3:f4:5b:42:56: b7:a9:04:f7:7a:2f:17:4a:a5:6d:a3:76:7b:c0:fd: de:b7:9f:71:9c:f2:7e:80:d7:d1:3a:ab:3e:9f:0c: 52:62:82:fb:d2:88:25:41:59:f1:10:68:66:09:d5: 10:40:98:73:cb:ba:32:1f:31:e4:48:be:f0:a0:2a: 6d:c6:ed:54:45:b7:54:7e:7b:a4:e0:54:53:b6:70: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.106.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:78:b3:08:33:19:07:c0:24:15:d2:73:ce:f8:0e:1d:16:82: d5:94:09:47:d1:86:dd:7f:2f:c5:45:b7:26:3a:3a:11:6a:ee: bc:ca:e2:ed:b2:9c:43:5f:57:52:5b:b8:38:8a:7b:e2:3e:ed: 96:e9:89:a6:82:08:5b:b8:05:64:06:e3:d6:58:47:a6:60:5d: 74:21:6d:4b:38:f2:45:e9:6a:4b:27:0e:51:13:0d:3d:d1:4a: 8d:fb:89:81:3b:ef:99:f9:ec:77:e9:24:c1:c0:ad:cb:2c:2c: 83:3a:97:d6:b1:2c:df:ff:e2:5d:ff:61:dd:49:8a:d4:c2:1a: 96:4d:45:59:4c:fd:0e:a1:21:b8:d5:ba:36:48:aa:ed:c5:76: dc:ec:35:ed:2f:f4:92:9d:91:b2:a4:ed:66:88:a7:77:6e:41: 0d:0c:98:c1:16:45:f8:4f:61:24:e1:1f:01:7e:26:7e:7f:83: a5:6c:df:c3:a4:25:df:33:31:2a:33:de:f1:ed:1d:2b:f7:eb: 64:69:76:fe:0b:07:5d:54:7c:49:b8:37:91:23:c0:19:8a:c2: 4a:ed:9a:82:84:31:52:e0:3a:80:7d:98:ee:0e:8c:b4:65:02: 40:12:04:f4:17:11:34:df:d3:6a:0c:24:38:85:a4:66:5e:c9: 18:13:7d:43 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUStdxvNBkBE1cFpkfR3ADBau+nK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTAwM1oX DTI3MDUwMjAwNTUwM1owMzExMC8GA1UEAxMoRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0 RUM5ODk1OEVCQUM5Mjc4MDBBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOFBzW4a7P5NXlrydatNcrTv1wDGQ2U3dqrM6nylm/mJuPmndG9ivHkP0VUL zkZtY2Fk1zRg0DWjJX8fnz675IO9yZHAonvIGCC2gGt5Mp/Zq8jkcO6jlJC1Al3j WCG6zGl1bB5D437TrfAr4/VgO7MlS0PGpebV6L+0eI+GsbSm9Kfn1BGB6zsusbx2 m97az0Ev/7xhy1SpILZ6fWonI+Jjl1l2Whu2Q5I+FTbjPqP0W0JWt6kE93ovF0ql baN2e8D93refcZzyfoDX0TqrPp8MUmKC+9KIJUFZ8RBoZgnVEECYc8u6Mh8x5Ei+ 8KAqbcbtVEW3VH57pOBUU7ZwHv8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNT2xc2YYp03I3tOyYlY66ySeACiMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY5YmJlNWMwLTc5ZWQtNDZmYS04OTg5LTg4ZDhhY2M4N2NmOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82OWJiZTVj MC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC9ENEY2QzVDRDk4NjI5RDM3 MjM3QjRFQzk4OTU4RUJBQzkyNzgwMEEyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6JqMA0GCSqGSIb3DQEBCwUAA4IBAQCOeLMIMxkHwCQV0nPO+A4dFoLVlAlH 0Ybdfy/FRbcmOjoRau68yuLtspxDX1dSW7g4inviPu2W6YmmgghbuAVkBuPWWEem YF10IW1LOPJF6WpLJw5REw090UqN+4mBO++Z+ex36STBwK3LLCyDOpfWsSzf/+Jd /2HdSYrUwhqWTUVZTP0OoSG41bo2SKrtxXbc7DXtL/SSnZGypO1miKd3bkENDJjB FkX4T2Ek4R8BfiZ+f4OlbN/DpCXfMzEqM97x7R0r9+tkaXb+CwddVHxJuDeRI8AZ isJK7ZqChDFS4DqAfZjuDoy0ZQJAEgT0FxE039NqDCQ4haRmXskYE31D -----END CERTIFICATE-----Generated at Tue May 12 22:10:01 2026 by rpki-client