$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer (raw, json) Hash identifier: ITH8XF8x5Xyzr4286w6vHSqDwm5YeFNImhDbwVss3Io= Subject key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3946DFD5E367A93B82F70D5763002165623BE01E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:08 +0000 Certificate not after: Sun 02 May 2027 02:03:08 +0000 Subordinate resources: IP: 103.182.138.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:46:df:d5:e3:67:a9:3b:82:f7:0d:57:63:00:21:65:62:3b:e0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:08 2026 GMT Not After : May 2 02:03:08 2027 GMT Subject: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:09:0f:b5:29:9b:d1:9d:f8:97:b0:17:b2:fe: e2:91:d9:95:75:34:71:ea:67:81:37:f9:a6:df:8c: 2d:0a:ff:4a:24:bf:76:0c:e6:77:2a:c6:28:c9:38: ce:8d:a3:5f:0e:1f:3f:6a:43:22:37:55:51:c6:3c: 45:c0:cf:26:a4:ff:9f:d1:80:e4:d9:78:eb:8b:08: d6:1f:fc:2a:b0:77:c6:b0:5c:c8:a8:04:86:4a:0f: 31:28:af:ce:6b:37:d9:52:1f:74:8b:9f:d4:6f:a0: 42:ee:cc:ac:a5:1b:68:32:61:b0:09:a0:5b:1f:8b: a4:64:60:d6:46:d6:e5:a2:13:7d:c0:6c:6c:b5:5f: 6f:06:af:20:e8:2c:8e:6b:39:af:8a:e7:20:65:a8: 7f:70:7e:b1:0d:53:ac:54:d4:7a:c5:78:5b:52:ae: 7a:9e:c0:80:59:0c:97:73:5d:89:33:87:73:d6:98: 7c:1d:67:de:90:17:33:14:38:be:a1:9b:b0:ba:95: f3:f9:21:bf:04:c3:e5:72:da:77:c3:78:ce:1f:59: b9:15:e0:4a:46:c1:a1:bf:b2:84:6d:f3:fb:16:3c: 30:59:61:90:cc:7b:b7:45:69:61:e4:9e:2d:a3:98: b3:6a:9a:fc:d5:ea:3b:ae:dd:b0:6a:19:c2:01:cc: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.138.0/23 Signature Algorithm: sha256WithRSAEncryption 27:f7:d1:36:1a:25:b8:17:7a:21:d9:ec:3c:8c:ef:c5:97:30: 54:5f:dd:d9:8d:a4:2e:6a:d1:29:5c:ff:62:d6:f3:81:23:6a: 97:21:da:46:2e:ab:1c:17:b5:09:de:25:f4:12:3a:c5:68:0c: 06:12:b5:6c:58:a2:26:56:f4:d5:ac:0e:f8:69:ad:84:79:b4: 6a:c6:5e:94:46:8e:8b:6c:06:5b:d5:7b:4d:7e:b7:78:64:a4: 26:36:79:72:4f:57:3e:8b:a6:a7:3d:3b:15:ef:d6:1d:f9:b8: 50:5a:77:1a:96:c4:52:28:f1:1b:3a:e2:05:ff:e2:ec:45:3f: b0:91:e5:f9:bd:98:35:20:3e:64:0c:f1:7a:8e:f4:e6:59:c6: 68:0a:c4:2c:a9:a7:19:d9:26:75:a3:b9:43:45:e1:46:b9:ab: e7:22:6e:fe:8e:59:6b:6b:c2:04:1f:9e:7b:47:20:36:0d:27: 53:76:91:54:1d:14:7f:1a:6d:07:fa:78:bd:0b:27:85:ce:53: 32:27:c0:2e:41:fe:3b:29:de:b3:f2:ea:8a:3f:98:ea:7e:19: e5:97:a5:ec:d9:3d:3b:1f:ec:d0:65:60:df:86:16:ed:78:69: 44:f7:4c:bc:17:f3:8a:54:7d:e7:8a:e8:09:84:e1:dc:1c:6d: 6d:0c:b2:01 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOUbf1eNnqTuC9w1XYwAhZWI74B4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgwOFoX DTI3MDUwMjAyMDMwOFowMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZG RDU5N0YwM0NCRjYzNDkxMjIzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJAJD7Upm9Gd+JewF7L+4pHZlXU0cepngTf5pt+MLQr/SiS/dgzmdyrGKMk4 zo2jXw4fP2pDIjdVUcY8RcDPJqT/n9GA5Nl464sI1h/8KrB3xrBcyKgEhkoPMSiv zms32VIfdIuf1G+gQu7MrKUbaDJhsAmgWx+LpGRg1kbW5aITfcBsbLVfbwavIOgs jms5r4rnIGWof3B+sQ1TrFTUesV4W1Kuep7AgFkMl3NdiTOHc9aYfB1n3pAXMxQ4 vqGbsLqV8/khvwTD5XLad8N4zh9ZuRXgSkbBob+yhG3z+xY8MFlhkMx7t0VpYeSe LaOYs2qa/NXqO67dsGoZwgHMoPcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNWp0aWOPuRXQa/9WX8Dy/Y0kSI8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QyMTY0NmJlLTNkNmEtNDI1Ny1iNzdjLWIzM2MxMGYzNWQzMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMjE2NDZi ZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9ENUE5RDFBNThFM0VFNDU3 NDFBRkZENTk3RjAzQ0JGNjM0OTEyMjNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7aKMA0GCSqGSIb3DQEBCwUAA4IBAQAn99E2GiW4F3oh2ew8jO/FlzBUX93Z jaQuatEpXP9i1vOBI2qXIdpGLqscF7UJ3iX0EjrFaAwGErVsWKImVvTVrA74aa2E ebRqxl6URo6LbAZb1XtNfrd4ZKQmNnlyT1c+i6anPTsV79Yd+bhQWncalsRSKPEb OuIF/+LsRT+wkeX5vZg1ID5kDPF6jvTmWcZoCsQsqacZ2SZ1o7lDReFGuavnIm7+ jllra8IEH557RyA2DSdTdpFUHRR/Gm0H+ni9CyeFzlMyJ8AuQf47Kd6z8uqKP5jq fhnll6Xs2T07H+zQZWDfhhbteGlE90y8F/OKVH3niugJhOHcHG1tDLIB -----END CERTIFICATE-----Generated at Wed May 13 02:26:34 2026 by rpki-client