$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer File: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer (raw, json) Hash identifier: 3wmZ9KOKgl6lJBOJm96mPqxS1YN5aY3Tt0NujzrKYk8= Subject key identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 313A854FFD0C3992999C3090844241EEFCC4F01D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:52:04 +0000 Certificate not after: Sat 01 May 2027 23:57:04 +0000 Subordinate resources: IP: 103.169.72.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3a:85:4f:fd:0c:39:92:99:9c:30:90:84:42:41:ee:fc:c4:f0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:52:04 2026 GMT Not After : May 1 23:57:04 2027 GMT Subject: CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:bd:0d:e4:78:1b:22:f0:14:3b:3b:ab:8e: d7:d1:57:0f:bb:ac:ec:5c:b7:ea:a7:35:1b:f3:dc: 66:18:b9:ed:7a:3c:24:02:34:07:41:25:97:e6:07: 06:66:53:6f:f6:1c:72:88:f4:66:fc:fa:ec:da:f0: 0e:32:e6:d9:c2:03:8e:eb:c5:96:d7:e2:63:f2:3b: bf:ef:a2:2b:30:f0:7a:fd:1a:d8:ef:c4:c8:2f:65: 45:1c:53:af:a9:c5:60:d1:4d:3c:0f:a6:32:7e:7e: 7c:82:f3:04:11:fa:71:2e:e6:ae:3f:10:30:db:33: 99:29:52:27:3f:83:59:f4:e9:53:e1:c9:42:de:a3: 88:13:f9:57:a1:87:4d:1a:3a:50:86:39:f2:4a:78: 80:30:86:34:a7:15:2a:06:4e:63:4d:0a:4b:4e:3d: 17:e8:ae:35:cf:7d:60:f8:9d:78:10:24:f6:74:a4: d9:c4:6d:ef:5a:44:ff:67:53:dd:b7:f2:09:26:94: 36:8b:eb:65:d9:a8:24:3d:a1:bd:1f:b8:64:49:7b: 28:9b:fe:89:56:d7:16:56:e7:d3:46:52:6a:21:15: 88:77:d4:99:f3:eb:03:1f:a3:9c:ab:f9:d9:53:13: 94:6a:42:92:2b:d7:ef:72:ba:74:f0:78:68:4a:61: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.72.0/23 Signature Algorithm: sha256WithRSAEncryption 46:81:e0:8e:fe:62:60:55:d4:e7:5e:dc:20:b5:ae:4c:8a:79: f4:8e:b7:a3:33:25:70:fe:e7:56:48:35:e7:04:23:33:a3:eb: f9:88:9a:87:67:a1:d7:b9:3a:0a:0b:8e:2a:14:3f:34:20:06: 26:5d:e7:96:8a:3a:45:f6:4e:7a:ef:5a:db:88:cf:a3:72:f5: 3b:5f:55:53:bf:6d:22:ae:fa:02:1d:95:73:df:4e:11:22:b8: 59:a3:42:e6:b1:47:97:c9:b3:03:db:c5:0f:56:8b:a5:18:90: bb:c9:c5:a0:68:45:39:a2:c3:c9:7a:14:41:2d:01:3e:64:1f: b9:27:b0:c1:ec:55:27:97:c2:85:4c:2f:a1:6c:ce:10:24:9b: bd:17:f8:2c:a3:c6:4c:d7:1d:6e:92:ef:87:f0:41:a2:57:88: ea:af:65:62:17:f3:d2:14:f1:bb:e5:12:ad:f4:98:6c:a2:12: 60:2d:70:d4:f3:f9:93:93:02:b0:97:19:47:7c:a4:a3:71:03: 21:eb:52:3b:10:06:09:01:95:ce:cf:31:7b:0a:c4:9f:d4:e7: 52:8e:3f:18:99:16:aa:f9:4f:0d:78:b2:51:94:92:48:3b:f0: 84:4c:91:76:15:b4:42:36:58:8b:c4:0e:18:50:cd:ce:f1:57: 35:f8:5c:c8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMTqFT/0MOZKZnDCQhEJB7vzE8B0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTIwNFoX DTI3MDUwMTIzNTcwNFowMzExMC8GA1UEAxMoRDVCMkJDQjREN0NENDQ5ODZFMENE RUFCQjE5QTNFOERBOEVEQTNERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6pvQ3keBsi8BQ7O6uO19FXD7us7Fy36qc1G/PcZhi57Xo8JAI0B0Ell+YH BmZTb/Yccoj0Zvz67NrwDjLm2cIDjuvFltfiY/I7v++iKzDwev0a2O/EyC9lRRxT r6nFYNFNPA+mMn5+fILzBBH6cS7mrj8QMNszmSlSJz+DWfTpU+HJQt6jiBP5V6GH TRo6UIY58kp4gDCGNKcVKgZOY00KS049F+iuNc99YPideBAk9nSk2cRt71pE/2dT 3bfyCSaUNovrZdmoJD2hvR+4ZEl7KJv+iVbXFlbn00ZSaiEViHfUmfPrAx+jnKv5 2VMTlGpCkivX73K6dPB4aEphLk0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNWyvLTXzUSYbgzeq7GaPo2o7aPeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE0MWEwMmU2LTIxNzEtNDdjOS04NmM5LWQ1ZDgwZjQ1ODgzNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNDFhMDJl Ni0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC9ENUIyQkNCNEQ3Q0Q0NDk4 NkUwQ0RFQUJCMTlBM0U4REE4RURBM0RFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6lIMA0GCSqGSIb3DQEBCwUAA4IBAQBGgeCO/mJgVdTnXtwgta5Minn0jrej MyVw/udWSDXnBCMzo+v5iJqHZ6HXuToKC44qFD80IAYmXeeWijpF9k5671rbiM+j cvU7X1VTv20irvoCHZVz304RIrhZo0LmsUeXybMD28UPVoulGJC7ycWgaEU5osPJ ehRBLQE+ZB+5J7DB7FUnl8KFTC+hbM4QJJu9F/gso8ZM1x1uku+H8EGiV4jqr2Vi F/PSFPG75RKt9JhsohJgLXDU8/mTkwKwlxlHfKSjcQMh61I7EAYJAZXOzzF7CsSf 1OdSjj8YmRaq+U8NeLJRlJJIO/CETJF2FbRCNliLxA4YUM3O8Vc1+FzI -----END CERTIFICATE-----Generated at Tue May 12 22:16:47 2026 by rpki-client