$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer File: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer (raw, json) Hash identifier: eTLMJUS8ZAdFqiyWobrFXeYJX8hnzmpQeu5h7DFmo8E= Subject key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 469C7AB5D7E049487EE2A2A0FD46AB124144050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:16:12 +0000 Certificate not after: Sun 02 May 2027 02:21:12 +0000 Subordinate resources: IP: 103.79.128.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9c:7a:b5:d7:e0:49:48:7e:e2:a2:a0:fd:46:ab:12:41:44:05:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:16:12 2026 GMT Not After : May 2 02:21:12 2027 GMT Subject: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:86:22:55:09:9e:79:84:86:8a:16:cc:2d: b6:c8:3b:65:69:ee:85:bd:09:06:89:21:15:d7:03: 9f:e2:42:2a:44:ec:9f:af:58:c0:2b:dd:b0:8a:3c: 49:4a:0b:c5:f1:22:3e:70:d3:c4:fe:80:cb:ad:f8: f5:53:c9:2c:f7:e2:a5:dc:20:d2:bc:0b:ad:1f:3c: 7a:84:13:2a:4c:a4:91:4a:7a:b0:3a:ee:43:ce:12: 21:7e:20:bf:2b:21:8d:67:67:c2:a4:7a:63:42:8f: 52:d7:93:70:e4:ec:be:41:ed:49:e5:3a:38:23:fc: a6:ac:f7:1f:50:a5:df:65:7c:98:a5:cf:a8:9c:c2: 67:5a:b6:5e:71:35:de:22:68:c7:ad:3a:90:37:7d: 64:09:18:cc:11:2b:5c:36:8c:de:fb:29:e3:46:b5: ce:05:bc:ca:bc:20:9d:29:82:6e:65:51:67:68:6b: a7:14:4c:53:6e:10:10:46:16:d9:41:fc:37:6e:72: 4e:65:d2:62:c4:f8:36:ad:66:29:1a:d8:cb:03:07: b4:59:d9:30:f8:e8:d9:40:0e:c0:77:36:b7:3e:a8: 99:7b:26:a6:a3:e9:40:9b:19:6f:85:d2:61:94:26: c9:38:82:c7:23:b2:2e:35:6f:14:3a:3d:de:0f:ce: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.128.0/23 Signature Algorithm: sha256WithRSAEncryption a6:b4:6b:7a:2f:af:9f:74:cf:dc:05:c3:72:a8:5a:77:95:28: 06:c7:de:7b:66:31:fb:8f:ab:2b:99:b2:9a:60:57:9e:cf:01: 58:50:a6:2d:63:7c:10:d9:49:d7:39:c0:d1:68:39:a4:c9:2c: 6e:47:02:65:af:32:bc:07:d5:14:f7:d0:a2:17:c5:85:10:47: 59:bc:5c:db:2b:2b:53:4c:fd:ae:bf:ed:72:f5:4b:7f:d4:67: 14:2f:f1:7a:c9:89:c1:b1:62:c9:db:30:b3:4c:de:3d:f2:e8: b0:60:0c:d1:49:ef:a6:e0:76:f7:fe:31:41:ac:62:c1:3e:8c: 39:9a:5e:0e:32:5f:d7:b2:9e:22:ad:cd:21:5c:10:0a:2a:8d: 5b:ea:38:90:13:f3:b9:5f:72:4a:7d:59:ee:71:8e:c7:46:1a: 70:b1:7b:89:ea:42:0b:b3:c5:97:1b:38:fb:2e:94:b2:22:1d: af:aa:b8:6d:b9:63:77:c9:ff:3b:22:cb:48:dc:9c:1d:c9:fa: fd:e7:b5:d0:55:92:f2:55:74:ec:53:45:1c:a3:fc:76:58:a3: a2:43:74:b4:cd:7e:f6:1a:38:97:4b:5c:c8:79:cd:ee:5a:9b: 79:69:a8:33:03:ad:64:b8:34:16:c3:98:96:ca:e4:61:8f:5d: ce:72:ab:6e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURpx6tdfgSUh+4qKg/UarEkFEBQowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTYxMloX DTI3MDUwMjAyMjExMlowMzExMC8GA1UEAxMoRDVDRThDNEUyMUVDODFGNDk1OENG NjA3NDIwRjFFRUI0OEIyRTVFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkXhiJVCZ55hIaKFswttsg7ZWnuhb0JBokhFdcDn+JCKkTsn69YwCvdsIo8 SUoLxfEiPnDTxP6Ay6349VPJLPfipdwg0rwLrR88eoQTKkykkUp6sDruQ84SIX4g vyshjWdnwqR6Y0KPUteTcOTsvkHtSeU6OCP8pqz3H1Cl32V8mKXPqJzCZ1q2XnE1 3iJox606kDd9ZAkYzBErXDaM3vsp40a1zgW8yrwgnSmCbmVRZ2hrpxRMU24QEEYW 2UH8N25yTmXSYsT4Nq1mKRrYywMHtFnZMPjo2UAOwHc2tz6omXsmpqPpQJsZb4XS YZQmyTiCxyOyLjVvFDo93g/OosUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNXOjE4h7IH0lYz2B0IPHutIsuXsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U1YzhiOWUzLWI0NGYtNDkwYi1iZjUxLTk5ZjJkZDJhMTM2NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNWM4Yjll My1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC9ENUNFOEM0RTIxRUM4MUY0 OTU4Q0Y2MDc0MjBGMUVFQjQ4QjJFNUVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0+AMA0GCSqGSIb3DQEBCwUAA4IBAQCmtGt6L6+fdM/cBcNyqFp3lSgGx957 ZjH7j6srmbKaYFeezwFYUKYtY3wQ2UnXOcDRaDmkySxuRwJlrzK8B9UU99CiF8WF EEdZvFzbKytTTP2uv+1y9Ut/1GcUL/F6yYnBsWLJ2zCzTN498uiwYAzRSe+m4Hb3 /jFBrGLBPow5ml4OMl/Xsp4irc0hXBAKKo1b6jiQE/O5X3JKfVnucY7HRhpwsXuJ 6kILs8WXGzj7LpSyIh2vqrhtuWN3yf87IstI3Jwdyfr957XQVZLyVXTsU0Uco/x2 WKOiQ3S0zX72GjiXS1zIec3uWpt5aagzA61kuDQWw5iWyuRhj13Ocqtu -----END CERTIFICATE-----Generated at Tue May 12 22:39:25 2026 by rpki-client