$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer (raw, json) Hash identifier: RmcVcYwBWmbxS71OMLSWOx0XAslFjZww5KBuclnZL2M= Subject key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7AD1A8146C51A74CF4434FF8A245C809A98D6F55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:47 +0000 Certificate not after: Sun 02 May 2027 02:04:47 +0000 Subordinate resources: IP: 103.166.124.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d1:a8:14:6c:51:a7:4c:f4:43:4f:f8:a2:45:c8:09:a9:8d:6f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:59:47 2026 GMT Not After : May 2 02:04:47 2027 GMT Subject: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:14:c9:67:25:c4:5b:b8:38:91:45:4b:01: a1:5d:40:af:a2:f6:ae:29:25:bc:29:03:c0:a2:87: 05:01:2e:1b:7b:74:97:4c:36:49:02:b1:2d:20:5c: e4:92:07:af:43:e8:1f:63:f0:a2:3e:2d:55:ec:66: 88:6f:a8:c1:8f:03:ea:d8:7b:24:cf:fd:59:bf:45: 07:d2:51:2a:ed:e4:60:b1:a5:ed:ef:c9:02:e8:53: 1b:a4:a5:51:b7:b7:07:c8:b5:02:65:ea:7d:1b:a7: 08:26:54:e4:7b:f0:d5:23:a7:7b:ba:a7:b2:9d:a3: 64:5e:12:b5:9b:46:24:e1:04:09:ae:a6:39:48:b2: 68:76:6c:f8:a8:ee:33:c0:96:67:e1:c6:65:20:98: 67:7b:66:52:ab:2d:9b:9a:d3:e7:39:28:5e:d4:47: f3:14:69:3b:5f:b0:b5:e8:ae:3a:df:90:06:46:ab: 68:99:53:1b:df:bc:26:a2:58:22:8c:50:80:e8:35: a4:5a:c1:4b:82:74:3e:53:c1:9c:df:52:a8:c7:6d: 3d:99:bc:81:81:22:cd:90:bd:b1:c3:ca:3f:37:25: 4c:02:59:26:fb:79:ff:5e:96:bb:7b:a7:ce:3f:a6: a6:aa:ca:f0:77:b8:ab:3b:e0:6d:cf:0b:3d:ee:8c: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.124.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:6a:45:1c:14:2b:2c:e3:97:9a:df:d3:91:fe:37:e2:08:b2: 25:ae:9b:2b:db:44:ca:b4:15:2e:11:cb:8c:fc:a1:23:94:fb: 3f:35:a7:63:7a:03:ce:06:73:68:43:aa:46:e1:8f:9a:e5:77: 38:cd:ce:81:32:2c:59:17:a4:55:90:56:a5:da:c9:51:ec:06: bb:f3:af:dd:38:03:0d:39:12:16:a4:f5:a0:ac:44:06:e8:be: 1d:1e:db:23:7e:94:0d:4e:23:2f:73:72:2b:15:01:3f:b6:1d: 19:c8:b9:6b:82:0d:1d:b2:2e:57:dd:b4:88:e4:4c:12:92:50: f6:90:16:53:d5:ee:3e:52:f4:b5:bd:93:1b:94:f2:d4:a6:11: d8:43:bc:b4:37:56:22:96:ea:22:f5:b9:c5:1b:4e:fa:7d:00: b7:22:d2:ad:26:74:4f:f8:74:f9:38:b7:b2:f9:ce:8e:20:0c: d2:23:8a:df:d8:10:20:2b:5c:d4:7c:1c:dc:4c:f8:39:58:2d: 3a:66:cb:d4:fe:69:1a:d2:6f:2a:76:6b:e8:40:9a:b3:ca:95: 92:5a:42:bb:50:fb:ce:ea:bf:70:d2:19:c0:12:1f:16:65:fd: f8:ca:26:e9:4d:2e:13:a5:97:78:e4:b8:33:a8:4e:5a:bb:62: c7:24:65:8f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUetGoFGxRp0z0Q0/4okXICamNb1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTk0N1oX DTI3MDUwMjAyMDQ0N1owMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQy NDU2NzRFRDIyMzNFMUQyQjJDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnEFMlnJcRbuDiRRUsBoV1Ar6L2riklvCkDwKKHBQEuG3t0l0w2SQKxLSBc 5JIHr0PoH2Pwoj4tVexmiG+owY8D6th7JM/9Wb9FB9JRKu3kYLGl7e/JAuhTG6Sl Ube3B8i1AmXqfRunCCZU5Hvw1SOne7qnsp2jZF4StZtGJOEECa6mOUiyaHZs+Kju M8CWZ+HGZSCYZ3tmUqstm5rT5zkoXtRH8xRpO1+wteiuOt+QBkaraJlTG9+8JqJY IoxQgOg1pFrBS4J0PlPBnN9SqMdtPZm8gYEizZC9scPKPzclTAJZJvt5/16Wu3un zj+mpqrK8He4qzvgbc8LPe6Mdt8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNcQ5HQ44JnmsO0kVnTtIjPh0rLAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q1NGU0NTZkLWRiZTItNDYwYy04NmQ0LWViYzJkMTE1NjE3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNTRlNDU2 ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9ENzEwRTQ3NDM4RTA5OUU2 QjBFRDI0NTY3NEVEMjIzM0UxRDJCMkMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6Z8MA0GCSqGSIb3DQEBCwUAA4IBAQBKakUcFCss45ea39OR/jfiCLIlrpsr 20TKtBUuEcuM/KEjlPs/NadjegPOBnNoQ6pG4Y+a5Xc4zc6BMixZF6RVkFal2slR 7Aa786/dOAMNORIWpPWgrEQG6L4dHtsjfpQNTiMvc3IrFQE/th0ZyLlrgg0dsi5X 3bSI5EwSklD2kBZT1e4+UvS1vZMblPLUphHYQ7y0N1Yiluoi9bnFG076fQC3ItKt JnRP+HT5OLey+c6OIAzSI4rf2BAgK1zUfBzcTPg5WC06ZsvU/mka0m8qdmvoQJqz ypWSWkK7UPvO6r9w0hnAEh8WZf34yibpTS4TpZd45LgzqE5au2LHJGWP -----END CERTIFICATE-----Generated at Tue May 12 22:32:18 2026 by rpki-client