$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer File: D8435659F33EE1F7005A21C1387F49D353431808.cer (raw, json) Hash identifier: onCGrgJZslSGHGeiuhcOTjTBGvdp+e1TSe+5qEfhbQU= Subject key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47B56D7E801B6CA31EDCC34DC1348C688A2F09A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft caRepository: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:24 +0000 Certificate not after: Sun 02 May 2027 01:23:24 +0000 Subordinate resources: IP: 103.247.12.0/22 IP: 121.101.128.0/21 IP: 2402:e300::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b5:6d:7e:80:1b:6c:a3:1e:dc:c3:4d:c1:34:8c:68:8a:2f:09:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:24 2026 GMT Not After : May 2 01:23:24 2027 GMT Subject: CN=D8435659F33EE1F7005A21C1387F49D353431808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:6d:61:44:e3:20:f7:49:24:30:23:34:ff: c2:4c:48:cf:fa:ca:38:c8:bb:6e:5f:d2:d9:39:4b: 29:8e:5e:33:13:c3:e0:0c:dc:d5:c4:ad:73:2b:c5: e8:3c:ea:b3:23:7a:ac:2f:9c:63:a5:f2:2e:f6:b7: 8e:07:43:74:a9:3d:11:14:a9:cf:b0:a7:b8:48:8d: f7:f6:7f:e0:9a:fd:b2:23:6e:6e:a5:e9:1b:7a:ea: c8:d2:43:35:8c:35:ef:6c:46:a4:d8:94:b2:7b:96: 72:e4:88:f0:1a:b9:83:2b:8f:31:3a:21:14:44:6c: a4:31:74:60:c1:49:f4:d6:d4:53:99:12:71:73:d3: c4:0d:54:8e:19:b6:db:89:e5:7a:a6:63:41:04:10: 72:f9:70:19:dd:a5:e5:0a:f0:35:c8:66:a3:06:90: c3:cf:e1:38:16:31:c8:0e:0e:dc:db:a9:37:aa:60: ae:ee:f8:f4:d9:f7:b9:e0:37:e3:a8:1d:a3:a5:2d: 82:54:5d:66:2e:e3:fa:ca:58:ff:75:6b:18:b8:e0: 8c:d9:ae:58:cf:81:68:15:8f:df:1e:ec:30:74:18: 78:9d:9b:05:0a:91:da:60:13:86:93:2e:24:a2:76: 3a:57:d6:ac:eb:0d:cf:43:5c:c2:c4:01:23:19:b1: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.12.0/22 121.101.128.0/21 IPv6: 2402:e300::/32 Signature Algorithm: sha256WithRSAEncryption a1:44:61:c6:41:49:ac:5a:a7:4b:8a:32:9d:d9:7e:fd:76:08: 81:fb:1b:17:ce:e6:f2:cd:6d:7e:a6:28:f0:d3:fc:ec:7a:44: 89:0d:56:6c:5e:16:34:b4:4e:59:c9:31:e9:cf:5a:20:6b:52: 9c:e2:96:49:0b:68:ed:5e:31:b3:6d:b2:77:53:1e:b4:30:6c: ee:8e:71:00:71:32:3d:19:87:7b:29:cc:4f:dd:bb:76:f7:7c: 71:b6:6f:cf:7f:f2:08:0b:7a:69:08:a4:24:3a:c4:6a:aa:87: 28:27:f1:34:f4:a3:ba:d9:d5:2c:8b:29:aa:9a:a3:ff:1e:28: b4:5d:69:d5:74:f1:c6:84:50:12:d8:6d:e7:69:dd:29:37:87: 02:85:a4:98:df:4a:e1:52:3c:2b:02:1a:b9:7f:42:02:67:ad: 26:aa:cb:4e:c2:31:94:72:af:45:b4:a5:91:8d:3b:0e:d1:78: 8b:4a:69:58:5e:80:29:30:11:61:61:a3:4d:3a:26:53:16:7e: 3d:eb:51:37:7c:9d:95:39:ce:7e:d2:7e:d9:b6:87:cc:78:95: c5:38:94:3b:91:d5:57:d8:15:67:8a:57:52:67:5b:8f:02:34: a1:52:2b:00:6f:15:dd:9f:cc:8c:6d:0b:e3:ba:70:1f:c4:ec: 6b:5f:fb:96 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUR7VtfoAbbKMe3MNNwTSMaIovCaQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTgyNFoX DTI3MDUwMjAxMjMyNFowMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEy MUMxMzg3RjQ5RDM1MzQzMTgwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQgbWFE4yD3SSQwIzT/wkxIz/rKOMi7bl/S2TlLKY5eMxPD4Azc1cStcyvF 6DzqsyN6rC+cY6XyLva3jgdDdKk9ERSpz7CnuEiN9/Z/4Jr9siNubqXpG3rqyNJD NYw172xGpNiUsnuWcuSI8Bq5gyuPMTohFERspDF0YMFJ9NbUU5kScXPTxA1Ujhm2 24nleqZjQQQQcvlwGd2l5QrwNchmowaQw8/hOBYxyA4O3NupN6pgru749Nn3ueA3 46gdo6UtglRdZi7j+spY/3VrGLjgjNmuWM+BaBWP3x7sMHQYeJ2bBQqR2mAThpMu JKJ2OlfWrOsNz0NcwsQBIxmxrOMCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNhDVlnzPuH3AFohwTh/SdNTQxgIMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkyN2E2ZjM0LTFiNmUtNGU5Mi1iMmQyLTBiOTMwMWE2NjZhNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MjdhNmYz NC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC9EODQzNTY1OUYzM0VFMUY3 MDA1QTIxQzEzODdGNDlEMzUzNDMxODA4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ/cMAwQDeWWAMA0EAgACMAcDBQAkAuMAMA0GCSqGSIb3DQEBCwUAA4IBAQCh RGHGQUmsWqdLijKd2X79dgiB+xsXzubyzW1+pijw0/zsekSJDVZsXhY0tE5ZyTHp z1oga1Kc4pZJC2jtXjGzbbJ3Ux60MGzujnEAcTI9GYd7KcxP3bt293xxtm/Pf/II C3ppCKQkOsRqqocoJ/E09KO62dUsiymqmqP/Hii0XWnVdPHGhFAS2G3nad0pN4cC haSY30rhUjwrAhq5f0ICZ60mqstOwjGUcq9FtKWRjTsO0XiLSmlYXoApMBFhYaNN OiZTFn4961E3fJ2VOc5+0n7ZtofMeJXFOJQ7kdVX2BVnildSZ1uPAjShUisAbxXd n8yMbQvjunAfxOxrX/uW -----END CERTIFICATE-----Generated at Tue May 12 22:03:08 2026 by rpki-client