$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer File: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer (raw, json) Hash identifier: v76tKh5defROBxk04iGmQihcyzDdE2J4qK3nxQq6/mo= Subject key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7E1EA6E0F84DD0E11B28F587858370253A858ED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:19:20 +0000 Certificate not after: Sun 02 May 2027 00:24:20 +0000 Subordinate resources: IP: 103.229.14.0/23 IP: 2001:df3:2540::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1e:a6:e0:f8:4d:d0:e1:1b:28:f5:87:85:83:70:25:3a:85:8e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:19:20 2026 GMT Not After : May 2 00:24:20 2027 GMT Subject: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:05:68:16:a5:73:c8:71:4b:79:e5:4f:ed:d8: 76:b6:f3:79:69:d6:c1:fb:bf:17:db:d3:1b:d1:81: fb:0d:1f:02:04:48:04:e1:4e:cc:c6:f6:f9:7a:dc: ae:2f:ad:db:d0:88:80:5b:eb:0d:8b:d3:60:6a:57: fa:48:03:ca:72:6b:00:42:17:08:d5:bf:55:8a:bb: a8:d0:0b:20:1e:af:cf:da:bf:0a:d5:19:8c:20:68: c9:be:cc:7c:30:cd:11:27:c1:f0:7e:6d:0f:cf:7f: 29:e1:71:26:0d:e0:f9:b3:a9:d8:35:c5:9f:00:ec: e5:ff:f7:53:15:8e:fe:0e:e2:db:42:8a:c9:97:60: bf:fb:4f:9f:25:cc:45:ea:56:1c:2c:b0:47:7e:42: 6b:94:d0:f9:d6:f9:d5:96:16:f8:7b:b4:a3:a0:d1: 2d:82:68:0e:81:cc:4a:c3:04:95:ac:9a:d3:dc:82: ed:41:8c:a0:6d:f3:71:5e:7d:b0:37:b5:c4:6d:34: c0:3a:be:32:01:f8:7b:6c:20:ff:54:57:89:01:a5: 88:ef:61:fc:b4:71:5f:6e:04:0c:93:a6:35:dd:5b: 8c:8c:6e:69:78:54:80:24:47:75:02:55:c8:d0:94: de:30:91:4a:95:24:45:6b:28:4b:29:81:df:b3:73: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.14.0/23 IPv6: 2001:df3:2540::/48 Signature Algorithm: sha256WithRSAEncryption 1e:54:61:61:7e:89:89:dd:2b:3a:d2:79:d1:05:eb:98:63:d2: 20:b1:4b:80:48:a3:ca:9b:40:a7:c1:2f:74:31:d7:69:57:47: 65:a9:76:69:42:7e:c8:a3:8b:2d:7e:3f:7b:b3:04:4a:16:35: a6:cc:17:f1:ea:17:b9:da:ca:d9:d3:fb:e9:ef:02:19:ee:ad: b2:a1:b5:38:c0:ca:84:86:53:70:a4:31:ff:4b:5e:0b:e9:f9: da:82:6f:85:23:e7:5c:16:bd:78:cb:d0:ba:5c:24:f1:2c:b5: 8f:5a:29:fc:52:29:82:6b:89:58:22:60:57:5b:ae:e7:9c:20: fb:92:b0:9b:dc:39:31:5a:bc:98:a9:b3:40:55:4b:d8:f7:ed: 4d:b2:a0:9c:b6:be:a1:5e:ed:31:69:99:19:9c:52:6a:57:cc: 73:c1:00:27:83:a5:60:25:97:3e:fb:1b:4a:54:f5:90:df:94: 1e:49:06:c3:a7:67:59:f3:c0:0e:22:ca:07:b4:29:c2:b1:a0: 5d:be:d5:74:d5:74:09:dd:ca:9a:02:e1:d8:ff:3d:e7:6b:16: e0:4d:61:7e:4c:bc:b9:81:46:1a:12:c2:72:ba:8b:d4:af:4b: 83:e1:53:63:cd:cc:e0:41:d7:e0:21:b0:81:32:23:cf:05:85: d0:11:79:e3 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUfh6m4PhN0OEbKPWHhYNwJTqFjtEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTkyMFoX DTI3MDUwMjAwMjQyMFowMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdG RkU4QTNDRTI0NUUxNTMyODE3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJYFaBalc8hxS3nlT+3YdrbzeWnWwfu/F9vTG9GB+w0fAgRIBOFOzMb2+Xrc ri+t29CIgFvrDYvTYGpX+kgDynJrAEIXCNW/VYq7qNALIB6vz9q/CtUZjCBoyb7M fDDNESfB8H5tD89/KeFxJg3g+bOp2DXFnwDs5f/3UxWO/g7i20KKyZdgv/tPnyXM RepWHCywR35Ca5TQ+db51ZYW+Hu0o6DRLYJoDoHMSsMElaya09yC7UGMoG3zcV59 sDe1xG00wDq+MgH4e2wg/1RXiQGliO9h/LRxX24EDJOmNd1bjIxuaXhUgCRHdQJV yNCU3jCRSpUkRWsoSymB37Nz75UCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNhLAgks2fr0h7f/6KPOJF4VMoF7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNiNzViZmQwLWE4NmMtNGJlYi05Zjk5LWFhYzMzZmI1ZTQ5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYjc1YmZk MC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC9EODRCMDIwOTJDRDlGQUY0 ODdCN0ZGRThBM0NFMjQ1RTE1MzI4MTdCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ+UOMA8EAgACMAkDBwAgAQ3zJUAwDQYJKoZIhvcNAQELBQADggEBAB5UYWF+ iYndKzrSedEF65hj0iCxS4BIo8qbQKfBL3Qx12lXR2WpdmlCfsijiy1+P3uzBEoW NabMF/HqF7naytnT++nvAhnurbKhtTjAyoSGU3CkMf9LXgvp+dqCb4Uj51wWvXjL 0LpcJPEstY9aKfxSKYJriVgiYFdbruecIPuSsJvcOTFavJips0BVS9j37U2yoJy2 vqFe7TFpmRmcUmpXzHPBACeDpWAllz77G0pU9ZDflB5JBsOnZ1nzwA4iyge0KcKx oF2+1XTVdAndypoC4dj/PedrFuBNYX5MvLmBRhoSwnK6i9SvS4PhU2PNzOBB1+Ah sIEyI88FhdAReeM= -----END CERTIFICATE-----Generated at Tue May 12 22:16:22 2026 by rpki-client