$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer (raw, json) Hash identifier: T6OkMxDvONMqZophaNPcL5XwHpR4zpQJqJZFZsEev98= Subject key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: A8A96FE72F17E4C9636AA0B87E1E73C8B82DAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:56 +0000 Certificate not after: Sun 02 May 2027 01:00:56 +0000 Subordinate resources: IP: 103.175.158.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a8:a9:6f:e7:2f:17:e4:c9:63:6a:a0:b8:7e:1e:73:c8:b8:2d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:56 2026 GMT Not After : May 2 01:00:56 2027 GMT Subject: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:cc:76:2a:f9:48:3c:40:ad:7f:4d:b5:85: 66:54:5b:cf:c4:b5:44:8c:28:63:b5:f1:40:33:03: ad:2f:5b:fd:c1:e8:38:e1:5b:6a:a1:41:36:c1:0a: ae:91:94:07:24:e6:66:74:80:47:81:c0:65:fb:18: 50:b1:7a:f1:84:63:75:76:c0:df:55:e6:f9:57:bf: 33:66:60:3f:9b:95:f2:0b:a6:63:f5:bd:c9:7d:ca: 5c:5a:85:6b:fd:67:92:64:58:26:58:b9:43:b9:fa: 74:0d:d7:fe:47:b8:c9:1c:10:86:23:25:e8:ac:52: 16:13:73:20:a9:e5:88:90:cc:20:c1:32:68:d2:7c: 21:38:c5:47:51:73:79:bb:f8:b5:26:92:60:a8:3d: 56:3c:77:c0:d1:a1:37:65:65:ce:90:9a:6f:2a:f2: b6:dc:4f:d0:42:82:dc:75:73:9a:a4:e6:bf:63:90: 5c:02:f8:0e:ed:eb:a0:42:c9:f1:80:39:b1:b8:f3: 45:9f:37:b6:7d:a0:3f:ce:6f:58:37:ef:58:f7:a1: 3c:90:51:cf:38:ef:ca:c1:e8:1a:e7:01:53:35:52: b2:da:96:15:22:08:a3:c2:a6:21:56:8f:59:2b:27: f7:a4:b0:3e:64:10:1f:0d:0a:c2:fd:6c:34:4d:d6: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.158.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:b3:4c:04:a7:ba:9d:17:c5:aa:62:f7:88:b9:92:fe:bb:b8: 88:8a:11:34:fc:ed:09:d4:d1:3b:93:42:78:3e:bf:a4:6e:aa: 63:6c:eb:09:0e:b2:2a:de:dd:e3:ba:0e:f9:1a:bc:a8:0c:35: 12:c9:e3:82:63:92:6f:38:3b:f3:50:20:2f:c6:23:e6:0e:c4: 71:73:b8:56:57:79:02:1b:e1:01:73:47:df:44:9e:0a:62:59: ce:e7:0e:7b:5c:d7:35:be:5e:55:02:e0:53:2b:a2:01:f8:b8: 56:23:f7:a4:57:57:10:1b:57:e5:93:fe:14:23:b2:af:77:26: 8d:ac:af:61:e7:bd:79:77:a0:67:47:60:23:37:de:17:28:7e: f1:49:ed:ca:6f:ff:93:f6:f2:76:42:8b:b7:ea:b0:f6:90:64: 51:3a:59:d2:67:2c:1f:3e:88:ae:e9:14:e1:b5:50:57:c4:8a: b5:5c:83:88:91:9f:3b:d7:3c:4a:36:5f:8c:0e:ff:4d:6a:03: c6:b5:44:fb:74:93:39:97:7d:5a:78:34:dd:ee:f8:73:9f:84: 00:1d:ee:06:fa:d3:82:39:57:34:a6:8f:34:69:2c:dc:33:5e: ef:1f:dc:51:da:2f:a4:78:52:1a:81:bb:37:1b:e9:06:02:10: 97:43:a4:93 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAKipb+cvF+TJY2qguH4ec8i4La0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTU1NloX DTI3MDUwMjAxMDA1NlowMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjcz QTlGN0I3RDZERDAyOThENUIxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhazHYq+Ug8QK1/TbWFZlRbz8S1RIwoY7XxQDMDrS9b/cHoOOFbaqFBNsEK rpGUByTmZnSAR4HAZfsYULF68YRjdXbA31Xm+Ve/M2ZgP5uV8gumY/W9yX3KXFqF a/1nkmRYJli5Q7n6dA3X/ke4yRwQhiMl6KxSFhNzIKnliJDMIMEyaNJ8ITjFR1Fz ebv4tSaSYKg9Vjx3wNGhN2VlzpCabyryttxP0EKC3HVzmqTmv2OQXAL4Du3roELJ 8YA5sbjzRZ83tn2gP85vWDfvWPehPJBRzzjvysHoGucBUzVSstqWFSIIo8KmIVaP WSsn96SwPmQQHw0Kwv1sNE3WQW8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNoSNDu9n0eRgic6n3t9bdApjVscMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzczODc0Y2YzLWFkYjEtNDk0Ny1hN2U0LWEyZDMyYzU0ZWQxZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83Mzg3NGNm My1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC9EQTEyMzQzQkJEOUY0Nzkx ODIyNzNBOUY3QjdENkREMDI5OEQ1QjFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6+eMA0GCSqGSIb3DQEBCwUAA4IBAQCcs0wEp7qdF8WqYveIuZL+u7iIihE0 /O0J1NE7k0J4Pr+kbqpjbOsJDrIq3t3jug75GryoDDUSyeOCY5JvODvzUCAvxiPm DsRxc7hWV3kCG+EBc0ffRJ4KYlnO5w57XNc1vl5VAuBTK6IB+LhWI/ekV1cQG1fl k/4UI7KvdyaNrK9h5715d6BnR2AjN94XKH7xSe3Kb/+T9vJ2Qou36rD2kGRROlnS ZywfPoiu6RThtVBXxIq1XIOIkZ871zxKNl+MDv9NagPGtUT7dJM5l31aeDTd7vhz n4QAHe4G+tOCOVc0po80aSzcM17vH9xR2i+keFIagbs3G+kGAhCXQ6ST -----END CERTIFICATE-----Generated at Tue May 12 22:32:53 2026 by rpki-client