$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer File: DA4C7EC09188922B406170208997DD586575FFB0.cer (raw, json) Hash identifier: szqP3rFS98Pv0GcLo+nXF3/Parrcqxa9ETAljPOSZTk= Subject key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59ED681A3CB486A1AEB27EFB8E5D0FEA681DE465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:02 +0000 Certificate not after: Sun 02 May 2027 02:07:02 +0000 Subordinate resources: IP: 103.58.198.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ed:68:1a:3c:b4:86:a1:ae:b2:7e:fb:8e:5d:0f:ea:68:1d:e4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:02 2026 GMT Not After : May 2 02:07:02 2027 GMT Subject: CN=DA4C7EC09188922B406170208997DD586575FFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:11:bd:ab:1e:20:c8:d4:92:d8:ad:91:48:42: 67:b1:3d:6a:2f:ad:f9:f0:b5:60:19:11:2a:04:6c: 6e:4b:b8:cc:29:8d:35:a8:f6:8b:b6:e2:c4:a7:17: 29:7e:45:61:c8:1e:81:69:e6:be:b2:4b:e3:82:bb: ce:47:26:d3:09:80:5e:05:08:cc:1f:09:09:0c:74: f3:a1:2e:38:00:83:78:1e:1d:6b:70:39:03:b8:10: 2e:d2:19:2b:3d:1d:38:3b:7d:6c:90:48:33:25:e1: 14:89:8c:c5:be:2f:a6:82:f4:ba:9f:64:89:c8:45: 96:d0:05:02:9a:5a:36:3d:fa:44:00:82:ec:ee:8d: fa:7f:11:53:46:ad:32:bb:cd:0e:f6:95:ce:04:bc: 8b:60:42:9d:e3:8e:8a:d0:ad:65:c8:42:4e:45:18: d1:b8:0d:9a:4d:c7:0a:85:0b:52:bb:c0:4c:1a:a6: 19:09:54:4d:7a:a5:ca:17:e0:13:fb:2c:fb:38:ab: 49:92:05:08:81:5c:d7:2c:e1:5e:00:b6:06:ba:99: ad:ce:48:e2:d3:6a:8a:34:8f:4c:99:29:59:7e:6d: 09:10:db:0f:30:a8:0e:0a:72:6b:6b:1f:3b:bd:9a: b7:9e:ff:01:1c:1c:1a:e5:3c:2c:08:53:01:1a:f2: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.198.0/23 Signature Algorithm: sha256WithRSAEncryption a5:7c:30:97:6d:e1:40:f3:f8:cf:c0:56:1b:06:a4:8b:43:66: 9e:01:74:ed:fc:6d:6b:e4:a6:e2:28:d6:80:da:3d:ef:43:5f: 10:57:91:3a:bc:17:da:7e:a2:10:59:a4:6b:2e:38:e1:66:60: 79:93:c0:c8:c2:b2:96:fc:10:a0:67:8c:33:c6:6d:8a:8d:0c: 4c:45:75:a4:4e:fd:6f:e3:be:67:19:97:22:a3:48:f0:68:80: 78:b0:7d:6d:6a:8a:c9:b5:4b:c3:7f:e8:7a:c6:11:ea:cc:05: 20:e3:e9:c2:03:7e:d3:3e:f9:09:b3:3e:c9:84:e8:c6:d6:34: 7c:03:c8:8f:cf:93:05:f1:91:31:9c:55:e8:33:7a:fe:4a:83: 46:de:b5:95:9e:9b:88:48:c8:5e:f3:c3:ad:03:f6:f3:5a:70: 2f:93:b1:ca:3b:a9:db:9a:bb:97:e3:6f:4e:68:42:f0:5d:9a: ed:ea:9b:bf:02:04:e2:f9:be:36:cc:73:18:09:42:96:55:37: 12:d0:49:b6:2d:ef:eb:5d:64:7b:37:69:e7:f1:e1:25:50:68: 61:cd:bc:a8:35:86:4e:d7:4d:f2:bd:ba:da:db:fc:df:0d:04: 2c:00:ab:95:54:ff:a1:20:35:fa:23:85:a4:c5:f2:53:8a:bd: 5c:ee:86:e2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWe1oGjy0hqGusn77jl0P6mgd5GUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDIwMloX DTI3MDUwMjAyMDcwMlowMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3 MDIwODk5N0RENTg2NTc1RkZCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcRvaseIMjUktitkUhCZ7E9ai+t+fC1YBkRKgRsbku4zCmNNaj2i7bixKcX KX5FYcgegWnmvrJL44K7zkcm0wmAXgUIzB8JCQx086EuOACDeB4da3A5A7gQLtIZ Kz0dODt9bJBIMyXhFImMxb4vpoL0up9kichFltAFAppaNj36RACC7O6N+n8RU0at MrvNDvaVzgS8i2BCneOOitCtZchCTkUY0bgNmk3HCoULUrvATBqmGQlUTXqlyhfg E/ss+zirSZIFCIFc1yzhXgC2BrqZrc5I4tNqijSPTJkpWX5tCRDbDzCoDgpya2sf O72at57/ARwcGuU8LAhTARryYlMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNpMfsCRiJIrQGFwIImX3Vhldf+wMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q4Y2UyMDA4LTg0YjctNGJlZi05NGI5LWJiM2ZkYjE3YjIzOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOGNlMjAw OC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC9EQTRDN0VDMDkxODg5MjJC NDA2MTcwMjA4OTk3REQ1ODY1NzVGRkIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzrGMA0GCSqGSIb3DQEBCwUAA4IBAQClfDCXbeFA8/jPwFYbBqSLQ2aeAXTt /G1r5KbiKNaA2j3vQ18QV5E6vBfafqIQWaRrLjjhZmB5k8DIwrKW/BCgZ4wzxm2K jQxMRXWkTv1v475nGZcio0jwaIB4sH1taorJtUvDf+h6xhHqzAUg4+nCA37TPvkJ sz7JhOjG1jR8A8iPz5MF8ZExnFXoM3r+SoNG3rWVnpuISMhe88OtA/bzWnAvk7HK O6nbmruX429OaELwXZrt6pu/AgTi+b42zHMYCUKWVTcS0Em2Le/rXWR7N2nn8eEl UGhhzbyoNYZO103yvbra2/zfDQQsAKuVVP+hIDX6I4WkxfJTir1c7obi -----END CERTIFICATE-----Generated at Tue May 12 22:38:54 2026 by rpki-client