$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer File: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer (raw, json) Hash identifier: u3LAVQ8UiMeqP6oziL4Y/QoffVu92Qki681n8qoCBVg= Subject key identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2568E070E0D82B6F7FD4847D9496CCD4BF271198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 22:45:10 +0000 Certificate not after: Sat 01 May 2027 22:50:10 +0000 Subordinate resources: IP: 103.164.248.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:68:e0:70:e0:d8:2b:6f:7f:d4:84:7d:94:96:cc:d4:bf:27:11:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 22:45:10 2026 GMT Not After : May 1 22:50:10 2027 GMT Subject: CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:80:43:b1:c8:63:c2:91:9e:15:3a:17:96:51: 3b:e9:4e:9b:37:d8:c9:be:e1:00:d5:48:0f:b9:e0: 0b:79:a3:c8:2d:bf:2b:84:36:90:46:87:63:b5:59: 66:b8:c9:25:fd:01:19:3c:87:70:73:86:f5:7d:6c: c4:7d:66:63:65:78:3f:2c:03:46:6f:31:eb:79:da: 22:17:c1:49:7f:99:13:e3:2b:c1:4b:9b:57:43:dd: 14:4e:51:76:b7:dc:de:27:b9:cd:69:e4:c4:5f:67: ee:ff:1e:fc:59:70:f1:b6:a8:00:ef:56:59:60:5a: 5d:e9:0d:fa:83:c7:35:dc:d0:e3:a2:e0:97:68:b0: 6c:ff:06:10:82:92:3a:0a:83:8a:11:8f:a7:79:24: 5a:9c:35:0b:2f:7b:d3:a8:0a:6a:e0:00:6e:bf:c6: 33:48:b9:96:21:5b:94:df:15:14:c1:d4:5c:02:51: 58:23:a1:f8:31:0d:24:2a:2e:79:84:ef:e5:85:11: c8:e0:96:7a:31:1a:38:07:ee:61:23:9f:72:8a:21: c3:52:15:a9:8f:56:48:c8:4d:7d:90:47:9a:22:58: 6f:1f:d2:15:fa:af:a4:ea:ef:82:48:5f:0e:17:c4: 27:10:5c:61:51:0b:96:b8:af:d3:c1:7f:d6:dc:09: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.248.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:b2:e3:37:bc:ea:c6:e6:0f:34:48:8e:c7:59:55:19:3c:2b: c6:33:54:7c:fa:16:a4:ae:b5:e6:af:cd:1c:70:c1:0a:2c:2b: 7a:60:e6:8f:e6:85:9c:1f:21:7b:e6:78:50:b6:02:da:5e:76: 14:66:14:0c:b4:c6:1f:43:88:5f:a3:51:06:34:38:21:dc:55: f2:06:73:4c:8e:d7:72:c8:67:da:48:f1:99:3e:be:98:28:08: a2:f5:be:f8:81:c7:42:54:ab:20:08:ab:e9:c9:fb:cb:63:0b: d7:b9:05:e7:30:27:ba:49:3e:0f:a0:af:a5:dd:6f:da:fd:2d: 53:1c:60:6c:44:7e:0b:13:cf:ad:5a:a0:ef:90:eb:9a:3a:42: 60:20:1f:49:11:3b:01:eb:c2:81:ec:31:f7:1f:c9:7e:78:c2: 7d:18:6c:17:4d:72:e7:eb:0a:48:dd:86:bd:9c:77:f6:5e:73: e3:a5:35:8f:53:b3:1c:d9:5a:47:cd:fe:51:33:25:0b:ec:bb: 71:52:b3:5b:3b:bd:1a:c6:55:d4:d7:bd:59:11:5d:93:11:0c: 01:a4:e2:8e:16:9a:28:57:4e:99:4c:ce:f8:c9:f9:a7:c6:3b: bb:ce:9f:f7:be:16:9f:cd:79:f1:c1:67:38:77:ec:3b:17:17: 7d:1e:4f:8d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJWjgcODYK29/1IR9lJbM1L8nEZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIyNDUxMFoX DTI3MDUwMTIyNTAxMFowMzExMC8GA1UEAxMoREFFNTlEN0MzMjA5QzMzNDlERTAx NzhFNzAxQ0I0RTlGQ0YzMTIxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO+AQ7HIY8KRnhU6F5ZRO+lOmzfYyb7hANVID7ngC3mjyC2/K4Q2kEaHY7VZ ZrjJJf0BGTyHcHOG9X1sxH1mY2V4PywDRm8x63naIhfBSX+ZE+MrwUubV0PdFE5R drfc3ie5zWnkxF9n7v8e/Flw8baoAO9WWWBaXekN+oPHNdzQ46Lgl2iwbP8GEIKS OgqDihGPp3kkWpw1Cy9706gKauAAbr/GM0i5liFblN8VFMHUXAJRWCOh+DENJCou eYTv5YURyOCWejEaOAfuYSOfcoohw1IVqY9WSMhNfZBHmiJYbx/SFfqvpOrvgkhf DhfEJxBcYVELlriv08F/1twJEo0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNrlnXwyCcM0neAXjnActOn88xIQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAwNDFiNDhkLTczYzQtNGNkZC1iY2FjLWE1OTY5OWJjYmJjMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMDQxYjQ4 ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC9EQUU1OUQ3QzMyMDlDMzM0 OURFMDE3OEU3MDFDQjRFOUZDRjMxMjEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6T4MA0GCSqGSIb3DQEBCwUAA4IBAQCesuM3vOrG5g80SI7HWVUZPCvGM1R8 +hakrrXmr80ccMEKLCt6YOaP5oWcHyF75nhQtgLaXnYUZhQMtMYfQ4hfo1EGNDgh 3FXyBnNMjtdyyGfaSPGZPr6YKAii9b74gcdCVKsgCKvpyfvLYwvXuQXnMCe6ST4P oK+l3W/a/S1THGBsRH4LE8+tWqDvkOuaOkJgIB9JETsB68KB7DH3H8l+eMJ9GGwX TXLn6wpI3Ya9nHf2XnPjpTWPU7Mc2VpHzf5RMyUL7LtxUrNbO70axlXU171ZEV2T EQwBpOKOFpooV06ZTM74yfmnxju7zp/3vhafzXnxwWc4d+w7Fxd9Hk+N -----END CERTIFICATE-----Generated at Tue May 12 22:02:55 2026 by rpki-client