$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer File: DB23849BCF63AE719E7BE4FE89385D166773A883.cer (raw, json) Hash identifier: NGddnxLCeTqfdrH9CE9UDAN1HIllS9lWc/z8645hRbE= Subject key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60A2ED995A4AA790B2CDBFFCD7424FF25DCBE4FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:07:55 +0000 Certificate not after: Sun 02 May 2027 00:12:55 +0000 Subordinate resources: IP: 103.157.24.0/24 IP: 2001:df5:a80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a2:ed:99:5a:4a:a7:90:b2:cd:bf:fc:d7:42:4f:f2:5d:cb:e4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:07:55 2026 GMT Not After : May 2 00:12:55 2027 GMT Subject: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:e5:64:aa:53:83:8f:8c:57:75:f6:5c:71: 09:f7:cc:1f:58:b5:d6:9e:de:1c:ee:10:bb:0e:65: 51:f5:f8:a4:9c:3c:5f:36:bf:18:22:97:c8:13:df: 4b:de:ee:52:db:8a:63:c1:ce:a8:4e:eb:7c:f6:c2: f5:8d:05:4d:e9:a2:9d:5d:b3:58:87:ed:c6:7e:12: b0:9f:37:c5:2c:aa:ee:8e:27:82:e8:2f:2e:a2:fb: a7:fd:49:c3:f0:53:bb:ba:7a:fc:84:e1:41:a4:3b: 96:95:72:30:6a:d4:b7:ba:42:d7:f6:1e:6e:dd:80: a4:b6:77:72:12:45:91:e6:01:45:30:ad:58:f4:aa: 97:25:0d:22:d9:06:bd:8d:e0:19:18:67:d9:9e:1a: d5:96:a6:19:1f:98:d1:2e:1a:7c:61:0e:f1:70:ba: 70:6d:cb:21:b8:ce:61:75:81:d5:b1:a3:03:ad:07: cf:d1:f3:ca:0e:ef:9d:fb:91:49:66:75:a8:d2:48: eb:1d:18:dc:a4:4c:6c:b7:4e:60:c6:88:8b:b6:49: 24:48:22:10:cc:86:6a:9a:44:ca:c3:bd:b8:c9:a4: 42:92:65:e1:0f:fd:b8:4c:5a:80:be:ed:46:4c:8f: 7a:99:7a:f0:e5:d6:fa:db:ec:ee:7c:6f:8e:c8:48: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.24.0/24 IPv6: 2001:df5:a80::/48 Signature Algorithm: sha256WithRSAEncryption 23:78:6b:8f:3b:3e:e3:96:37:62:1b:9d:d0:1a:5b:04:bf:39: 68:8e:8b:a9:0f:e8:62:3b:2c:ee:6b:25:c2:cb:df:85:3a:ae: 10:13:b9:53:4f:52:a7:6b:48:6e:61:d0:51:8c:e4:31:35:ae: d5:5a:f9:a2:1d:f1:35:a0:e7:c9:5c:7e:ec:d5:94:e3:3c:a5: 0d:d8:96:05:54:52:f3:3d:f3:ec:75:cb:b3:dc:28:e5:56:d8: 1c:09:fb:f2:63:8e:50:c0:55:8f:9f:9d:f0:43:be:70:c6:a5: d5:ef:e7:ce:60:18:ba:56:a8:f0:df:78:2f:16:4d:8f:5c:12: 26:fd:72:9a:44:12:0e:f5:ef:1c:2c:c3:8d:95:fc:5e:0b:23: c4:38:38:a2:99:d7:8c:72:11:a0:b9:eb:19:3a:8c:a6:db:74: 37:12:2b:88:cf:6e:a5:fa:16:bc:25:64:9c:97:d1:09:2b:1c: 49:84:3b:86:30:72:05:fb:ee:a4:0b:78:6e:71:a3:5b:98:3e: b5:6a:80:89:79:ce:ca:c6:6f:86:48:25:44:cb:26:95:53:bd: 6b:2c:fd:c2:42:0c:f7:9f:9b:7b:de:b9:ef:37:e1:b5:39:e4: de:63:72:43:5b:a1:0d:a4:fd:13:a5:d3:68:3d:ad:79:5f:07: 54:65:4a:64 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYKLtmVpKp5Cyzb/810JP8l3L5PowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDc1NVoX DTI3MDUwMjAwMTI1NVowMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JF NEZFODkzODVEMTY2NzczQTg4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANvI5WSqU4OPjFd19lxxCffMH1i11p7eHO4Quw5lUfX4pJw8Xza/GCKXyBPf S97uUtuKY8HOqE7rfPbC9Y0FTeminV2zWIftxn4SsJ83xSyq7o4ngugvLqL7p/1J w/BTu7p6/IThQaQ7lpVyMGrUt7pC1/Yebt2ApLZ3chJFkeYBRTCtWPSqlyUNItkG vY3gGRhn2Z4a1ZamGR+Y0S4afGEO8XC6cG3LIbjOYXWB1bGjA60Hz9Hzyg7vnfuR SWZ1qNJI6x0Y3KRMbLdOYMaIi7ZJJEgiEMyGappEysO9uMmkQpJl4Q/9uExagL7t RkyPepl68OXW+tvs7nxvjshI44UCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNsjhJvPY65xnnvk/ok4XRZnc6iDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJiYzY1YjhjLTM5ZTktNDc4ZC04NzQyLWM1MzViNjFiYWU1OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYmM2NWI4 Yy0zOWU5LTQ3OGQtODc0Mi1jNTM1YjYxYmFlNTkvMC9EQjIzODQ5QkNGNjNBRTcx OUU3QkU0RkU4OTM4NUQxNjY3NzNBODgzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ50YMA8EAgACMAkDBwAgAQ31CoAwDQYJKoZIhvcNAQELBQADggEBACN4a487 PuOWN2IbndAaWwS/OWiOi6kP6GI7LO5rJcLL34U6rhATuVNPUqdrSG5h0FGM5DE1 rtVa+aId8TWg58lcfuzVlOM8pQ3YlgVUUvM98+x1y7PcKOVW2BwJ+/JjjlDAVY+f nfBDvnDGpdXv585gGLpWqPDfeC8WTY9cEib9cppEEg717xwsw42V/F4LI8Q4OKKZ 14xyEaC56xk6jKbbdDcSK4jPbqX6FrwlZJyX0QkrHEmEO4YwcgX77qQLeG5xo1uY PrVqgIl5zsrGb4ZIJUTLJpVTvWss/cJCDPefm3veue834bU55N5jckNboQ2k/ROl 02g9rXlfB1RlSmQ= -----END CERTIFICATE-----Generated at Tue May 12 22:38:49 2026 by rpki-client