$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer (raw, json) Hash identifier: OO+sfblex7HdaVur+E4uPgMedYu48J/Xne1gADmkRHw= Subject key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E03E01EAB68ECDE4B7F63DF9BF3D5A121919738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:20 +0000 Certificate not after: Sun 02 May 2027 01:23:20 +0000 Subordinate resources: IP: 103.60.232.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:03:e0:1e:ab:68:ec:de:4b:7f:63:df:9b:f3:d5:a1:21:91:97:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:20 2026 GMT Not After : May 2 01:23:20 2027 GMT Subject: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:a2:7d:c8:11:b5:2b:44:9b:12:c0:84:af: aa:8d:43:0a:3e:a0:18:87:86:a1:a3:a9:2c:5d:1e: c7:ce:be:50:76:df:fa:ee:1e:14:0f:71:74:39:ed: 32:b4:ba:2b:af:80:6b:4d:29:60:cd:bc:f2:37:0c: a3:41:b6:f3:1d:a4:aa:ee:07:31:19:27:df:47:75: 59:ff:96:d2:28:ec:b0:bc:9d:e8:5a:65:02:08:39: 49:8e:00:99:0b:21:e8:a7:aa:77:ed:ac:61:b1:58: 9b:60:77:6c:bd:ee:af:6e:b6:f9:a4:fb:bf:ff:03: 66:e5:39:64:c5:61:23:2a:8b:25:f0:fb:cd:35:08: 1e:fc:75:56:e1:d9:a9:f8:48:f7:e0:be:5a:c9:e7: 94:a0:d2:58:9a:50:e3:72:30:cb:fd:14:c0:5f:7f: 7f:c4:b3:34:d0:5c:6b:b4:be:32:91:38:9f:57:d0: ef:07:55:da:49:de:aa:f3:55:fa:f1:14:5c:30:a8: c7:ea:8f:4e:f6:df:15:b4:9b:ad:b5:df:48:0b:b8: 4e:e1:56:5e:d4:09:fd:40:06:1b:d5:60:03:12:fb: 0e:3c:86:82:82:1c:6b:a6:d8:13:c9:6d:60:e5:0e: 55:4c:62:ef:f4:cd:45:c0:db:9a:7b:71:8d:71:39: 32:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.232.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:d8:66:d5:3d:8b:6c:37:2d:34:38:25:75:0a:06:67:7a:2c: a6:28:d2:6d:55:ce:11:f0:93:1a:27:d7:c2:48:7d:e9:79:45: 1c:32:14:aa:fa:28:48:64:92:e4:5f:91:cb:e3:61:6d:1f:34: 39:d0:cf:7e:fb:e0:84:41:c3:3d:91:14:73:ce:b5:6f:66:f2: b1:aa:2e:36:d2:9d:72:3e:c2:8f:d0:ba:3c:99:b2:92:3e:c0: 81:1c:9d:5c:d2:ae:cb:88:46:a9:17:54:0f:a0:46:b6:a5:68: 47:99:7c:72:32:c1:04:f8:bb:d9:c1:39:36:07:69:36:ea:6d: 58:7f:96:b2:aa:ec:1d:3e:2a:a0:ce:97:a4:57:36:5a:d5:59: 10:24:2e:97:ee:c9:97:80:0e:a8:66:4d:a9:b2:ab:2d:cf:f2: a1:b9:6a:87:03:cd:4a:8a:a6:ae:e2:6a:96:31:e0:d7:33:9a: 14:06:93:21:07:b8:37:82:e6:02:4c:87:b1:85:fc:1d:08:05: e3:69:ce:60:8f:4f:79:32:12:c6:91:ed:1c:6a:f3:97:93:10: 6d:8d:19:ce:f3:32:d8:9a:27:67:02:f9:22:c6:d0:54:30:07: de:bf:b2:06:15:ab:28:bd:76:c0:1a:a2:6b:df:6d:7e:03:80: c6:5b:a6:1f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULgPgHqto7N5Lf2Pfm/PVoSGRlzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTgyMFoX DTI3MDUwMjAxMjMyMFowMzExMC8GA1UEAxMoRERENTQ4REE0RTJFRDY4ODAxOEMx NzhGRjZCMURCNkFCNDBBQUQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvGon3IEbUrRJsSwISvqo1DCj6gGIeGoaOpLF0ex86+UHbf+u4eFA9xdDnt MrS6K6+Aa00pYM288jcMo0G28x2kqu4HMRkn30d1Wf+W0ijssLyd6FplAgg5SY4A mQsh6Keqd+2sYbFYm2B3bL3ur262+aT7v/8DZuU5ZMVhIyqLJfD7zTUIHvx1VuHZ qfhI9+C+WsnnlKDSWJpQ43Iwy/0UwF9/f8SzNNBca7S+MpE4n1fQ7wdV2kneqvNV +vEUXDCox+qPTvbfFbSbrbXfSAu4TuFWXtQJ/UAGG9VgAxL7DjyGgoIca6bYE8lt YOUOVUxi7/TNRcDbmntxjXE5Mu8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN3VSNpOLtaIAYwXj/ax22q0Cq1rMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkyNWU4OGJkLTc1ZTItNDVkZi04ODY3LTQ1NDAyZmM3YzRiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MjVlODhi ZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC9EREQ1NDhEQTRFMkVENjg4 MDE4QzE3OEZGNkIxREI2QUI0MEFBRDZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzzoMA0GCSqGSIb3DQEBCwUAA4IBAQCb2GbVPYtsNy00OCV1CgZneiymKNJt Vc4R8JMaJ9fCSH3peUUcMhSq+ihIZJLkX5HL42FtHzQ50M9+++CEQcM9kRRzzrVv ZvKxqi420p1yPsKP0Lo8mbKSPsCBHJ1c0q7LiEapF1QPoEa2pWhHmXxyMsEE+LvZ wTk2B2k26m1Yf5ayquwdPiqgzpekVzZa1VkQJC6X7smXgA6oZk2psqstz/KhuWqH A81Kiqau4mqWMeDXM5oUBpMhB7g3guYCTIexhfwdCAXjac5gj095MhLGke0cavOX kxBtjRnO8zLYmidnAvkixtBUMAfev7IGFasovXbAGqJr321+A4DGW6Yf -----END CERTIFICATE-----Generated at Tue May 12 22:10:04 2026 by rpki-client