$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer (raw, json) Hash identifier: VjoDQbR02401JmJ4WI+aS8vc1XTA9JD6P9M+JzLIHwc= Subject key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78FC85A303B67BB505F3851391C7FD3DF78FFCA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft caRepository: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:14:35 +0000 Certificate not after: Sun 02 May 2027 00:19:35 +0000 Subordinate resources: IP: 103.205.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fc:85:a3:03:b6:7b:b5:05:f3:85:13:91:c7:fd:3d:f7:8f:fc:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:14:35 2026 GMT Not After : May 2 00:19:35 2027 GMT Subject: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:0c:86:ea:84:59:c1:45:7a:7c:43:17:a7: d1:9a:40:ff:e7:8a:61:93:37:9a:3b:01:40:b4:ea: c3:20:c9:1b:44:11:96:c1:fe:6b:11:43:d9:bf:0c: d3:ef:2e:80:bd:9c:a5:8d:13:1e:6d:7f:fd:11:19: ce:ea:ff:66:3f:0a:30:9e:d1:d1:d9:22:e7:2d:9f: 15:b0:4b:52:10:16:7c:06:9b:37:bc:d9:6d:e6:73: 29:84:2d:81:07:3b:4f:46:99:69:b9:c7:d7:a4:14: 0b:ff:d3:2f:12:73:1d:3b:89:d8:cf:b4:eb:ee:4a: 72:9e:89:54:ff:86:0c:64:10:f5:09:55:55:e9:11: e3:ee:2a:c0:22:42:31:6e:3d:97:8e:58:7a:af:fe: a3:af:f1:00:bb:27:41:71:66:82:59:0a:c1:d2:4b: d7:75:19:b1:6c:d0:ee:b7:a6:4a:1c:65:1c:d8:f9: 8f:1b:cc:f3:77:47:cc:98:b7:8b:f9:ac:96:40:85: bf:3f:92:b3:3f:38:a2:8a:f5:ee:31:2f:aa:bd:86: c8:bb:39:35:b8:37:4c:f4:33:ad:1a:19:38:5a:2e: 59:81:a9:57:46:73:4e:f7:ae:10:eb:b4:63:05:94: 1e:03:7f:67:58:27:35:8f:ac:32:72:83:e1:34:0c: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.205.62.0/23 Signature Algorithm: sha256WithRSAEncryption 85:b9:bc:78:00:40:1c:13:c0:5c:05:4f:f7:d3:00:20:a5:18: 91:b8:d3:25:a6:a3:e9:6c:f8:e8:e7:6e:b2:d5:44:fd:ea:8b: 45:cc:62:25:8f:dd:57:0d:6e:f1:9b:42:d1:9e:fc:71:dd:41: fe:c9:95:71:e1:d6:c2:59:45:97:8d:be:e7:f5:11:7b:3f:54: 6a:91:7f:44:d4:ca:34:7b:3c:c6:eb:37:69:e2:e8:0f:79:e8: 55:21:31:75:1f:43:6f:4b:68:77:ad:11:a0:61:e8:b1:d6:2d: 5d:20:a3:0b:38:76:b6:87:8e:2a:12:e4:1b:1b:e4:8f:96:8a: 22:4e:39:60:b4:2f:10:8e:dd:96:be:65:35:a5:00:37:4c:b7: b7:53:3e:16:41:92:47:32:67:f6:ab:b3:11:86:d4:00:74:42: 95:94:9c:87:7f:b5:68:cd:7f:8b:f3:58:57:2a:e7:6e:f3:64: bd:c0:8d:12:f6:93:f1:80:17:43:82:88:aa:88:6d:82:6a:3e: 3c:09:52:b6:3f:bb:de:b9:7d:51:5a:7c:ff:cb:6f:0e:f3:38: df:48:be:eb:8c:e4:1c:00:85:5f:dc:67:30:87:93:3f:fe:15: 9c:42:62:54:f4:a1:34:0d:64:18:14:9e:30:06:20:fc:36:80: 29:82:4c:e4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUePyFowO2e7UF84UTkcf9PfeP/KUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTQzNVoX DTI3MDUwMjAwMTkzNVowMzExMC8GA1UEAxMoREREREIzOUM0RjI2NUM5RDRDRkND M0NCRkY4MzRCMTJGNDkyODAyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIiKDIbqhFnBRXp8Qxen0ZpA/+eKYZM3mjsBQLTqwyDJG0QRlsH+axFD2b8M 0+8ugL2cpY0THm1//REZzur/Zj8KMJ7R0dki5y2fFbBLUhAWfAabN7zZbeZzKYQt gQc7T0aZabnH16QUC//TLxJzHTuJ2M+06+5Kcp6JVP+GDGQQ9QlVVekR4+4qwCJC MW49l45Yeq/+o6/xALsnQXFmglkKwdJL13UZsWzQ7remShxlHNj5jxvM83dHzJi3 i/mslkCFvz+Ssz84oor17jEvqr2GyLs5Nbg3TPQzrRoZOFouWYGpV0ZzTveuEOu0 YwWUHgN/Z1gnNY+sMnKD4TQMDwMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN3ds5xPJlydTPzDy/+DSxL0koAnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM0MDc5YmVmLTdmN2QtNDNjZC05MjdmLWQ1Y2Y1OWEwYjBmYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNDA3OWJl Zi03ZjdkLTQzY2QtOTI3Zi1kNWNmNTlhMGIwZmIvMC9EREREQjM5QzRGMjY1QzlE NENGQ0MzQ0JGRjgzNEIxMkY0OTI4MDI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ80+MA0GCSqGSIb3DQEBCwUAA4IBAQCFubx4AEAcE8BcBU/30wAgpRiRuNMl pqPpbPjo526y1UT96otFzGIlj91XDW7xm0LRnvxx3UH+yZVx4dbCWUWXjb7n9RF7 P1RqkX9E1Mo0ezzG6zdp4ugPeehVITF1H0NvS2h3rRGgYeix1i1dIKMLOHa2h44q EuQbG+SPlooiTjlgtC8Qjt2WvmU1pQA3TLe3Uz4WQZJHMmf2q7MRhtQAdEKVlJyH f7VozX+L81hXKudu82S9wI0S9pPxgBdDgoiqiG2Caj48CVK2P7veuX1RWnz/y28O 8zjfSL7rjOQcAIVf3Gcwh5M//hWcQmJU9KE0DWQYFJ4wBiD8NoApgkzk -----END CERTIFICATE-----Generated at Tue May 12 22:10:15 2026 by rpki-client