$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer (raw, json) Hash identifier: HQBB7YIEo0eZf0eqo5uDtwSorvDo7/pI3GA3q2xrG0A= Subject key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6CD86922996518009D0255B7B358AFC199A83E42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:37:37 +0000 Certificate not after: Sun 02 May 2027 01:42:37 +0000 Subordinate resources: IP: 103.191.165.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d8:69:22:99:65:18:00:9d:02:55:b7:b3:58:af:c1:99:a8:3e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:37:37 2026 GMT Not After : May 2 01:42:37 2027 GMT Subject: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:63:82:93:25:52:f5:75:e7:08:52:e3:ca: 9a:9d:65:c6:52:39:f6:1d:d9:bf:7e:d0:e7:c1:46: eb:29:f2:2a:80:a1:34:68:3d:a4:de:3e:68:4f:15: 4b:e5:e0:60:42:c0:1f:9f:7e:c2:c2:40:5b:50:29: 8b:2f:08:f6:d1:a1:08:b0:49:ef:8b:30:74:1b:5e: e2:ad:97:2e:6b:7c:f3:4d:34:06:3c:91:25:66:01: 26:23:bc:aa:c4:01:ba:36:29:cb:49:51:5e:16:b4: 72:24:68:1c:f2:cb:63:94:ae:05:17:de:b6:54:d3: bb:ac:21:a6:d1:15:96:c2:5e:9d:00:58:14:79:03: 84:bb:b6:8f:70:c6:d9:b1:2a:85:42:4f:c5:f4:3b: 5c:c9:9a:06:07:3b:b4:08:12:25:89:cf:07:d1:4f: bd:c8:73:66:dd:0e:da:62:42:90:66:7a:a1:38:7c: 09:37:17:76:44:6d:7c:a5:e8:3f:94:4e:ec:2a:80: ba:10:f6:c3:b5:99:a4:92:04:5d:69:45:b1:67:96: 62:f2:17:b9:bc:a6:e2:00:bf:c3:53:a3:53:e6:78: 53:59:b5:b2:a5:dc:2a:13:22:e0:8a:9f:24:4b:87: 7b:eb:58:a3:e6:dd:86:85:20:b1:fb:a3:d8:4a:22: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.165.0/24 Signature Algorithm: sha256WithRSAEncryption 28:3b:af:1f:cb:8c:67:f4:3f:ac:f9:14:85:f2:49:1a:05:79: 94:e2:fc:41:fd:d0:32:24:86:0f:9e:02:14:03:d8:fe:f4:a8: 58:e8:8a:6a:c1:1f:6e:3a:3b:4d:39:08:73:8c:2e:97:4f:4e: 1d:30:8c:98:07:b7:6f:a4:47:ef:39:27:c6:10:5c:9e:02:8d: 28:f4:2a:33:d5:56:10:3a:2a:53:80:f5:9a:e3:fc:5a:fc:59: f4:1c:9a:c8:ab:fc:e6:a6:0b:dd:3e:77:3c:f7:b9:1b:62:46: 59:d1:70:7b:41:4e:e7:ec:f3:aa:5f:8a:a9:0f:a2:5e:ad:44: 04:8d:36:14:81:f5:61:64:6f:ab:d4:51:35:7d:d3:b6:d0:74: c7:e5:99:0e:0e:f5:e3:c4:6a:a3:d4:73:53:e3:3c:ba:c5:44: 8c:93:cf:63:94:88:85:4a:18:d2:79:c9:97:b4:05:60:34:f1: 74:ff:f0:7e:02:6b:60:cd:e0:3a:a7:ed:64:80:1e:ef:f3:b8: 88:a8:b9:fa:ce:d4:12:91:12:65:af:f6:52:1c:0f:54:84:56: de:3e:56:7a:07:f6:72:4f:09:75:e9:b2:39:df:e5:aa:eb:dc: 73:46:d9:a0:22:ee:ae:d8:ae:48:76:f4:b4:7e:6b:7e:d9:7f: 54:05:0f:8a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbNhpIpllGACdAlW3s1ivwZmoPkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzczN1oX DTI3MDUwMjAxNDIzN1owMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5 NDRDQTQ2MEYxRDkwNzkyQzRCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPhY4KTJVL1decIUuPKmp1lxlI59h3Zv37Q58FG6ynyKoChNGg9pN4+aE8V S+XgYELAH59+wsJAW1Apiy8I9tGhCLBJ74swdBte4q2XLmt88000BjyRJWYBJiO8 qsQBujYpy0lRXha0ciRoHPLLY5SuBRfetlTTu6whptEVlsJenQBYFHkDhLu2j3DG 2bEqhUJPxfQ7XMmaBgc7tAgSJYnPB9FPvchzZt0O2mJCkGZ6oTh8CTcXdkRtfKXo P5RO7CqAuhD2w7WZpJIEXWlFsWeWYvIXubym4gC/w1OjU+Z4U1m1sqXcKhMi4Iqf JEuHe+tYo+bdhoUgsfuj2EoibjUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN3sByqSd1HcyLaUTKRg8dkHksS6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FmNWZhNTRkLTI0OGUtNDIzYy05ZTQ5LWQ2ZTZiZmJiZjc4Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZjVmYTU0 ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC9EREVDMDcyQTkyNzc1MURD QzhCNjk0NENBNDYwRjFEOTA3OTJDNEJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7+lMA0GCSqGSIb3DQEBCwUAA4IBAQAoO68fy4xn9D+s+RSF8kkaBXmU4vxB /dAyJIYPngIUA9j+9KhY6IpqwR9uOjtNOQhzjC6XT04dMIyYB7dvpEfvOSfGEFye Ao0o9Coz1VYQOipTgPWa4/xa/Fn0HJrIq/zmpgvdPnc897kbYkZZ0XB7QU7n7POq X4qpD6JerUQEjTYUgfVhZG+r1FE1fdO20HTH5ZkODvXjxGqj1HNT4zy6xUSMk89j lIiFShjSecmXtAVgNPF0//B+AmtgzeA6p+1kgB7v87iIqLn6ztQSkRJlr/ZSHA9U hFbePlZ6B/ZyTwl16bI53+Wq69xzRtmgIu6u2K5IdvS0fmt+2X9UBQ+K -----END CERTIFICATE-----Generated at Wed May 13 01:07:04 2026 by rpki-client