$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer (raw, json) Hash identifier: AmNyhoMQhBennLvL+9ZETFRVUsSPIMpkTV75tMqW9Jg= Subject key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6887F994E1C7697AA7C7EF61DD1E6EC876D26BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:14:46 +0000 Certificate not after: Sun 02 May 2027 00:19:46 +0000 Subordinate resources: IP: 103.229.131.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:87:f9:94:e1:c7:69:7a:a7:c7:ef:61:dd:1e:6e:c8:76:d2:6b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:14:46 2026 GMT Not After : May 2 00:19:46 2027 GMT Subject: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:68:cc:67:f2:e4:6e:f6:04:7a:78:34:52: 32:01:23:a2:6f:0c:15:1f:f9:a8:42:fd:57:99:6e: d0:91:b7:35:d4:68:a3:eb:fb:62:7c:03:7e:dd:03: 33:aa:30:d4:07:93:25:40:cf:8a:c5:c1:21:96:ca: bc:c1:ee:c3:a8:b8:d7:09:b0:17:ec:9c:96:e8:f4: c4:0b:5d:5a:46:8f:62:2b:5f:e2:3e:ff:90:9f:37: 7f:f9:73:93:55:ff:84:82:b9:45:c5:c3:f0:9c:d4: fb:01:3b:71:79:79:84:f3:e6:b9:5c:99:a6:47:47: e5:e9:c2:ee:77:07:47:dd:3a:3d:38:26:0a:a6:2c: f3:06:6f:7d:8f:c4:a7:60:20:53:d4:f3:5c:8c:04: 68:67:3d:ed:c5:8f:73:91:4c:bf:29:05:52:7f:3b: a9:79:1b:c6:fd:18:de:41:6b:32:04:c6:c6:7a:47: 81:5d:49:63:f0:15:66:4d:be:8c:da:10:0d:6d:b3: 6b:00:4e:b6:67:9c:5b:98:03:94:9f:5c:1d:59:46: 3e:96:bc:5c:85:7a:6d:e5:7f:96:1f:1d:b9:b9:4d: ed:87:3e:97:ec:b0:dd:22:1d:10:c6:36:b9:aa:50: fa:4a:aa:22:e8:74:f4:75:b8:12:94:f0:82:e4:af: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.131.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:6d:00:bb:30:2e:b4:d9:f7:4e:07:4e:a1:59:71:f3:43:38: a5:09:75:70:86:25:d5:a2:1a:03:56:ba:6c:7a:bf:06:df:07: c8:7e:04:0b:ac:42:33:9d:5a:4f:de:27:2f:c3:c4:86:70:66: ad:dd:1f:cd:7b:27:19:e1:8f:52:f5:64:6f:56:c2:8c:22:b2: f3:5b:25:ef:7d:e3:90:79:51:8c:d0:2e:bd:55:e1:18:4c:5b: 4a:60:fc:35:fc:1d:c0:f8:4f:79:8a:5d:88:8e:30:10:5b:de: 8a:be:c8:24:cd:68:9a:95:c2:71:f7:99:d2:5d:01:32:77:34: a1:4f:7a:b7:9a:19:c2:fc:2a:d1:02:21:4c:6c:ea:59:c9:63: 51:57:2a:5e:f8:40:ed:a2:1d:84:d0:07:fd:ec:c4:b1:66:82: c3:6b:67:38:6f:e4:54:c6:4c:d9:7d:1d:10:13:86:8c:a4:5b: da:1c:6e:f0:71:54:d9:fd:aa:33:9d:4e:c2:12:96:45:ba:8c: bd:f2:d1:ba:be:6f:c5:24:91:7a:b2:b4:04:0f:95:1d:66:ec: 69:e9:66:10:e1:54:1a:31:b6:c3:f6:07:df:2b:35:ed:a6:68: 7f:8a:1f:b7:f4:20:c3:83:14:26:2a:17:54:87:c7:8f:e8:4e: 29:cc:4e:da -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaIf5lOHHaXqnx+9h3R5uyHbSa/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTQ0NloX DTI3MDUwMjAwMTk0NlowMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2 Q0Q2QUMwQzI1QTYzQTcyQzRBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ8NaMxn8uRu9gR6eDRSMgEjom8MFR/5qEL9V5lu0JG3NdRoo+v7YnwDft0D M6ow1AeTJUDPisXBIZbKvMHuw6i41wmwF+ycluj0xAtdWkaPYitf4j7/kJ83f/lz k1X/hIK5RcXD8JzU+wE7cXl5hPPmuVyZpkdH5enC7ncHR906PTgmCqYs8wZvfY/E p2AgU9TzXIwEaGc97cWPc5FMvykFUn87qXkbxv0Y3kFrMgTGxnpHgV1JY/AVZk2+ jNoQDW2zawBOtmecW5gDlJ9cHVlGPpa8XIV6beV/lh8dublN7Yc+l+yw3SIdEMY2 uapQ+kqqIuh09HW4EpTwguSvLZMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN4XL0zwzkIwpRBs1qwMJaY6csSlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM0MmMxZjMyLTgxYWMtNDExOC1iZTJmLTU3NGNhNWI1NDFlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNDJjMWYz Mi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9ERTE3MkY0Q0YwQ0U0MjMw QTUxMDZDRDZBQzBDMjVBNjNBNzJDNEE1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ+WDMA0GCSqGSIb3DQEBCwUAA4IBAQBubQC7MC602fdOB06hWXHzQzilCXVw hiXVohoDVrpser8G3wfIfgQLrEIznVpP3icvw8SGcGat3R/NeycZ4Y9S9WRvVsKM IrLzWyXvfeOQeVGM0C69VeEYTFtKYPw1/B3A+E95il2IjjAQW96KvsgkzWialcJx 95nSXQEydzShT3q3mhnC/CrRAiFMbOpZyWNRVype+EDtoh2E0Af97MSxZoLDa2c4 b+RUxkzZfR0QE4aMpFvaHG7wcVTZ/aoznU7CEpZFuoy98tG6vm/FJJF6srQED5Ud Zuxp6WYQ4VQaMbbD9gffKzXtpmh/ih+39CDDgxQmKhdUh8eP6E4pzE7a -----END CERTIFICATE-----Generated at Tue May 12 22:16:33 2026 by rpki-client