$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer File: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer (raw, json) Hash identifier: QIC1+HFXRxz5BeXKeyptcqhU9HxTdhNWqU/jj13e+pg= Subject key identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5EF5458F898A026AA2A3A79818B4C59BD9808375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:48:38 +0000 Certificate not after: Sun 02 May 2027 00:53:38 +0000 Subordinate resources: IP: 103.161.140.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f5:45:8f:89:8a:02:6a:a2:a3:a7:98:18:b4:c5:9b:d9:80:83:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:48:38 2026 GMT Not After : May 2 00:53:38 2027 GMT Subject: CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:f8:16:1b:06:b4:11:da:77:19:b4:e8:c1: 01:5f:aa:be:ae:4e:54:80:8a:7c:ef:24:ca:24:cd: 1a:db:a7:7f:94:e4:19:8e:d0:00:d6:22:ec:ff:21: 09:8f:45:38:f3:da:d5:15:33:c5:82:b5:5c:5a:f5: 19:63:ce:56:f1:52:ae:34:38:a2:e7:d3:7c:cf:36: 53:bf:b0:41:30:43:a9:a5:57:fd:01:26:6e:22:9d: 4f:2c:53:c8:ca:f0:9e:d1:cf:9d:24:cd:05:db:a6: f7:ac:ef:c7:0d:0e:0b:27:32:e3:ac:c5:bc:ee:fa: 19:a5:a8:4a:8e:88:3b:c6:5e:b7:27:fc:da:95:3b: 44:7a:69:89:36:70:a1:e2:38:42:5f:a3:c5:63:75: 5a:b7:73:41:28:13:d9:df:59:d1:5b:d3:2c:eb:83: a5:09:12:60:3f:8b:2c:d8:64:0a:b4:14:82:18:d9: b9:a8:b9:49:71:1b:08:45:7e:c8:0c:93:3c:b0:92: 11:0e:7d:da:7c:7e:bd:83:07:dc:ff:0b:52:8b:b0: 53:fc:5a:f8:b7:09:b7:67:ad:30:fa:8c:88:bf:21: 99:48:02:9d:ce:b2:0b:22:5a:5f:b0:63:aa:5d:aa: a9:28:12:88:85:95:af:27:5a:b6:cb:01:b9:d1:a1: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.140.0/23 Signature Algorithm: sha256WithRSAEncryption 52:60:0b:ff:91:01:fd:ab:78:1f:a8:74:42:32:e9:e8:e6:19: ee:9b:3e:e4:e5:0b:1b:4a:d9:ea:4f:8d:af:21:7c:c1:9d:3d: 74:3f:1f:e5:d8:d6:a8:71:0f:86:d1:7f:43:ed:bf:68:ee:0d: cf:c9:1e:a2:d0:09:f3:1f:c5:7e:f7:16:8c:09:4c:8a:2f:1e: 6e:07:fc:76:ad:c1:9a:5b:dc:a9:ff:d4:c4:e7:9b:9c:88:3c: 17:7d:92:f6:b7:ba:24:cb:c3:f5:c6:a0:d0:aa:78:a0:c3:81: d1:b0:15:fc:c1:0d:6e:0c:56:d1:e7:63:15:11:1c:26:1c:85: da:04:c0:09:e9:60:1e:01:76:46:82:7d:6d:6e:d2:04:5d:51: 84:47:7c:6d:02:37:ac:85:c3:59:c1:ff:37:fd:9e:3d:16:2a: 64:09:f1:d2:b1:c0:25:97:a5:3c:46:a2:a5:29:8f:ca:db:d1: cb:26:20:16:86:8f:f2:46:16:aa:67:b2:69:b2:fa:b6:99:c6: e5:76:8e:26:c4:a7:d1:51:79:13:84:d1:4f:5f:6f:e0:1d:b3: ad:c6:45:a5:06:5e:0a:16:ea:71:35:8d:b1:51:7c:0d:e3:48: f1:98:cc:e1:ef:46:12:00:7b:86:fa:43:91:2b:fd:1a:ce:5c: 8c:fb:2a:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXvVFj4mKAmqio6eYGLTFm9mAg3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDgzOFoX DTI3MDUwMjAwNTMzOFowMzExMC8GA1UEAxMoREVBQkQ2N0E3RjhBMUM5NEM0RkVC NDFGRENCMjNEM0ZEMjgwRTBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfM+BYbBrQR2ncZtOjBAV+qvq5OVICKfO8kyiTNGtunf5TkGY7QANYi7P8h CY9FOPPa1RUzxYK1XFr1GWPOVvFSrjQ4oufTfM82U7+wQTBDqaVX/QEmbiKdTyxT yMrwntHPnSTNBdum96zvxw0OCycy46zFvO76GaWoSo6IO8Zetyf82pU7RHppiTZw oeI4Ql+jxWN1WrdzQSgT2d9Z0VvTLOuDpQkSYD+LLNhkCrQUghjZuai5SXEbCEV+ yAyTPLCSEQ592nx+vYMH3P8LUouwU/xa+LcJt2etMPqMiL8hmUgCnc6yCyJaX7Bj ql2qqSgSiIWVrydatssBudGhiOsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN6r1np/ihyUxP60H9yyPT/SgODJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY2YTZiY2E4LTM3NDEtNDRlZi04YTVmLTBlNzZiODBkNDE0Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NmE2YmNh OC0zNzQxLTQ0ZWYtOGE1Zi0wZTc2YjgwZDQxNDYvMC9ERUFCRDY3QTdGOEExQzk0 QzRGRUI0MUZEQ0IyM0QzRkQyODBFMEM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6GMMA0GCSqGSIb3DQEBCwUAA4IBAQBSYAv/kQH9q3gfqHRCMuno5hnumz7k 5QsbStnqT42vIXzBnT10Px/l2NaocQ+G0X9D7b9o7g3PyR6i0AnzH8V+9xaMCUyK Lx5uB/x2rcGaW9yp/9TE55uciDwXfZL2t7oky8P1xqDQqnigw4HRsBX8wQ1uDFbR 52MVERwmHIXaBMAJ6WAeAXZGgn1tbtIEXVGER3xtAjeshcNZwf83/Z49FipkCfHS scAll6U8RqKlKY/K29HLJiAWho/yRhaqZ7Jpsvq2mcbldo4mxKfRUXkThNFPX2/g HbOtxkWlBl4KFupxNY2xUXwN40jxmMzh70YSAHuG+kORK/0azlyM+yrW -----END CERTIFICATE-----Generated at Tue May 12 22:38:43 2026 by rpki-client