$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer (raw, json) Hash identifier: 5MBSOCJidckE2SWh+Bqe47B61TAtmNsPGEYJr/Wx5qg= Subject key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 134DD85473A8ECE315F0EE2CD7BFCB70E9729A6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:38:51 +0000 Certificate not after: Sun 02 May 2027 00:43:51 +0000 Subordinate resources: IP: 103.189.0.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4d:d8:54:73:a8:ec:e3:15:f0:ee:2c:d7:bf:cb:70:e9:72:9a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:38:51 2026 GMT Not After : May 2 00:43:51 2027 GMT Subject: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:28:2c:f3:63:5b:28:78:f4:96:99:ba:12: 2c:9d:2d:a1:dc:f1:73:80:f8:9f:92:a4:c0:fe:65: be:b8:64:d7:08:96:14:6e:ac:6d:c1:63:96:1e:0a: b6:a1:f8:20:22:6a:86:4f:df:4b:b5:ca:d0:2f:c6: 59:cb:b7:79:3d:2d:94:f4:ba:fb:79:1a:a3:be:f4: fa:18:6b:19:4a:49:f9:9c:c3:fe:f0:f6:0b:22:a9: b3:e8:37:41:68:f9:0a:9b:ea:28:84:b7:7e:8c:80: 98:75:b3:12:24:69:7c:c5:3c:d1:3e:d1:73:ec:c4: 7a:72:87:62:8e:cb:39:bd:d5:a5:d7:e3:aa:da:4c: ff:de:75:9d:fe:4b:ea:a7:8d:ff:2f:c2:4d:e5:04: a4:b7:cf:5f:31:4a:58:a8:b4:56:02:48:e4:58:ce: 46:b5:f8:ca:b3:71:48:4d:20:2a:d9:0c:ff:c4:e1: b3:ed:5e:b3:fc:82:67:02:d2:de:30:a8:7b:93:00: f2:f0:af:92:40:0b:b2:73:50:6d:f6:2d:30:15:77: bd:3a:fd:65:51:e9:cc:2e:1e:d4:de:a6:0f:08:83: 24:b3:e1:23:13:5a:b7:f7:c1:be:e1:92:4f:fc:59: 10:f4:74:b5:91:d9:34:b0:b0:2c:d6:6d:c8:80:f5: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.0.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:4b:f6:fd:80:97:24:92:62:aa:73:b3:af:f2:cc:fa:6b:b2: 7f:b5:ee:0e:a8:ba:17:84:ba:af:e3:2a:a8:26:d6:93:fd:a2: 32:35:c0:61:1d:96:44:f9:2f:ee:9f:52:f1:d4:8b:2c:e6:f7: 7f:1d:99:cb:92:ab:74:ec:9f:cf:3d:90:ac:71:ad:d6:a9:13: 80:1b:f8:ca:ad:a5:d3:78:25:ec:98:41:52:5a:ce:de:c8:4a: fc:cf:93:19:c8:5d:cf:81:fe:e2:60:0a:ef:2b:c2:a0:b5:3b: 70:16:36:0f:12:3d:ac:59:fa:19:c7:e3:e2:62:11:13:64:50: f8:cf:ae:43:b2:b6:46:03:31:28:2f:be:22:99:ed:8b:d8:86: dc:0d:d7:b2:03:fd:d3:54:a7:07:23:80:43:7b:9f:b7:0d:62: d0:8d:2a:0f:2f:0e:4c:e2:f5:cd:46:a5:b3:8b:93:0a:fc:c2: ba:5b:00:f4:08:be:dd:b5:37:2a:a7:9d:97:d7:95:0c:66:d2: 41:01:3f:9d:e1:94:2a:58:53:97:4a:7d:34:70:af:6f:7e:34: 58:e4:d4:8f:96:5c:cc:65:7f:62:4b:74:07:a0:b8:57:23:af: 60:83:90:6d:34:9f:6f:7f:e4:09:58:f1:e6:4b:74:48:d6:ba: ce:6b:b0:dd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUE03YVHOo7OMV8O4s17/LcOlymm0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzg1MVoX DTI3MDUwMjAwNDM1MVowMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0 QzVBMzE2OUFBN0FBMTA0QUJGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMXKCzzY1soePSWmboSLJ0todzxc4D4n5KkwP5lvrhk1wiWFG6sbcFjlh4K tqH4ICJqhk/fS7XK0C/GWcu3eT0tlPS6+3kao770+hhrGUpJ+ZzD/vD2CyKps+g3 QWj5CpvqKIS3foyAmHWzEiRpfMU80T7Rc+zEenKHYo7LOb3VpdfjqtpM/951nf5L 6qeN/y/CTeUEpLfPXzFKWKi0VgJI5FjORrX4yrNxSE0gKtkM/8Ths+1es/yCZwLS 3jCoe5MA8vCvkkALsnNQbfYtMBV3vTr9ZVHpzC4e1N6mDwiDJLPhIxNat/fBvuGS T/xZEPR0tZHZNLCwLNZtyID1Qs0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN6skgOALBeXibJMWjFpqnqhBKv8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5YTc0YWM5LThmYTUtNDM5Yi04ZjIxLTA4ZjI4NDY3N2FhMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OWE3NGFj OS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC9ERUFDOTIwMzgwMkMxNzk3 ODlCMjRDNUEzMTY5QUE3QUExMDRBQkZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ70AMA0GCSqGSIb3DQEBCwUAA4IBAQAbS/b9gJckkmKqc7Ov8sz6a7J/te4O qLoXhLqv4yqoJtaT/aIyNcBhHZZE+S/un1Lx1Iss5vd/HZnLkqt07J/PPZCsca3W qROAG/jKraXTeCXsmEFSWs7eyEr8z5MZyF3Pgf7iYArvK8KgtTtwFjYPEj2sWfoZ x+PiYhETZFD4z65DsrZGAzEoL74ime2L2IbcDdeyA/3TVKcHI4BDe5+3DWLQjSoP Lw5M4vXNRqWzi5MK/MK6WwD0CL7dtTcqp52X15UMZtJBAT+d4ZQqWFOXSn00cK9v fjRY5NSPllzMZX9iS3QHoLhXI69gg5BtNJ9vf+QJWPHmS3RI1rrOa7Dd -----END CERTIFICATE-----Generated at Tue May 12 22:32:23 2026 by rpki-client