$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer (raw, json) Hash identifier: i29ZTjbNYJoM7dCSHUhRlUxV6jfsvOr9xxsc7ZZDmbE= Subject key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4AB8125162348000FC864D6653526D4898AC9439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:32 +0000 Certificate not after: Sun 02 May 2027 00:50:32 +0000 Subordinate resources: IP: 103.217.216.0/22 IP: 2405:1780::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b8:12:51:62:34:80:00:fc:86:4d:66:53:52:6d:48:98:ac:94:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:32 2026 GMT Not After : May 2 00:50:32 2027 GMT Subject: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:60:52:ce:3c:7f:ef:0e:e1:0b:aa:80:6d: 79:30:b0:4f:13:eb:01:51:ef:10:9c:b8:9b:f2:89: d6:88:d6:3e:a6:5b:0f:51:88:7e:bd:0f:d6:cf:bd: 95:22:bd:cc:f0:23:f2:3e:5e:20:da:ff:fa:76:5a: f4:8b:1b:32:9a:a5:60:03:fa:59:a5:98:c1:8e:4e: 59:da:ff:42:14:91:c8:31:0f:5f:9d:1b:0c:66:75: eb:14:83:5c:ec:8b:a6:39:86:c6:b8:50:bb:9f:50: e7:4d:60:21:a8:65:b7:58:cc:9a:ba:14:a4:f2:3e: 33:bd:38:74:f2:d1:70:4d:7d:3e:6e:93:75:5f:db: 96:f4:ea:51:a3:47:bf:18:5a:28:33:89:70:ad:a6: 6b:97:74:38:f0:8e:ee:19:8b:29:8b:e3:e0:1b:9e: dc:2a:b9:52:04:d8:13:9c:4f:47:d3:0b:b8:64:61: 89:cf:aa:66:d3:33:45:74:8d:6c:31:9f:43:b2:f2: 1a:7b:46:79:e9:2e:80:77:0e:d0:70:fe:73:91:b7: ae:93:c9:9d:60:1c:25:41:e4:86:d6:77:3c:3c:f7: 07:7b:dd:8c:22:03:61:84:7e:75:c6:b8:05:c8:ee: 89:f5:44:2d:3e:ea:46:a2:bc:47:c5:b1:a7:2e:60: 22:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.216.0/22 IPv6: 2405:1780::/32 Signature Algorithm: sha256WithRSAEncryption a5:6e:01:64:27:f6:ff:85:11:ba:43:8c:a4:04:18:12:2d:0d: 27:4b:ac:20:04:c7:74:40:43:8a:bd:dd:cf:42:e9:bd:a5:7b: f9:a7:93:e3:83:35:47:bf:49:b0:69:05:df:54:12:cc:a5:70: 44:b2:92:f1:d7:ea:64:39:c5:c6:62:d0:2b:85:13:43:bd:81: 9d:b6:62:46:8c:99:c7:ac:09:4b:1d:fb:89:e6:ba:da:ae:f3: 7a:d4:d9:4d:54:bb:56:c2:c8:e3:74:55:c5:6a:82:d3:22:c5: 47:ee:f3:41:3c:5e:2e:75:df:f0:a2:23:02:a3:cd:12:3e:7c: c5:29:cc:fb:1c:cb:08:4c:cc:2e:de:6a:f0:10:55:0e:f6:bc: 32:23:78:eb:b2:fd:8b:08:1b:63:bf:89:eb:18:79:27:78:64: ef:ba:fa:14:24:3c:e5:63:f4:da:61:3b:f7:5e:97:8a:e8:fe: 48:c4:9d:e6:0e:60:c7:63:bb:93:0b:72:b3:f1:b8:08:f9:9d: b9:50:32:dc:d2:16:03:7d:70:12:df:c1:18:eb:c4:ed:cc:71: af:44:b1:6f:0b:e9:9c:b6:b1:f0:5e:c6:b5:c8:0a:8e:b7:60: 92:29:57:8c:ed:93:fc:c5:93:91:5d:88:c6:02:fd:0e:4c:65: 52:2d:40:91 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUSrgSUWI0gAD8hk1mU1JtSJislDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDUzMloX DTI3MDUwMjAwNTAzMlowMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJD MDIwREI4NkFEMkJBODBCMDZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMK3YFLOPH/vDuELqoBteTCwTxPrAVHvEJy4m/KJ1ojWPqZbD1GIfr0P1s+9 lSK9zPAj8j5eINr/+nZa9IsbMpqlYAP6WaWYwY5OWdr/QhSRyDEPX50bDGZ16xSD XOyLpjmGxrhQu59Q501gIahlt1jMmroUpPI+M704dPLRcE19Pm6TdV/blvTqUaNH vxhaKDOJcK2ma5d0OPCO7hmLKYvj4Bue3Cq5UgTYE5xPR9MLuGRhic+qZtMzRXSN bDGfQ7LyGntGeekugHcO0HD+c5G3rpPJnWAcJUHkhtZ3PDz3B3vdjCIDYYR+dca4 BcjuifVELT7qRqK8R8Wxpy5gImECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN6+7ol/2FVzBKLAINuGrSuoCwb7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYyMmY1MTUyLWEyOTUtNDdiNy1hZGRjLWZiZmVmMzI0N2UzYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MjJmNTE1 Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC9ERUJFRUU4OTdGRDg1NTcz MDRBMkMwMjBEQjg2QUQyQkE4MEIwNkZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ9nYMA0EAgACMAcDBQAkBReAMA0GCSqGSIb3DQEBCwUAA4IBAQClbgFkJ/b/ hRG6Q4ykBBgSLQ0nS6wgBMd0QEOKvd3PQum9pXv5p5PjgzVHv0mwaQXfVBLMpXBE spLx1+pkOcXGYtArhRNDvYGdtmJGjJnHrAlLHfuJ5rrarvN61NlNVLtWwsjjdFXF aoLTIsVH7vNBPF4udd/woiMCo80SPnzFKcz7HMsITMwu3mrwEFUO9rwyI3jrsv2L CBtjv4nrGHkneGTvuvoUJDzlY/TaYTv3XpeK6P5IxJ3mDmDHY7uTC3Kz8bgI+Z25 UDLc0hYDfXAS38EY68TtzHGvRLFvC+mctrHwXsa1yAqOt2CSKVeM7ZP8xZORXYjG Av0OTGVSLUCR -----END CERTIFICATE-----Generated at Tue May 12 22:10:30 2026 by rpki-client