$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer File: ED0555AA515B40985A93B902D748993DD2FE4B8F.cer (raw, json) Hash identifier: JpfIgtKc88WsTYY80lWFH2KzTcPTuvmYS9Drrl//j68= Subject key identifier: ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 100ED7B2E4593BE57AC4C35906B33BD387071A90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:54 +0000 Certificate not after: Sun 02 May 2027 01:52:54 +0000 Subordinate resources: IP: 103.168.24.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0e:d7:b2:e4:59:3b:e5:7a:c4:c3:59:06:b3:3b:d3:87:07:1a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:47:54 2026 GMT Not After : May 2 01:52:54 2027 GMT Subject: CN=ED0555AA515B40985A93B902D748993DD2FE4B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:7e:c1:45:25:91:0a:6a:c0:3d:6b:8d:db: 02:a1:f6:0f:4d:a5:b4:92:2c:14:1f:de:5a:d1:57: 53:5d:04:51:5a:41:0b:96:e1:ef:25:f2:24:e5:72: 4a:23:5c:c8:73:1d:1b:30:16:d6:0b:d0:1a:3c:d7: 5a:87:7e:60:49:06:f0:68:d9:73:4b:06:23:66:1e: e8:73:b1:7c:6d:e2:6f:e1:3c:96:f5:e2:84:2e:74: 2b:2e:82:26:52:c7:65:de:5f:d0:90:bd:42:90:43: 19:62:89:8a:6b:71:ac:66:cc:10:17:61:08:e3:6c: 0d:d9:5c:01:26:99:0e:5f:96:78:09:c5:d3:e3:61: 58:f7:77:86:1a:d1:fa:23:d1:68:6e:a3:19:d7:a5: 94:dc:b1:6e:16:1d:f8:33:a1:18:25:e5:44:c6:67: 0f:65:d1:11:a8:0f:92:48:b6:b9:7d:c7:90:99:56: 5b:c1:e2:75:a2:51:ce:d3:68:62:60:9d:dc:80:2b: 44:e5:03:05:8a:a9:b9:12:70:96:ab:a4:6e:8d:b7: 2b:95:32:c1:48:a7:c5:e3:22:87:47:3c:5a:3d:2b: ff:10:2b:fc:aa:89:0f:f7:dc:5e:ee:49:d8:12:78: 8c:21:28:bf:a7:c3:4e:06:54:1c:b6:6e:80:4c:63: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.24.0/23 Signature Algorithm: sha256WithRSAEncryption 54:3f:9d:2d:8f:65:ee:18:b9:ef:ef:70:4e:60:47:d8:c8:84: a5:b4:7f:34:f2:94:db:7a:0e:e5:e0:fa:3e:49:89:0d:b9:29: 58:bc:1a:90:be:29:8d:3d:85:f6:97:73:9d:82:18:54:84:69: 80:7a:71:61:de:21:83:37:8e:2a:1f:64:34:38:0b:de:4e:63: a4:fc:e7:1e:bc:85:99:7d:b4:18:91:bf:c8:3f:6d:ab:6c:d3: 52:d8:6a:25:9d:08:da:df:9c:02:15:4a:f6:19:8c:ce:d8:65: c0:88:73:39:2d:59:0b:4e:f2:aa:ab:55:3a:83:6d:b8:5d:1b: 9e:9c:ee:f8:c1:97:3a:89:ed:eb:4b:12:f2:d2:e9:ff:41:67: ad:0b:7a:03:07:48:da:82:11:f7:05:c2:7b:44:f7:28:31:16: 04:99:5b:ac:7f:05:af:bb:84:23:c2:3e:63:27:4c:e5:d6:ee: 91:98:0d:e6:71:a2:25:65:b9:4c:ab:b4:93:5e:fe:a0:29:66: 87:12:1b:fc:b2:c5:45:53:99:eb:b4:cf:f3:e4:3e:95:32:b5: bb:62:2f:09:58:7b:36:74:2d:8b:5c:89:62:8e:e8:3a:34:bd: 4d:1a:a0:c1:db:f7:97:1a:4a:63:9f:84:65:6d:1e:c3:4d:fa: a0:92:6a:3d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEA7XsuRZO+V6xMNZBrM704cHGpAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDc1NFoX DTI3MDUwMjAxNTI1NFowMzExMC8GA1UEAxMoRUQwNTU1QUE1MTVCNDA5ODVBOTNC OTAyRDc0ODk5M0REMkZFNEI4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHMfsFFJZEKasA9a43bAqH2D02ltJIsFB/eWtFXU10EUVpBC5bh7yXyJOVy SiNcyHMdGzAW1gvQGjzXWod+YEkG8GjZc0sGI2Ye6HOxfG3ib+E8lvXihC50Ky6C JlLHZd5f0JC9QpBDGWKJimtxrGbMEBdhCONsDdlcASaZDl+WeAnF0+NhWPd3hhrR +iPRaG6jGdellNyxbhYd+DOhGCXlRMZnD2XREagPkki2uX3HkJlWW8HidaJRztNo YmCd3IArROUDBYqpuRJwlqukbo23K5UywUinxeMih0c8Wj0r/xAr/KqJD/fcXu5J 2BJ4jCEov6fDTgZUHLZugExjM/UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO0FVapRW0CYWpO5AtdImT3S/kuPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MxYjc3ZDFlLTE1ODUtNDYwNC1iNmIxLTA3MWYwYTI5NDBjNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMWI3N2Qx ZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC9FRDA1NTVBQTUxNUI0MDk4 NUE5M0I5MDJENzQ4OTkzREQyRkU0QjhGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6gYMA0GCSqGSIb3DQEBCwUAA4IBAQBUP50tj2XuGLnv73BOYEfYyISltH80 8pTbeg7l4Po+SYkNuSlYvBqQvimNPYX2l3OdghhUhGmAenFh3iGDN44qH2Q0OAve TmOk/OcevIWZfbQYkb/IP22rbNNS2GolnQja35wCFUr2GYzO2GXAiHM5LVkLTvKq q1U6g224XRuenO74wZc6ie3rSxLy0un/QWetC3oDB0jaghH3BcJ7RPcoMRYEmVus fwWvu4Qjwj5jJ0zl1u6RmA3mcaIlZblMq7STXv6gKWaHEhv8ssVFU5nrtM/z5D6V MrW7Yi8JWHs2dC2LXIlijug6NL1NGqDB2/eXGkpjn4RlbR7DTfqgkmo9 -----END CERTIFICATE-----Generated at Tue May 12 22:38:58 2026 by rpki-client