$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer File: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer (raw, json) Hash identifier: LDimNmCj0/2GRuHpbRSe3hpextbtuZaoDu9GMPPIxWU= Subject key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7024B35E2BBA7CA6A9415B31C35A8715FC198239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft caRepository: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:45 +0000 Certificate not after: Sun 02 May 2027 00:00:45 +0000 Subordinate resources: IP: 103.246.116.0/22 IP: 202.93.128.0/20 IP: 2403:b900::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 09:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:24:b3:5e:2b:ba:7c:a6:a9:41:5b:31:c3:5a:87:15:fc:19:82:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:45 2026 GMT Not After : May 2 00:00:45 2027 GMT Subject: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:eb:6a:cc:d4:b2:3c:b5:f2:d4:8b:4c:d5: d3:00:b5:89:85:e8:97:6c:61:0e:6b:03:ab:28:88: 8a:fc:3d:cd:88:5a:37:28:b5:a6:e7:70:50:75:1f: e4:06:52:f6:a5:f4:8f:ec:d2:a6:ca:23:b1:c9:92: 34:10:5f:a9:61:98:77:45:ae:5d:35:cf:92:7f:92: ca:5b:c9:67:23:30:af:04:ee:5b:6d:1f:48:b6:f8: ab:fc:1f:17:67:44:f8:3b:a9:30:f1:2e:35:42:e6: c8:bc:7d:ca:f1:79:e9:60:36:42:d9:63:82:f2:2c: 11:ae:68:01:fb:ea:ea:5c:97:be:76:7e:1a:28:62: 98:9f:2a:fa:03:26:bb:dc:55:5c:8c:7e:46:a8:3b: 1e:33:70:1b:ff:ba:5a:68:46:54:b0:a3:3d:fa:84: 5b:9a:44:a5:d6:61:42:f8:fd:f2:5b:2d:77:2c:06: 19:be:ec:be:e8:5c:9e:b1:39:40:37:a7:c5:2c:46: 96:78:d2:d8:1d:da:ed:ab:00:3a:5b:ce:33:3b:5b: b1:85:d2:6c:fb:72:2a:11:ce:fe:30:6b:b2:cb:52: c4:6a:b6:16:da:42:bc:5e:1d:d4:91:f9:30:d3:6b: f2:19:b4:38:da:ed:eb:3f:db:85:55:01:49:59:1a: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.116.0/22 202.93.128.0/20 IPv6: 2403:b900::/32 Signature Algorithm: sha256WithRSAEncryption 82:0c:59:8a:e2:21:ff:32:96:e1:ab:df:ab:47:0a:d1:e0:be: 48:c3:8f:cc:55:e7:7a:91:59:91:10:b2:87:10:02:6f:55:f6: 9b:f7:85:cb:0e:b2:c0:d1:bd:b3:d3:f4:cb:25:2e:f6:6d:3b: 04:1b:bc:46:e8:47:46:6b:5a:ca:4a:b0:a5:ad:59:c7:3a:f1: 74:6d:41:d4:71:2d:dd:16:40:3f:40:f5:5b:42:64:43:64:9e: 4f:c5:cb:b9:a0:eb:be:27:f0:d5:34:fc:ad:9f:57:eb:a6:b6: aa:1d:06:12:67:85:22:dd:7d:a7:9a:2e:8f:80:19:d7:ed:95: 50:72:0d:85:c2:ea:6f:6f:6b:db:2b:84:12:ce:dd:99:5f:13: 7f:ba:bb:7f:80:8c:32:4b:e1:fb:ca:c2:90:c4:12:ba:91:c6: 3a:c0:c8:b9:29:7c:e2:85:57:b2:4e:0a:50:51:7e:4e:a8:02: 09:46:04:ea:2d:77:d7:b7:b2:1f:a3:ab:6d:05:12:e2:67:99: c1:8d:7c:13:78:95:78:31:4a:5f:18:15:a1:72:b3:a1:47:2f: 39:12:14:01:7e:4d:52:58:78:8e:a9:98:51:77:bf:44:70:43: 27:2c:2e:e2:1e:f2:92:9a:dc:9c:1b:c9:2a:5f:df:1a:c9:89: f4:e0:9d:27 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUcCSzXiu6fKapQVsxw1qHFfwZgjkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTU0NVoX DTI3MDUwMjAwMDA0NVowMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQz RUJDQjBDMTBGODE4QTRFRTQwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3R62rM1LI8tfLUi0zV0wC1iYXol2xhDmsDqyiIivw9zYhaNyi1pudwUHUf 5AZS9qX0j+zSpsojscmSNBBfqWGYd0WuXTXPkn+SylvJZyMwrwTuW20fSLb4q/wf F2dE+DupMPEuNULmyLx9yvF56WA2QtljgvIsEa5oAfvq6lyXvnZ+GihimJ8q+gMm u9xVXIx+Rqg7HjNwG/+6WmhGVLCjPfqEW5pEpdZhQvj98lstdywGGb7svuhcnrE5 QDenxSxGlnjS2B3a7asAOlvOMztbsYXSbPtyKhHO/jBrsstSxGq2FtpCvF4d1JH5 MNNr8hm0ONrt6z/bhVUBSVkaXl8CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCUoN8oUSz7n2yQ+vLDBD4GKTuQEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE4NmIzODg5LTY5NjYtNDVlZi05MDczLWFkMTQwMTFhYzNiMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xODZiMzg4 OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8yNTI4MzdDQTE0NEIzRUU3 REIyNDNFQkNCMEMxMEY4MThBNEVFNDA0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ/Z0AwQEyl2AMA0EAgACMAcDBQAkA7kAMA0GCSqGSIb3DQEBCwUAA4IBAQCC DFmK4iH/Mpbhq9+rRwrR4L5Iw4/MVed6kVmRELKHEAJvVfab94XLDrLA0b2z0/TL JS72bTsEG7xG6EdGa1rKSrClrVnHOvF0bUHUcS3dFkA/QPVbQmRDZJ5Pxcu5oOu+ J/DVNPytn1frpraqHQYSZ4Ui3X2nmi6PgBnX7ZVQcg2Fwupvb2vbK4QSzt2ZXxN/ urt/gIwyS+H7ysKQxBK6kcY6wMi5KXzihVeyTgpQUX5OqAIJRgTqLXfXt7Ifo6tt BRLiZ5nBjXwTeJV4MUpfGBWhcrOhRy85EhQBfk1SWHiOqZhRd79EcEMnLC7iHvKS mtycG8kqX98ayYn04J0n -----END CERTIFICATE-----Generated at Fri May 8 02:18:43 2026 by rpki-client