$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.cer (raw, json) Hash identifier: KFQl8UJZkAjZ+C5/42C3eB1Ui1KwrDDFgDBLUnqbWfE= Subject key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 06DA4DA3F2FE737ABEDF1B8E42D2828C9D650EB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:29:06 +0000 Certificate not after: Sun 02 May 2027 01:34:06 +0000 Subordinate resources: IP: 202.47.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:da:4d:a3:f2:fe:73:7a:be:df:1b:8e:42:d2:82:8c:9d:65:0e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:29:06 2026 GMT Not After : May 2 01:34:06 2027 GMT Subject: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:6c:0c:0d:ab:a6:b7:a1:be:b4:d5:cb:71: e4:f1:09:a3:ea:15:8d:a1:1b:7b:2a:6f:56:b3:10: b1:79:a6:b6:f3:a9:3e:80:40:a3:d7:6e:71:f3:c8: 96:f7:4f:be:88:e9:c0:0f:c9:f7:a4:86:4f:b9:56: a4:23:35:a7:8a:92:03:a7:a8:dd:18:10:34:72:46: 3f:cc:c5:04:52:e6:4e:ff:a7:f4:4e:62:b1:0b:30: fe:d0:4d:de:0e:f7:2c:2b:72:f2:06:76:6b:8d:a4: 4a:78:bc:f0:36:b9:e6:e7:56:68:07:58:8a:64:b7: ee:39:cd:11:40:10:b3:22:01:05:83:e9:e8:be:d4: 2c:92:1e:a3:2a:8e:ef:0c:d5:16:0d:0d:e8:8b:00: 63:fb:46:da:13:b3:12:26:33:43:ac:08:4f:9f:62: c1:8d:72:ed:fe:98:11:88:28:8d:d4:1e:a1:ea:1c: 07:43:50:d7:e3:e6:22:95:97:1d:1d:d0:33:96:f3: f5:45:2e:ec:60:51:6a:02:9e:66:c2:59:0b:40:8b: 8e:88:27:03:d3:d1:16:e9:b8:0e:fe:f6:17:fb:fc: 22:6c:8c:6d:cd:1e:7f:db:0b:60:1d:5a:ec:33:8f: bc:24:97:f3:eb:16:d9:b0:60:ca:1e:4a:fc:ee:ca: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.92.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:ef:4a:db:25:b0:c6:37:01:e6:1b:e9:5d:8f:5b:63:b5:08: ae:af:ae:92:36:0a:61:61:4b:e9:30:38:1e:ba:5a:81:68:cc: 44:86:d2:28:f1:3e:1f:04:00:a7:4e:c8:5c:1b:f4:fe:ec:1b: c2:b0:e7:7f:cb:ba:24:1e:43:8f:47:46:f8:f4:38:49:9a:6e: 41:b7:39:0b:5f:87:1b:50:27:a0:85:ad:16:06:2f:49:46:fb: 6d:fc:8d:4c:58:be:c9:4c:b7:b4:86:a0:ad:ed:b4:dd:67:78: ad:12:7f:12:45:65:9b:77:84:18:69:8a:c2:de:29:ea:32:ce: 37:42:2c:1b:3c:25:db:1d:d8:94:73:db:b8:27:1f:91:60:f7: 9a:b1:d4:49:d3:25:a5:05:ca:b6:e0:bd:32:e6:3d:18:46:12: 66:67:7e:3d:a7:76:a4:8a:e7:d2:94:88:82:d6:4e:05:fe:82: f9:a0:1d:15:44:83:c6:79:7a:5e:d7:58:7a:2d:03:3f:65:e4: b9:77:d2:78:a4:da:21:43:23:9b:6e:1d:21:51:17:83:21:c4: da:1c:27:0f:60:c7:d2:2f:da:d3:b4:ad:4f:fe:4d:c2:70:5c: 1b:45:78:1e:70:28:97:d3:04:54:f3:1b:be:cd:93:9c:38:b2: 4d:65:25:a7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBtpNo/L+c3q+3xuOQtKCjJ1lDrgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjkwNloX DTI3MDUwMjAxMzQwNlowMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkx MjlGMzg4MzlFMzVDNEEyRTk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIiXbAwNq6a3ob601ctx5PEJo+oVjaEbeypvVrMQsXmmtvOpPoBAo9ducfPI lvdPvojpwA/J96SGT7lWpCM1p4qSA6eo3RgQNHJGP8zFBFLmTv+n9E5isQsw/tBN 3g73LCty8gZ2a42kSni88Da55udWaAdYimS37jnNEUAQsyIBBYPp6L7ULJIeoyqO 7wzVFg0N6IsAY/tG2hOzEiYzQ6wIT59iwY1y7f6YEYgojdQeoeocB0NQ1+PmIpWX HR3QM5bz9UUu7GBRagKeZsJZC0CLjognA9PRFum4Dv72F/v8ImyMbc0ef9sLYB1a 7DOPvCSX8+sW2bBgyh5K/O7KiecCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFRMIKb8Y0+2X+kSnziDnjXEoulRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EzNzFkYjliLTdjNDAtNDk2Ni05OTFiLTUxMzhiMzY5MzI0Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMzcxZGI5 Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC81NDRDMjBBNkZDNjM0RkI2 NUZFOTEyOUYzODgzOUUzNUM0QTJFOTUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQByi9cMA0GCSqGSIb3DQEBCwUAA4IBAQAe70rbJbDGNwHmG+ldj1tjtQiur66S NgphYUvpMDgeulqBaMxEhtIo8T4fBACnTshcG/T+7BvCsOd/y7okHkOPR0b49DhJ mm5BtzkLX4cbUCegha0WBi9JRvtt/I1MWL7JTLe0hqCt7bTdZ3itEn8SRWWbd4QY aYrC3inqMs43QiwbPCXbHdiUc9u4Jx+RYPeasdRJ0yWlBcq24L0y5j0YRhJmZ349 p3akiufSlIiC1k4F/oL5oB0VRIPGeXpe11h6LQM/ZeS5d9J4pNohQyObbh0hUReD IcTaHCcPYMfSL9rTtK1P/k3CcFwbRXgecCiX0wRU8xu+zZOcOLJNZSWn -----END CERTIFICATE-----Generated at Fri May 8 07:34:13 2026 by rpki-client