$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer (raw, json) Hash identifier: tbgADeNUWlUz8IN+hYYyjguSK/riuY+8izppIyOADUM= Subject key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 517A40CFCAE55E536C32B6E637F91978AD8586BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:16:16 +0000 Certificate not after: Sun 02 May 2027 01:21:16 +0000 Subordinate resources: IP: 103.166.36.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7a:40:cf:ca:e5:5e:53:6c:32:b6:e6:37:f9:19:78:ad:85:86:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:16:16 2026 GMT Not After : May 2 01:21:16 2027 GMT Subject: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:e1:a1:4c:8c:57:61:69:8e:73:f4:97:bf: 95:33:1b:3c:bc:b1:73:d7:92:fe:dc:dd:49:68:89: cd:ec:72:cd:f2:dd:ee:d0:66:ea:c2:d6:20:ab:98: 8b:58:e1:b6:06:6a:1d:c5:89:54:4f:56:2c:bc:ca: d6:3a:2b:f1:8b:f7:e3:4c:b1:61:82:eb:23:6d:0b: 4b:49:74:a8:55:3d:f4:99:7e:5d:95:7b:7a:cb:9d: 09:b4:4f:be:d7:7a:e7:40:97:f0:03:1c:3f:c6:85: cb:26:03:fa:8a:5b:09:f0:52:be:18:93:51:31:2b: 6e:77:0c:bd:0a:82:d4:88:d0:68:b3:44:36:4f:ae: e9:f5:24:34:d1:72:49:fb:88:e6:1f:d1:72:60:15: 71:cc:0a:31:0a:f8:d2:e4:b6:12:bc:92:be:67:57: 85:3d:f6:94:26:25:8b:48:e1:56:bb:a0:d7:07:1c: 97:c3:d8:9a:04:84:df:c1:72:d7:6a:a0:18:0e:00: fd:bd:88:6b:9e:c7:ab:ba:db:c5:02:cf:7f:d4:88: f2:5f:20:47:b8:9d:37:5d:ff:28:1c:a6:4d:9e:8c: 48:bc:02:c3:47:46:a9:7a:08:e2:db:58:35:7f:45: c7:dc:ae:5c:50:5b:72:1e:a3:29:b5:29:71:b6:ea: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.36.0/23 Signature Algorithm: sha256WithRSAEncryption 59:64:66:8f:9d:02:6e:16:45:a0:6f:22:4d:8f:40:66:d5:a1: f3:88:97:a7:49:cd:85:8c:06:33:e6:0c:79:90:36:b6:f3:89: de:3e:e2:f8:92:b7:35:84:86:16:e6:e7:93:96:1d:c7:ab:c2: 14:f4:cd:8e:9d:c9:64:9e:35:46:4b:1b:08:3e:30:eb:4f:10: cf:84:1a:97:77:98:62:97:d2:f3:9b:87:24:fc:13:e6:c4:80: b0:20:e6:fa:e2:be:d9:4a:b2:76:99:2b:42:7b:17:d9:1f:fa: 22:e5:02:83:03:b1:8c:b4:27:49:67:59:ca:ce:91:c4:94:7a: 64:9f:3d:9b:d0:a3:ea:f4:a1:3b:99:99:06:85:fe:18:2d:ed: e7:50:57:c6:84:23:7d:52:3a:bb:ad:62:63:0a:90:5b:25:c5: 74:c8:e5:7e:27:9f:3b:f3:54:90:2b:21:33:59:96:df:49:d2: 6e:7f:82:87:1d:ee:a2:56:15:ca:c7:d2:20:a4:2d:98:94:6e: b6:4b:0d:67:fb:be:44:32:e5:90:a3:fc:ec:76:d0:d2:2a:d8: a4:42:35:5b:a8:bf:dd:a1:7e:c1:66:4e:da:3a:07:8e:5e:a1: 38:93:1d:0b:11:86:5a:44:31:a8:7f:ea:4d:38:d8:ff:2e:bf: 1a:b8:81:11 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUXpAz8rlXlNsMrbmN/kZeK2FhrwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTYxNloX DTI3MDUwMjAxMjExNlowMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhC MkZBMzgyQUM1NUU1RUU3NUY0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCD4aFMjFdhaY5z9Je/lTMbPLyxc9eS/tzdSWiJzexyzfLd7tBm6sLWIKuY i1jhtgZqHcWJVE9WLLzK1jor8Yv340yxYYLrI20LS0l0qFU99Jl+XZV7esudCbRP vtd650CX8AMcP8aFyyYD+opbCfBSvhiTUTErbncMvQqC1IjQaLNENk+u6fUkNNFy SfuI5h/RcmAVccwKMQr40uS2ErySvmdXhT32lCYli0jhVrug1wccl8PYmgSE38Fy 12qgGA4A/b2Ia57Hq7rbxQLPf9SI8l8gR7idN13/KBymTZ6MSLwCw0dGqXoI4ttY NX9Fx9yuXFBbch6jKbUpcbbqdDsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGROq933equn6fiy+jgqxV5e519GMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhmNzlhNDAyLWRlNWItNDllNS1hNmY1LWVlYWJhYzA4NGY0MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84Zjc5YTQw Mi1kZTViLTQ5ZTUtYTZmNS1lZWFiYWMwODRmNDEvMC82NDRFQUJEREY3N0FBQkE3 RTlGOEIyRkEzODJBQzU1RTVFRTc1RjQ2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6YkMA0GCSqGSIb3DQEBCwUAA4IBAQBZZGaPnQJuFkWgbyJNj0Bm1aHziJen Sc2FjAYz5gx5kDa284nePuL4krc1hIYW5ueTlh3Hq8IU9M2OnclknjVGSxsIPjDr TxDPhBqXd5hil9Lzm4ck/BPmxICwIOb64r7ZSrJ2mStCexfZH/oi5QKDA7GMtCdJ Z1nKzpHElHpknz2b0KPq9KE7mZkGhf4YLe3nUFfGhCN9Ujq7rWJjCpBbJcV0yOV+ J58781SQKyEzWZbfSdJuf4KHHe6iVhXKx9IgpC2YlG62Sw1n+75EMuWQo/zsdtDS KtikQjVbqL/doX7BZk7aOgeOXqE4kx0LEYZaRDGof+pNONj/Lr8auIER -----END CERTIFICATE-----Generated at Fri May 8 07:27:26 2026 by rpki-client