$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer (raw, json) Hash identifier: alcHdowyr+wWyrq+5S3IZqfN0gn6HD7ACCOo5uHeOvc= Subject key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09127CF9B5DF89F71839723985B6838F55C641EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:31:37 +0000 Certificate not after: Sun 02 May 2027 01:36:37 +0000 Subordinate resources: IP: 103.137.188.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:12:7c:f9:b5:df:89:f7:18:39:72:39:85:b6:83:8f:55:c6:41:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:31:37 2026 GMT Not After : May 2 01:36:37 2027 GMT Subject: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:39:0f:81:d6:71:e8:c0:a5:03:29:5e:f5: c5:57:d6:69:30:91:f6:2c:1b:2e:d1:94:2c:a1:f6: 16:3f:81:16:fb:5d:95:b3:a8:9d:16:c1:a8:4c:a5: c6:b0:17:f0:ee:6d:ee:cc:76:14:c2:b6:86:3a:16: f6:7f:e2:86:6b:39:53:26:d8:37:a5:93:b6:f6:2d: b1:7f:c1:79:bc:75:d9:47:04:c3:0b:5f:92:8a:fc: 59:44:dc:e4:bb:64:9e:3d:7e:e4:25:ee:05:f0:fd: 6f:49:5d:e2:d8:a5:2b:75:4b:26:9f:f4:f2:dc:f4: e5:c6:1e:5d:92:20:e7:0d:b8:92:13:f9:d9:2a:1b: 3a:ba:2a:73:78:f7:cb:c9:e5:69:6b:ff:e7:35:91: a0:38:4c:37:7a:94:f9:94:3b:d5:28:92:bc:2d:72: f1:0f:8b:b2:34:ab:e1:34:bb:91:1a:6f:2b:da:ae: af:30:52:32:48:87:58:17:50:3d:02:d9:26:1e:54: a7:db:c3:14:0d:bc:57:cb:5d:8f:b4:f3:09:9d:82: 83:3b:46:ca:62:64:02:46:ee:bd:6e:34:48:6e:ab: 6e:48:42:e1:d2:ea:1a:57:94:75:a0:3d:32:d9:d0: 24:5e:15:92:13:53:b1:17:23:e3:3d:dd:34:f9:f9: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.188.0/23 Signature Algorithm: sha256WithRSAEncryption 98:7c:cc:82:42:49:fd:c8:4d:d3:3e:5a:ce:70:f8:0b:48:2e: 77:be:17:69:a6:9b:cd:41:a9:5f:2c:f4:d0:4c:aa:24:70:b1: 27:2d:c5:67:e8:18:21:25:d4:14:e8:aa:99:4d:03:f3:5c:27: 12:5b:5d:9d:41:e7:18:8c:23:68:8e:7c:3c:92:9d:fe:74:95: a2:81:e9:6a:83:de:7d:9c:75:50:f4:12:06:1b:93:ed:df:7d: ef:b5:be:f1:a5:cf:c2:fa:84:45:2a:31:7a:3d:1d:a6:77:c3: 3e:de:80:75:06:f2:3f:00:13:5e:5a:e5:81:f0:9d:48:a3:e3: d7:b3:54:95:55:2c:6d:76:a1:6e:a4:5f:98:b5:31:0e:e9:df: 8d:1d:a1:e8:ed:57:cc:90:39:7d:e4:6d:03:e8:60:49:ee:ef: a7:cb:2e:6f:e6:cf:81:e9:d8:d5:25:38:b9:6c:15:23:ef:a0: 60:72:3f:7f:62:25:d2:47:b4:37:b3:fd:06:56:e9:3e:80:c9: 8b:d2:a9:65:32:21:40:b4:4b:f5:05:49:fc:00:6c:52:bf:3f: b5:9e:b8:e1:e2:a0:23:18:06:f9:c9:27:31:0a:ef:a6:b9:b4: 3c:ce:da:cf:50:f7:78:20:1c:e8:56:3d:62:b3:0f:9c:9e:24: e2:b9:eb:f5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCRJ8+bXfifcYOXI5hbaDj1XGQe8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzEzN1oX DTI3MDUwMjAxMzYzN1owMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJD QzI3RURGRjAzQjFFMUEzNDEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKdOQ+B1nHowKUDKV71xVfWaTCR9iwbLtGULKH2Fj+BFvtdlbOonRbBqEyl xrAX8O5t7sx2FMK2hjoW9n/ihms5UybYN6WTtvYtsX/Bebx12UcEwwtfkor8WUTc 5Ltknj1+5CXuBfD9b0ld4tilK3VLJp/08tz05cYeXZIg5w24khP52SobOroqc3j3 y8nlaWv/5zWRoDhMN3qU+ZQ71SiSvC1y8Q+LsjSr4TS7kRpvK9qurzBSMkiHWBdQ PQLZJh5Up9vDFA28V8tdj7TzCZ2CgztGymJkAkbuvW40SG6rbkhC4dLqGleUdaA9 MtnQJF4VkhNTsRcj4z3dNPn5SbsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCl3vBeRLWgaeOvMJ+3/A7Hho0E9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2YzEyNzAzLWYxZjctNDNjOS1hMjIwLTkyZWRkODZlZmU1ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNmMxMjcw My1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8yOTc3QkMxNzkxMkQ2ODFB NzhFQkNDMjdFREZGMDNCMUUxQTM0MTNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4m8MA0GCSqGSIb3DQEBCwUAA4IBAQCYfMyCQkn9yE3TPlrOcPgLSC53vhdp ppvNQalfLPTQTKokcLEnLcVn6BghJdQU6KqZTQPzXCcSW12dQecYjCNojnw8kp3+ dJWigelqg959nHVQ9BIGG5Pt333vtb7xpc/C+oRFKjF6PR2md8M+3oB1BvI/ABNe WuWB8J1Io+PXs1SVVSxtdqFupF+YtTEO6d+NHaHo7VfMkDl95G0D6GBJ7u+nyy5v 5s+B6djVJTi5bBUj76Bgcj9/YiXSR7Q3s/0GVuk+gMmL0qllMiFAtEv1BUn8AGxS vz+1nrjh4qAjGAb5yScxCu+mubQ8ztrPUPd4IBzoVj1isw+cniTiuev1 -----END CERTIFICATE-----Generated at Tue May 5 14:20:05 2026 by rpki-client