$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer File: 587FA9FD682D37BC3028319A65BCAECCE276314F.cer (raw, json) Hash identifier: JjTogI/mfGez3FUDb9qSmNcn/WdSYNVlbTPQoQP7uuQ= Subject key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 533A8ACC3815DE7BEC9BE8E0E1115817297FA1BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:00:16 +0000 Certificate not after: Sun 02 May 2027 00:05:16 +0000 Subordinate resources: IP: 103.182.0.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3a:8a:cc:38:15:de:7b:ec:9b:e8:e0:e1:11:58:17:29:7f:a1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:00:16 2026 GMT Not After : May 2 00:05:16 2027 GMT Subject: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:09:06:c5:63:48:9a:e3:29:b2:b5:17:ee:b2: 09:f7:16:43:bc:aa:7b:4f:a8:53:71:f1:44:23:ee: 96:99:6d:6d:5a:0a:69:bc:80:af:9d:f3:9e:a9:d9: 7e:6d:d6:f3:33:b7:7d:0b:78:0e:17:12:8f:a7:2c: d7:2f:6c:9e:84:2f:a7:a3:f8:80:3f:c9:29:5b:a7: 34:95:30:fe:21:90:ea:44:eb:29:73:7f:83:41:cb: dd:4d:69:18:6a:5a:27:33:6c:ff:79:c3:c3:e0:06: 7b:9c:db:1c:d1:16:93:c1:19:ad:86:9d:61:64:a3: b6:eb:cb:99:e7:f9:42:6b:bf:5b:8d:d7:1e:3d:bc: d4:76:51:19:a8:0c:df:17:6a:c5:e3:41:19:65:08: 21:5d:10:9a:2b:8f:67:28:b4:c0:4d:37:2d:07:93: 7d:f4:89:cb:51:ce:3b:73:5b:d8:b2:81:1c:cf:4c: 75:63:1d:1f:fb:e7:84:ea:55:b1:ff:e0:10:b0:35: 36:3d:54:90:a0:29:27:46:cc:ba:da:e2:0b:03:12: a3:90:d9:5d:b3:72:33:bf:bb:e0:bd:8a:4f:5c:3b: f7:5a:33:33:ea:ff:dc:c3:63:55:55:b4:87:50:90: b6:1b:a9:1d:c2:4f:a0:db:e6:ea:9e:c5:e6:7b:f0: 91:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.0.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:08:8d:f4:31:a0:7f:69:20:0c:48:b7:58:3d:75:e8:a1:c7: 58:46:33:f3:64:4d:eb:37:a7:75:81:36:1d:e9:d9:e5:cd:74: 24:d0:92:f7:dc:97:b9:78:b4:72:97:c7:b2:0e:cb:2d:30:b7: f6:74:95:90:92:2e:7f:66:59:76:6f:1f:89:d2:05:9f:64:70: 8e:f1:63:ab:9d:99:7d:3c:95:aa:a2:09:fd:de:c2:ea:db:6f: 85:3b:3d:f5:ca:19:fa:ad:21:7b:c8:75:17:c7:1f:a8:b6:ee: f7:38:5a:db:2e:0d:91:a0:19:06:86:8e:67:ee:35:f1:5e:15: c1:25:92:ad:c4:04:59:ae:2a:fe:6b:63:d6:06:a4:d4:3c:4e: 0d:6b:94:56:20:5c:8b:08:5d:13:57:3f:d3:51:1b:18:45:55: b0:6a:05:1e:d1:cc:c8:94:dc:0b:ae:7a:38:99:96:8d:ee:19: 2d:b8:00:a3:ca:46:53:67:4e:a1:b4:fe:6a:dc:c8:69:31:fa: 03:e8:e9:f7:2e:2e:fa:e6:80:6e:fc:4d:e4:cc:90:45:aa:bc: c9:b3:34:11:fc:9c:76:b7:3d:67:cf:f0:5f:12:6a:2f:c6:25: da:33:d7:12:79:2e:8c:f4:a5:30:4b:db:bd:68:60:27:45:24: 5b:4c:6e:31 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUzqKzDgV3nvsm+jg4RFYFyl/ob0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDAxNloX DTI3MDUwMjAwMDUxNlowMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgz MTlBNjVCQ0FFQ0NFMjc2MzE0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwJBsVjSJrjKbK1F+6yCfcWQ7yqe0+oU3HxRCPulpltbVoKabyAr53znqnZ fm3W8zO3fQt4DhcSj6cs1y9snoQvp6P4gD/JKVunNJUw/iGQ6kTrKXN/g0HL3U1p GGpaJzNs/3nDw+AGe5zbHNEWk8EZrYadYWSjtuvLmef5Qmu/W43XHj281HZRGagM 3xdqxeNBGWUIIV0QmiuPZyi0wE03LQeTffSJy1HOO3Nb2LKBHM9MdWMdH/vnhOpV sf/gELA1Nj1UkKApJ0bMutriCwMSo5DZXbNyM7+74L2KT1w791ozM+r/3MNjVVW0 h1CQthupHcJPoNvm6p7F5nvwkcECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFh/qf1oLTe8MCgxmmW8rszidjFPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFmZmEzYjY0LTNjNjEtNDhkNS1hYjBjLWQ2M2I0ODI0ZDAwZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZmZhM2I2 NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC81ODdGQTlGRDY4MkQzN0JD MzAyODMxOUE2NUJDQUVDQ0UyNzYzMTRGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7YAMA0GCSqGSIb3DQEBCwUAA4IBAQAKCI30MaB/aSAMSLdYPXXoocdYRjPz ZE3rN6d1gTYd6dnlzXQk0JL33Je5eLRyl8eyDsstMLf2dJWQki5/Zll2bx+J0gWf ZHCO8WOrnZl9PJWqogn93sLq22+FOz31yhn6rSF7yHUXxx+otu73OFrbLg2RoBkG ho5n7jXxXhXBJZKtxARZrir+a2PWBqTUPE4Na5RWIFyLCF0TVz/TURsYRVWwagUe 0czIlNwLrno4mZaN7hktuACjykZTZ06htP5q3MhpMfoD6On3Li765oBu/E3kzJBF qrzJszQR/Jx2tz1nz/BfEmovxiXaM9cSeS6M9KUwS9u9aGAnRSRbTG4x -----END CERTIFICATE-----Generated at Tue May 5 14:06:12 2026 by rpki-client