$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer File: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer (raw, json) Hash identifier: GSg1Y1NVClYTARKMmvHd51F0k8m74E5Fzb9IpH1RJ6g= Subject key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 07FB18303F1F869BC38AC059D7D9B3137290F3FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:05:23 +0000 Certificate not after: Sun 02 May 2027 00:10:23 +0000 Subordinate resources: IP: 103.118.174.0/23 IP: 2001:df1:1c40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 01:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fb:18:30:3f:1f:86:9b:c3:8a:c0:59:d7:d9:b3:13:72:90:f3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:05:23 2026 GMT Not After : May 2 00:10:23 2027 GMT Subject: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:7f:a2:05:5f:72:18:c0:81:39:59:95:2d: bf:e7:0a:09:4f:f5:26:24:1d:51:50:46:ed:c7:15: 55:ff:e3:43:f5:0d:ff:43:82:2b:a7:e9:06:d9:8e: ec:d3:27:41:5a:d7:29:e1:e4:bb:17:6a:67:3e:31: 8e:bf:63:c6:02:d5:46:3c:d1:9a:ec:49:0e:b4:3a: d3:c0:29:ac:6e:46:2b:24:20:6a:fd:02:61:bb:a6: 44:27:52:4b:df:9f:c1:d0:86:01:ed:e0:65:d3:a7: ef:4f:6b:23:09:2a:41:19:66:2b:00:f9:4d:59:84: d2:6a:d5:1c:ba:e2:92:01:25:f5:bd:0a:cb:7b:9b: d0:f6:62:d7:4e:03:32:d0:e0:b6:bf:82:80:1d:88: 2e:5c:9d:38:33:63:90:43:4d:c3:62:2f:66:c6:72: 5a:e1:0d:e6:78:ad:4f:f0:c5:49:32:1f:3d:ef:eb: 2f:9e:12:32:f2:8c:b3:03:69:d3:91:f1:e8:b6:78: bc:0a:90:ff:3d:6f:af:fa:d3:a2:68:1b:ab:a9:ca: df:ed:8e:75:34:f9:ed:70:14:7a:0e:cf:84:74:f8: a1:68:96:13:a0:f6:60:12:37:2a:20:11:17:5b:fc: c1:1f:ed:3e:f0:ca:20:8f:5f:e8:c0:b5:80:52:79: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.174.0/23 IPv6: 2001:df1:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 25:5f:79:b8:54:d4:39:1c:72:1b:d0:54:82:44:59:ca:e6:d3: dd:a5:1a:db:76:87:c3:2d:df:51:61:9b:64:de:44:32:c2:10: a0:9e:dc:5b:f9:f1:4b:e1:7e:ca:9c:f7:e6:e7:14:fc:dd:66: a8:83:0e:a9:e5:de:c6:87:ec:cd:f0:9b:92:51:f6:5c:80:b7: c5:e7:52:3a:83:f1:8e:fe:90:14:54:fe:a0:0d:29:c1:6d:b9: cd:1c:8d:cd:bc:72:a4:6f:49:c3:b5:f7:be:2c:8e:49:6a:a6: ea:8a:f9:d0:54:fa:85:32:57:22:8b:13:b4:c8:b7:b3:e6:e7: 26:e8:1c:13:5b:3b:79:59:88:b5:cf:45:5d:11:d8:a5:ad:97: 51:ce:65:34:e6:00:8c:3a:bd:57:90:86:d3:94:7f:d4:9e:9f: c2:c5:dd:14:7a:4f:29:cc:4d:87:7d:9f:ad:29:3d:75:a7:97: 87:53:3b:17:e2:c8:c0:13:91:6c:78:85:62:32:d1:0e:5e:0e: 2a:62:79:ae:82:c2:45:2f:e6:4e:48:1d:a4:22:93:77:9b:23: d7:33:9b:08:8d:41:24:b0:dc:28:1a:8f:42:a2:4d:81:e7:67: 08:0e:1b:27:a2:26:51:d2:f9:5a:ef:9a:dc:a9:d5:ea:02:b0: 25:88:75:3f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUB/sYMD8fhpvDisBZ19mzE3KQ8/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDUyM1oX DTI3MDUwMjAwMTAyM1owMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5 MzRDN0E0MDYxRTJGQ0E2Q0NDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZwf6IFX3IYwIE5WZUtv+cKCU/1JiQdUVBG7ccVVf/jQ/UN/0OCK6fpBtmO 7NMnQVrXKeHkuxdqZz4xjr9jxgLVRjzRmuxJDrQ608AprG5GKyQgav0CYbumRCdS S9+fwdCGAe3gZdOn709rIwkqQRlmKwD5TVmE0mrVHLrikgEl9b0Ky3ub0PZi104D MtDgtr+CgB2ILlydODNjkENNw2IvZsZyWuEN5nitT/DFSTIfPe/rL54SMvKMswNp 05Hx6LZ4vAqQ/z1vr/rTomgbq6nK3+2OdTT57XAUeg7PhHT4oWiWE6D2YBI3KiAR F1v8wR/tPvDKII9f6MC1gFJ5/aECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFla3pXNOXEmRTeTTHpAYeL8pszCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI3ZDlkN2NiLTZjZmItNGRlMC05ZGFhLWQyMjJiN2E4OTA3Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yN2Q5ZDdj Yi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC81OTVBREU5NUNEMzk3MTI2 NDUzNzkzNEM3QTQwNjFFMkZDQTZDQ0MyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ3auMA8EAgACMAkDBwAgAQ3xHEAwDQYJKoZIhvcNAQELBQADggEBACVfebhU 1DkcchvQVIJEWcrm092lGtt2h8Mt31Fhm2TeRDLCEKCe3Fv58Uvhfsqc9+bnFPzd ZqiDDqnl3saH7M3wm5JR9lyAt8XnUjqD8Y7+kBRU/qANKcFtuc0cjc28cqRvScO1 974sjklqpuqK+dBU+oUyVyKLE7TIt7Pm5yboHBNbO3lZiLXPRV0R2KWtl1HOZTTm AIw6vVeQhtOUf9Sen8LF3RR6TynMTYd9n60pPXWnl4dTOxfiyMATkWx4hWIy0Q5e Dipiea6CwkUv5k5IHaQik3ebI9czmwiNQSSw3Cgaj0KiTYHnZwgOGyeiJlHS+Vrv mtyp1eoCsCWIdT8= -----END CERTIFICATE-----Generated at Thu May 7 04:50:33 2026 by rpki-client