$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer File: 5A5DD73D891416196AA5239D921D189D149B622B.cer (raw, json) Hash identifier: HF+It6JuWlyV5UHraPFAeyC4u+cLzYav94GCdJiVb10= Subject key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37962A0D4150048570B63CAD31F40EF8DF03415E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:46:24 +0000 Certificate not after: Sat 01 May 2027 23:51:24 +0000 Subordinate resources: IP: 103.190.134.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 01:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:96:2a:0d:41:50:04:85:70:b6:3c:ad:31:f4:0e:f8:df:03:41:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:46:24 2026 GMT Not After : May 1 23:51:24 2027 GMT Subject: CN=5A5DD73D891416196AA5239D921D189D149B622B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:dc:92:bf:c3:c8:05:fb:52:9b:8a:8e:c7: 70:1d:08:42:12:e8:83:eb:0a:63:d0:3e:37:e6:8e: 71:82:cd:32:9a:c2:34:3d:66:78:3d:e2:dc:ec:45: 14:2e:ad:10:ed:be:1a:b7:52:d9:97:42:27:21:d9: 4c:dc:a3:88:b4:58:11:6d:90:78:52:40:81:7a:0d: 50:84:40:e1:2c:54:cd:9e:f0:64:2d:54:30:b7:b1: 83:3b:58:23:d8:3b:69:d9:93:da:16:20:42:29:8b: 68:45:fe:e5:9b:87:b5:9b:e0:80:2c:74:d1:29:6c: fe:13:b4:3b:33:fd:9c:b8:10:27:48:7f:a5:6b:03: 5b:d9:4b:d4:ce:15:d3:a0:98:ea:c8:eb:6c:38:58: ee:ad:bf:e5:b0:f7:37:ad:a8:21:a3:52:1a:e4:70: 61:0e:6d:7b:4a:d7:0a:d4:07:4f:0f:0c:02:d3:96: ca:1f:2a:80:92:94:ce:f0:2a:cc:47:9c:31:16:9c: fd:8b:12:3d:bd:73:48:4e:28:f0:e6:1e:0f:f8:e7: 0e:51:3d:e0:9e:72:8e:d7:67:c1:61:26:e1:3a:7d: 19:ba:bd:f0:cd:ae:0d:25:a9:88:be:48:15:f6:d9: 11:0d:f9:90:ed:af:01:14:a9:e9:b0:6f:d5:5e:18: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.134.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:ac:0b:60:5d:11:9e:63:b1:2c:2c:8c:70:65:91:c3:37:bd: 28:cc:33:4b:a8:0e:f2:57:e6:4b:4c:78:f8:ff:98:81:43:60: 98:b0:7b:b6:12:3d:44:7f:51:0d:02:85:5f:a3:34:da:10:65: 97:22:b1:f1:05:d3:52:52:32:9b:95:69:57:10:0c:2a:ac:87: a3:64:c0:58:7c:e8:a2:e8:ac:2f:66:25:08:e9:85:87:ca:7a: d3:2d:28:13:a6:5a:c0:a2:2e:7d:af:50:19:59:4c:bd:10:09: 8e:99:76:b2:db:9f:26:26:52:22:bb:27:c8:8f:0f:e7:1f:54: 83:e5:43:c1:8c:7f:00:80:0b:e9:f7:bb:b7:8c:d5:61:b9:7a: 67:92:e1:3f:64:9b:96:50:cb:2b:65:95:aa:89:99:68:de:60: a5:8e:63:83:85:74:8d:07:54:c5:4b:32:78:91:9b:29:c0:76: c8:bb:23:e8:94:65:6a:f2:0f:41:29:23:a2:a4:dd:bf:a1:8f: a0:ca:85:74:34:2c:71:5e:f7:e1:1e:95:24:83:8e:9f:2e:8e: 68:d5:5f:95:ad:00:ac:36:2d:1f:40:a7:df:6a:ad:20:3d:7d: 60:fb:03:5d:a8:27:ee:8c:75:df:ef:8d:96:bd:89:c5:06:c6: e3:62:9e:15 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUN5YqDUFQBIVwtjytMfQO+N8DQV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDYyNFoX DTI3MDUwMTIzNTEyNFowMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUy MzlEOTIxRDE4OUQxNDlCNjIyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4P3JK/w8gF+1Kbio7HcB0IQhLog+sKY9A+N+aOcYLNMprCND1meD3i3OxF FC6tEO2+GrdS2ZdCJyHZTNyjiLRYEW2QeFJAgXoNUIRA4SxUzZ7wZC1UMLexgztY I9g7admT2hYgQimLaEX+5ZuHtZvggCx00Sls/hO0OzP9nLgQJ0h/pWsDW9lL1M4V 06CY6sjrbDhY7q2/5bD3N62oIaNSGuRwYQ5te0rXCtQHTw8MAtOWyh8qgJKUzvAq zEecMRac/YsSPb1zSE4o8OYeD/jnDlE94J5yjtdnwWEm4Tp9Gbq98M2uDSWpiL5I FfbZEQ35kO2vARSp6bBv1V4YSc0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFpd1z2JFBYZaqUjnZIdGJ0Um2IrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBhNjNiN2Q3LWVhODMtNGJlOS1iMmZjLWIzMGViMGI0NGQwYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wYTYzYjdk Ny1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC81QTVERDczRDg5MTQxNjE5 NkFBNTIzOUQ5MjFEMTg5RDE0OUI2MjJCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ76GMA0GCSqGSIb3DQEBCwUAA4IBAQBbrAtgXRGeY7EsLIxwZZHDN70ozDNL qA7yV+ZLTHj4/5iBQ2CYsHu2Ej1Ef1ENAoVfozTaEGWXIrHxBdNSUjKblWlXEAwq rIejZMBYfOii6KwvZiUI6YWHynrTLSgTplrAoi59r1AZWUy9EAmOmXay258mJlIi uyfIjw/nH1SD5UPBjH8AgAvp97u3jNVhuXpnkuE/ZJuWUMsrZZWqiZlo3mCljmOD hXSNB1TFSzJ4kZspwHbIuyPolGVq8g9BKSOipN2/oY+gyoV0NCxxXvfhHpUkg46f Lo5o1V+VrQCsNi0fQKffaq0gPX1g+wNdqCfujHXf742WvYnFBsbjYp4V -----END CERTIFICATE-----Generated at Thu May 7 03:53:40 2026 by rpki-client