$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer File: 8557597ED1797691974B01C1D7D410DE0468CB64.cer (raw, json) Hash identifier: +uokXys/8D+uVn/zRQmOgdbNEWHoYs9NdMWAlZnFJIs= Subject key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 150166B32ED32428D9D84A18499E3800BEB273C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft caRepository: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:06:18 +0000 Certificate not after: Sun 02 May 2027 01:11:18 +0000 Subordinate resources: IP: 103.195.65.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 01:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:01:66:b3:2e:d3:24:28:d9:d8:4a:18:49:9e:38:00:be:b2:73:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:06:18 2026 GMT Not After : May 2 01:11:18 2027 GMT Subject: CN=8557597ED1797691974B01C1D7D410DE0468CB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:8f:97:ac:5e:8b:67:ab:2d:25:5d:00:3b: 8f:e3:6c:ae:10:40:23:17:32:c7:64:6b:78:f0:3c: 2c:33:df:27:9a:2f:37:39:92:54:79:5b:2d:aa:50: 8d:d3:6a:7a:a0:4a:7f:17:62:5e:d4:28:f4:6d:7d: f4:05:bb:32:cf:e4:f4:de:99:75:10:f7:35:cc:38: 5c:48:d4:c3:c4:64:d2:7d:51:38:5f:db:de:44:de: fb:ca:97:f3:26:b6:ce:d3:1b:ea:d3:f2:2a:37:5f: 5b:bb:ff:67:41:12:c1:13:a7:93:5d:d4:d6:7b:76: 9f:f7:de:2e:34:90:47:2e:5b:f1:78:d8:5c:4a:a7: 0a:8a:06:51:40:82:d9:7c:6d:9d:e5:72:7c:72:50: 4e:21:85:b0:a6:1d:9f:b9:6e:78:2b:ff:6a:8f:5f: 33:92:ad:80:48:40:89:29:ac:08:ba:29:fd:c1:97: e9:25:35:c2:ba:2c:76:e7:e4:34:53:14:c0:a8:44: 08:d3:47:9c:b3:ef:ab:f1:4b:8f:0c:eb:ae:07:8c: 76:0a:0d:15:a5:cb:a8:6e:b4:9d:3e:28:bb:c2:c6: c4:93:de:a5:3a:7f:74:b7:83:dd:06:b3:90:fb:a1: 53:98:88:32:ac:43:1c:7e:08:d4:7b:9d:19:f6:fa: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.195.65.0/24 Signature Algorithm: sha256WithRSAEncryption 61:a2:3b:0b:76:0c:c7:e8:2c:4e:fc:ac:73:8f:94:ae:bf:0b: df:77:c5:41:33:1e:13:76:54:2d:0c:38:96:e4:d2:e3:a5:f1: 34:69:57:b7:ed:14:61:2a:e2:36:ff:d3:8a:ba:7b:4b:ed:ef: f2:4f:17:ad:7d:ef:44:13:4b:bb:aa:c6:e2:19:f0:0a:77:fd: 32:75:53:07:ac:c3:93:9b:4a:2a:01:c8:78:49:bb:da:33:be: 46:56:84:80:14:39:7d:82:22:9d:ce:e7:50:85:69:31:45:80: 2e:f4:c6:96:45:0b:02:14:68:22:98:db:dc:26:de:3e:83:6e: 66:19:ed:21:5b:03:b1:71:8f:b4:54:8a:ea:37:15:54:f6:34: 8e:a2:9c:b2:a9:17:7d:ff:a6:0e:e6:fd:a3:22:ba:30:e0:b0: 5a:4e:ad:eb:b0:4d:c5:d1:b8:a6:68:42:cb:8a:e9:60:fd:10: fc:3c:56:5f:81:f3:bc:2d:89:63:dd:76:74:68:e5:89:a2:c0: d9:ee:ba:0c:16:16:f0:f7:40:cc:b8:93:f5:0e:49:ac:af:52: 42:0a:92:b3:1c:0a:78:2e:3d:ab:db:65:d2:63:58:88:5b:13: d8:02:c7:6b:79:1f:3d:e6:a8:2d:f2:42:52:79:24:80:0c:66: 9f:43:5f:b7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFQFmsy7TJCjZ2EoYSZ44AL6yc8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDYxOFoX DTI3MDUwMjAxMTExOFowMzExMC8GA1UEAxMoODU1NzU5N0VEMTc5NzY5MTk3NEIw MUMxRDdENDEwREUwNDY4Q0I2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJY5j5esXotnqy0lXQA7j+NsrhBAIxcyx2RrePA8LDPfJ5ovNzmSVHlbLapQ jdNqeqBKfxdiXtQo9G199AW7Ms/k9N6ZdRD3Ncw4XEjUw8Rk0n1ROF/b3kTe+8qX 8ya2ztMb6tPyKjdfW7v/Z0ESwROnk13U1nt2n/feLjSQRy5b8XjYXEqnCooGUUCC 2XxtneVyfHJQTiGFsKYdn7lueCv/ao9fM5KtgEhAiSmsCLop/cGX6SU1wrosdufk NFMUwKhECNNHnLPvq/FLjwzrrgeMdgoNFaXLqG60nT4ou8LGxJPepTp/dLeD3Qaz kPuhU5iIMqxDHH4I1HudGfb6Vj8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIVXWX7ReXaRl0sBwdfUEN4EaMtkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwY2U0Nzk2LTQ5ZGUtNDNiMS1hMTUyLWIxOGQxMWFkYTUyOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MGNlNDc5 Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC84NTU3NTk3RUQxNzk3Njkx OTc0QjAxQzFEN0Q0MTBERTA0NjhDQjY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8NBMA0GCSqGSIb3DQEBCwUAA4IBAQBhojsLdgzH6CxO/Kxzj5Suvwvfd8VB Mx4TdlQtDDiW5NLjpfE0aVe37RRhKuI2/9OKuntL7e/yTxetfe9EE0u7qsbiGfAK d/0ydVMHrMOTm0oqAch4SbvaM75GVoSAFDl9giKdzudQhWkxRYAu9MaWRQsCFGgi mNvcJt4+g25mGe0hWwOxcY+0VIrqNxVU9jSOopyyqRd9/6YO5v2jIrow4LBaTq3r sE3F0bimaELLiulg/RD8PFZfgfO8LYlj3XZ0aOWJosDZ7roMFhbw90DMuJP1Dkms r1JCCpKzHAp4Lj2r22XSY1iIWxPYAsdreR895qgt8kJSeSSADGafQ1+3 -----END CERTIFICATE-----Generated at Thu May 7 04:53:35 2026 by rpki-client