$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer (raw, json) Hash identifier: JwTntgz3JgShJ39Q6G/58L2Au8CJVf0g5OkcDss9Cfo= Subject key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5CEFEA6E4BAACFADBBF52E845DFB8892586EF518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:27:13 +0000 Certificate not after: Sun 02 May 2027 00:32:13 +0000 Subordinate resources: IP: 103.17.142.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ef:ea:6e:4b:aa:cf:ad:bb:f5:2e:84:5d:fb:88:92:58:6e:f5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:27:13 2026 GMT Not After : May 2 00:32:13 2027 GMT Subject: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:97:53:25:c3:01:35:7d:6b:3e:c0:ce:d1: 27:71:8e:26:e5:20:03:9b:2d:4d:d9:af:42:b4:c2: f0:a1:51:c2:31:82:49:9d:5b:d0:3d:0b:7c:cb:0f: b2:67:02:1c:8e:08:17:6c:6f:b9:4a:b6:52:81:ac: 82:4f:56:89:ea:ee:86:b1:26:7d:07:79:b0:3d:75: 11:73:97:fa:03:f4:42:65:76:f3:d1:69:76:43:37: c5:16:0a:59:c3:4e:96:c8:a3:99:0f:50:76:56:60: ed:7a:5e:9c:a2:65:7d:35:c1:27:ab:c0:7f:01:ed: 79:4a:1a:b6:1d:b0:14:e5:b0:f9:9e:1e:2e:c4:71: 93:8c:94:53:3c:08:94:65:39:2d:2d:59:ec:e7:8e: ec:91:e8:e5:2d:c5:c3:2f:9d:5c:1c:16:6d:a0:cd: dd:5b:03:82:fa:9d:f8:9e:22:2e:9e:b2:5a:e2:a7: 8f:b7:4d:ef:fb:a2:39:86:51:f9:83:a0:46:96:32: 69:aa:5d:64:8c:77:67:a7:fb:6f:0c:27:52:82:23: 26:b5:d0:32:2c:8a:d7:11:78:78:95:b5:73:fe:58: 18:78:cc:62:df:95:03:01:59:63:21:2a:7a:f0:20: 70:f9:fd:47:02:9e:7d:cb:92:06:f2:1d:23:41:ef: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.142.0/23 Signature Algorithm: sha256WithRSAEncryption 86:2f:99:f1:59:ac:09:f4:e1:9c:ca:89:51:c0:c9:2b:10:4b: 2f:d0:37:00:b7:db:db:96:aa:6f:be:77:48:0b:f0:59:80:8f: 0b:7b:f6:75:6a:eb:57:78:1f:62:b3:fb:a8:fd:b3:10:fd:24: 62:b2:ba:8d:3f:6e:f1:a6:87:88:18:4f:4e:eb:3b:f8:b6:a3: fb:51:67:4c:8b:a5:e0:fd:68:73:a5:c2:7a:6d:bb:72:c6:c0: c8:0a:17:aa:d5:84:0d:29:b0:dd:7a:67:db:ab:87:6a:c7:ab: d8:45:4b:7f:f7:48:65:51:cf:8e:ff:b2:fc:ec:88:3d:30:a2: 2b:8d:60:90:52:8f:c4:57:31:77:ed:73:2f:38:f8:3b:7f:6e: 6f:1d:f2:16:01:0d:5f:13:70:bd:2f:21:c4:1b:d5:4e:fa:fe: 11:a4:f3:e8:72:55:b4:ec:a0:97:f2:22:fb:f9:cc:7d:55:a5: 01:4c:64:9e:76:3c:2f:7a:6f:a9:41:d0:fd:fc:2e:7c:be:e1: 8b:4b:d2:54:dc:bd:c5:27:9b:39:dd:01:88:c1:8f:de:f7:b2: bb:cf:77:a8:ed:d2:7a:ee:39:e6:34:8d:8c:a0:4f:5e:1a:c8: 35:63:b7:5c:7b:cc:35:69:b9:bb:ae:e7:dd:2a:54:09:f4:c8: 37:c9:9d:53 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXO/qbkuqz6279S6EXfuIklhu9RgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjcxM1oX DTI3MDUwMjAwMzIxM1owMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhD NTE4N0RFQTlGNUU0RjRFRTBENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6jl1MlwwE1fWs+wM7RJ3GOJuUgA5stTdmvQrTC8KFRwjGCSZ1b0D0LfMsP smcCHI4IF2xvuUq2UoGsgk9WieruhrEmfQd5sD11EXOX+gP0QmV289FpdkM3xRYK WcNOlsijmQ9QdlZg7XpenKJlfTXBJ6vAfwHteUoath2wFOWw+Z4eLsRxk4yUUzwI lGU5LS1Z7OeO7JHo5S3Fwy+dXBwWbaDN3VsDgvqd+J4iLp6yWuKnj7dN7/uiOYZR +YOgRpYyaapdZIx3Z6f7bwwnUoIjJrXQMiyK1xF4eJW1c/5YGHjMYt+VAwFZYyEq evAgcPn9RwKefcuSBvIdI0HvaAsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKtQ/b8DhG4z0vjFGH3qn15PTuDVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ3NTk0NzZlLTZhZGItNGYyZS1iZTc1LTg0NjcyNTllMTI4Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NzU5NDc2 ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BQjUwRkRCRjAzODQ2RTMz RDJGOEM1MTg3REVBOUY1RTRGNEVFMEQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxGOMA0GCSqGSIb3DQEBCwUAA4IBAQCGL5nxWawJ9OGcyolRwMkrEEsv0DcA t9vblqpvvndIC/BZgI8Le/Z1autXeB9is/uo/bMQ/SRisrqNP27xpoeIGE9O6zv4 tqP7UWdMi6Xg/WhzpcJ6bbtyxsDICheq1YQNKbDdemfbq4dqx6vYRUt/90hlUc+O /7L87Ig9MKIrjWCQUo/EVzF37XMvOPg7f25vHfIWAQ1fE3C9LyHEG9VO+v4RpPPo clW07KCX8iL7+cx9VaUBTGSedjwvem+pQdD9/C58vuGLS9JU3L3FJ5s53QGIwY/e 97K7z3eo7dJ67jnmNI2MoE9eGsg1Y7dce8w1abm7rufdKlQJ9Mg3yZ1T -----END CERTIFICATE-----Generated at Tue May 5 14:17:12 2026 by rpki-client