$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer (raw, json) Hash identifier: GdTd4XCZhZ9/ewwTSND/SjJLpgbjHpGSY/WWe/MpM30= Subject key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7D959BCB1D4F2763571DB3AEE8A2EF173C6C2A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:14:12 +0000 Certificate not after: Sun 02 May 2027 01:19:12 +0000 Subordinate resources: IP: 103.178.16.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:95:9b:cb:1d:4f:27:63:57:1d:b3:ae:e8:a2:ef:17:3c:6c:2a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:14:12 2026 GMT Not After : May 2 01:19:12 2027 GMT Subject: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:87:cf:c6:2e:78:9e:7f:7b:71:29:d0:bc: 4b:f7:99:b3:66:2a:06:ee:ba:73:90:f6:03:fa:5a: 8b:3e:22:4c:72:9f:91:26:6a:24:15:21:82:10:a0: 5b:0c:1b:f3:07:72:6f:20:1e:a5:a0:80:2b:97:ca: 46:b8:69:c3:99:0f:44:5e:00:ed:7f:61:b0:0d:c1: 47:b5:f2:6b:1b:e7:10:75:37:3a:94:a4:f6:62:09: d1:14:1c:d5:c7:af:a1:13:0f:cb:8f:4b:62:3b:8e: ad:83:5d:59:2e:d3:d9:1a:eb:84:70:b3:7f:c5:b8: ce:34:20:c6:d7:85:84:c2:f9:f3:64:cd:df:17:df: 9d:a9:8c:9d:42:dc:45:36:2e:bd:aa:77:0c:6d:71: 65:ae:37:40:13:22:3b:17:4e:22:d3:ef:e9:cb:5b: da:99:4e:a5:0e:47:bf:16:c2:21:34:13:27:7c:94: 22:2c:f1:23:44:70:46:63:78:e9:93:aa:83:7e:02: 42:3a:ab:0a:f6:94:49:7e:0f:3e:79:df:e5:7c:a0: a1:28:e1:9a:46:26:0a:53:4b:dd:ed:a4:ae:be:df: 89:83:57:c1:87:28:f7:85:47:74:8c:3d:54:27:1d: 35:7e:99:80:28:db:0f:b2:58:50:e3:7b:86:a2:d0: 72:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.16.0/23 Signature Algorithm: sha256WithRSAEncryption 65:81:74:92:d6:6f:f9:46:7b:47:c1:0b:42:06:2d:61:8b:e5: 4b:96:3c:2d:40:22:14:bf:07:75:fb:1c:e2:d5:59:68:8d:6e: f4:3d:15:ac:96:ea:fa:e1:b7:5e:a5:74:9c:e0:f0:0b:7d:e2: a4:16:31:03:01:a0:54:22:68:e1:5e:57:e6:63:73:77:07:40: d2:7f:0b:c2:e4:e4:39:50:b1:dd:96:ce:78:f8:23:89:83:97: ff:66:21:b4:3a:08:7e:11:54:66:12:81:77:76:4b:03:aa:71: f2:39:fc:c4:48:1d:5e:84:86:c3:9a:e8:40:e9:4b:be:66:4e: ee:07:4f:ac:c1:12:04:b7:62:7d:b0:a8:3c:97:52:62:93:dc: 04:21:87:7d:4c:01:f4:c4:b1:87:4d:68:79:a8:c5:f6:d1:6a: 8d:eb:94:73:c3:ab:6c:3f:fe:af:b1:50:8e:39:f6:24:ac:bf: 7a:ea:c2:42:91:76:cd:69:a6:5a:88:60:1f:74:fd:6a:8b:61: 49:f5:41:4b:46:29:d9:7e:7f:bc:3f:aa:5a:41:d0:36:d9:3d: d7:0e:21:0a:07:c3:1b:c0:f0:f6:57:7a:c0:7d:cc:44:8b:0a: d5:89:4b:ae:ef:1d:1e:3d:ea:e3:dc:80:bf:39:ad:8e:09:cd: 3e:ab:1d:c4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfZWbyx1PJ2NXHbOu6KLvFzxsKk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTQxMloX DTI3MDUwMjAxMTkxMlowMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJE MEI3QzhBNEI5ODBCREYzRkQ4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYCh8/GLnief3txKdC8S/eZs2YqBu66c5D2A/paiz4iTHKfkSZqJBUhghCg Wwwb8wdybyAepaCAK5fKRrhpw5kPRF4A7X9hsA3BR7XyaxvnEHU3OpSk9mIJ0RQc 1cevoRMPy49LYjuOrYNdWS7T2RrrhHCzf8W4zjQgxteFhML582TN3xffnamMnULc RTYuvap3DG1xZa43QBMiOxdOItPv6ctb2plOpQ5HvxbCITQTJ3yUIizxI0RwRmN4 6ZOqg34CQjqrCvaUSX4PPnnf5XygoSjhmkYmClNL3e2krr7fiYNXwYco94VHdIw9 VCcdNX6ZgCjbD7JYUON7hqLQco0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNKCVQZ5jkjuT2vQt8ikuYC98/2JMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhjMWU4MGQ0LTZlYmUtNDkyYy1hMGM1LWQ3NTk4Mjc1MzNiMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YzFlODBk NC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC9EMjgyNTUwNjc5OEU0OEVF NEY2QkQwQjdDOEE0Qjk4MEJERjNGRDg5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7IQMA0GCSqGSIb3DQEBCwUAA4IBAQBlgXSS1m/5RntHwQtCBi1hi+VLljwt QCIUvwd1+xzi1VlojW70PRWslur64bdepXSc4PALfeKkFjEDAaBUImjhXlfmY3N3 B0DSfwvC5OQ5ULHdls54+COJg5f/ZiG0Ogh+EVRmEoF3dksDqnHyOfzESB1ehIbD muhA6Uu+Zk7uB0+swRIEt2J9sKg8l1Jik9wEIYd9TAH0xLGHTWh5qMX20WqN65Rz w6tsP/6vsVCOOfYkrL966sJCkXbNaaZaiGAfdP1qi2FJ9UFLRinZfn+8P6paQdA2 2T3XDiEKB8MbwPD2V3rAfcxEiwrViUuu7x0ePerj3IC/Oa2OCc0+qx3E -----END CERTIFICATE-----Generated at Tue May 5 14:19:35 2026 by rpki-client