$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer (raw, json) Hash identifier: 3OvDI5cqP/UECzxirtdmWYxfhE/Y763XbrKF/fGl1+k= Subject key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B2E27EE2FC0ADF077B1A537CCFE757E11DCEBA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:10 +0000 Certificate not after: Sun 02 May 2027 02:03:10 +0000 Subordinate resources: IP: 103.138.218.0/23 IP: 2404:d5c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2e:27:ee:2f:c0:ad:f0:77:b1:a5:37:cc:fe:75:7e:11:dc:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:10 2026 GMT Not After : May 2 02:03:10 2027 GMT Subject: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:31:f9:98:94:2f:a5:da:08:02:f3:c9:39: 60:97:28:ec:74:50:48:18:7b:30:62:9a:54:87:d4: c2:35:50:a8:81:8e:10:81:ac:4a:86:26:95:51:54: 83:58:f6:aa:0f:6b:87:39:de:58:b9:4f:d6:cf:44: ba:8d:75:10:ac:b1:85:0f:64:3a:bd:df:6b:1f:bd: 78:0e:c1:0c:7e:e3:47:a9:01:9e:14:d0:29:45:a3: 4e:b0:55:14:63:13:b3:60:7e:3f:5e:e7:ab:0d:2e: 36:14:ba:53:15:29:e1:70:b9:f9:8f:74:64:d3:cb: 03:66:6b:a6:bf:0a:8d:61:16:3c:4c:f9:e2:c7:8f: b3:82:09:38:9e:6b:21:83:0b:5d:33:e1:b8:6e:ed: 26:12:f4:c2:1b:43:b1:24:8a:a4:8d:f5:bf:32:75: 3a:35:8f:ab:13:81:8e:ce:be:8b:f4:0d:9f:49:99: 80:83:3c:99:fb:78:f4:fe:42:e2:e1:3c:81:41:c9: 29:05:78:06:c2:c8:68:f3:57:68:03:85:f6:31:0f: a5:98:46:13:24:ab:01:eb:d6:c9:ba:8a:98:ed:33: d6:87:d0:e0:87:68:da:04:9d:b5:ca:37:a6:ce:53: d9:83:d9:55:db:ec:3f:6e:5b:fa:8e:c3:83:37:c1: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 IPv6: 2404:d5c0::/32 Signature Algorithm: sha256WithRSAEncryption 81:cd:00:06:7d:ed:6f:4f:e1:e5:2e:d2:66:ed:ba:e5:18:e4: 45:5f:72:26:28:ee:c9:fd:32:bb:7b:6a:4f:f1:aa:de:d8:18: 07:0f:a4:30:6c:89:0f:1d:66:aa:16:e5:ae:71:af:d6:38:66: 71:f4:0e:c8:01:50:08:a4:bc:cd:02:16:b6:cd:e2:c9:9a:12: 1c:18:89:e2:1b:c2:c2:31:2f:13:a2:6c:57:35:66:8a:29:29: fa:fb:55:83:38:56:54:19:c7:26:18:b4:a9:9c:b1:92:8e:39: 40:6f:81:04:9c:04:c7:75:62:08:67:15:7e:1f:c5:f2:fc:ff: bf:92:ae:bc:53:cf:80:b8:36:46:d5:3a:5c:58:bc:3f:4e:b2: df:f5:a6:b9:64:ef:30:91:54:35:b1:99:87:70:e4:0d:a5:ad: 73:ba:4f:01:04:c7:c0:7b:f4:00:6d:3f:00:f5:a0:0f:4c:9d: 8c:a4:0d:74:24:8d:a7:5d:d5:32:6f:5d:57:9c:6b:0e:ff:80: 61:7d:b3:fa:78:db:13:33:97:99:da:51:ed:2a:c2:e7:90:dc: 0c:c6:b9:4b:85:f5:7f:3b:fa:06:af:a5:1a:b1:b7:b0:f6:aa: 06:c2:55:9f:92:81:dc:c9:83:61:9a:0e:f6:ca:55:67:64:ad: 73:74:c6:1c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUSy4n7i/ArfB3saU3zP51fhHc66AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgxMFoX DTI3MDUwMjAyMDMxMFowMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRG REVFMjI3NzcxOTQ2RTIxNTJDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALahMfmYlC+l2ggC88k5YJco7HRQSBh7MGKaVIfUwjVQqIGOEIGsSoYmlVFU g1j2qg9rhzneWLlP1s9Euo11EKyxhQ9kOr3fax+9eA7BDH7jR6kBnhTQKUWjTrBV FGMTs2B+P17nqw0uNhS6UxUp4XC5+Y90ZNPLA2Zrpr8KjWEWPEz54sePs4IJOJ5r IYMLXTPhuG7tJhL0whtDsSSKpI31vzJ1OjWPqxOBjs6+i/QNn0mZgIM8mft49P5C 4uE8gUHJKQV4BsLIaPNXaAOF9jEPpZhGEySrAevWybqKmO0z1ofQ4Ido2gSdtco3 ps5T2YPZVdvsP25b+o7DgzfBfHMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFACEHb3l9s6/jJT97iJ3cZRuIVLPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QyNTAyMjA1LTVjNTQtNDdkYi1hZTZmLTlkNDhlMTgzMjQxYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMjUwMjIw NS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC8wMDg0MURCREU1RjZDRUJG OEM5NEZERUUyMjc3NzE5NDZFMjE1MkNGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4raMA0EAgACMAcDBQAkBNXAMA0GCSqGSIb3DQEBCwUAA4IBAQCBzQAGfe1v T+HlLtJm7brlGORFX3ImKO7J/TK7e2pP8are2BgHD6QwbIkPHWaqFuWuca/WOGZx 9A7IAVAIpLzNAha2zeLJmhIcGIniG8LCMS8TomxXNWaKKSn6+1WDOFZUGccmGLSp nLGSjjlAb4EEnATHdWIIZxV+H8Xy/P+/kq68U8+AuDZG1TpcWLw/TrLf9aa5ZO8w kVQ1sZmHcOQNpa1zuk8BBMfAe/QAbT8A9aAPTJ2MpA10JI2nXdUyb11XnGsO/4Bh fbP6eNsTM5eZ2lHtKsLnkNwMxrlLhfV/O/oGr6Uasbew9qoGwlWfkoHcyYNhmg72 ylVnZK1zdMYc -----END CERTIFICATE-----Generated at Tue May 12 22:39:02 2026 by rpki-client