$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer (raw, json) Hash identifier: tS/fPHyjbKJZpHUhe4/8G3v6SBJmrqXGUIcglelw+BY= Subject key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2353F8ED8F384C5D6407FB12BD353D8A155B990F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:30:02 +0000 Certificate not after: Sun 02 May 2027 00:35:02 +0000 Subordinate resources: IP: 103.155.166.0/23 IP: 2406:7240::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:53:f8:ed:8f:38:4c:5d:64:07:fb:12:bd:35:3d:8a:15:5b:99:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:30:02 2026 GMT Not After : May 2 00:35:02 2027 GMT Subject: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:c1:4e:0d:16:77:f3:ac:45:39:63:8d:7a: 8f:dd:1f:c1:1a:35:76:f7:2a:c6:22:2e:23:b9:ed: a3:3c:30:97:5e:88:e7:1e:b2:74:02:54:cc:91:71: 4d:48:3a:c5:3d:08:9e:79:45:38:ff:02:d5:e3:3f: bc:d1:d0:f0:44:c5:36:f0:40:ec:4b:54:79:57:30: 98:bc:6e:5c:6e:db:55:81:0c:f6:2c:97:90:19:88: df:c6:f1:45:35:8b:e9:9c:72:55:42:8b:0f:dd:6d: 4f:d4:03:98:44:3a:f7:19:f2:10:33:74:60:ff:fb: 98:fe:db:04:39:cf:f8:58:13:87:d3:b2:6c:dc:1d: f9:31:27:41:6e:8b:c2:b2:ec:3f:10:4d:80:70:c1: 65:43:fe:c3:8c:c4:c8:5f:61:06:51:e9:3d:c4:fd: ad:2c:56:67:53:8a:9d:d7:07:ac:6d:f8:57:3a:34: 11:b2:44:e4:9f:09:5f:8a:84:57:c1:d1:2f:46:8f: ef:01:75:af:29:05:f3:b3:ca:f5:b0:59:41:78:d3: e5:1e:3f:e6:9d:d3:b8:9a:62:29:27:4d:f6:92:71: d0:bb:1e:33:57:d6:fa:89:69:4e:c7:4f:f4:e5:47: 1f:5e:c7:b3:d4:02:2d:df:4d:c1:b7:cd:ee:03:bf: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.166.0/23 IPv6: 2406:7240::/32 Signature Algorithm: sha256WithRSAEncryption 9b:45:9b:d2:dc:6b:ab:fc:13:4c:bb:6a:a9:2c:cb:ab:f4:b0: 48:b6:af:8e:db:db:8f:87:64:6c:4a:05:56:02:1f:eb:e1:11: 57:48:1e:c5:04:04:ba:74:7e:1c:cd:12:fb:f2:86:cc:c7:9a: 76:10:75:58:a6:56:66:7b:dc:9a:24:9b:f2:32:7c:83:ed:65: 58:fa:25:49:42:8d:f2:cf:ba:45:45:23:8a:2d:5a:c0:28:d8: 1d:25:b4:a2:fa:35:f6:3c:9b:f1:cd:83:70:63:ec:3f:99:81: 82:1a:30:13:28:95:90:b0:44:4b:36:1c:97:39:03:7c:dc:7d: 17:3c:8b:46:fe:14:6e:7e:f5:9f:5a:15:ab:b0:05:ea:5e:ac: d9:c0:a2:db:5d:3f:9c:49:9c:1e:a4:82:f1:66:c6:a9:11:79: 7e:c6:86:cf:ff:ce:44:be:b0:09:50:78:f5:c5:e7:86:19:a2: c5:c3:d6:ca:f2:29:71:92:a1:a1:7a:94:d6:dd:e0:83:18:ad: 5f:17:83:3e:d6:17:59:ff:09:5e:95:54:65:0c:d7:68:6b:d9: ba:f2:b2:08:ec:f1:db:7d:7f:4a:02:54:22:3b:42:ae:3f:3f: 85:fc:ec:ff:8f:4c:fd:ab:f9:14:7e:a4:6f:b0:08:d1:d6:8c: 51:32:48:cb -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUI1P47Y84TF1kB/sSvTU9ihVbmQ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzAwMloX DTI3MDUwMjAwMzUwMlowMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVE NERCM0VGNDNBMDdDMjE4QTVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlHwU4NFnfzrEU5Y416j90fwRo1dvcqxiIuI7ntozwwl16I5x6ydAJUzJFx TUg6xT0InnlFOP8C1eM/vNHQ8ETFNvBA7EtUeVcwmLxuXG7bVYEM9iyXkBmI38bx RTWL6ZxyVUKLD91tT9QDmEQ69xnyEDN0YP/7mP7bBDnP+FgTh9OybNwd+TEnQW6L wrLsPxBNgHDBZUP+w4zEyF9hBlHpPcT9rSxWZ1OKndcHrG34Vzo0EbJE5J8JX4qE V8HRL0aP7wF1rykF87PK9bBZQXjT5R4/5p3TuJpiKSdN9pJx0LseM1fW+olpTsdP 9OVHH17Hs9QCLd9NwbfN7gO/1k0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAKLPqJRw6WXr1XU2z70OgfCGKWmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRjNmIyYmQ3LWQ3ZjEtNDgxNS1hNjBhLWNhZDU0MDI5Y2U4OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YzZiMmJk Ny1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC8wMjhCM0VBMjUxQzNBNTk3 QUY1NUQ0REIzRUY0M0EwN0MyMThBNUE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5umMA0EAgACMAcDBQAkBnJAMA0GCSqGSIb3DQEBCwUAA4IBAQCbRZvS3Gur /BNMu2qpLMur9LBItq+O29uPh2RsSgVWAh/r4RFXSB7FBAS6dH4czRL78obMx5p2 EHVYplZme9yaJJvyMnyD7WVY+iVJQo3yz7pFRSOKLVrAKNgdJbSi+jX2PJvxzYNw Y+w/mYGCGjATKJWQsERLNhyXOQN83H0XPItG/hRufvWfWhWrsAXqXqzZwKLbXT+c SZwepILxZsapEXl+xobP/85EvrAJUHj1xeeGGaLFw9bK8ilxkqGhepTW3eCDGK1f F4M+1hdZ/wlelVRlDNdoa9m68rII7PHbfX9KAlQiO0KuPz+F/Oz/j0z9q/kUfqRv sAjR1oxRMkjL -----END CERTIFICATE-----Generated at Tue May 12 22:03:14 2026 by rpki-client