$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer File: 039655B785EC7CB007D8EC3057559737EDFECF68.cer (raw, json) Hash identifier: 9y2/FckItiIN3EG6bf76gqtVsy1WQFKgkw+o+xkWiTY= Subject key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3B92CFE826DC3CE0960E836F6D9B4BFCBFB20D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft caRepository: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:03:41 +0000 Certificate not after: Sun 02 May 2027 02:08:41 +0000 Subordinate resources: IP: 103.41.204.0/22 IP: 117.53.148.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:92:cf:e8:26:dc:3c:e0:96:0e:83:6f:6d:9b:4b:fc:bf:b2:0d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:03:41 2026 GMT Not After : May 2 02:08:41 2027 GMT Subject: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:a7:24:3c:dc:a3:9a:7c:39:71:0e:9a:32: da:84:f7:7a:1d:02:14:c9:9b:95:1c:e7:cd:9e:51: 51:15:51:1a:ff:d5:ba:00:b8:5e:00:e3:f5:56:25: 3b:79:3f:ad:bd:32:e0:be:33:0b:8c:5d:82:a9:07: b0:ba:10:8f:8a:94:94:4d:0c:f8:8c:61:ac:c7:4a: 82:97:f0:9e:21:48:f0:11:73:62:e2:8e:4c:82:ea: c5:1d:85:e0:55:0e:a5:26:da:93:ed:f3:1e:0e:44: 46:d1:69:69:cb:d0:e9:02:50:79:3a:5a:f4:7a:e4: 4e:ae:1b:c7:f3:5d:03:64:f0:ff:0c:8d:6f:b0:18: 90:dd:0c:98:45:a2:b9:86:b5:46:ee:0e:ef:41:62: 88:76:92:6a:ae:a9:c9:78:2c:6d:ca:4b:66:9f:d5: fe:f1:57:1f:b2:7d:98:be:a3:4e:3f:f0:e3:09:91: a6:0e:1e:0f:d5:5a:b7:90:b7:8b:ab:d9:42:e9:6b: 9e:c0:ae:ad:56:9c:39:1d:72:32:4b:db:47:97:0f: 37:b7:c9:ac:26:06:7e:c0:cc:8a:5a:bb:12:4e:f0: 55:46:9c:6f:75:69:57:00:62:d8:ad:00:23:9e:21: b5:c9:0e:15:3b:11:3c:ee:4a:f6:96:bb:a4:e6:6b: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.204.0/22 117.53.148.0/22 Signature Algorithm: sha256WithRSAEncryption a5:c7:3b:57:f5:a0:88:68:1d:f3:b1:8e:a3:09:9d:33:de:4b: 4a:7a:3d:ff:ce:d1:3b:d1:bb:2e:3f:27:88:29:00:66:9a:0e: bf:c7:29:11:1f:15:95:76:3c:88:1b:7c:a3:94:5f:81:f2:a7: 70:c8:3f:6d:7b:a9:2d:96:95:63:a9:be:ab:94:be:03:a8:66: 7b:01:e7:08:6d:39:7e:fa:73:df:52:c5:e1:46:5e:fe:2a:9c: 0c:b8:d2:1c:d2:33:71:da:75:69:00:95:1b:88:3e:f9:c9:bd: ec:e4:a6:05:3d:f1:d0:37:d3:e9:78:f1:da:47:9a:eb:5b:d8: 74:a6:74:d9:06:7f:cb:e1:5c:2d:3b:fa:41:3a:84:53:a9:4d: 0a:66:da:da:eb:1d:6e:0c:a3:9e:cc:95:4e:3c:e5:b4:ec:ea: b3:60:69:d1:27:7d:da:0c:fb:ec:6c:6c:9e:ed:7b:1f:c6:d0: a5:6d:80:1a:68:d2:25:db:cd:6a:75:19:50:2c:e5:1b:9e:ec: 73:cd:07:03:80:e7:28:b1:0a:fc:3e:a0:90:22:ca:80:e7:2f: a5:2f:9c:24:ee:48:20:3e:c0:71:8a:00:bc:16:ed:ef:e8:1f: 2e:67:fd:b4:2b:28:16:6b:ca:1a:14:6f:c6:28:11:33:ef:8d: 99:05:88:71 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUO5LP6CbcPOCWDoNvbZtL/L+yDXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDM0MVoX DTI3MDUwMjAyMDg0MVowMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhF QzMwNTc1NTk3MzdFREZFQ0Y2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJeQpyQ83KOafDlxDpoy2oT3eh0CFMmblRznzZ5RURVRGv/VugC4XgDj9VYl O3k/rb0y4L4zC4xdgqkHsLoQj4qUlE0M+IxhrMdKgpfwniFI8BFzYuKOTILqxR2F 4FUOpSbak+3zHg5ERtFpacvQ6QJQeTpa9HrkTq4bx/NdA2Tw/wyNb7AYkN0MmEWi uYa1Ru4O70FiiHaSaq6pyXgsbcpLZp/V/vFXH7J9mL6jTj/w4wmRpg4eD9Vat5C3 i6vZQulrnsCurVacOR1yMkvbR5cPN7fJrCYGfsDMilq7Ek7wVUacb3VpVwBi2K0A I54htckOFTsRPO5K9pa7pOZr2ssCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAOWVbeF7HywB9jsMFdVlzft/s9oMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RiOGJhNDVlLWY1ZGEtNDU4MS1iZmU1LWMxNjE2YzMwZWZhYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYjhiYTQ1 ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC8wMzk2NTVCNzg1RUM3Q0Iw MDdEOEVDMzA1NzU1OTczN0VERkVDRjY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCZynMAwQCdTWUMA0GCSqGSIb3DQEBCwUAA4IBAQClxztX9aCIaB3zsY6jCZ0z 3ktKej3/ztE70bsuPyeIKQBmmg6/xykRHxWVdjyIG3yjlF+B8qdwyD9te6ktlpVj qb6rlL4DqGZ7AecIbTl++nPfUsXhRl7+KpwMuNIc0jNx2nVpAJUbiD75yb3s5KYF PfHQN9PpePHaR5rrW9h0pnTZBn/L4VwtO/pBOoRTqU0KZtra6x1uDKOezJVOPOW0 7OqzYGnRJ33aDPvsbGye7XsfxtClbYAaaNIl281qdRlQLOUbnuxzzQcDgOcosQr8 PqCQIsqA5y+lL5wk7kggPsBxigC8Fu3v6B8uZ/20KygWa8oaFG/GKBEz742ZBYhx -----END CERTIFICATE-----Generated at Tue May 12 22:10:09 2026 by rpki-client