$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer File: 03B040ED202D246E438A73DEA26426FBECEBB10D.cer (raw, json) Hash identifier: Tng3Qopyw6no93L4xxsNHYtoCXwhY14PWu8csowA5Tk= Subject key identifier: 03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 15FE894B1B1A88D2C82361284C728A87E72EB1B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:56:58 +0000 Certificate not after: Sun 02 May 2027 01:01:58 +0000 Subordinate resources: IP: 103.124.112.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fe:89:4b:1b:1a:88:d2:c8:23:61:28:4c:72:8a:87:e7:2e:b1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:56:58 2026 GMT Not After : May 2 01:01:58 2027 GMT Subject: CN=03B040ED202D246E438A73DEA26426FBECEBB10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:13:de:51:e9:da:2f:6a:27:aa:86:93:da: d2:6a:00:21:cd:8e:20:27:6e:d0:ba:1b:83:a6:96: e1:7f:8e:bb:d3:2a:5c:ce:8a:43:10:5c:9b:cd:c2: 05:97:92:f0:6e:8a:cf:e0:6e:7c:f5:22:1e:1d:6b: fa:e5:18:76:09:99:8f:66:15:3c:72:14:41:cf:de: 3e:5a:0d:56:0f:7e:02:8f:2b:5b:16:b4:81:c7:22: 13:fa:b0:89:c7:4a:e0:2f:59:a2:2b:c9:8d:51:e7: 7c:76:46:af:bc:50:b9:70:85:af:f8:a3:9a:93:71: 20:70:c6:30:8c:3d:4f:47:78:53:19:0d:b0:ef:50: 45:ab:df:7b:f5:ff:15:c9:35:9e:b7:60:ad:e7:bf: 37:d3:d2:73:bd:1a:15:73:dc:a3:6a:31:36:1f:5b: ba:ff:76:cf:ca:3e:0a:f8:a0:d5:88:91:57:11:8d: 81:28:ba:fd:f3:7a:4a:94:a2:ef:7a:59:6a:4b:18: 3d:87:50:d7:55:e4:1a:a5:05:b5:bd:06:15:e4:a7: 52:b7:df:d0:bc:a7:46:f1:1d:a7:30:f9:40:29:e9: a2:dd:d6:89:c9:80:12:53:0f:2a:73:6c:b5:ba:73: 33:4a:9d:48:6e:f3:5c:a6:f3:ad:ad:a8:88:c5:6a: 4c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.112.0/22 Signature Algorithm: sha256WithRSAEncryption 61:f3:62:8f:36:b6:4d:63:1a:52:fc:79:f5:46:f3:93:11:80: ba:e4:ab:d8:8e:56:e1:02:1e:1f:ea:e2:ff:5d:d6:9f:d7:4c: 65:fc:85:3f:9c:7a:a8:e4:e4:c0:08:fd:15:c6:d6:72:54:1a: 95:15:b6:18:49:2b:d1:f0:3b:07:b1:a1:c7:ed:b8:ff:2a:47: 1f:fc:f7:07:13:ef:f1:ee:e4:c0:e1:51:9d:6b:2c:c6:8b:08: 97:ad:60:dd:b5:d5:f5:fd:5d:44:c0:28:80:ba:51:62:d6:08: 3d:e3:e7:a4:59:1e:ac:1b:70:70:8b:70:8b:f3:02:5e:bb:68: 6a:96:9e:52:9f:8f:96:e0:0e:45:78:a1:99:57:3e:3d:24:ea: 78:2e:0f:00:42:ab:9a:f7:af:64:33:ff:41:65:15:44:6a:9e: b8:71:04:d2:d9:4e:59:8f:cb:27:a3:5c:23:d6:ab:5f:2b:6e: cd:0f:66:fb:16:a8:29:54:55:26:77:59:b2:50:d4:72:9e:6f: db:40:b9:4f:9d:13:fc:97:6e:08:53:8c:f9:7b:d5:fe:9f:64: b0:59:c9:e5:7d:04:ad:64:26:11:5f:aa:6a:9e:e2:4a:3c:fe: 89:4a:84:d4:16:7a:7b:d2:17:20:43:0f:0a:5c:5f:10:7e:a7: f5:a2:ad:56 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFf6JSxsaiNLII2EoTHKKh+cusbkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTY1OFoX DTI3MDUwMjAxMDE1OFowMzExMC8GA1UEAxMoMDNCMDQwRUQyMDJEMjQ2RTQzOEE3 M0RFQTI2NDI2RkJFQ0VCQjEwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK35E95R6dovaieqhpPa0moAIc2OICdu0Lobg6aW4X+Ou9MqXM6KQxBcm83C BZeS8G6Kz+BufPUiHh1r+uUYdgmZj2YVPHIUQc/ePloNVg9+Ao8rWxa0gcciE/qw icdK4C9ZoivJjVHnfHZGr7xQuXCFr/ijmpNxIHDGMIw9T0d4UxkNsO9QRavfe/X/ Fck1nrdgree/N9PSc70aFXPco2oxNh9buv92z8o+Cvig1YiRVxGNgSi6/fN6SpSi 73pZaksYPYdQ11XkGqUFtb0GFeSnUrff0LynRvEdpzD5QCnpot3WicmAElMPKnNs tbpzM0qdSG7zXKbzra2oiMVqTDcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAOwQO0gLSRuQ4pz3qJkJvvs67ENMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc0N2Y4ZjQ0LTI3N2QtNDVlMS1iMjEzLTA1MTE3ZmRlM2NiMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NDdmOGY0 NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8wM0IwNDBFRDIwMkQyNDZF NDM4QTczREVBMjY0MjZGQkVDRUJCMTBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3xwMA0GCSqGSIb3DQEBCwUAA4IBAQBh82KPNrZNYxpS/Hn1RvOTEYC65KvY jlbhAh4f6uL/Xdaf10xl/IU/nHqo5OTACP0VxtZyVBqVFbYYSSvR8DsHsaHH7bj/ Kkcf/PcHE+/x7uTA4VGdayzGiwiXrWDdtdX1/V1EwCiAulFi1gg94+ekWR6sG3Bw i3CL8wJeu2hqlp5Sn4+W4A5FeKGZVz49JOp4Lg8AQqua969kM/9BZRVEap64cQTS 2U5Zj8sno1wj1qtfK27ND2b7FqgpVFUmd1myUNRynm/bQLlPnRP8l24IU4z5e9X+ n2SwWcnlfQStZCYRX6pqnuJKPP6JSoTUFnp70hcgQw8KXF8Qfqf1oq1W -----END CERTIFICATE-----Generated at Tue May 12 22:32:56 2026 by rpki-client