$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer File: 03B83E011591057E9C55D430A83D331349B52D74.cer (raw, json) Hash identifier: 4oDhUYfNIEYkaGnmZ8y48J/XmDtJJi5c52Oe9OpVG4A= Subject key identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 01A632B0CC6E6F2A1D4D6D1B1AC272BCB64DB2A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft caRepository: rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:49:13 +0000 Certificate not after: Sun 02 May 2027 00:54:13 +0000 Subordinate resources: IP: 103.30.0.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a6:32:b0:cc:6e:6f:2a:1d:4d:6d:1b:1a:c2:72:bc:b6:4d:b2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:49:13 2026 GMT Not After : May 2 00:54:13 2027 GMT Subject: CN=03B83E011591057E9C55D430A83D331349B52D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:50:56:71:22:19:79:9d:3b:e7:56:b4:a3: 9a:5d:fc:84:a7:ab:3a:72:a4:f8:25:6d:09:9a:65: dc:f8:fa:b4:a0:f0:3d:4d:25:03:2b:87:a2:cd:f9: 06:97:ef:ea:8e:9e:ee:03:86:6b:1c:ec:b9:42:a0: 20:9b:19:9a:ea:03:41:86:9d:be:1a:ca:0e:5a:11: 2a:9c:19:f4:c1:00:12:9e:5e:26:e8:ff:18:03:f0: 5f:f6:11:66:42:a5:3a:31:44:17:25:3a:a0:ba:5e: 98:a1:e9:d2:23:b7:d6:34:37:53:21:6c:db:ca:28: a3:3d:01:9f:90:e6:9a:f6:59:b6:7d:29:55:f2:f3: 7e:62:54:89:6b:f4:5c:cd:9d:84:0e:14:3f:61:b6: ec:12:e1:c5:b7:66:9c:62:47:7a:c6:a9:c4:85:55: 5d:aa:a8:f2:5f:6a:68:f9:b8:4a:7c:7d:d9:b9:96: 28:57:a6:c0:5b:55:19:2d:9e:c1:85:14:69:bb:be: ea:91:d0:30:5a:68:36:9e:79:95:87:48:ea:dd:9e: 69:7d:44:a7:30:fa:f9:d6:d0:3a:16:1c:04:f4:b6: c6:19:da:9a:a1:cb:8e:d0:42:0f:2c:e5:bb:f1:67: 5a:ab:03:fd:be:d5:9e:f9:ac:dc:00:6f:b4:ac:40: e3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.0.0/22 Signature Algorithm: sha256WithRSAEncryption 82:6a:56:55:2e:18:e1:8f:33:1e:c3:41:d7:f3:b3:d7:50:a4: e4:93:e3:8b:76:7e:da:06:d0:7d:78:90:94:0d:40:48:5e:4a: 6a:38:04:a7:57:3b:9a:8f:8a:f4:96:a8:74:85:d4:9f:da:91: 95:95:0a:39:5b:1e:be:0f:5e:69:a1:62:13:49:0b:3a:cd:58: 1a:14:34:b6:b1:36:45:f3:ec:5d:43:a1:f2:81:e3:f7:4b:05: 96:b4:8d:75:93:b6:87:66:cc:88:ee:df:9d:07:3b:b1:b8:2e: c6:9d:75:1b:21:7f:b1:7b:e3:e5:a8:e0:24:6f:44:be:6d:fd: 0e:5a:b3:13:d5:7b:4b:53:8e:e2:5a:dd:c7:90:ef:a7:2d:78: b6:c8:45:1c:87:58:8b:14:c3:44:e9:df:f4:1d:3a:1d:c6:97: 72:8a:53:0b:ec:27:2f:b8:c9:54:75:9d:6c:a0:f1:56:26:10: 88:e7:8f:6b:ed:6b:bb:16:fb:37:40:40:7b:06:db:a8:c9:1e: 21:2e:4c:e4:2b:f3:ce:d9:0c:63:5f:ec:de:02:0b:e3:6a:5a: f8:9c:ad:e0:93:b7:05:7f:81:33:f1:83:eb:e5:44:af:12:0f: 17:7e:85:a5:ad:78:ff:4d:cd:6b:61:a9:9b:26:d9:b1:06:dd: 92:fb:be:82 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAaYysMxubyodTW0bGsJyvLZNsqYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDkxM1oX DTI3MDUwMjAwNTQxM1owMzExMC8GA1UEAxMoMDNCODNFMDExNTkxMDU3RTlDNTVE NDMwQTgzRDMzMTM0OUI1MkQ3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8XUFZxIhl5nTvnVrSjml38hKerOnKk+CVtCZpl3Pj6tKDwPU0lAyuHos35 Bpfv6o6e7gOGaxzsuUKgIJsZmuoDQYadvhrKDloRKpwZ9MEAEp5eJuj/GAPwX/YR ZkKlOjFEFyU6oLpemKHp0iO31jQ3UyFs28oooz0Bn5DmmvZZtn0pVfLzfmJUiWv0 XM2dhA4UP2G27BLhxbdmnGJHesapxIVVXaqo8l9qaPm4Snx92bmWKFemwFtVGS2e wYUUabu+6pHQMFpoNp55lYdI6t2eaX1EpzD6+dbQOhYcBPS2xhnamqHLjtBCDyzl u/FnWqsD/b7Vnvms3ABvtKxA41ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAO4PgEVkQV+nFXUMKg9MxNJtS10MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY4MDAyZjNmLWJmMTctNGU0OC05ZTg1LTg0MzYwNjMzMTNkMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ODAwMmYz Zi1iZjE3LTRlNDgtOWU4NS04NDM2MDYzMzEzZDIvMC8wM0I4M0UwMTE1OTEwNTdF OUM1NUQ0MzBBODNEMzMxMzQ5QjUyRDc0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZx4AMA0GCSqGSIb3DQEBCwUAA4IBAQCCalZVLhjhjzMew0HX87PXUKTkk+OL dn7aBtB9eJCUDUBIXkpqOASnVzuaj4r0lqh0hdSf2pGVlQo5Wx6+D15poWITSQs6 zVgaFDS2sTZF8+xdQ6HygeP3SwWWtI11k7aHZsyI7t+dBzuxuC7GnXUbIX+xe+Pl qOAkb0S+bf0OWrMT1XtLU47iWt3HkO+nLXi2yEUch1iLFMNE6d/0HTodxpdyilML 7CcvuMlUdZ1soPFWJhCI549r7Wu7Fvs3QEB7BtuoyR4hLkzkK/PO2QxjX+zeAgvj alr4nK3gk7cFf4Ez8YPr5USvEg8XfoWlrXj/Tc1rYambJtmxBt2S+76C -----END CERTIFICATE-----Generated at Wed May 13 02:40:28 2026 by rpki-client