$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer File: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer (raw, json) Hash identifier: ctiM83tKUGKNk6vBf/BXK4DIhpA03g8wEH2M0BJhGpo= Subject key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60574FD38CCB7F878802FE123E30FD8F0D200AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:12:34 +0000 Certificate not after: Sun 02 May 2027 00:17:34 +0000 Subordinate resources: IP: 103.169.38.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:57:4f:d3:8c:cb:7f:87:88:02:fe:12:3e:30:fd:8f:0d:20:0a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:12:34 2026 GMT Not After : May 2 00:17:34 2027 GMT Subject: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:ed:9f:e9:80:9b:b1:d6:a4:d0:79:d9:82: 21:6a:d4:91:59:3a:29:aa:9c:23:e6:db:96:86:d7: d8:9e:74:4d:b3:1e:92:e3:0d:f3:23:6a:13:67:8e: 20:34:f5:a6:31:33:6b:dd:25:49:4a:2b:d7:aa:a8: 29:95:4a:45:cd:8e:35:53:72:6b:fa:57:c9:e3:3c: 18:bf:20:fc:ae:41:2c:59:fc:8d:f1:9a:83:13:8e: d0:1a:9a:d6:9e:fa:19:05:92:33:e5:f6:80:1d:92: 45:5a:42:9a:f5:54:31:ad:2e:ce:8e:d7:c4:fd:5e: 6e:f0:e2:6e:81:d5:5f:38:b2:75:3d:a1:2a:fe:f9: b5:ae:1e:76:2b:28:51:91:b8:67:ba:fd:77:37:62: 75:59:a7:f5:e3:41:97:77:b5:00:ec:1a:b3:fb:23: 7b:38:24:82:b0:39:ff:52:d7:3a:b1:88:cb:c3:ce: 79:9a:d4:7a:69:e9:e7:a7:e0:35:d4:c2:31:51:4f: b9:28:1e:91:59:99:32:4c:8d:18:38:68:89:18:f2: 43:0d:22:1a:3d:0c:ff:71:53:e5:57:05:77:74:88: 58:cc:35:e5:05:c4:85:19:0b:b7:dd:a4:e0:e6:1f: 8e:3e:38:f9:be:c2:7b:a9:54:12:f8:4e:86:2c:73: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.38.0/23 Signature Algorithm: sha256WithRSAEncryption 81:f4:44:8f:96:4c:0a:77:e7:b9:fc:49:58:2f:0c:19:9d:bf: aa:e9:f3:cc:d5:8e:4f:19:b1:f7:52:62:a5:3f:a8:cb:59:ed: b0:69:75:f6:3f:1c:e5:e3:d6:a3:98:8e:67:24:20:ee:b4:a8: 14:13:93:fd:a5:7e:68:1a:67:fc:43:df:6a:ba:e9:c6:3c:f1: c9:e5:36:9d:f8:a0:0d:7b:88:80:65:95:21:8f:0d:d7:9a:2b: 48:67:09:11:29:e2:0b:18:f8:d7:cc:f6:46:78:ff:41:a6:2b: ba:74:b2:f5:65:1a:20:fd:4a:fb:d7:ad:1d:b2:4d:1b:91:a9: b5:b5:bf:02:9f:90:7b:e8:b0:8b:8b:ee:a1:13:72:67:c3:cc: 4b:1a:6b:2e:ce:d7:4e:fd:be:26:21:bf:89:b7:30:13:d0:32: 8d:96:01:f2:43:8c:d4:4b:d7:c0:af:82:4b:26:ab:42:7e:ca: 1d:c9:bf:a9:58:48:15:bb:a7:f1:be:84:a1:68:20:7d:5d:ba: 87:c1:41:19:05:e4:36:ca:29:5a:7a:57:f6:fd:33:e4:a6:32: e7:80:45:a0:89:ee:54:1d:f3:08:df:48:64:d8:10:96:6d:9f: c6:49:f6:9e:68:65:73:72:04:6d:c4:7d:10:96:6d:70:2f:a7: f4:ba:a3:07 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYFdP04zLf4eIAv4SPjD9jw0gCrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTIzNFoX DTI3MDUwMjAwMTczNFowMzExMC8GA1UEAxMoMDgzNzQzRkRBRjA4MDdDQ0Q4RDJE M0I5MzZERTA5MTY3NkNBRkNCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmH7Z/pgJux1qTQedmCIWrUkVk6KaqcI+bblobX2J50TbMekuMN8yNqE2eO IDT1pjEza90lSUor16qoKZVKRc2ONVNya/pXyeM8GL8g/K5BLFn8jfGagxOO0Bqa 1p76GQWSM+X2gB2SRVpCmvVUMa0uzo7XxP1ebvDiboHVXziydT2hKv75ta4ediso UZG4Z7r9dzdidVmn9eNBl3e1AOwas/sjezgkgrA5/1LXOrGIy8POeZrUemnp56fg NdTCMVFPuSgekVmZMkyNGDhoiRjyQw0iGj0M/3FT5VcFd3SIWMw15QXEhRkLt92k 4OYfjj44+b7Ce6lUEvhOhixziucCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAg3Q/2vCAfM2NLTuTbeCRZ2yvy1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMyNDhkMjdiLWNjYjAtNGZjNy1hYmNhLTlmYzBhM2UxNTc1NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMjQ4ZDI3 Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC8wODM3NDNGREFGMDgwN0ND RDhEMkQzQjkzNkRFMDkxNjc2Q0FGQ0I1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6kmMA0GCSqGSIb3DQEBCwUAA4IBAQCB9ESPlkwKd+e5/ElYLwwZnb+q6fPM 1Y5PGbH3UmKlP6jLWe2waXX2Pxzl49ajmI5nJCDutKgUE5P9pX5oGmf8Q99quunG PPHJ5Tad+KANe4iAZZUhjw3XmitIZwkRKeILGPjXzPZGeP9Bpiu6dLL1ZRog/Ur7 160dsk0bkam1tb8Cn5B76LCLi+6hE3Jnw8xLGmsuztdO/b4mIb+JtzAT0DKNlgHy Q4zUS9fAr4JLJqtCfsodyb+pWEgVu6fxvoShaCB9XbqHwUEZBeQ2yilaelf2/TPk pjLngEWgie5UHfMI30hk2BCWbZ/GSfaeaGVzcgRtxH0Qlm1wL6f0uqMH -----END CERTIFICATE-----Generated at Tue May 12 22:10:20 2026 by rpki-client