$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer File: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer (raw, json) Hash identifier: Y1/os5PENcHflLVTpkx9i6FVzV1RpcLuuuKqJBL3TBY= Subject key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2B4181DE27A24A84FD93E7A628D8E2E4E39C5876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:16 +0000 Certificate not after: Sun 02 May 2027 00:44:16 +0000 Subordinate resources: IP: 103.50.128.0/22 IP: 2400:6f20::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:41:81:de:27:a2:4a:84:fd:93:e7:a6:28:d8:e2:e4:e3:9c:58:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:16 2026 GMT Not After : May 2 00:44:16 2027 GMT Subject: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:d9:ad:08:16:a7:aa:f1:f0:fc:15:5a:e5: 43:78:8a:8a:5d:32:7c:a7:af:31:b1:18:08:cc:33: 8e:c4:44:02:b2:92:ee:b9:b4:4d:cc:34:67:53:df: 42:79:e3:b9:be:c1:2a:9b:c1:4b:1b:f7:3e:d1:ab: 6f:5e:17:69:85:fc:46:95:4a:8a:32:86:3e:3f:03: 0d:7a:6e:a0:66:e0:b7:6d:fa:41:c2:33:d9:42:20: 52:a7:43:c3:4c:fd:d1:34:87:25:5b:36:c4:02:40: c4:bc:64:0a:ed:a3:f3:1b:e2:30:29:6b:33:d5:2f: a1:ef:ea:76:94:d8:df:22:e1:7e:9f:61:cb:0c:49: ba:d3:9b:30:72:c5:97:f8:e1:cd:c4:09:8d:19:76: 9a:c6:4c:70:d5:79:84:df:6c:5c:59:24:d6:b1:61: 62:dc:7b:09:2d:c6:4f:12:6d:c4:fc:9e:e2:73:6d: 63:27:64:a0:01:2a:92:3f:05:3f:67:cf:80:e6:c8: 99:b3:a5:f1:d5:37:bd:fd:f2:c6:e0:4f:e4:63:c7: 51:5e:d1:ed:d8:87:5c:7e:10:ec:7c:ff:06:81:1b: 20:ef:ca:7a:27:ae:9f:22:ee:9c:ff:cc:14:ac:5e: a7:ce:9b:25:b6:d5:84:0d:77:29:8e:43:29:e8:e0: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.50.128.0/22 IPv6: 2400:6f20::/32 Signature Algorithm: sha256WithRSAEncryption 96:c1:6d:14:80:b3:cd:18:4d:07:62:2b:38:8a:8c:d6:ef:84: e9:01:bc:4a:7f:d8:47:c5:cf:84:49:9b:44:cb:fd:ef:17:28: 4e:6e:fb:8f:60:76:ad:3b:f0:4b:56:b3:97:95:45:90:cf:be: 66:20:3c:25:90:12:88:47:f9:dc:ee:d6:ce:88:a1:f4:4c:0e: cc:a5:0f:2a:3c:fb:b4:37:1b:b5:db:84:44:f1:be:f4:33:c9: 51:0d:c7:b5:b7:d3:2b:1d:61:e6:a2:ca:65:ad:bf:8a:77:93: 71:b3:a3:3f:15:76:8d:8c:ff:0b:39:84:a0:4b:dd:1a:04:cf: c9:b6:d2:f9:57:0c:55:60:67:81:ff:b4:68:e1:c6:03:d8:8d: c5:63:21:8d:49:ee:32:e1:d6:c7:f5:55:ec:b0:16:96:b5:e8: 9b:4e:43:7e:d0:bf:85:3d:65:5a:0c:9b:b2:64:ff:ea:fa:5b: 2b:a2:fe:7b:ec:10:f8:4d:58:05:e8:8c:30:47:d3:7f:32:f5: 0c:17:cf:97:52:ac:50:d7:db:cc:7c:f2:0f:f9:f3:6f:0e:65: af:9c:a4:50:46:0b:7a:4f:ca:ac:66:55:10:b0:ed:18:ae:83: 8b:91:79:f0:31:5c:f3:84:bc:36:c4:be:c6:83:52:e0:3e:ca: 74:d6:24:e0 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUK0GB3ieiSoT9k+emKNji5OOcWHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzkxNloX DTI3MDUwMjAwNDQxNlowMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcy QzE0RjdFQTFENEVCNjYwOUNGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKz92a0IFqeq8fD8FVrlQ3iKil0yfKevMbEYCMwzjsREArKS7rm0Tcw0Z1Pf Qnnjub7BKpvBSxv3PtGrb14XaYX8RpVKijKGPj8DDXpuoGbgt236QcIz2UIgUqdD w0z90TSHJVs2xAJAxLxkCu2j8xviMClrM9Uvoe/qdpTY3yLhfp9hywxJutObMHLF l/jhzcQJjRl2msZMcNV5hN9sXFkk1rFhYtx7CS3GTxJtxPye4nNtYydkoAEqkj8F P2fPgObImbOl8dU3vf3yxuBP5GPHUV7R7diHXH4Q7Hz/BoEbIO/KeieunyLunP/M FKxep86bJbbVhA13KY5DKejgj1sCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBBCxfXq8i2pCgcsFPfqHU62YJz7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5Y2VmOGIwLWJhNjQtNGMwYy04ZGU4LTFmNTBhODVkNWZkZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OWNlZjhi MC1iYTY0LTRjMGMtOGRlOC0xZjUwYTg1ZDVmZGUvMC8xMDQyQzVGNUVBRjIyREE5 MEEwNzJDMTRGN0VBMUQ0RUI2NjA5Q0ZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZzKAMA0EAgACMAcDBQAkAG8gMA0GCSqGSIb3DQEBCwUAA4IBAQCWwW0UgLPN GE0HYis4iozW74TpAbxKf9hHxc+ESZtEy/3vFyhObvuPYHatO/BLVrOXlUWQz75m IDwlkBKIR/nc7tbOiKH0TA7MpQ8qPPu0Nxu124RE8b70M8lRDce1t9MrHWHmospl rb+Kd5Nxs6M/FXaNjP8LOYSgS90aBM/JttL5VwxVYGeB/7Ro4cYD2I3FYyGNSe4y 4dbH9VXssBaWteibTkN+0L+FPWVaDJuyZP/q+lsrov577BD4TVgF6IwwR9N/MvUM F8+XUqxQ19vMfPIP+fNvDmWvnKRQRgt6T8qsZlUQsO0YroOLkXnwMVzzhLw2xL7G g1LgPsp01iTg -----END CERTIFICATE-----Generated at Tue May 12 22:52:52 2026 by rpki-client