$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer File: 1345157B61F361F583DCB52DB3ECBCA10862599B.cer (raw, json) Hash identifier: ucBqe8A+8bkvRmt+ffdUyLSwPk0vxXmzSVV/HChAFLg= Subject key identifier: 13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71652A91FB5FECA2EB899088A3143E8DD7D3760E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:09:46 +0000 Certificate not after: Sun 02 May 2027 01:14:46 +0000 Subordinate resources: IP: 103.168.28.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:65:2a:91:fb:5f:ec:a2:eb:89:90:88:a3:14:3e:8d:d7:d3:76:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:09:46 2026 GMT Not After : May 2 01:14:46 2027 GMT Subject: CN=1345157B61F361F583DCB52DB3ECBCA10862599B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:62:bd:37:ef:1a:a8:05:7f:8c:9a:32:f3: 4a:a0:81:1e:14:05:0c:97:60:28:ae:c7:5b:e6:b7: be:b6:fb:a5:b4:cb:5f:5c:e0:c4:c5:37:5f:b6:b2: de:de:4f:2c:b2:a2:46:34:5b:4d:d0:bf:ee:1d:62: 9c:be:8d:59:62:6b:af:7e:cd:f5:3c:f8:7f:62:df: 5f:5c:ac:07:3d:0d:9e:9a:ac:10:2d:a8:77:6b:2f: ee:22:bf:e1:83:ff:5d:f7:ac:ac:3b:c0:00:9c:9c: 30:1b:3d:09:64:4a:e2:4c:f9:15:74:81:7f:cd:37: c7:39:d1:f1:da:1c:f5:9d:19:19:9d:82:f5:c2:68: 1a:97:a2:d9:16:41:33:cc:ba:a2:e1:2f:5b:1d:ba: f0:71:5e:2f:12:40:f8:62:72:69:2b:20:4b:79:32: 2d:4f:fd:9b:3f:67:08:3c:ad:32:3b:40:bb:57:eb: 4d:bb:17:cc:68:86:78:a4:e5:19:8b:9d:e2:1f:25: 1e:b3:e3:04:15:b1:58:2e:10:96:e8:cc:10:4c:e6: e1:e1:72:d7:ec:7a:57:08:49:d2:ef:2e:72:0b:a7: 0e:59:78:5d:7b:c6:a2:f5:c9:30:ab:2c:a6:db:15: 08:30:4a:08:ef:ee:75:dc:10:3d:b9:ff:23:6c:97: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.28.0/24 Signature Algorithm: sha256WithRSAEncryption 51:2a:70:ca:dd:08:53:89:a0:45:28:c2:d1:d8:a0:70:58:7c: 77:ee:57:16:a9:07:33:3a:e1:16:88:6d:6e:3c:97:58:7b:ec: c2:0d:45:fc:2e:be:18:a2:76:ed:1d:fa:c7:f1:7f:fa:45:7f: 25:ab:be:2d:0d:fe:c5:51:93:9e:6d:8c:20:fc:53:bf:5e:c1: c5:64:cc:87:e2:30:11:70:ac:5c:a1:0d:f2:c5:37:56:de:ef: 81:06:fc:ef:13:0c:1f:bc:54:f7:cf:7f:21:3a:f4:f5:f8:94: 5d:21:18:f5:1e:45:bd:71:41:3d:84:79:35:2b:4a:f9:37:80: 60:30:17:68:05:79:23:ac:de:97:78:53:99:ae:59:ef:1b:89: 4d:61:3f:88:55:b3:21:25:a3:19:aa:cc:e9:5c:77:e1:80:73: cd:53:4b:c9:6f:32:36:12:ed:63:45:4e:c1:b0:c9:e2:7a:92: 80:0c:e8:d2:79:21:ac:fc:13:84:b8:25:ae:9e:3b:89:5a:b2: bf:bb:87:f6:0a:e2:3c:77:94:37:d3:f5:bd:4a:0f:97:f9:3a: f9:28:ed:a5:90:9c:d3:46:35:0b:4f:10:00:60:2c:f9:78:f3: 29:b3:ff:05:07:f9:86:43:38:14:b0:e4:16:5e:c7:29:75:72: c8:80:84:64 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcWUqkftf7KLriZCIoxQ+jdfTdg4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDk0NloX DTI3MDUwMjAxMTQ0NlowMzExMC8GA1UEAxMoMTM0NTE1N0I2MUYzNjFGNTgzRENC NTJEQjNFQ0JDQTEwODYyNTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI6jYr037xqoBX+MmjLzSqCBHhQFDJdgKK7HW+a3vrb7pbTLX1zgxMU3X7ay 3t5PLLKiRjRbTdC/7h1inL6NWWJrr37N9Tz4f2LfX1ysBz0NnpqsEC2od2sv7iK/ 4YP/XfesrDvAAJycMBs9CWRK4kz5FXSBf803xznR8doc9Z0ZGZ2C9cJoGpei2RZB M8y6ouEvWx268HFeLxJA+GJyaSsgS3kyLU/9mz9nCDytMjtAu1frTbsXzGiGeKTl GYud4h8lHrPjBBWxWC4QlujMEEzm4eFy1+x6VwhJ0u8ucgunDll4XXvGovXJMKss ptsVCDBKCO/uddwQPbn/I2yXMfMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBNFFXth82H1g9y1LbPsvKEIYlmbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg1ZWU0MGRjLTUxYmEtNDc2OS04NjE5LTIyODljY2U5NjI5ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NWVlNDBk Yy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC8xMzQ1MTU3QjYxRjM2MUY1 ODNEQ0I1MkRCM0VDQkNBMTA4NjI1OTlCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6gcMA0GCSqGSIb3DQEBCwUAA4IBAQBRKnDK3QhTiaBFKMLR2KBwWHx37lcW qQczOuEWiG1uPJdYe+zCDUX8Lr4YonbtHfrH8X/6RX8lq74tDf7FUZOebYwg/FO/ XsHFZMyH4jARcKxcoQ3yxTdW3u+BBvzvEwwfvFT3z38hOvT1+JRdIRj1HkW9cUE9 hHk1K0r5N4BgMBdoBXkjrN6XeFOZrlnvG4lNYT+IVbMhJaMZqszpXHfhgHPNU0vJ bzI2Eu1jRU7BsMniepKADOjSeSGs/BOEuCWunjuJWrK/u4f2CuI8d5Q30/W9Sg+X +Tr5KO2lkJzTRjULTxAAYCz5ePMps/8FB/mGQzgUsOQWXscpdXLIgIRk -----END CERTIFICATE-----Generated at Tue May 12 22:45:56 2026 by rpki-client