$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer File: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer (raw, json) Hash identifier: uslfMlnXaC+KzVGxW/1gBa1p49Xo8dcqS8jc+ZiGrYg= Subject key identifier: 14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A17800A55E382CC584282C248CFF149CE7A2EE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:27:16 +0000 Certificate not after: Sun 02 May 2027 00:32:16 +0000 Subordinate resources: IP: 103.100.85.0/24 IP: 2001:df2:7500::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:17:80:0a:55:e3:82:cc:58:42:82:c2:48:cf:f1:49:ce:7a:2e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:27:16 2026 GMT Not After : May 2 00:32:16 2027 GMT Subject: CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:77:04:b3:90:c4:3e:6f:bd:f1:dc:13:e9:69: 62:cf:49:60:b4:15:ee:16:d6:4f:b0:fb:28:35:cd: 1a:49:0f:c3:36:92:e8:96:4c:23:24:16:d4:55:17: 7e:37:ed:52:74:03:aa:d9:11:12:5e:64:46:4d:d9: 32:38:94:79:79:e1:8d:98:46:18:6e:17:f0:f8:a9: e6:79:09:06:1f:6d:6d:71:12:d6:da:4a:47:0e:58: ed:de:0c:1b:4d:b2:17:26:1f:7d:59:1b:f5:37:9c: 70:b3:ac:31:2e:70:22:f9:8b:0b:43:2a:17:30:17: 7a:cc:af:5c:61:c5:12:ad:f7:bb:06:06:a5:f6:c9: fd:a9:7d:36:cc:fd:66:23:9f:89:1f:92:c5:64:96: e6:12:fe:a0:1b:f2:fe:b2:43:2b:be:e7:98:68:2f: 4c:5a:0d:44:66:e0:50:fe:ab:2a:bc:2b:8b:3a:4f: 60:63:c0:f1:c9:d6:83:67:19:33:df:74:7c:fc:bb: be:71:d4:77:7a:c5:1b:58:6b:aa:ac:65:50:13:1a: 7f:86:7f:08:4c:a9:3c:13:5a:34:97:06:bd:24:f1: 2e:9b:99:33:96:c2:96:51:c6:e6:e6:7f:ec:a9:8f: f3:8a:0f:d1:dd:cf:c0:0a:d4:9d:dc:ef:0b:ee:17: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.85.0/24 IPv6: 2001:df2:7500::/48 Signature Algorithm: sha256WithRSAEncryption 22:fa:0f:5d:8d:7e:f1:3d:86:ea:8d:19:64:f5:2c:ef:58:bf: 6a:50:d9:ca:81:d8:b8:bf:db:d6:e9:77:7c:6e:be:f3:b8:72: 7e:3d:4b:51:e4:79:0e:dc:92:6a:dc:51:59:3f:db:59:3b:ec: 58:31:93:f3:b0:9b:f6:f3:8d:f8:15:af:07:77:7c:b6:1a:c4: 37:c3:44:28:55:8a:4d:92:68:eb:7b:54:58:06:74:40:28:dd: 11:04:23:2a:49:da:95:2a:31:00:ed:2b:4b:0c:ec:fc:9d:56: 0e:ec:c7:43:47:c0:74:91:1a:77:a6:2a:ba:21:82:95:cb:89: 40:c8:c1:f5:48:f5:44:5b:c1:74:49:c5:59:30:be:f4:5a:8a: d9:af:e6:c3:27:3f:15:df:b0:ed:67:60:3b:bf:00:c3:65:7f: 68:a2:5e:a5:1f:e7:65:4d:d6:6e:50:b5:42:c8:ad:c7:44:e6: 0b:a4:01:16:36:99:c8:eb:4c:ae:e0:98:34:50:d2:44:c0:cd: a1:a9:74:2a:2e:45:32:f6:c2:fd:b4:0a:bb:a3:37:f4:db:c4: e8:a0:8c:03:7f:95:a3:49:28:7b:9c:c9:b2:f4:4f:6b:b9:19: b0:cd:80:2b:1b:7b:58:c4:41:47:d7:1d:0a:3f:83:8e:ee:e4: 36:1a:db:44 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSheAClXjgsxYQoLCSM/xSc56LuIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjcxNloX DTI3MDUwMjAwMzIxNlowMzExMC8GA1UEAxMoMTQzODRBNzdGQzFFMDNCQUJBQThE QjZFOTVGOTc5QjA4RDE2REFCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPp3BLOQxD5vvfHcE+lpYs9JYLQV7hbWT7D7KDXNGkkPwzaS6JZMIyQW1FUX fjftUnQDqtkREl5kRk3ZMjiUeXnhjZhGGG4X8Pip5nkJBh9tbXES1tpKRw5Y7d4M G02yFyYffVkb9TeccLOsMS5wIvmLC0MqFzAXesyvXGHFEq33uwYGpfbJ/al9Nsz9 ZiOfiR+SxWSW5hL+oBvy/rJDK77nmGgvTFoNRGbgUP6rKrwrizpPYGPA8cnWg2cZ M990fPy7vnHUd3rFG1hrqqxlUBMaf4Z/CEypPBNaNJcGvSTxLpuZM5bCllHG5uZ/ 7KmP84oP0d3PwArUndzvC+4XzUECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBQ4Snf8HgO6uqjbbpX5ebCNFtq5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ3MzJmMTkxLWUzODAtNDAxMy1iY2U1LTQyMTVhNDkzYTcxZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NzMyZjE5 MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC8xNDM4NEE3N0ZDMUUwM0JB QkFBOERCNkU5NUY5NzlCMDhEMTZEQUI5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2RVMA8EAgACMAkDBwAgAQ3ydQAwDQYJKoZIhvcNAQELBQADggEBACL6D12N fvE9huqNGWT1LO9Yv2pQ2cqB2Li/29bpd3xuvvO4cn49S1HkeQ7ckmrcUVk/21k7 7Fgxk/Owm/bzjfgVrwd3fLYaxDfDRChVik2SaOt7VFgGdEAo3REEIypJ2pUqMQDt K0sM7PydVg7sx0NHwHSRGnemKrohgpXLiUDIwfVI9URbwXRJxVkwvvRaitmv5sMn PxXfsO1nYDu/AMNlf2iiXqUf52VN1m5QtULIrcdE5gukARY2mcjrTK7gmDRQ0kTA zaGpdCouRTL2wv20CrujN/TbxOigjAN/laNJKHucybL0T2u5GbDNgCsbe1jEQUfX HQo/g47u5DYa20Q= -----END CERTIFICATE-----Generated at Tue May 12 22:45:44 2026 by rpki-client