$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer File: 143B0FF235C900164875105AD0C37F3C7DB28151.cer (raw, json) Hash identifier: cDxhtZQl6foR5RQoRAHJgO8OLg7aqYoXzckv+gRIaeU= Subject key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 68FADC7A5B4139579B56CBE91B70FAC1F54E6A6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft caRepository: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:50:52 +0000 Certificate not after: Sat 01 May 2027 23:55:52 +0000 Subordinate resources: IP: 103.65.238.0/24 IP: 103.96.116.0/24 IP: 103.96.118.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fa:dc:7a:5b:41:39:57:9b:56:cb:e9:1b:70:fa:c1:f5:4e:6a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:50:52 2026 GMT Not After : May 1 23:55:52 2027 GMT Subject: CN=143B0FF235C900164875105AD0C37F3C7DB28151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:13:53:62:45:91:38:1c:9c:74:93:d4:c6: b9:00:a9:2f:6b:15:b2:2c:c3:0b:c4:9a:bb:5b:0d: 9e:b5:74:24:f6:a8:20:eb:ba:7f:cb:d2:c9:50:ed: bc:f8:51:68:63:4c:1f:27:b9:f9:fc:a0:3d:e5:bf: dd:ca:c5:dd:fb:78:dc:73:3b:b1:c8:e8:fe:3a:50: 41:d3:b5:26:4a:93:cc:3a:cd:9b:b2:5e:c2:6b:15: 82:ff:c2:11:ed:23:33:d1:78:1c:13:06:32:58:3b: 33:80:24:ca:1a:b6:e8:80:76:4d:34:d8:e6:c2:db: 59:c9:03:41:1d:72:3b:b9:20:fd:06:fd:93:fd:af: cb:b9:c6:79:ef:81:85:3d:d2:4a:d0:52:db:f7:a0: 7a:eb:c5:df:b5:b0:18:33:2b:48:d4:e7:18:84:06: 07:6c:df:a7:64:a9:74:b9:21:25:da:e2:08:1c:be: ec:05:81:06:92:fd:ca:ec:2e:17:7a:cb:24:bd:80: b0:9b:76:7b:93:5c:e0:a2:56:50:57:6c:5b:11:ca: 91:7b:a1:65:ec:8a:39:1e:07:fe:7b:11:6e:bd:27: 2c:ad:96:0c:6f:a6:5f:1f:3d:62:ab:25:30:10:61: 4a:cd:b7:a2:fc:4a:b2:02:29:47:46:7d:89:0f:7e: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.238.0/24 103.96.116.0/24 103.96.118.0/23 Signature Algorithm: sha256WithRSAEncryption 29:9b:31:db:c0:3e:9c:64:d7:57:ae:14:6e:bb:10:67:23:e9: c7:59:52:0a:1a:d9:8b:3b:a3:86:e7:40:d3:12:a5:91:42:0b: fb:82:96:7d:d0:60:d5:80:94:b4:71:3d:2b:b3:ed:66:22:19: fc:ce:a8:dd:95:4e:fe:9c:9c:46:35:88:dc:b4:93:f3:ec:bd: 65:b2:ed:6c:04:7d:48:63:94:43:08:9b:bb:b0:f6:32:3b:46: 61:c1:3f:6e:92:19:46:77:41:f1:b6:6f:f8:08:a6:1e:ee:e0: d8:f1:57:fa:3e:83:d8:e3:4f:c7:ba:2b:4e:96:9a:ea:f3:95: 51:67:14:dd:9b:10:53:4f:62:08:f2:da:f7:5e:56:5a:25:0e: 4c:50:c5:f6:e7:0c:92:81:55:ed:b5:49:6e:38:31:fd:8d:63: 63:37:f5:a7:ff:22:35:42:a6:a3:79:df:42:2b:38:00:ba:a2: 29:fa:ed:1d:2f:5f:f4:c3:a0:9d:f2:34:db:3d:a1:38:ba:fc: 85:a4:26:33:1e:34:31:3c:b7:1c:84:a3:d3:e9:c8:31:12:6f: 5b:f5:93:3f:3c:96:7a:c4:87:0c:67:4c:77:3d:47:5f:86:13: 3e:34:9b:aa:86:eb:61:c1:fb:43:7b:30:71:3f:4b:3b:ba:a2: 56:fa:4a:5e -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUaPrceltBOVebVsvpG3D6wfVOamwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTA1MloX DTI3MDUwMTIzNTU1MlowMzExMC8GA1UEAxMoMTQzQjBGRjIzNUM5MDAxNjQ4NzUx MDVBRDBDMzdGM0M3REIyODE1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANl1E1NiRZE4HJx0k9TGuQCpL2sVsizDC8Sau1sNnrV0JPaoIOu6f8vSyVDt vPhRaGNMHye5+fygPeW/3crF3ft43HM7scjo/jpQQdO1JkqTzDrNm7JewmsVgv/C Ee0jM9F4HBMGMlg7M4Akyhq26IB2TTTY5sLbWckDQR1yO7kg/Qb9k/2vy7nGee+B hT3SStBS2/egeuvF37WwGDMrSNTnGIQGB2zfp2SpdLkhJdriCBy+7AWBBpL9yuwu F3rLJL2AsJt2e5Nc4KJWUFdsWxHKkXuhZeyKOR4H/nsRbr0nLK2WDG+mXx89Yqsl MBBhSs23ovxKsgIpR0Z9iQ9+970CAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBQ7D/I1yQAWSHUQWtDDfzx9soFRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzExYzFkNTZlLTE1YzYtNGI2NS1hOWE4LWY5MGFkNmZiYTA5MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMWMxZDU2 ZS0xNWM2LTRiNjUtYTlhOC1mOTBhZDZmYmEwOTAvMC8xNDNCMEZGMjM1QzkwMDE2 NDg3NTEwNUFEMEMzN0YzQzdEQjI4MTUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATAS AwQAZ0HuAwQAZ2B0AwQBZ2B2MA0GCSqGSIb3DQEBCwUAA4IBAQApmzHbwD6cZNdX rhRuuxBnI+nHWVIKGtmLO6OG50DTEqWRQgv7gpZ90GDVgJS0cT0rs+1mIhn8zqjd lU7+nJxGNYjctJPz7L1lsu1sBH1IY5RDCJu7sPYyO0ZhwT9ukhlGd0Hxtm/4CKYe 7uDY8Vf6PoPY40/HuitOlprq85VRZxTdmxBTT2II8tr3XlZaJQ5MUMX25wySgVXt tUluODH9jWNjN/Wn/yI1Qqajed9CKzgAuqIp+u0dL1/0w6Cd8jTbPaE4uvyFpCYz HjQxPLcchKPT6cgxEm9b9ZM/PJZ6xIcMZ0x3PUdfhhM+NJuqhuthwftDezBxP0s7 uqJW+kpe -----END CERTIFICATE-----Generated at Tue May 12 22:10:05 2026 by rpki-client