$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer File: 1AD9403233542883A89282A52F92A9AC66CB9D45.cer (raw, json) Hash identifier: CACVmieFGBeBxwCE5GA7h4QNtDo5mYt18o7qMW1ckNA= Subject key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B9E9771E23534C5ECBC83E1029BF6D3BAE38C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:22:54 +0000 Certificate not after: Sun 02 May 2027 02:27:54 +0000 Subordinate resources: IP: 103.100.27.0/24 IP: 103.141.154.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9e:97:71:e2:35:34:c5:ec:bc:83:e1:02:9b:f6:d3:ba:e3:8c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:22:54 2026 GMT Not After : May 2 02:27:54 2027 GMT Subject: CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c2:ea:7e:67:f2:12:a8:e6:b7:ff:17:0d:aa: 18:35:8d:e7:3c:00:c1:e2:20:7c:86:7e:8e:47:11: b9:8e:33:ff:6a:a7:55:38:87:96:7f:42:67:64:1f: b3:25:63:00:d0:2c:02:c4:38:26:aa:aa:45:56:a9: 9a:8b:09:34:b4:84:db:d1:0d:42:bb:9f:78:d4:85: aa:f0:7e:72:6c:80:70:bc:c9:68:a6:04:3c:39:2b: 6c:ea:93:f1:6b:5b:47:b3:f2:b7:9b:20:63:fa:a3: d3:06:6b:ae:bb:33:59:b5:76:40:a6:f0:30:a9:73: af:12:4a:fd:d0:7d:dc:61:af:fa:69:99:62:bd:a3: e7:f0:dd:ec:52:ef:33:a2:bc:34:d7:03:ae:f2:a8: 11:e4:6c:c1:90:93:dc:ce:86:f1:df:15:ec:36:4e: 2c:3a:66:f9:f9:8b:04:4c:97:ef:df:0b:72:ce:05: 78:d3:4f:07:a4:c1:ca:78:cf:00:5e:a3:93:7b:06: 4c:37:a8:bf:0f:c1:c8:36:c7:eb:19:f4:bf:03:9a: 91:38:a0:c6:70:22:ea:1e:6b:65:63:37:5f:cf:da: e2:52:a4:31:56:ee:fd:24:27:67:1e:20:3a:d6:3d: 6a:de:94:95:3d:fd:0a:53:27:e1:42:38:87:a0:17: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.27.0/24 103.141.154.0/24 Signature Algorithm: sha256WithRSAEncryption 11:b0:2d:31:27:ff:2d:47:9d:f8:dc:65:16:94:24:02:8a:8d: f0:b8:84:b2:3e:7b:25:38:9f:37:41:15:08:be:08:d2:75:22: 61:d4:af:ff:90:d9:87:a3:96:a6:71:5d:38:1d:b2:92:1a:b2: 07:ef:9c:83:6b:e0:c7:2b:c4:0f:3c:8a:3d:61:f0:82:2f:c3: 5b:1e:31:0f:9c:c8:c3:eb:9d:33:11:9d:49:89:a8:3f:a0:57: 72:2f:81:85:1d:c6:5c:de:78:bb:4d:cf:98:00:0f:8e:dc:e4: 0b:1c:d9:42:a0:d1:38:c0:68:9b:e3:28:4d:11:33:a8:b7:35: 30:d0:ca:ee:51:d0:55:6f:6a:89:27:9c:78:96:c0:36:18:4f: ad:80:91:ce:9d:f0:1e:a3:09:23:33:f0:6c:ef:82:26:4e:0a: ca:75:76:82:f8:1e:63:bd:cb:43:80:ea:ca:2e:f8:e4:44:f7: e9:79:ea:c0:b2:ce:ce:5d:e6:59:40:5e:f3:69:be:c0:0d:a7: 8e:88:33:52:02:50:de:2d:be:44:3d:d3:bc:92:0f:db:16:3f: b9:01:04:2c:ae:1f:3f:7f:f7:c9:f3:83:ee:88:ef:5c:4c:24: 7a:23:87:3b:c1:b3:6f:b0:66:86:7e:e6:8a:9f:29:0d:74:c2: 79:e9:d4:00 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUG56XceI1NMXsvIPhApv207rjjEIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjI1NFoX DTI3MDUwMjAyMjc1NFowMzExMC8GA1UEAxMoMUFEOTQwMzIzMzU0Mjg4M0E4OTI4 MkE1MkY5MkE5QUM2NkNCOUQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTC6n5n8hKo5rf/Fw2qGDWN5zwAweIgfIZ+jkcRuY4z/2qnVTiHln9CZ2Qf syVjANAsAsQ4JqqqRVapmosJNLSE29ENQrufeNSFqvB+cmyAcLzJaKYEPDkrbOqT 8WtbR7Pyt5sgY/qj0wZrrrszWbV2QKbwMKlzrxJK/dB93GGv+mmZYr2j5/Dd7FLv M6K8NNcDrvKoEeRswZCT3M6G8d8V7DZOLDpm+fmLBEyX798Lcs4FeNNPB6TBynjP AF6jk3sGTDeovw/ByDbH6xn0vwOakTigxnAi6h5rZWM3X8/a4lKkMVbu/SQnZx4g OtY9at6UlT39ClMn4UI4h6AXWlMCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBrZQDIzVCiDqJKCpS+Sqaxmy51FMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VhODE0NTA3LTcxNzQtNGYxZS04NTYzLWVmNTAzNzA5MTNjOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYTgxNDUw Ny03MTc0LTRmMWUtODU2My1lZjUwMzcwOTEzYzkvMC8xQUQ5NDAzMjMzNTQyODgz QTg5MjgyQTUyRjkyQTlBQzY2Q0I5RDQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ2QbAwQAZ42aMA0GCSqGSIb3DQEBCwUAA4IBAQARsC0xJ/8tR5343GUWlCQC io3wuISyPnslOJ83QRUIvgjSdSJh1K//kNmHo5amcV04HbKSGrIH75yDa+DHK8QP PIo9YfCCL8NbHjEPnMjD650zEZ1Jiag/oFdyL4GFHcZc3ni7Tc+YAA+O3OQLHNlC oNE4wGib4yhNETOotzUw0MruUdBVb2qJJ5x4lsA2GE+tgJHOnfAeowkjM/Bs74Im TgrKdXaC+B5jvctDgOrKLvjkRPfpeerAss7OXeZZQF7zab7ADaeOiDNSAlDeLb5E PdO8kg/bFj+5AQQsrh8/f/fJ84PuiO9cTCR6I4c7wbNvsGaGfuaKnykNdMJ56dQA -----END CERTIFICATE-----Generated at Tue May 12 22:15:45 2026 by rpki-client