$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer File: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer (raw, json) Hash identifier: L4tAKPuj1JAbRgLatqsjT9xbTVyJJLHDjHXFS7pwf3s= Subject key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 493EA8A5CED98AF6C2D95CE176CE1C22F5C3A4B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft caRepository: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:28:18 +0000 Certificate not after: Sun 02 May 2027 00:33:18 +0000 Subordinate resources: IP: 103.131.104.0/23 IP: 103.210.35.0/24 IP: 103.255.15.0/24 IP: 2400:e320::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3e:a8:a5:ce:d9:8a:f6:c2:d9:5c:e1:76:ce:1c:22:f5:c3:a4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:28:18 2026 GMT Not After : May 2 00:33:18 2027 GMT Subject: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:29:e2:61:30:b4:9f:98:0b:4a:57:79:45: 3d:e2:e1:00:98:50:70:af:f5:06:d2:21:3e:9a:88: e4:4a:a6:e3:3d:a7:52:d1:89:e5:ff:b0:3b:9f:e7: 38:93:98:29:e3:b7:19:2d:9f:bd:eb:47:94:a2:71: 03:3a:27:35:d3:91:66:c4:33:4a:28:5f:8b:c8:7f: 74:b8:58:da:a9:fc:16:db:2f:f5:05:79:5d:11:74: 86:99:77:83:3f:d5:a2:4a:d7:b8:2b:2b:d0:e0:17: 92:36:c1:ea:f9:bb:ba:b8:3b:a1:8f:52:5b:f4:31: 5d:b2:ce:2b:62:16:a5:dc:29:81:5e:3a:0c:7b:fa: d1:7f:6f:31:d9:23:d6:00:46:43:8c:09:50:18:7b: ef:fe:b1:52:a3:1b:24:d4:88:57:62:e0:a9:34:08: 83:1d:90:1e:0a:b1:66:2c:a3:64:e4:e2:9f:bc:0b: 78:5e:80:73:f4:32:19:b4:fb:8b:b3:bb:c1:2a:2d: e1:5f:c8:de:bf:3b:c9:f5:88:a7:48:ba:8b:b0:83: 01:36:d0:7c:3c:81:bd:fe:87:c3:9d:ad:02:16:9f: b1:32:00:6d:86:16:4b:72:c4:d8:09:fe:45:cb:8c: c4:f4:b0:5e:f1:06:36:2b:9f:35:32:a7:b7:c6:82: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.104.0/23 103.210.35.0/24 103.255.15.0/24 IPv6: 2400:e320::/32 Signature Algorithm: sha256WithRSAEncryption 9e:b0:c3:30:b8:a8:7f:9d:57:1f:51:61:11:ed:f9:7c:e9:4d: 6b:c8:56:71:6c:69:71:a5:cd:a0:c0:1e:fd:f0:fa:bd:32:21: 17:2a:0a:3d:a5:f7:e4:bb:9f:5f:55:08:13:4a:f6:4a:32:35: 15:b8:e4:5b:af:c6:47:65:54:a8:61:59:2c:7a:87:77:a1:83: 77:74:be:69:eb:34:6d:26:eb:86:09:f2:7f:3c:3d:35:ee:c1: 3d:5c:67:6f:94:c4:b7:e3:57:11:ca:76:cd:fd:3a:81:33:65: 48:6d:89:d0:d0:c9:a1:3e:fc:01:d8:c9:d3:01:93:c1:58:41: 2a:37:f2:1f:8f:3d:53:ca:61:5c:73:1b:06:b3:54:22:74:b8: 50:9a:99:f7:03:89:5b:fe:eb:54:d2:c8:82:c1:0f:92:50:02: c5:90:a2:10:a3:a0:6c:b9:06:fa:0c:06:3d:9f:42:63:a8:af: a6:db:1a:51:2f:d4:f4:f4:44:53:5f:bb:66:15:23:79:5e:df: 9f:54:0c:3a:5d:0b:38:00:e6:81:04:bf:64:25:73:bb:36:5a: 2a:a0:ff:e0:a0:38:3f:cb:1a:03:83:f6:00:26:fc:fe:3d:ac: 50:fc:1b:a7:71:ab:e5:b1:9b:f6:01:d3:a1:43:6f:0a:dc:83: e6:70:9c:f6 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUST6opc7ZivbC2Vzhds4cIvXDpLIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjgxOFoX DTI3MDUwMjAwMzMxOFowMzExMC8GA1UEAxMoMUMyNDFBRDFDQzMwMUU4MTVDQTRE NkZBNUYxQkNDNjYwNjkxNTkxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdNKeJhMLSfmAtKV3lFPeLhAJhQcK/1BtIhPpqI5Eqm4z2nUtGJ5f+wO5/n OJOYKeO3GS2fvetHlKJxAzonNdORZsQzSihfi8h/dLhY2qn8Ftsv9QV5XRF0hpl3 gz/VokrXuCsr0OAXkjbB6vm7urg7oY9SW/QxXbLOK2IWpdwpgV46DHv60X9vMdkj 1gBGQ4wJUBh77/6xUqMbJNSIV2LgqTQIgx2QHgqxZiyjZOTin7wLeF6Ac/QyGbT7 i7O7wSot4V/I3r87yfWIp0i6i7CDATbQfDyBvf6Hw52tAhafsTIAbYYWS3LE2An+ RcuMxPSwXvEGNiufNTKnt8aCM50CAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBwkGtHMMB6BXKTW+l8bzGYGkVkQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ4NzY2ZDY2LTI5MjMtNGNlMC1hYTg1LTljNDk4OGNjOGJhMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ODc2NmQ2 Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC8xQzI0MUFEMUNDMzAxRTgx NUNBNEQ2RkE1RjFCQ0M2NjA2OTE1OTEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQBZ4NoAwQAZ9IjAwQAZ/8PMA0EAgACMAcDBQAkAOMgMA0GCSqGSIb3DQEBCwUA A4IBAQCesMMwuKh/nVcfUWER7fl86U1ryFZxbGlxpc2gwB798Pq9MiEXKgo9pffk u59fVQgTSvZKMjUVuORbr8ZHZVSoYVkseod3oYN3dL5p6zRtJuuGCfJ/PD017sE9 XGdvlMS341cRynbN/TqBM2VIbYnQ0MmhPvwB2MnTAZPBWEEqN/Ifjz1TymFccxsG s1QidLhQmpn3A4lb/utU0siCwQ+SUALFkKIQo6BsuQb6DAY9n0JjqK+m2xpRL9T0 9ERTX7tmFSN5Xt+fVAw6XQs4AOaBBL9kJXO7NloqoP/goDg/yxoDg/YAJvz+PaxQ /BuncavlsZv2AdOhQ28K3IPmcJz2 -----END CERTIFICATE-----Generated at Tue May 12 22:16:27 2026 by rpki-client