$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer (raw, json) Hash identifier: eZi9afT8juSQsHjqQfd6nVlKVOiGCb1cc4CJr7o4mGk= Subject key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6594EAB9959E3131E067B91FF2E0AF57BCAC7E8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:13:09 +0000 Certificate not after: Sun 02 May 2027 00:18:09 +0000 Subordinate resources: IP: 103.184.20.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:94:ea:b9:95:9e:31:31:e0:67:b9:1f:f2:e0:af:57:bc:ac:7e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:13:09 2026 GMT Not After : May 2 00:18:09 2027 GMT Subject: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:0b:55:85:44:58:a9:61:c3:3f:56:5b:7d: 69:57:10:93:31:43:b2:23:78:b3:18:b0:14:09:82: df:94:85:64:8d:50:7f:09:dc:99:97:4a:2a:15:32: 9e:5d:06:05:9e:72:0a:1c:6b:76:cb:0c:3b:ac:95: d7:2e:0f:30:52:67:c3:3f:8c:76:67:09:35:24:93: 9b:63:4c:fc:94:b9:62:be:74:a3:00:e0:03:ad:a0: 62:50:00:6c:25:95:cb:f8:37:ae:e6:f4:72:14:63: 71:46:e5:f8:3b:fc:ee:42:ef:3c:db:03:c0:f7:d6: bb:37:e7:4b:25:11:4c:5f:5a:39:67:80:02:7e:b5: 65:6e:c6:f5:c2:5f:58:1b:e1:60:e0:cd:a9:5f:70: b7:16:2b:8c:59:85:60:1c:8b:bf:3a:1e:80:93:d6: 80:92:2c:50:e7:e0:d0:b1:13:2e:6f:23:b1:b0:16: ab:1c:e7:3d:04:4a:fd:90:41:c5:50:19:dc:ce:ed: 50:2f:c2:d4:be:5f:6e:0d:3a:31:ee:20:e8:2f:8e: 7d:b7:0d:c1:4b:78:c5:80:50:40:b3:ba:8d:1e:69: 5c:c5:1b:31:a1:67:ac:e2:02:b7:77:e5:6f:25:22: 1b:d9:35:e6:26:28:b1:49:47:97:a7:29:52:0c:e3: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.20.0/23 Signature Algorithm: sha256WithRSAEncryption 06:c0:b0:ee:85:18:06:85:d0:c6:1a:4b:fc:f9:8a:d6:99:a2: c4:88:26:44:bd:4b:93:04:01:93:2a:93:a9:7f:10:03:f7:f8: 62:a9:24:d0:37:8a:f1:b6:1e:72:b2:1d:da:c0:a2:82:a0:60: fd:24:ca:60:20:1b:10:d4:cd:b4:bc:76:88:2c:e2:06:2a:f5: 20:b3:e4:eb:3b:5e:10:b5:8a:3f:84:49:d2:e0:28:bb:a4:4f: ba:5a:a5:57:96:4b:25:cb:3b:87:78:57:56:89:33:df:1a:a8: f1:f5:83:88:1a:6e:37:d6:00:e7:ad:76:b6:b5:09:32:9d:50: 53:30:c5:9d:6e:4c:62:3c:b2:4d:a6:31:21:f9:82:c4:72:fe: 95:e4:dd:eb:f0:82:59:c6:66:c7:f9:4d:ad:ef:96:ac:50:0c: 7f:a7:5f:79:c0:36:7d:ce:13:56:e8:30:db:5f:4c:1d:68:3d: 80:24:36:af:60:e5:45:f8:ff:55:ff:5c:c5:61:a7:d5:d7:bb: b5:a0:70:00:67:7f:a5:95:a3:25:b6:6c:76:03:25:64:62:01: ba:3a:98:5c:b5:b2:06:f1:e5:39:8a:67:58:81:75:37:d0:88: d5:40:95:48:c4:b9:57:e3:bf:ec:d4:ff:eb:46:3e:2d:6c:eb: da:59:78:e1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZZTquZWeMTHgZ7kf8uCvV7ysfoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTMwOVoX DTI3MDUwMjAwMTgwOVowMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNC MEQ5RDA5RTIyMERCRjc5ODNBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALltC1WFRFipYcM/Vlt9aVcQkzFDsiN4sxiwFAmC35SFZI1QfwncmZdKKhUy nl0GBZ5yChxrdssMO6yV1y4PMFJnwz+MdmcJNSSTm2NM/JS5Yr50owDgA62gYlAA bCWVy/g3rub0chRjcUbl+Dv87kLvPNsDwPfWuzfnSyURTF9aOWeAAn61ZW7G9cJf WBvhYODNqV9wtxYrjFmFYByLvzoegJPWgJIsUOfg0LETLm8jsbAWqxznPQRK/ZBB xVAZ3M7tUC/C1L5fbg06Me4g6C+OfbcNwUt4xYBQQLO6jR5pXMUbMaFnrOICt3fl byUiG9k15iYosUlHl6cpUgzjihUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB05sNkXSAqFy7Ow2dCeIg2/eYOtMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMyYmZhYjA5LWMxZTktNDRkOC04MTllLWZkZjY1NDljNmIzZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMmJmYWIw OS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC8xRDM5QjBEOTE3NDgwQTg1 Q0JCM0IwRDlEMDlFMjIwREJGNzk4M0FELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7gUMA0GCSqGSIb3DQEBCwUAA4IBAQAGwLDuhRgGhdDGGkv8+YrWmaLEiCZE vUuTBAGTKpOpfxAD9/hiqSTQN4rxth5ysh3awKKCoGD9JMpgIBsQ1M20vHaILOIG KvUgs+TrO14QtYo/hEnS4Ci7pE+6WqVXlkslyzuHeFdWiTPfGqjx9YOIGm431gDn rXa2tQkynVBTMMWdbkxiPLJNpjEh+YLEcv6V5N3r8IJZxmbH+U2t75asUAx/p195 wDZ9zhNW6DDbX0wdaD2AJDavYOVF+P9V/1zFYafV17u1oHAAZ3+llaMltmx2AyVk YgG6OphctbIG8eU5imdYgXU30IjVQJVIxLlX47/s1P/rRj4tbOvaWXjh -----END CERTIFICATE-----Generated at Tue May 12 22:39:03 2026 by rpki-client