$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer File: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer (raw, json) Hash identifier: EVHhMsJEKys8aKzdjftuIZ/bCSIULJZ0yiSWm2aSrdk= Subject key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E56E894513199ADB9DB6027F7FB7E6FF6B621AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:38 +0000 Certificate not after: Sun 02 May 2027 01:23:38 +0000 Subordinate resources: IP: 103.228.18.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:56:e8:94:51:31:99:ad:b9:db:60:27:f7:fb:7e:6f:f6:b6:21:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:38 2026 GMT Not After : May 2 01:23:38 2027 GMT Subject: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:65:0d:e5:c6:75:6a:b2:37:94:06:43:38: 5b:9d:9d:38:20:3c:c7:37:41:1a:e9:94:b4:4b:d4: f1:27:6b:9e:6d:fe:a5:2f:69:87:40:1d:74:4f:07: 8a:9f:e8:5f:e0:c7:66:0a:95:2b:f1:20:58:26:9c: 96:9b:7d:e4:22:bd:92:c8:b3:ff:5c:89:ae:2b:1a: 95:3a:fc:96:f0:93:79:76:4c:2e:67:9b:ec:cc:1f: 8e:2d:ec:d6:55:a7:c9:57:75:26:3d:62:ff:8d:db: a7:1b:6c:55:27:ee:f0:8a:5f:68:f6:d0:1d:c6:bf: c2:19:c2:1e:18:04:40:0e:a7:1a:b9:31:89:2d:7e: be:c3:57:73:aa:e4:2a:03:02:59:59:91:a9:d0:5c: 5b:65:ec:43:cf:29:b6:68:69:dc:a5:fb:a7:75:2f: e0:44:c8:66:3e:be:ce:8b:78:c6:df:e3:68:66:6b: 78:09:8b:13:76:de:5c:07:13:f2:c5:12:fe:c5:ae: ea:87:c6:b4:a2:81:71:bb:d6:13:5e:39:8c:da:cd: d6:ba:fc:81:ff:40:22:9b:4d:85:d7:19:f2:12:b0: fb:d9:d0:ff:e0:de:f9:76:07:be:c5:c5:92:6d:e6: 2d:3b:c1:9d:12:d9:4a:3b:08:9e:51:39:00:8d:d2: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.18.0/24 Signature Algorithm: sha256WithRSAEncryption 17:9f:13:2e:e3:0f:26:63:3b:4e:4e:96:b1:e3:35:86:32:a5: 26:9f:c9:c1:a1:0b:d2:e8:36:27:5b:3f:af:f8:87:0d:65:2f: ef:de:38:c5:2b:7f:6a:89:1b:48:d6:35:d7:96:77:60:bd:60: 3a:2a:27:fb:b1:8a:4e:44:04:e9:80:4b:fa:fb:ad:b1:0d:b0: 28:5f:b7:e2:cf:06:f8:f4:37:10:18:98:33:d3:8c:e5:07:9b: 24:af:7e:ec:90:48:bc:38:4a:a4:6e:fa:61:04:55:b6:75:47: 13:e3:9b:75:45:1c:b3:09:28:1c:0c:42:24:2b:b1:ef:b4:70: f2:b2:46:f0:2b:9a:93:6d:68:85:31:e6:d6:84:9a:aa:56:eb: 97:22:d4:19:9a:c2:91:05:ec:6d:22:56:99:a5:a1:44:e5:1d: 57:79:73:52:0c:10:46:c9:bb:14:05:36:77:c0:29:56:d6:93: 56:12:68:ab:91:51:0a:26:c1:4b:b3:32:9e:43:37:28:3e:41: 71:e7:13:30:1b:e0:5c:5c:23:3a:82:6c:6e:ad:53:0f:bd:91: 20:50:8b:cf:f1:16:d8:91:15:1a:a5:8b:10:36:cc:8d:52:39: 0a:94:ca:b0:7e:fa:63:99:f6:2e:85:2a:e7:27:ff:7e:14:9c: 9f:e5:3e:07 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTlbolFExma2522An9/t+b/a2Ia0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTgzOFoX DTI3MDUwMjAxMjMzOFowMzExMC8GA1UEAxMoMUQ0RTIxQjVCMDZGRTlBMDQ2NDNB NzAyQzcyQjk2MTZENDUwREU4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTbZQ3lxnVqsjeUBkM4W52dOCA8xzdBGumUtEvU8Sdrnm3+pS9ph0AddE8H ip/oX+DHZgqVK/EgWCaclpt95CK9ksiz/1yJrisalTr8lvCTeXZMLmeb7Mwfji3s 1lWnyVd1Jj1i/43bpxtsVSfu8IpfaPbQHca/whnCHhgEQA6nGrkxiS1+vsNXc6rk KgMCWVmRqdBcW2XsQ88ptmhp3KX7p3Uv4ETIZj6+zot4xt/jaGZreAmLE3beXAcT 8sUS/sWu6ofGtKKBcbvWE145jNrN1rr8gf9AIptNhdcZ8hKw+9nQ/+De+XYHvsXF km3mLTvBnRLZSjsInlE5AI3SxE8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB1OIbWwb+mgRkOnAscrlhbUUN6OMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkzMjk3OTNlLThmMTgtNDExNi05MjY4LWExMzNkYWYxMWNlZi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MzI5Nzkz ZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMS8xRDRFMjFCNUIwNkZFOUEw NDY0M0E3MDJDNzJCOTYxNkQ0NTBERThFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ+QSMA0GCSqGSIb3DQEBCwUAA4IBAQAXnxMu4w8mYztOTpax4zWGMqUmn8nB oQvS6DYnWz+v+IcNZS/v3jjFK39qiRtI1jXXlndgvWA6Kif7sYpORATpgEv6+62x DbAoX7fizwb49DcQGJgz04zlB5skr37skEi8OEqkbvphBFW2dUcT45t1RRyzCSgc DEIkK7HvtHDyskbwK5qTbWiFMebWhJqqVuuXItQZmsKRBextIlaZpaFE5R1XeXNS DBBGybsUBTZ3wClW1pNWEmirkVEKJsFLszKeQzcoPkFx5xMwG+BcXCM6gmxurVMP vZEgUIvP8RbYkRUapYsQNsyNUjkKlMqwfvpjmfYuhSrnJ/9+FJyf5T4H -----END CERTIFICATE-----Generated at Wed May 13 00:54:33 2026 by rpki-client