$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer (raw, json) Hash identifier: wu9k6Cu5lUXzxB4NFuaW5q7ppY9edP6pKhAdEm7BvIg= Subject key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A535F5931E9A6B17A963014F0020E279EF88BBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft caRepository: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:49 +0000 Certificate not after: Sun 02 May 2027 00:28:49 +0000 Subordinate resources: IP: 103.186.168.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:53:5f:59:31:e9:a6:b1:7a:96:30:14:f0:02:0e:27:9e:f8:8b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:23:49 2026 GMT Not After : May 2 00:28:49 2027 GMT Subject: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:9e:30:ad:73:c5:b0:b1:f8:ad:a8:4e:da: 43:d3:8c:df:ea:58:70:6e:66:ab:7d:87:b5:72:23: 4a:df:09:f6:74:cc:8b:42:3c:b3:94:8e:6d:ce:04: ec:41:09:a8:9b:cd:55:8d:1c:de:ba:67:5d:82:3f: 6f:8c:1f:8a:ad:e4:11:a2:3c:ba:79:8f:4e:f2:12: a4:8b:6d:35:e1:69:1c:d6:6b:a4:77:af:d3:fd:49: 81:3c:86:1c:93:52:49:c4:80:af:e3:11:43:65:2f: f5:a5:a7:7b:6c:bc:79:de:24:9d:d4:aa:be:a2:de: 8a:e1:ca:e4:d2:25:3b:41:49:3d:5d:0b:0a:41:7b: b1:34:70:a1:72:11:08:95:10:c6:d9:df:ee:e8:e9: bc:09:af:40:7a:55:95:45:76:3c:8c:ea:a6:09:de: 29:3d:3a:7f:65:1f:cf:a7:5e:53:4f:cc:5d:2f:f8: 79:d2:85:42:49:ce:3c:29:f7:b3:ec:85:a4:de:c9: 27:65:a3:32:9d:e4:f9:75:b4:69:6f:48:1e:b5:11: dc:82:66:31:8f:34:d0:1c:a6:16:76:7d:e0:d0:f4: a4:9e:68:9a:fa:4c:21:2d:45:56:e2:74:32:8b:81: 10:55:81:a9:08:f7:9a:b8:66:e3:2b:da:f7:53:8a: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.168.0/23 Signature Algorithm: sha256WithRSAEncryption 77:89:01:16:5f:99:b9:65:1f:1d:e9:19:0c:b5:03:ea:4c:41: fb:7f:10:cb:06:f5:f5:e8:13:76:c2:72:76:6a:1d:1e:4b:92: 68:28:5f:bd:be:5b:41:d9:cc:92:9b:d9:e9:db:91:2c:ae:a6: be:75:35:ac:30:f8:44:37:70:1a:cb:b0:e9:8b:50:d8:81:38: 20:ec:38:f8:1b:af:7b:c8:36:93:5c:2d:3c:39:2e:5f:e0:ba: d4:42:e0:cb:b2:d9:7f:70:62:2d:76:82:80:9c:eb:ef:eb:ed: 54:4c:b2:bd:8c:9e:00:bb:32:88:c8:54:cc:b3:9a:88:f0:29: 63:bb:84:83:b0:5c:5b:8f:fc:84:e9:f7:04:18:c7:cb:7d:69: 13:fd:f2:ea:01:5d:bd:63:3b:df:de:67:e6:2b:1e:3d:f5:fd: 7b:43:40:b7:6a:45:85:74:6a:80:4a:ad:67:a0:8b:1d:2d:96: fc:74:0a:3a:b2:cc:ee:24:c3:30:3a:41:64:99:bd:2d:8d:d8: 17:0b:f8:77:59:9f:a7:82:a2:a6:58:67:66:a4:27:af:ef:de: 0f:52:7b:d9:4e:3d:3c:b4:a6:e7:a3:62:40:42:03:98:a0:98: 13:4f:be:4a:62:1e:9b:9e:71:4b:0e:36:87:88:fa:02:be:f5: bc:5c:5e:0c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOlNfWTHpprF6ljAU8AIOJ574i70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjM0OVoX DTI3MDUwMjAwMjg0OVowMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4 QzVCM0M0QkM1MjREODU4MTUwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANp8njCtc8WwsfitqE7aQ9OM3+pYcG5mq32HtXIjSt8J9nTMi0I8s5SObc4E 7EEJqJvNVY0c3rpnXYI/b4wfiq3kEaI8unmPTvISpIttNeFpHNZrpHev0/1JgTyG HJNSScSAr+MRQ2Uv9aWne2y8ed4kndSqvqLeiuHK5NIlO0FJPV0LCkF7sTRwoXIR CJUQxtnf7ujpvAmvQHpVlUV2PIzqpgneKT06f2Ufz6deU0/MXS/4edKFQknOPCn3 s+yFpN7JJ2WjMp3k+XW0aW9IHrUR3IJmMY800BymFnZ94ND0pJ5omvpMIS1FVuJ0 MouBEFWBqQj3mrhm4yva91OKxuUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB2EQ/KxuRv28CeMWzxLxSTYWBUIMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQyNzEzYTMyLWZhZGEtNDg0ZS1hNjhkLTBjYWMwZmZmYTMzYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MjcxM2Ez Mi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC8xRDg0NDNGMkIxQjkxQkY2 RjAyNzhDNUIzQzRCQzUyNEQ4NTgxNTA4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7qoMA0GCSqGSIb3DQEBCwUAA4IBAQB3iQEWX5m5ZR8d6RkMtQPqTEH7fxDL BvX16BN2wnJ2ah0eS5JoKF+9vltB2cySm9np25Esrqa+dTWsMPhEN3Aay7Dpi1DY gTgg7Dj4G697yDaTXC08OS5f4LrUQuDLstl/cGItdoKAnOvv6+1UTLK9jJ4AuzKI yFTMs5qI8Clju4SDsFxbj/yE6fcEGMfLfWkT/fLqAV29Yzvf3mfmKx499f17Q0C3 akWFdGqASq1noIsdLZb8dAo6sszuJMMwOkFkmb0tjdgXC/h3WZ+ngqKmWGdmpCev 794PUnvZTj08tKbno2JAQgOYoJgTT75KYh6bnnFLDjaHiPoCvvW8XF4M -----END CERTIFICATE-----Generated at Tue May 12 22:15:59 2026 by rpki-client