$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer File: 236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer (raw, json) Hash identifier: KNASdDiik7NXSolsz8VEv+AHLrZSrY6x8Ha8fVGa7og= Subject key identifier: 23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 74067A692D9FE3E11C949DC856FE4702DB7474DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:47:02 +0000 Certificate not after: Sun 02 May 2027 00:52:02 +0000 Subordinate resources: IP: 103.175.204.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:06:7a:69:2d:9f:e3:e1:1c:94:9d:c8:56:fe:47:02:db:74:74:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:47:02 2026 GMT Not After : May 2 00:52:02 2027 GMT Subject: CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:54:63:2d:1c:bf:14:d4:ff:18:af:5c:69: 0d:e4:b0:a3:41:d9:1a:16:ef:d6:65:2b:5d:c0:29: d9:32:ba:d9:7c:9c:92:ce:b4:84:50:a5:d0:7b:56: e9:f5:db:64:e9:81:29:ab:fe:1b:e2:28:b4:31:29: e9:38:d5:bb:20:70:88:27:17:3e:37:c3:a7:39:fb: 53:6d:da:07:2b:4b:96:c1:97:18:96:94:23:d2:36: f0:24:2f:56:f4:2d:04:8e:97:17:eb:6e:3c:18:f9: cf:8b:15:3d:fa:e5:e5:b2:e2:78:7a:70:0d:d9:e7: 7e:fe:2d:9f:52:72:51:51:e7:92:25:70:7a:1d:21: ff:10:e6:2e:f0:96:cb:2f:36:b1:a3:45:8e:d7:2a: 5f:c5:15:88:50:cb:fb:2e:a6:78:e7:7c:f9:4d:a7: d3:5f:0a:fd:97:f4:27:eb:d1:89:40:cc:62:e0:50: 70:e5:68:a6:e0:69:65:61:95:1a:db:ef:b2:b6:e8: 2f:f5:a0:0e:fd:c4:bf:59:5f:1d:96:7b:01:84:44: 24:0c:3b:49:ae:4c:66:bb:80:c4:bb:08:4c:70:3a: e1:52:ff:5d:3d:ca:61:d6:e2:30:bf:69:f5:0e:0a: 3f:fd:81:3b:39:f2:be:d6:78:44:b0:da:be:8f:f2: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.204.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:c1:c8:79:6d:2a:be:20:bd:38:b2:62:df:bc:34:90:50:a2: 7a:44:ac:5a:14:c5:06:1c:d4:66:d3:3c:d9:41:3a:cb:cd:da: 85:c0:f5:f6:cc:58:20:a1:aa:70:9d:c2:a5:ba:5c:d2:6e:77: 6c:56:c2:18:3f:54:44:aa:31:e2:fb:ff:82:55:da:a4:7b:97: ee:34:d2:8f:0f:2b:38:c3:87:82:b7:ab:40:db:78:89:57:ec: 12:5c:e5:0b:67:d1:b2:37:da:31:19:55:c1:4a:da:6d:f5:84: 12:8a:74:7d:f9:e6:c4:23:f9:3e:17:12:da:1e:71:d5:c5:a7: c8:23:12:ad:e2:96:ae:ed:e8:a1:f3:2d:c0:ee:68:65:9d:11: 08:97:6b:4c:ae:24:15:64:61:94:84:e9:4c:5b:74:31:a8:79: d3:cf:c7:4a:a4:dd:42:46:99:ae:26:4f:39:d0:d1:1b:66:32: c2:a2:54:bd:ab:50:8d:ce:2a:94:54:13:14:fb:70:bc:2b:c3: 56:50:d3:9f:c1:57:cc:f8:5f:c2:1b:e2:3c:bd:2c:06:52:ed: b7:8d:72:75:b7:9f:22:7c:4a:86:e3:15:a0:75:51:52:f4:99: be:4a:f4:0d:7d:8a:43:4e:27:87:e8:95:2e:5e:f5:d0:14:48: 26:a6:7d:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdAZ6aS2f4+EclJ3IVv5HAtt0dNowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDcwMloX DTI3MDUwMjAwNTIwMlowMzExMC8GA1UEAxMoMjM2RkRGRkY0ODM3MDQ5QTAzNTc0 RjBBM0Y1QjBFOUI2Q0M4RTNBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg7VGMtHL8U1P8Yr1xpDeSwo0HZGhbv1mUrXcAp2TK62Xycks60hFCl0HtW 6fXbZOmBKav+G+IotDEp6TjVuyBwiCcXPjfDpzn7U23aBytLlsGXGJaUI9I28CQv VvQtBI6XF+tuPBj5z4sVPfrl5bLieHpwDdnnfv4tn1JyUVHnkiVweh0h/xDmLvCW yy82saNFjtcqX8UViFDL+y6meOd8+U2n018K/Zf0J+vRiUDMYuBQcOVopuBpZWGV GtvvsrboL/WgDv3Ev1lfHZZ7AYREJAw7Sa5MZruAxLsITHA64VL/XT3KYdbiML9p 9Q4KP/2BOznyvtZ4RLDavo/yTsUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCNv3/9INwSaA1dPCj9bDptsyOOkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY0NjljM2UzLTdiNTktNDQ5MC04NGNmLWZlZjE1ODVhYzc1Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NDY5YzNl My03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC8yMzZGREZGRjQ4MzcwNDlB MDM1NzRGMEEzRjVCMEU5QjZDQzhFM0E0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6/MMA0GCSqGSIb3DQEBCwUAA4IBAQBfwch5bSq+IL04smLfvDSQUKJ6RKxa FMUGHNRm0zzZQTrLzdqFwPX2zFggoapwncKlulzSbndsVsIYP1REqjHi+/+CVdqk e5fuNNKPDys4w4eCt6tA23iJV+wSXOULZ9GyN9oxGVXBStpt9YQSinR9+ebEI/k+ FxLaHnHVxafIIxKt4pau7eih8y3A7mhlnREIl2tMriQVZGGUhOlMW3QxqHnTz8dK pN1CRpmuJk850NEbZjLColS9q1CNziqUVBMU+3C8K8NWUNOfwVfM+F/CG+I8vSwG Uu23jXJ1t58ifEqG4xWgdVFS9Jm+SvQNfYpDTieH6JUuXvXQFEgmpn3W -----END CERTIFICATE-----Generated at Tue May 12 22:39:21 2026 by rpki-client