$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.cer (raw, json) Hash identifier: KIWH9f4Pjy43k3WRpt7t4lMcMA2BwnhemmG1FVYCIGM= Subject key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0F6EB4774B2F6D744841B83982FDD65E8E4ACD90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft caRepository: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:15 +0000 Certificate not after: Sun 02 May 2027 00:39:15 +0000 Subordinate resources: IP: 103.15.226.0/24 IP: 103.28.52.0/23 IP: 103.55.36.0/22 IP: 103.236.201.0/24 IP: 2001:df7:7400::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6e:b4:77:4b:2f:6d:74:48:41:b8:39:82:fd:d6:5e:8e:4a:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:34:15 2026 GMT Not After : May 2 00:39:15 2027 GMT Subject: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:37:f2:f0:18:ec:54:6f:b2:1d:f0:15:86: 6c:9a:02:3f:0d:34:da:96:f7:57:89:6c:2d:0f:26: f8:5f:6d:77:33:a2:fb:84:d8:fb:b3:8a:d4:d0:60: 54:26:c9:3a:61:22:ba:fc:65:24:b0:a4:3c:e3:79: cf:a3:6d:ab:44:2b:db:94:8e:70:81:55:8c:67:ef: 5e:e7:a5:2b:18:60:09:b6:b4:05:16:64:88:4d:c0: 9b:ff:15:7f:a8:ae:b3:11:af:b2:0e:57:78:09:d4: f6:fa:a5:78:1a:63:18:48:04:e7:cc:7b:92:8d:a3: b8:3a:4f:3c:ef:db:56:f1:0b:c5:a7:01:08:1e:4f: eb:19:ff:83:ed:42:7d:7c:a2:92:44:9d:93:e3:ac: 73:e2:7f:4c:c0:a3:2d:78:ca:2f:25:d4:20:70:59: 03:2b:35:42:53:a7:75:6b:a4:0c:2a:70:2b:70:a2: 32:7b:fe:79:f7:80:00:bb:64:38:0c:cd:ce:f2:1a: 66:ee:e5:bc:b1:42:c2:03:fc:8e:08:7e:31:1e:e6: cc:2c:4a:a1:00:90:b9:1a:26:9b:95:51:1a:00:9f: 40:77:96:aa:df:af:8d:8e:ac:30:62:dc:ac:66:89: 1b:9d:63:fb:c6:40:01:30:31:bf:6b:d2:2b:7f:44: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.226.0/24 103.28.52.0/23 103.55.36.0/22 103.236.201.0/24 IPv6: 2001:df7:7400::/48 Signature Algorithm: sha256WithRSAEncryption 42:e9:07:92:e7:2e:6a:4a:fe:ba:6c:24:9d:d7:bc:34:fa:bb: b3:4b:a1:4b:50:7c:86:d2:5e:58:45:32:c2:08:65:5b:29:26: c8:17:6c:10:87:4c:b6:4d:97:aa:0e:0b:4c:5c:30:8c:29:cf: cc:7f:c6:17:e9:a1:29:99:a3:0d:4f:a1:8d:14:20:44:2b:b1: 95:b5:ad:4c:7c:5a:f7:3c:ba:5f:2c:c9:5c:f4:90:e0:13:ff: ef:f5:f1:b5:1c:b4:d0:03:75:6a:50:49:ff:33:60:d3:94:8a: 94:7c:e0:54:79:e8:25:26:90:0d:6d:b1:8c:e8:a1:41:fc:9c: 51:82:7d:fe:79:23:b8:8a:f7:85:30:18:f9:db:8a:04:da:4d: 95:39:26:26:75:8f:8e:d1:b1:e2:48:1a:57:9b:17:da:5b:cd: 11:52:71:4f:81:59:27:b6:d1:7d:1b:fe:4f:2a:2d:c1:3e:31: cb:81:60:4f:fa:90:bb:77:41:81:3a:90:92:bd:35:ac:cb:58: 78:00:03:c9:01:39:44:29:0d:66:2f:56:40:1d:7f:43:80:26: d0:84:a9:ea:bf:c7:b6:77:25:be:21:1a:02:f3:35:e6:49:8c: 44:4a:03:59:70:39:10:57:08:87:b8:3d:c5:2f:4b:e7:94:e8: 3d:2b:4c:36 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUD260d0svbXRIQbg5gv3WXo5KzZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzQxNVoX DTI3MDUwMjAwMzkxNVowMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NEND NjY3RDg2MTNERDlBRDdGMjQ4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/CN/LwGOxUb7Id8BWGbJoCPw002pb3V4lsLQ8m+F9tdzOi+4TY+7OK1NBg VCbJOmEiuvxlJLCkPON5z6Ntq0Qr25SOcIFVjGfvXuelKxhgCba0BRZkiE3Am/8V f6iusxGvsg5XeAnU9vqleBpjGEgE58x7ko2juDpPPO/bVvELxacBCB5P6xn/g+1C fXyikkSdk+Osc+J/TMCjLXjKLyXUIHBZAys1QlOndWukDCpwK3CiMnv+efeAALtk OAzNzvIaZu7lvLFCwgP8jgh+MR7mzCxKoQCQuRomm5VRGgCfQHeWqt+vjY6sMGLc rGaJG51j+8ZAATAxv2vSK39Eh/UCAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCOpSOsW9C+RlEzGZ9hhPdmtfySBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUyYWMwY2E1LTVjZTctNGU2ZS05ZmZmLTcyMTNlZjFlZjM2NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MmFjMGNh NS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC8yM0E5NDhFQjE2RjQyRjkx OTQ0Q0M2NjdEODYxM0REOUFEN0YyNDgxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAY AwQAZw/iAwQBZxw0AwQCZzckAwQAZ+zJMA8EAgACMAkDBwAgAQ33dAAwDQYJKoZI hvcNAQELBQADggEBAELpB5LnLmpK/rpsJJ3XvDT6u7NLoUtQfIbSXlhFMsIIZVsp JsgXbBCHTLZNl6oOC0xcMIwpz8x/xhfpoSmZow1PoY0UIEQrsZW1rUx8Wvc8ul8s yVz0kOAT/+/18bUctNADdWpQSf8zYNOUipR84FR56CUmkA1tsYzooUH8nFGCff55 I7iK94UwGPnbigTaTZU5JiZ1j47RseJIGlebF9pbzRFScU+BWSe20X0b/k8qLcE+ McuBYE/6kLt3QYE6kJK9NazLWHgAA8kBOUQpDWYvVkAdf0OAJtCEqeq/x7Z3Jb4h GgLzNeZJjERKA1lwORBXCIe4PcUvS+eU6D0rTDY= -----END CERTIFICATE-----Generated at Wed May 13 01:07:17 2026 by rpki-client