$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer (raw, json) Hash identifier: B75uvADldxieu53IrypHr6ULQvm97PCJSm/qBjzj83A= Subject key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47E0C8C55456149ADC6C878DF1AB27F7911A5CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:13:50 +0000 Certificate not after: Sun 02 May 2027 01:18:50 +0000 Subordinate resources: IP: 103.134.220.0/22 IP: 2404:6d40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e0:c8:c5:54:56:14:9a:dc:6c:87:8d:f1:ab:27:f7:91:1a:5c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:13:50 2026 GMT Not After : May 2 01:18:50 2027 GMT Subject: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:5b:78:ec:4b:84:e9:a0:af:b3:f0:08:ef: 3a:92:e3:a6:d1:de:8b:b1:be:73:a7:c3:9d:65:58: 2e:be:bd:94:27:13:4e:c9:b2:9e:47:27:38:e0:ed: 6b:40:08:15:40:a7:ff:7c:a8:3b:bc:47:e1:04:33: b1:8c:4c:e5:26:65:d6:08:85:e0:a5:b5:18:6e:e4: ec:57:70:f7:b6:10:dc:5b:5f:bc:b4:1b:9e:80:49: 43:f1:d5:dc:11:80:ec:37:83:9e:38:b7:ff:e1:8e: bb:70:ca:75:b8:f0:49:ad:95:e1:a0:53:92:b1:d3: d6:1c:87:c9:b2:2d:aa:28:f4:44:f8:7b:6f:52:c3: 31:45:69:0b:b9:87:6f:be:60:c8:83:4a:56:60:4f: 54:c4:9a:91:37:41:41:59:e3:ff:40:25:64:77:ed: b3:49:3b:04:97:05:ca:4d:40:29:01:9a:f1:be:0c: 7a:b5:14:d7:7a:66:05:81:4e:44:4f:6b:3e:d0:a6: 78:46:b6:40:c5:95:34:20:aa:18:e2:eb:1c:ac:0f: fd:32:62:bb:58:71:78:30:6b:e6:51:5f:09:56:49: af:89:cc:72:05:11:7e:31:ac:ec:8d:a3:e9:0a:52: 81:d4:d8:53:11:ce:df:e7:40:55:86:b5:8d:b7:d6: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.220.0/22 IPv6: 2404:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 03:e4:35:e0:e8:17:a7:73:de:58:9c:5e:23:0f:b3:3a:08:3d: 0c:04:15:4f:25:e5:ae:60:ad:1c:24:3d:65:a5:39:3b:9e:aa: 3f:da:96:d6:b5:92:ec:3a:52:4c:1a:33:4a:b4:32:d0:2a:f4: 0a:70:c2:84:a6:c5:b3:46:d5:da:c7:cf:31:6d:8e:27:0c:e2: bb:cc:8c:3b:41:5c:67:30:1c:f0:b3:02:f8:c0:18:f4:29:cb: 0f:98:d5:b7:ed:ed:85:6a:56:68:df:19:74:4f:59:f4:e5:4a: 0e:c0:96:85:57:78:ae:3b:47:a3:a1:2c:cf:8c:2c:62:09:e8: b2:93:de:d0:43:cd:3b:a0:3d:5d:2a:44:78:48:f5:36:80:b7: 49:9f:d6:72:87:ef:71:f5:43:68:79:0a:de:ed:27:3d:a3:50: 15:42:af:c2:73:20:c9:c9:c6:2c:04:55:f9:68:18:c4:e4:65: 61:1f:a4:5c:ab:84:d8:87:8c:92:ea:4c:48:d8:9c:3a:a3:02: 7c:1a:80:f8:16:e1:e1:8e:d2:9b:df:39:55:80:ee:7c:61:f8: 63:d7:60:58:13:24:1e:6b:b2:57:2e:f3:91:54:86:83:1f:a1: ef:3a:40:ff:91:08:3d:da:4c:61:05:10:bf:e7:9a:60:ce:9c: 14:2f:6a:2f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUR+DIxVRWFJrcbIeN8asn95EaXPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTM1MFoX DTI3MDUwMjAxMTg1MFowMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4 MzEwRDMyRTZCNjFCMkI1RUFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0xW3jsS4TpoK+z8AjvOpLjptHei7G+c6fDnWVYLr69lCcTTsmynkcnOODt a0AIFUCn/3yoO7xH4QQzsYxM5SZl1giF4KW1GG7k7Fdw97YQ3FtfvLQbnoBJQ/HV 3BGA7DeDnji3/+GOu3DKdbjwSa2V4aBTkrHT1hyHybItqij0RPh7b1LDMUVpC7mH b75gyINKVmBPVMSakTdBQVnj/0AlZHfts0k7BJcFyk1AKQGa8b4MerUU13pmBYFO RE9rPtCmeEa2QMWVNCCqGOLrHKwP/TJiu1hxeDBr5lFfCVZJr4nMcgURfjGs7I2j 6QpSgdTYUxHO3+dAVYa1jbfWY50CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCQySh/z67+ZlACDENMua2GyteqrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhiMzZlODhkLWQ1NzMtNGNiYi1iNDYwLWEwYjk2OWFhODRkNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YjM2ZTg4 ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC8yNDMyNEExRkYzRUJCRjk5 OTQwMDgzMTBEMzJFNkI2MUIyQjVFQUFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ4bcMA0EAgACMAcDBQAkBG1AMA0GCSqGSIb3DQEBCwUAA4IBAQAD5DXg6Ben c95YnF4jD7M6CD0MBBVPJeWuYK0cJD1lpTk7nqo/2pbWtZLsOlJMGjNKtDLQKvQK cMKEpsWzRtXax88xbY4nDOK7zIw7QVxnMBzwswL4wBj0KcsPmNW37e2FalZo3xl0 T1n05UoOwJaFV3iuO0ejoSzPjCxiCeiyk97QQ807oD1dKkR4SPU2gLdJn9Zyh+9x 9UNoeQre7Sc9o1AVQq/CcyDJycYsBFX5aBjE5GVhH6Rcq4TYh4yS6kxI2Jw6owJ8 GoD4FuHhjtKb3zlVgO58Yfhj12BYEyQea7JXLvORVIaDH6HvOkD/kQg92kxhBRC/ 55pgzpwUL2ov -----END CERTIFICATE-----Generated at Wed May 13 01:36:00 2026 by rpki-client