$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2A494FAEE44F13448E6C43136F825053CE977009.cer File: 2A494FAEE44F13448E6C43136F825053CE977009.cer (raw, json) Hash identifier: BqQwC7GlYI2MAedvH2Z+nthN9NNqAa3/qLItg0Ss1Hs= Subject key identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 407F87179808E70EA7D9A94D4287C96919CC1C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:28:46 +0000 Certificate not after: Sun 02 May 2027 02:33:46 +0000 Subordinate resources: IP: 103.183.94.0/24 IP: 103.191.94.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7f:87:17:98:08:e7:0e:a7:d9:a9:4d:42:87:c9:69:19:cc:1c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:28:46 2026 GMT Not After : May 2 02:33:46 2027 GMT Subject: CN=2A494FAEE44F13448E6C43136F825053CE977009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:4a:2a:0a:52:89:d4:8d:f4:db:29:e8:7e: 2c:36:5a:3a:af:65:96:cd:5f:88:d1:65:c6:fa:97: fe:50:be:bf:92:b3:69:0b:1e:c6:29:6e:e9:f8:e3: 0f:4b:61:c3:c8:e8:4d:a3:e4:32:5f:62:9c:b0:75: ba:6c:d7:c2:62:3f:bd:0b:23:c1:6a:8d:c5:2e:e8: 51:bf:68:14:5c:3a:65:fa:36:69:99:e7:bd:02:07: 4a:fd:5e:42:d8:55:2f:e3:aa:d9:c6:f0:dd:e4:e8: db:ce:c1:09:92:b6:0c:8a:aa:d9:c6:44:aa:8f:3e: 87:87:6c:e4:c4:93:8a:5f:73:63:cf:8c:83:eb:d6: 18:cf:f8:ca:88:3e:a0:de:d9:51:ef:c2:26:86:f3: f2:b1:18:8e:fd:33:5b:52:ba:61:c4:35:53:4f:18: 13:16:96:36:c1:f8:ed:50:53:d0:cd:60:1c:71:33: 35:87:b1:0b:79:1f:09:d8:8d:8d:2e:e3:04:bb:53: e2:e5:fd:1a:7a:86:7f:37:67:e6:94:2d:71:e3:50: 7a:18:51:d6:2c:25:e0:fb:6b:1e:bb:8d:86:02:44: 7a:71:dd:61:30:37:0e:52:fd:c9:b6:f0:64:e8:bf: cb:b8:a1:4a:83:53:37:3e:52:26:43:8b:1f:de:24: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:49:4F:AE:E4:4F:13:44:8E:6C:43:13:6F:82:50:53:CE:97:70:09 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/2A494FAEE44F13448E6C43136F825053CE977009.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.94.0/24 103.191.94.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:3e:d0:49:53:58:12:3f:43:fe:90:6b:de:54:18:49:8d:de: 1e:46:df:ff:6a:24:29:fb:31:dd:94:f3:9e:3f:b6:a3:3d:51: 08:65:43:1d:c4:a4:b4:2a:73:3f:f0:9c:58:b8:72:6d:9f:df: 0d:12:b0:a8:73:e4:ab:dc:12:95:ab:5a:73:c7:cd:64:67:b8: c7:71:94:ed:b5:92:54:f5:40:80:a9:1c:95:11:24:d2:8e:46: 0e:a0:55:2d:8b:5f:7c:44:35:7b:eb:e3:d2:0f:dc:bc:df:ba: ee:3e:c1:37:ba:b6:e3:7d:c5:89:48:cb:3c:d8:3f:88:0f:ef: 50:fd:dc:9e:d5:41:75:d4:96:d1:c1:cf:a2:dd:a6:e7:b0:bf: 19:90:66:c2:e0:26:9c:7e:fe:6d:ec:cc:82:2b:9a:dd:a8:7d: 5b:10:4a:7d:5b:c5:e9:5d:a9:6d:7d:3f:1a:75:02:4a:43:34: 36:2f:38:ba:d1:f4:7a:a7:fe:3d:2b:a5:d8:c0:39:c0:0c:a6: 8d:58:9d:e0:77:cc:e2:1d:bb:dc:c1:13:8e:4c:7d:2c:4c:c3: df:0c:01:09:3a:9b:22:a5:79:cb:eb:59:ed:e2:61:5e:c4:09: a1:65:ca:04:95:72:82:7f:89:98:e0:9c:a9:1a:93:52:42:dd: dc:49:8c:f0 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUQH+HF5gI5w6n2alNQofJaRnMHJIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjg0NloX DTI3MDUwMjAyMzM0NlowMzExMC8GA1UEAxMoMkE0OTRGQUVFNDRGMTM0NDhFNkM0 MzEzNkY4MjUwNTNDRTk3NzAwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKC/SioKUonUjfTbKeh+LDZaOq9lls1fiNFlxvqX/lC+v5KzaQsexilu6fjj D0thw8joTaPkMl9inLB1umzXwmI/vQsjwWqNxS7oUb9oFFw6Zfo2aZnnvQIHSv1e QthVL+Oq2cbw3eTo287BCZK2DIqq2cZEqo8+h4ds5MSTil9zY8+Mg+vWGM/4yog+ oN7ZUe/CJobz8rEYjv0zW1K6YcQ1U08YExaWNsH47VBT0M1gHHEzNYexC3kfCdiN jS7jBLtT4uX9GnqGfzdn5pQtceNQehhR1iwl4PtrHruNhgJEenHdYTA3DlL9ybbw ZOi/y7ihSoNTNz5SJkOLH94kUKECAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCpJT67kTxNEjmxDE2+CUFPOl3AJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YwZGMxMjgzLTFjZTItNDFhNS1hZmU2LWYwYmUzMWU5YjEwZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMGRjMTI4 My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC8yQTQ5NEZBRUU0NEYxMzQ0 OEU2QzQzMTM2RjgyNTA1M0NFOTc3MDA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ7deAwQAZ79eMA0GCSqGSIb3DQEBCwUAA4IBAQBLPtBJU1gSP0P+kGveVBhJ jd4eRt//aiQp+zHdlPOeP7ajPVEIZUMdxKS0KnM/8JxYuHJtn98NErCoc+Sr3BKV q1pzx81kZ7jHcZTttZJU9UCAqRyVESTSjkYOoFUti198RDV76+PSD9y837ruPsE3 urbjfcWJSMs82D+ID+9Q/dye1UF11JbRwc+i3abnsL8ZkGbC4Cacfv5t7MyCK5rd qH1bEEp9W8XpXaltfT8adQJKQzQ2Lzi60fR6p/49K6XYwDnADKaNWJ3gd8ziHbvc wROOTH0sTMPfDAEJOpsipXnL61nt4mFexAmhZcoElXKCf4mY4JypGpNSQt3cSYzw -----END CERTIFICATE-----Generated at Tue May 12 22:03:45 2026 by rpki-client