$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer File: 2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.cer (raw, json) Hash identifier: QRYJLfINClXP7LaSnr2RMfsLRyTWfC6fmuMxc9R9mME= Subject key identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3F61D1164BF578C2EDF9DFA16C446810D6648C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:20 +0000 Certificate not after: Sun 02 May 2027 02:07:20 +0000 Subordinate resources: IP: 103.131.107.0/24 IP: 2001:df7:b00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:61:d1:16:4b:f5:78:c2:ed:f9:df:a1:6c:44:68:10:d6:64:8c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:20 2026 GMT Not After : May 2 02:07:20 2027 GMT Subject: CN=2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:46:3f:f3:2e:7d:53:3d:9b:31:6a:90:e2: a0:e0:68:26:0c:ce:76:cc:b3:88:92:44:ce:d6:21: b3:7b:96:69:0b:fd:0b:bb:d4:40:2a:92:68:84:d2: aa:bb:00:4a:b7:e1:04:81:62:b4:7f:7b:a9:bd:9e: dc:e5:ec:14:7f:8d:2a:c9:68:96:dc:15:01:1e:ed: 7b:9f:3e:4d:4b:40:03:2d:83:a1:55:f5:5b:5f:d9: dd:ce:bf:3e:32:f0:58:a2:f8:13:a1:4c:e5:5d:3d: 4e:c6:82:69:24:e5:f3:ff:a9:98:7d:f8:a3:00:4c: 11:7c:5c:c5:16:b4:fa:05:85:87:d5:f1:0f:27:af: 64:45:99:97:34:c7:6f:15:98:de:f4:8e:ce:40:6a: b3:d8:6c:25:e6:50:c6:1b:ba:84:08:a5:85:b6:0b: d7:71:2b:64:da:bd:e0:70:ce:82:ec:f0:1c:ff:6c: 59:79:35:4d:0c:6a:5b:a2:6c:31:ac:02:a4:40:9e: 60:fa:b8:2f:95:84:0e:c4:ae:db:ac:f1:82:00:11: c2:41:cb:8d:20:b3:58:32:a9:78:a6:66:5e:4c:9d: 66:0f:c8:ea:af:6f:58:ac:37:b7:df:40:0f:1b:bf: 5b:a6:f7:f5:18:70:27:52:16:1a:8d:55:5d:8b:25: 03:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:E1:4A:BB:D5:16:1B:A0:CA:DB:3C:40:C1:F9:DF:CB:C9:CF:34:70 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/2AE14ABBD5161BA0CADB3C40C1F9DFCBC9CF3470.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.107.0/24 IPv6: 2001:df7:b00::/48 Signature Algorithm: sha256WithRSAEncryption 6d:1f:64:ad:c6:08:d2:f0:ba:3d:39:2d:3a:c0:2d:22:53:60: d4:aa:12:dd:bc:e6:fe:96:d3:c5:4b:51:7b:01:b7:ec:c2:eb: 34:77:d4:a4:5b:c8:07:83:f5:b0:e1:58:ea:d7:4c:b0:be:68: 57:fb:7e:06:1d:36:00:c2:2a:0c:36:b2:56:40:17:3e:a0:d9: 93:9a:cd:c5:5c:35:53:53:58:58:aa:be:9e:2e:0c:82:20:b2: 1b:df:ff:38:1a:cc:91:66:68:4e:ea:a6:d6:78:d5:06:7f:17: f2:1c:f6:28:0c:ef:e1:68:6b:70:f1:fb:f5:6a:97:44:6a:94: 4d:43:31:19:f4:b2:af:67:7f:8c:49:ea:7f:8d:41:43:b5:65: 5f:35:05:80:bd:a6:3b:6f:32:83:67:b1:1b:18:87:fd:97:0e: a9:df:f0:a1:57:26:4b:6a:61:13:7c:fe:80:a5:b9:b7:1b:85: cc:0d:e4:94:c5:d8:62:39:d3:e8:54:f7:9e:d0:e1:70:b2:51: 3b:fb:3a:a6:33:fd:0a:c4:15:50:40:61:9f:02:77:d2:b9:6f: 64:4e:8d:24:e6:13:c6:3c:7a:60:f4:a0:59:8d:de:1a:28:b2: 80:93:91:0e:87:cc:24:14:d0:d2:8d:2e:72:d7:06:75:75:15: 72:89:d9:fe -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUP2HRFkv1eMLt+d+hbERoENZkjCswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDIyMFoX DTI3MDUwMjAyMDcyMFowMzExMC8GA1UEAxMoMkFFMTRBQkJENTE2MUJBMENBREIz QzQwQzFGOURGQ0JDOUNGMzQ3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLGRj/zLn1TPZsxapDioOBoJgzOdsyziJJEztYhs3uWaQv9C7vUQCqSaITS qrsASrfhBIFitH97qb2e3OXsFH+NKsloltwVAR7te58+TUtAAy2DoVX1W1/Z3c6/ PjLwWKL4E6FM5V09TsaCaSTl8/+pmH34owBMEXxcxRa0+gWFh9XxDyevZEWZlzTH bxWY3vSOzkBqs9hsJeZQxhu6hAilhbYL13ErZNq94HDOguzwHP9sWXk1TQxqW6Js MawCpECeYPq4L5WEDsSu26zxggARwkHLjSCzWDKpeKZmXkydZg/I6q9vWKw3t99A Dxu/W6b39RhwJ1IWGo1VXYslA58CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCrhSrvVFhugyts8QMH538vJzzRwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q5MjQzOTUwLTNmZGYtNDlhYi1iZmRjLWY1ODY0NTM3MDRjNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOTI0Mzk1 MC0zZmRmLTQ5YWItYmZkYy1mNTg2NDUzNzA0YzYvMC8yQUUxNEFCQkQ1MTYxQkEw Q0FEQjNDNDBDMUY5REZDQkM5Q0YzNDcwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ4NrMA8EAgACMAkDBwAgAQ33CwAwDQYJKoZIhvcNAQELBQADggEBAG0fZK3G CNLwuj05LTrALSJTYNSqEt285v6W08VLUXsBt+zC6zR31KRbyAeD9bDhWOrXTLC+ aFf7fgYdNgDCKgw2slZAFz6g2ZOazcVcNVNTWFiqvp4uDIIgshvf/zgazJFmaE7q ptZ41QZ/F/Ic9igM7+Foa3Dx+/Vql0RqlE1DMRn0sq9nf4xJ6n+NQUO1ZV81BYC9 pjtvMoNnsRsYh/2XDqnf8KFXJktqYRN8/oClubcbhcwN5JTF2GI50+hU957Q4XCy UTv7OqYz/QrEFVBAYZ8Cd9K5b2ROjSTmE8Y8emD0oFmN3hoosoCTkQ6HzCQU0NKN LnLXBnV1FXKJ2f4= -----END CERTIFICATE-----Generated at Tue May 12 22:10:38 2026 by rpki-client