$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer File: 309D66BED7C5AAB839669782F24FE6D817B8209A.cer (raw, json) Hash identifier: nvUK9Kbs2n88suWjMoBdk2fXcPuzqK5R4g7vWoylY44= Subject key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A6CB1B7AB556F7863D552FDFB9555B0C5F9F6C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:29:34 +0000 Certificate not after: Sun 02 May 2027 01:34:34 +0000 Subordinate resources: IP: 103.116.110.0/24 IP: 2001:df5:4f00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6c:b1:b7:ab:55:6f:78:63:d5:52:fd:fb:95:55:b0:c5:f9:f6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:29:34 2026 GMT Not After : May 2 01:34:34 2027 GMT Subject: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:64:97:34:e8:99:31:65:cc:b1:61:70:8c: 3d:ca:13:7a:af:a5:90:4e:b8:a7:72:89:0e:ce:68: 46:eb:aa:23:3c:a9:f6:28:6d:0c:38:88:2b:23:bd: b0:38:c7:cc:c0:9e:95:51:82:5d:3d:a4:8c:94:60: dc:85:37:01:3a:9c:64:60:0e:67:00:24:ab:e4:db: 66:98:ba:8c:88:2e:cf:fc:4f:20:0f:61:1f:98:83: eb:73:35:9d:00:68:58:54:c9:fb:3b:fc:d5:9d:05: da:d0:e5:3b:f5:a7:0a:84:cd:c9:16:c7:55:ec:ae: a0:1d:b5:2e:90:63:a6:8c:cf:a4:f9:b2:26:76:09: 2f:72:ec:a4:1e:ca:cd:7a:21:f2:f7:60:0e:7b:16: bb:e0:da:bf:57:7f:eb:ef:92:7e:8f:6f:36:f4:25: 1e:76:80:b9:ea:36:a2:48:55:3d:1f:1f:2a:d8:4d: 01:29:e8:7a:51:0a:43:a4:80:66:4a:ea:2f:12:c9: 61:75:67:1d:3c:5f:dd:f4:e3:9f:f6:7b:cb:d9:13: 09:5a:08:fd:c5:7d:db:06:f2:ba:0c:ef:41:a2:9b: 8e:d6:f3:84:f3:29:86:b6:46:26:ea:8d:46:9a:b9: 06:e2:c5:bb:3c:99:7c:43:07:0f:81:eb:2c:96:96: 82:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.110.0/24 IPv6: 2001:df5:4f00::/48 Signature Algorithm: sha256WithRSAEncryption 72:54:35:f2:b9:d3:20:91:7f:46:ee:09:f6:48:d2:09:1e:c1: 9e:3f:08:41:55:12:1b:43:bc:5b:f0:83:9d:aa:d8:35:5c:2b: 8b:88:36:a4:81:a6:fc:71:ee:ee:7e:e5:bf:ec:cc:ba:85:ac: 64:ee:80:9a:2a:41:b4:aa:40:26:6c:4d:ea:ba:29:c8:e0:fc: ab:d1:fa:fb:b6:83:83:d8:74:07:56:f2:a9:86:e9:ef:91:f7: 94:08:cb:b8:c2:ca:85:d9:59:b3:ec:48:18:49:91:b0:6f:82: 7e:9d:07:43:02:25:58:cb:91:2e:3f:ec:28:08:db:1d:f1:70: 8c:c9:eb:92:29:22:38:ba:23:4f:9f:19:83:c9:34:78:b6:71: d0:ef:e3:c2:a2:17:6f:a9:0e:59:a3:a8:66:36:53:6e:45:cb: ae:be:ac:83:fa:8d:f8:c8:c5:93:a2:aa:a0:c1:7f:c4:34:fe: 88:25:23:2c:64:2b:a9:cb:19:10:33:ad:83:a6:9a:fd:fa:4b: 72:01:f8:98:4f:9c:73:33:b1:31:d9:ec:cf:87:c4:05:a4:29: a1:61:53:94:50:8f:82:09:a9:4e:c3:55:60:fd:f9:12:65:fd: f8:71:8f:8b:03:58:0a:ec:ab:0d:78:23:fd:75:84:61:85:ec: ac:a7:b8:ee -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUamyxt6tVb3hj1VL9+5VVsMX59sMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjkzNFoX DTI3MDUwMjAxMzQzNFowMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5 NzgyRjI0RkU2RDgxN0I4MjA5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUfZJc06JkxZcyxYXCMPcoTeq+lkE64p3KJDs5oRuuqIzyp9ihtDDiIKyO9 sDjHzMCelVGCXT2kjJRg3IU3ATqcZGAOZwAkq+TbZpi6jIguz/xPIA9hH5iD63M1 nQBoWFTJ+zv81Z0F2tDlO/WnCoTNyRbHVeyuoB21LpBjpozPpPmyJnYJL3LspB7K zXoh8vdgDnsWu+Dav1d/6++Sfo9vNvQlHnaAueo2okhVPR8fKthNASnoelEKQ6SA ZkrqLxLJYXVnHTxf3fTjn/Z7y9kTCVoI/cV92wbyugzvQaKbjtbzhPMphrZGJuqN Rpq5BuLFuzyZfEMHD4HrLJaWgpsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDCdZr7Xxaq4OWaXgvJP5tgXuCCaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E0MGZjY2IyLWNlMWMtNDg2Mi04ZWRmLThjMzUyNzMwMTFjMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNDBmY2Ni Mi1jZTFjLTQ4NjItOGVkZi04YzM1MjczMDExYzIvMC8zMDlENjZCRUQ3QzVBQUI4 Mzk2Njk3ODJGMjRGRTZEODE3QjgyMDlBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3RuMA8EAgACMAkDBwAgAQ31TwAwDQYJKoZIhvcNAQELBQADggEBAHJUNfK5 0yCRf0buCfZI0gkewZ4/CEFVEhtDvFvwg52q2DVcK4uINqSBpvxx7u5+5b/szLqF rGTugJoqQbSqQCZsTeq6Kcjg/KvR+vu2g4PYdAdW8qmG6e+R95QIy7jCyoXZWbPs SBhJkbBvgn6dB0MCJVjLkS4/7CgI2x3xcIzJ65IpIji6I0+fGYPJNHi2cdDv48Ki F2+pDlmjqGY2U25Fy66+rIP6jfjIxZOiqqDBf8Q0/oglIyxkK6nLGRAzrYOmmv36 S3IB+JhPnHMzsTHZ7M+HxAWkKaFhU5RQj4IJqU7DVWD9+RJl/fhxj4sDWArsqw14 I/11hGGF7KynuO4= -----END CERTIFICATE-----Generated at Tue May 12 22:02:35 2026 by rpki-client