$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer (raw, json) Hash identifier: HEnBC2SqKR5+TLiQkrFENetaY+B5zMA/WOoDgSdGjdU= Subject key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 408AA981BB078239A6C5F6A98321150039E1541B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:17:02 +0000 Certificate not after: Sun 02 May 2027 01:22:02 +0000 Subordinate resources: IP: 103.155.24.0/23 IP: 2406:62c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8a:a9:81:bb:07:82:39:a6:c5:f6:a9:83:21:15:00:39:e1:54:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:17:02 2026 GMT Not After : May 2 01:22:02 2027 GMT Subject: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:12:db:ee:24:a7:73:35:6e:01:d3:7d:cc: ec:e5:d8:bb:7f:e2:a8:78:cf:ef:e8:23:41:9e:13: d6:18:93:69:64:ff:01:fd:a5:14:0f:53:80:87:41: 40:e0:0e:9b:a9:ae:75:85:ed:ed:fb:67:9f:63:bf: 55:5e:e6:c2:9c:8a:e2:52:44:9f:43:93:5a:9f:e5: ea:bf:83:b4:7b:42:af:4c:04:a2:17:c2:e9:77:b1: 59:51:d5:11:7a:f4:fe:25:ff:5f:e7:93:73:fe:57: 3b:ea:c3:2b:a7:b1:b0:e8:5b:cc:d7:b2:df:29:b0: 09:b5:73:12:b8:6c:c2:6f:00:90:fb:47:7e:61:34: 80:fa:0e:d9:8c:c6:21:5d:2d:18:2b:5d:ce:02:ae: 94:ad:02:cc:b2:e1:73:e7:5a:3b:dc:bb:9a:55:75: c3:cd:e9:a6:0e:cc:b2:a7:91:e8:7f:71:41:e3:e9: ad:f0:e4:58:59:8e:37:23:e5:11:c7:93:a1:3e:72: 31:c8:7c:4e:8c:ba:5f:6e:be:1a:98:4d:fc:31:4f: f7:2d:a9:33:74:63:5f:4f:2b:e6:60:fa:d0:53:c6: d2:fd:2d:07:c7:be:5d:ba:d8:87:a2:21:c5:6c:29: c4:17:53:81:d5:83:e2:71:cf:8a:cb:72:f3:4d:3e: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.24.0/23 IPv6: 2406:62c0::/32 Signature Algorithm: sha256WithRSAEncryption a0:b9:2d:e2:a0:f6:1c:b1:ba:84:5a:95:7a:54:32:4e:a0:8f: ca:9e:af:ac:8e:3c:fe:96:9d:2e:5a:37:b6:06:78:dc:0c:ce: 66:e5:6d:29:bc:da:f5:8b:71:46:06:3c:92:cb:cb:8e:bf:52: 72:d9:ff:c7:65:d2:47:c9:99:f3:a6:2a:97:2e:e1:34:a6:6e: f4:8e:a8:e0:d8:d6:82:b9:30:c4:76:fa:15:48:c1:68:f8:89: c8:33:11:ed:3a:85:b1:a9:f3:a8:78:ce:51:0c:e0:7f:70:1f: ea:08:14:63:cd:8f:01:af:c4:69:db:7e:84:ec:53:de:5d:8c: c6:5d:02:67:ca:bf:a9:dc:6f:2b:05:00:e9:3e:96:d7:b5:32: 87:34:c7:0c:d0:dc:97:9e:1f:fe:73:5b:d8:8d:50:b0:b0:77: 14:a0:35:7f:44:f8:fe:91:f6:bf:86:36:de:4f:00:b0:72:aa: f6:f5:43:1a:28:60:e4:03:f0:39:2a:e1:3e:31:61:60:7d:c7: 8e:b9:5d:92:0c:b4:c1:a9:f3:4f:bc:83:68:f9:08:8c:b3:22: 6b:6c:18:3e:c5:98:d3:b2:a0:13:a7:e4:7b:9c:aa:2f:dd:b3: e6:ed:00:38:64:48:e4:a1:22:9a:fb:a8:d8:fc:4b:ef:be:ad: b5:73:30:18 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUQIqpgbsHgjmmxfapgyEVADnhVBswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTcwMloX DTI3MDUwMjAxMjIwMlowMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZF MzBGQjNFMEU0RTEyRkVFM0ZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/gEtvuJKdzNW4B033M7OXYu3/iqHjP7+gjQZ4T1hiTaWT/Af2lFA9TgIdB QOAOm6mudYXt7ftnn2O/VV7mwpyK4lJEn0OTWp/l6r+DtHtCr0wEohfC6XexWVHV EXr0/iX/X+eTc/5XO+rDK6exsOhbzNey3ymwCbVzErhswm8AkPtHfmE0gPoO2YzG IV0tGCtdzgKulK0CzLLhc+daO9y7mlV1w83ppg7MsqeR6H9xQePprfDkWFmONyPl EceToT5yMch8Toy6X26+GphN/DFP9y2pM3RjX08r5mD60FPG0v0tB8e+XbrYh6Ih xWwpxBdTgdWD4nHPisty800+fCECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDEU/qKCBhS26L/jD7Pg5OEv7j+iMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkwNzYwOGNlLWMzZjgtNDRlYi1hZWU3LWI3ODRhZTIwYzljNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MDc2MDhj ZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC8zMTE0RkVBMjgyMDYxNEI2 RThCRkUzMEZCM0UwRTRFMTJGRUUzRkEyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5sYMA0EAgACMAcDBQAkBmLAMA0GCSqGSIb3DQEBCwUAA4IBAQCguS3ioPYc sbqEWpV6VDJOoI/Knq+sjjz+lp0uWje2BnjcDM5m5W0pvNr1i3FGBjySy8uOv1Jy 2f/HZdJHyZnzpiqXLuE0pm70jqjg2NaCuTDEdvoVSMFo+InIMxHtOoWxqfOoeM5R DOB/cB/qCBRjzY8Br8Rp236E7FPeXYzGXQJnyr+p3G8rBQDpPpbXtTKHNMcM0NyX nh/+c1vYjVCwsHcUoDV/RPj+kfa/hjbeTwCwcqr29UMaKGDkA/A5KuE+MWFgfceO uV2SDLTBqfNPvINo+QiMsyJrbBg+xZjTsqATp+R7nKov3bPm7QA4ZEjkoSKa+6jY /Evvvq21czAY -----END CERTIFICATE-----Generated at Tue May 12 22:16:47 2026 by rpki-client