$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer File: 34A5DE28FDBC6F27C998277F953439F66D10A75E.cer (raw, json) Hash identifier: IV4yl6jAHVNvyOTfV/1hKU5trcurRTusA5UHaN1yB/w= Subject key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7B33E94AA8F7DCF9F83CF8B648911D4A64EDAA13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:57 +0000 Certificate not after: Sun 02 May 2027 01:41:57 +0000 Subordinate resources: IP: 103.142.90.0/23 IP: 2001:df1:3a80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:33:e9:4a:a8:f7:dc:f9:f8:3c:f8:b6:48:91:1d:4a:64:ed:aa:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:36:57 2026 GMT Not After : May 2 01:41:57 2027 GMT Subject: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:79:c5:64:e4:a0:51:3b:e4:20:8b:83:b8: ba:5a:52:be:92:9f:30:97:36:b5:e7:39:dd:63:03: 6e:08:13:85:27:47:3a:93:45:2d:41:07:c9:22:dd: 96:f1:65:a8:de:2a:38:47:4f:f8:cd:8e:70:7e:07: aa:ba:c3:3c:66:31:d7:08:e7:02:51:4a:b0:3a:32: 48:bc:66:30:fd:08:52:0a:bd:c4:6e:27:20:a8:e3: 9e:e6:80:08:3a:0d:48:b1:0b:61:6f:c0:2e:59:51: 14:e3:e1:ab:b9:52:07:cf:2e:c9:eb:29:6c:7d:b5: 18:97:31:a1:63:5e:32:07:2f:cf:04:ba:ae:14:50: 7e:55:19:8c:f4:a3:2f:e7:00:84:77:6e:c4:bb:35: 36:c5:a1:d0:23:db:be:4c:4c:58:80:d2:43:3e:33: 50:1f:73:03:ca:bc:12:88:34:36:00:93:5b:55:a2: f6:8d:9f:bd:c9:2f:ee:39:bf:a0:a0:68:27:ba:42: 56:7e:ac:62:f2:28:4c:16:8e:bb:3f:c7:4a:60:6f: 1c:c4:b6:9b:eb:87:8c:49:93:81:d9:fe:bb:29:3e: 54:a1:c2:96:3a:c6:fb:fa:8b:fb:2f:8b:37:51:f9: dd:fe:97:e1:6b:a0:ab:31:75:86:f9:bc:2a:8d:38: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.90.0/23 IPv6: 2001:df1:3a80::/48 Signature Algorithm: sha256WithRSAEncryption 1c:2f:18:e0:1b:35:b3:b2:37:1c:00:b1:bb:a4:98:3c:0a:0d: 48:ac:e3:75:26:df:71:e0:58:86:a5:4f:ab:aa:84:1b:0a:33: 8d:c8:98:bc:70:43:3c:f4:10:03:50:e3:c0:68:ab:c8:1a:fe: e2:43:8f:88:75:4c:75:db:93:ac:2f:5c:c5:64:b7:14:11:b1: e1:18:79:cd:86:45:60:3f:c4:3a:ca:4b:ba:ea:28:e4:d7:df: ef:2a:a4:c6:5c:3c:ca:b8:b0:77:e5:83:9b:6a:1d:ea:35:99: ac:63:31:0b:26:6b:4e:78:f5:5e:9a:d4:67:fa:bb:aa:00:f6: af:d5:45:9f:b2:c0:ce:12:53:d6:ce:69:95:04:9d:de:f6:cc: df:ba:84:28:e3:86:3a:50:eb:75:7c:6a:d8:e0:c0:35:ea:36: ff:ac:98:f1:2d:b3:25:30:de:61:04:f5:79:18:c3:b9:6e:f2: 8f:6c:fc:0c:29:50:e6:e9:e6:b5:d9:31:e5:61:75:c1:a1:ac: 2c:e1:d9:b6:a6:f7:85:76:9d:19:f8:20:6a:75:fa:f4:75:3c: 15:26:23:43:28:5e:e6:32:3c:ce:c1:cb:8a:d1:e8:1e:c6:49: b9:df:9a:af:8a:35:81:bf:7e:03:cb:e5:2b:ad:e1:a5:30:7e: 9a:75:eb:8b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUezPpSqj33Pn4PPi2SJEdSmTtqhMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzY1N1oX DTI3MDUwMjAxNDE1N1owMzExMC8GA1UEAxMoMzRBNURFMjhGREJDNkYyN0M5OTgy NzdGOTUzNDM5RjY2RDEwQTc1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO12ecVk5KBRO+Qgi4O4ulpSvpKfMJc2tec53WMDbggThSdHOpNFLUEHySLd lvFlqN4qOEdP+M2OcH4HqrrDPGYx1wjnAlFKsDoySLxmMP0IUgq9xG4nIKjjnuaA CDoNSLELYW/ALllRFOPhq7lSB88uyespbH21GJcxoWNeMgcvzwS6rhRQflUZjPSj L+cAhHduxLs1NsWh0CPbvkxMWIDSQz4zUB9zA8q8Eog0NgCTW1Wi9o2fvckv7jm/ oKBoJ7pCVn6sYvIoTBaOuz/HSmBvHMS2m+uHjEmTgdn+uyk+VKHCljrG+/qL+y+L N1H53f6X4WugqzF1hvm8Ko04cd8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDSl3ij9vG8nyZgnf5U0OfZtEKdeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FlOTIxOTE3LTEzYWYtNDQwMy05N2FiLTlhZGFmNTEwNGMxMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZTkyMTkx Ny0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC8zNEE1REUyOEZEQkM2RjI3 Qzk5ODI3N0Y5NTM0MzlGNjZEMTBBNzVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ45aMA8EAgACMAkDBwAgAQ3xOoAwDQYJKoZIhvcNAQELBQADggEBABwvGOAb NbOyNxwAsbukmDwKDUis43Um33HgWIalT6uqhBsKM43ImLxwQzz0EANQ48Boq8ga /uJDj4h1THXbk6wvXMVktxQRseEYec2GRWA/xDrKS7rqKOTX3+8qpMZcPMq4sHfl g5tqHeo1maxjMQsma0549V6a1Gf6u6oA9q/VRZ+ywM4SU9bOaZUEnd72zN+6hCjj hjpQ63V8atjgwDXqNv+smPEtsyUw3mEE9XkYw7lu8o9s/AwpUObp5rXZMeVhdcGh rCzh2bam94V2nRn4IGp1+vR1PBUmI0MoXuYyPM7By4rR6B7GSbnfmq+KNYG/fgPL 5Sut4aUwfpp164s= -----END CERTIFICATE-----Generated at Tue May 12 22:15:45 2026 by rpki-client