$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer File: 354106638019F94606F5ABA3A90FEB87A8A7FA76.cer (raw, json) Hash identifier: 05nOSh4SdFaweDOxaepnI7TUsmb7KhNKTb58G2NdKXQ= Subject key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 18EDC0F62B0D38663D223BB919A91B52FC23C91F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:43 +0000 Certificate not after: Sun 02 May 2027 02:09:43 +0000 Subordinate resources: IP: 103.191.148.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ed:c0:f6:2b:0d:38:66:3d:22:3b:b9:19:a9:1b:52:fc:23:c9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:43 2026 GMT Not After : May 2 02:09:43 2027 GMT Subject: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:4e:e7:48:93:66:be:e6:0b:1f:0e:a6:58: c9:5d:76:33:ab:de:c5:0b:48:16:25:ac:7d:b4:25: c0:8f:d9:81:82:17:ff:3c:53:ee:c9:a2:23:58:a7: e0:0d:84:9e:47:d5:1a:e9:bc:fb:06:05:8a:e0:4e: 20:e0:17:ec:47:ea:fe:71:4d:ed:7f:46:6d:aa:83: bc:cf:7a:65:84:b4:0a:46:7f:51:43:f4:d5:f4:c4: 53:ac:3a:c6:fe:a3:41:06:80:47:26:42:bb:96:68: d8:2a:de:35:30:33:6d:dd:ff:80:1a:98:2a:3a:49: 59:26:f4:0b:80:47:7d:ba:c9:e5:98:6b:03:fb:f3: c7:a4:61:a4:bc:2d:a0:15:76:69:9d:75:67:6d:b8: 61:b6:45:49:0e:9c:f7:f4:a3:6b:b3:0c:7a:fe:21: f0:96:51:c1:c2:2c:34:fe:59:f6:d9:8e:98:1b:ab: 7e:ad:08:7c:da:f6:48:56:a7:a5:e9:3c:92:8a:e1: 9f:46:1a:5a:3d:ef:a0:db:8b:86:ac:ca:23:96:21: 04:54:35:ff:e0:a9:87:38:3f:ab:4f:64:8e:71:ef: ec:5e:aa:bd:ee:06:00:b6:fc:31:b9:bf:ce:99:39: 1e:87:26:15:39:3f:30:8a:75:94:43:5f:a1:be:49: 0c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.148.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:73:9e:f4:82:9b:7c:fd:8b:49:c8:2e:2d:71:49:07:d2:aa: c3:b4:56:a1:7a:ab:ac:b4:01:c9:ef:98:21:f6:46:60:1d:ed: 7d:81:38:91:92:eb:7f:12:04:8b:62:1c:2d:5c:27:7f:f1:6b: 3f:79:b9:72:55:14:5f:86:23:18:46:f4:7e:7c:c9:fe:3b:19: 60:85:96:fa:e3:ec:a9:63:83:04:0e:0b:19:5e:18:7c:d0:bf: c9:30:e3:a2:02:01:a2:65:18:6b:dd:20:7a:f9:70:f8:c0:ce: 16:db:7c:bd:24:d9:1d:8e:33:a5:fa:c2:2f:7a:a5:d9:d1:cc: e6:f0:21:cb:8e:49:18:29:33:96:ae:9f:1c:58:7b:c1:30:ab: 0a:f3:ec:16:2a:97:26:2f:14:01:0f:63:20:e4:6d:94:ec:b8: b3:8e:05:89:74:21:6f:54:de:0d:12:3c:0e:78:d0:bf:2c:0a: e5:f2:05:98:8a:0a:54:0a:69:79:6b:9c:7a:28:55:06:7a:c9: 78:ce:fa:e6:b8:52:71:bf:66:bc:e6:b5:99:f0:ab:fa:2e:ec: 01:ae:69:f6:58:19:28:67:d5:23:fb:8e:d8:bb:a9:bb:cb:48: be:fd:b4:c9:d6:36:c5:f6:09:4a:3d:27:ba:0f:10:b9:8b:1d: 13:e3:7a:cb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGO3A9isNOGY9Iju5GakbUvwjyR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQ0M1oX DTI3MDUwMjAyMDk0M1owMzExMC8GA1UEAxMoMzU0MTA2NjM4MDE5Rjk0NjA2RjVB QkEzQTkwRkVCODdBOEE3RkE3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPHTudIk2a+5gsfDqZYyV12M6vexQtIFiWsfbQlwI/ZgYIX/zxT7smiI1in 4A2EnkfVGum8+wYFiuBOIOAX7Efq/nFN7X9GbaqDvM96ZYS0CkZ/UUP01fTEU6w6 xv6jQQaARyZCu5Zo2CreNTAzbd3/gBqYKjpJWSb0C4BHfbrJ5ZhrA/vzx6RhpLwt oBV2aZ11Z224YbZFSQ6c9/Sja7MMev4h8JZRwcIsNP5Z9tmOmBurfq0IfNr2SFan pek8korhn0YaWj3voNuLhqzKI5YhBFQ1/+Cphzg/q09kjnHv7F6qve4GALb8Mbm/ zpk5HocmFTk/MIp1lENfob5JDEUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDVBBmOAGflGBvWro6kP64eop/p2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RkOTA2ZmMwLTQzNjMtNGY0Ni05YjE0LTVjMWFiODI1YTMzNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZDkwNmZj MC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC8zNTQxMDY2MzgwMTlGOTQ2 MDZGNUFCQTNBOTBGRUI4N0E4QTdGQTc2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7+UMA0GCSqGSIb3DQEBCwUAA4IBAQBNc570gpt8/YtJyC4tcUkH0qrDtFah equstAHJ75gh9kZgHe19gTiRkut/EgSLYhwtXCd/8Ws/eblyVRRfhiMYRvR+fMn+ OxlghZb64+ypY4MEDgsZXhh80L/JMOOiAgGiZRhr3SB6+XD4wM4W23y9JNkdjjOl +sIveqXZ0czm8CHLjkkYKTOWrp8cWHvBMKsK8+wWKpcmLxQBD2Mg5G2U7LizjgWJ dCFvVN4NEjwOeNC/LArl8gWYigpUCml5a5x6KFUGesl4zvrmuFJxv2a85rWZ8Kv6 LuwBrmn2WBkoZ9Uj+47Yu6m7y0i+/bTJ1jbF9glKPSe6DxC5ix0T43rL -----END CERTIFICATE-----Generated at Tue May 12 22:03:05 2026 by rpki-client