$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer File: 3559C104797053AE8E5C72BE7726BF44C2878CF1.cer (raw, json) Hash identifier: p81J6JyVkO9wjZEznaq45bZLfcp4LsgBJPpaU9y8NQY= Subject key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D32E0CFB2CBC4C7550CD72CA0801BFDEF6BC81A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:33:47 +0000 Certificate not after: Sun 02 May 2027 00:38:47 +0000 Subordinate resources: IP: 103.111.118.0/23 IP: 2001:df1:1ec0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:32:e0:cf:b2:cb:c4:c7:55:0c:d7:2c:a0:80:1b:fd:ef:6b:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:33:47 2026 GMT Not After : May 2 00:38:47 2027 GMT Subject: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:a6:7e:95:2e:03:8e:d0:f7:85:be:94:e8: a1:1d:80:93:9d:e8:00:c5:1a:d4:79:cc:7a:f1:70: 37:a7:68:98:49:71:83:13:cd:12:7a:f3:91:10:db: e8:17:51:c0:a8:7d:94:8d:d5:42:e9:e1:00:2a:67: fc:73:3f:7f:05:bf:29:db:fc:f1:f8:ae:82:3c:aa: 53:73:17:ac:70:8a:0c:10:10:e1:96:dc:f5:0d:fa: e2:c0:98:d3:ff:1b:cd:16:7b:a7:f3:7d:9f:ae:1b: be:0d:ad:2a:5a:05:a9:6e:23:20:70:1d:6d:6c:a2: 76:df:4c:f3:e2:e5:c4:2d:9a:9f:6b:c2:dd:52:94: 49:b7:60:d3:55:64:7a:07:57:a2:23:a1:eb:c2:2d: 80:b2:ee:54:4f:db:37:b0:b3:93:ab:19:68:be:42: 64:05:d6:77:20:69:18:1c:91:e8:95:a1:27:df:47: da:97:b4:6d:ab:56:2d:3d:ca:e6:91:c3:ab:54:4f: 48:f8:c5:81:c8:eb:1b:0a:05:cc:bd:15:3e:37:ba: 33:83:f7:67:b0:05:39:1d:94:21:c7:c5:8c:54:57: ef:6b:f5:84:f9:9a:4f:2a:22:ff:95:ed:14:e3:08: c9:ee:ee:c9:56:6f:ba:65:a3:92:08:d7:f1:34:8f: c5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.118.0/23 IPv6: 2001:df1:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 4a:01:6b:b1:08:9d:e8:38:84:0a:27:30:26:29:25:93:f9:ca: 32:61:8c:a3:68:7e:cf:57:33:eb:0f:c6:d2:17:1a:16:1d:49: be:3a:cb:ef:42:ac:8a:69:d0:4d:ba:96:a4:9c:69:6a:13:5b: 19:88:88:28:8e:8c:ff:92:41:c8:b8:41:37:72:5c:82:b2:b8: 51:9e:d1:f8:9b:64:30:4a:e2:f8:5b:34:04:45:db:b2:de:ff: 82:02:43:8a:c1:3b:fb:ec:bb:d8:43:e0:d4:fa:a5:61:c1:f2: 8f:10:67:bd:e8:27:ef:73:c0:f6:91:97:68:72:26:e4:5c:4b: 34:27:8c:be:44:e7:1e:ec:86:78:41:a8:06:c7:48:e4:ee:3a: 65:5e:02:a2:48:85:5f:50:dd:66:42:b8:32:4f:10:e6:0b:7a: e6:f5:c5:5a:dc:97:fe:4e:86:3a:b1:43:55:05:2c:bb:3d:23: 47:09:c1:22:bd:de:ca:b9:09:83:7d:e0:90:9a:86:10:07:d3: a4:46:b1:47:2b:a9:91:c3:46:55:dc:76:80:c3:d2:d6:f9:1c: 90:e1:25:0f:37:aa:92:1e:03:c6:56:1d:2c:d8:71:12:15:0b: c2:9d:16:cf:1c:b2:4c:f2:d1:29:6f:cd:49:bf:15:f9:81:39: 3e:5c:39:9d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULTLgz7LLxMdVDNcsoIAb/e9ryBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzM0N1oX DTI3MDUwMjAwMzg0N1owMzExMC8GA1UEAxMoMzU1OUMxMDQ3OTcwNTNBRThFNUM3 MkJFNzcyNkJGNDRDMjg3OENGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZEpn6VLgOO0PeFvpTooR2Ak53oAMUa1HnMevFwN6domElxgxPNEnrzkRDb 6BdRwKh9lI3VQunhACpn/HM/fwW/Kdv88fiugjyqU3MXrHCKDBAQ4Zbc9Q364sCY 0/8bzRZ7p/N9n64bvg2tKloFqW4jIHAdbWyidt9M8+LlxC2an2vC3VKUSbdg01Vk egdXoiOh68ItgLLuVE/bN7Czk6sZaL5CZAXWdyBpGByR6JWhJ99H2pe0batWLT3K 5pHDq1RPSPjFgcjrGwoFzL0VPje6M4P3Z7AFOR2UIcfFjFRX72v1hPmaTyoi/5Xt FOMIye7uyVZvumWjkgjX8TSPxX8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDVZwQR5cFOujlxyvncmv0TCh4zxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUxZjE2YzQ1LTk2ZmItNGM5Mi04MDRlLTY0YjBiZjI4MDMwMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MWYxNmM0 NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC8zNTU5QzEwNDc5NzA1M0FF OEU1QzcyQkU3NzI2QkY0NEMyODc4Q0YxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ292MA8EAgACMAkDBwAgAQ3xHsAwDQYJKoZIhvcNAQELBQADggEBAEoBa7EI neg4hAonMCYpJZP5yjJhjKNofs9XM+sPxtIXGhYdSb46y+9CrIpp0E26lqScaWoT WxmIiCiOjP+SQci4QTdyXIKyuFGe0fibZDBK4vhbNARF27Le/4ICQ4rBO/vsu9hD 4NT6pWHB8o8QZ73oJ+9zwPaRl2hyJuRcSzQnjL5E5x7shnhBqAbHSOTuOmVeAqJI hV9Q3WZCuDJPEOYLeub1xVrcl/5OhjqxQ1UFLLs9I0cJwSK93sq5CYN94JCahhAH 06RGsUcrqZHDRlXcdoDD0tb5HJDhJQ83qpIeA8ZWHSzYcRIVC8KdFs8cskzy0Slv zUm/FfmBOT5cOZ0= -----END CERTIFICATE-----Generated at Tue May 12 22:02:59 2026 by rpki-client