$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer File: 368503D1386A131369164C5912181352537A2D3C.cer (raw, json) Hash identifier: ailaUJd4vsilUrasV7qXsiqCPetB+fX1F9IUR1sTa+4= Subject key identifier: 36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6D4CDCE6DB6BA23BFD40639FF7D113A3E9F81772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:56:18 +0000 Certificate not after: Sun 02 May 2027 00:01:18 +0000 Subordinate resources: IP: 27.50.16.0/20 IP: 43.243.140.0/22 IP: 103.8.63.0/24 IP: 103.22.248.0/22 IP: 119.235.208.0/20 IP: 202.43.176.0/20 IP: 203.176.180.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4c:dc:e6:db:6b:a2:3b:fd:40:63:9f:f7:d1:13:a3:e9:f8:17:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:56:18 2026 GMT Not After : May 2 00:01:18 2027 GMT Subject: CN=368503D1386A131369164C5912181352537A2D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:50:a4:3d:dc:5b:fb:60:80:ee:0b:4b:fe: 1c:59:53:fd:84:0a:bb:36:0f:b3:2e:f8:00:a3:4d: d7:88:49:8f:a0:88:e9:01:0b:fd:d3:2b:b8:29:5e: 7a:d6:51:a4:81:4b:82:56:8b:19:3f:eb:17:dc:f0: 47:17:e5:06:2b:dc:8c:fb:3f:8d:85:e0:83:84:6d: 1e:52:cd:41:3a:3a:3c:ee:2f:4c:a9:cb:7b:e5:4e: 8f:9b:6f:6d:9c:46:19:79:ef:aa:a6:3e:ed:52:37: fd:7c:af:aa:0e:7b:46:54:8f:69:20:e4:f9:8a:68: ad:65:b0:8e:ee:7c:46:ee:81:7f:36:08:8c:ec:6c: ca:c3:87:e5:0c:ca:39:d3:e1:72:ea:d4:f6:9f:75: 3e:2d:ac:2a:ec:86:60:21:92:32:3c:93:7a:0d:66: 7e:6c:fe:fc:eb:00:d4:a2:36:fd:ad:8d:2b:6e:9f: 19:49:df:c3:bc:8c:4e:f1:5d:0c:8a:75:09:dd:d0: 3d:61:3b:3c:e6:91:43:82:bc:fe:19:00:db:06:d2: d2:ed:2f:32:c9:77:e0:4d:a2:18:f7:05:da:78:c4: d9:70:11:11:39:b4:e1:e7:0d:c0:17:be:18:93:ca: 70:7f:7e:89:f0:60:d5:ad:7f:b6:a5:8a:79:ce:44: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.50.16.0/20 43.243.140.0/22 103.8.63.0/24 103.22.248.0/22 119.235.208.0/20 202.43.176.0/20 203.176.180.0/22 Signature Algorithm: sha256WithRSAEncryption 18:2d:75:de:7e:60:76:e8:19:40:50:e6:5d:a9:31:0b:28:5c: b0:e4:42:cb:aa:52:36:6d:be:f7:4b:7f:df:29:b7:1e:da:d8: c2:38:3a:6d:05:87:b3:fb:f4:e4:aa:0b:1e:e8:ea:a1:ab:21: a3:1c:fe:02:68:12:2a:3b:f2:16:8d:d7:59:00:f4:19:d6:1f: 1c:37:78:2b:d7:13:fe:60:29:97:79:fd:8b:fe:ed:42:28:bb: 04:e2:5f:d5:95:05:c1:1d:ef:0b:a3:48:6c:ad:db:92:ab:42: 62:e1:0f:4a:b9:d6:97:a1:ee:2a:c7:84:ab:a7:2c:7f:10:5d: 5a:bc:43:b5:70:c6:75:18:79:87:ba:54:c4:29:5c:24:44:d2: 4b:21:39:ae:75:5a:46:26:ec:23:89:21:dc:6f:b2:98:67:11: fe:2f:c0:23:ac:a9:dd:a8:e5:b2:89:45:c0:ce:b6:c5:15:24: fd:06:19:bb:50:00:e5:31:d8:40:bf:c3:ad:22:03:92:0a:00: d5:04:7d:fa:a9:85:3d:03:e7:a5:34:ac:93:05:8c:46:43:31: f9:f6:ad:09:c1:14:d5:44:ed:fd:c1:64:4a:2d:d2:4c:b4:18: a5:da:ed:7d:b1:32:dd:48:44:af:20:dc:16:7c:df:18:0d:5c: 4e:83:04:ff -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUbUzc5ttrojv9QGOf99ETo+n4F3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTYxOFoX DTI3MDUwMjAwMDExOFowMzExMC8GA1UEAxMoMzY4NTAzRDEzODZBMTMxMzY5MTY0 QzU5MTIxODEzNTI1MzdBMkQzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmpUKQ93Fv7YIDuC0v+HFlT/YQKuzYPsy74AKNN14hJj6CI6QEL/dMruCle etZRpIFLglaLGT/rF9zwRxflBivcjPs/jYXgg4RtHlLNQTo6PO4vTKnLe+VOj5tv bZxGGXnvqqY+7VI3/Xyvqg57RlSPaSDk+YporWWwju58Ru6BfzYIjOxsysOH5QzK OdPhcurU9p91Pi2sKuyGYCGSMjyTeg1mfmz+/OsA1KI2/a2NK26fGUnfw7yMTvFd DIp1Cd3QPWE7POaRQ4K8/hkA2wbS0u0vMsl34E2iGPcF2njE2XARETm04ecNwBe+ GJPKcH9+ifBg1a1/tqWKec5Ezx8CAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDaFA9E4ahMTaRZMWRIYE1JTei08MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE5MjA1ZTdjLWE4ODEtNDg3My05MTg4LWU1MjFiNmFmNTI5Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xOTIwNWU3 Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC8zNjg1MDNEMTM4NkExMzEz NjkxNjRDNTkxMjE4MTM1MjUzN0EyRDNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAq AwQEGzIQAwQCK/OMAwQAZwg/AwQCZxb4AwQEd+vQAwQEyiuwAwQCy7C0MA0GCSqG SIb3DQEBCwUAA4IBAQAYLXXefmB26BlAUOZdqTELKFyw5ELLqlI2bb73S3/fKbce 2tjCODptBYez+/Tkqgse6OqhqyGjHP4CaBIqO/IWjddZAPQZ1h8cN3gr1xP+YCmX ef2L/u1CKLsE4l/VlQXBHe8Lo0hsrduSq0Ji4Q9KudaXoe4qx4Srpyx/EF1avEO1 cMZ1GHmHulTEKVwkRNJLITmudVpGJuwjiSHcb7KYZxH+L8AjrKndqOWyiUXAzrbF FST9Bhm7UADlMdhAv8OtIgOSCgDVBH36qYU9A+elNKyTBYxGQzH59q0JwRTVRO39 wWRKLdJMtBil2u19sTLdSESvINwWfN8YDVxOgwT/ -----END CERTIFICATE-----Generated at Wed May 13 02:37:30 2026 by rpki-client