$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.cer (raw, json) Hash identifier: HDu1G/i1lGS23QdskdMkCLz399Z39ZIgI+spNKG9a3s= Subject key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 70687AF88E476DA2E765C8FA77CC8B2DB4EC16EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:37 +0000 Certificate not after: Sun 02 May 2027 01:06:37 +0000 Subordinate resources: IP: 103.115.164.0/24 IP: 103.121.122.0/24 IP: 103.133.56.0/24 IP: 103.142.21.0/24 IP: 2001:df7:9b00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:68:7a:f8:8e:47:6d:a2:e7:65:c8:fa:77:cc:8b:2d:b4:ec:16:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:01:37 2026 GMT Not After : May 2 01:06:37 2027 GMT Subject: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:0c:a0:4d:20:c7:69:8e:08:ec:c7:f7:0d: e9:36:82:8d:cd:e9:dd:ec:24:25:16:69:ef:63:0c: 5a:df:2a:62:55:57:3e:bc:46:fc:1e:71:39:9d:4d: a3:1f:59:48:db:c4:ce:ac:dd:b2:2b:70:22:52:2d: 6d:a8:0f:85:14:32:53:6e:76:a2:f6:87:3f:37:a1: 31:d0:e6:8f:70:76:0e:9f:6b:99:dd:65:83:f8:96: 43:97:88:ec:5e:58:14:6e:21:4c:d9:b8:df:01:ac: 1a:96:e6:95:b3:54:5c:53:67:44:e9:d4:a8:ca:f7: 6c:c2:fc:b0:95:69:e6:9a:c1:12:72:cc:89:24:b0: 8d:c3:6f:35:5d:a3:69:c0:94:36:c1:80:f5:78:a0: 2d:17:fb:a9:b1:66:9e:2d:d1:5d:51:51:be:9c:37: 64:94:00:1c:6b:51:5b:08:a5:f0:89:0f:9e:88:fc: 9d:6b:fd:4e:8a:8c:bc:8a:6c:66:73:1d:87:32:04: 9d:a3:49:62:62:c3:8d:ee:bc:7f:50:22:b6:91:50: ba:f8:e0:2a:dd:d9:61:c9:ce:ed:93:72:60:8a:3e: 69:52:7e:f7:59:e6:b9:8e:9a:23:c9:ab:c4:14:d1: 2e:1a:40:ec:fc:72:78:0a:42:34:3d:76:8b:1d:9a: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.164.0/24 103.121.122.0/24 103.133.56.0/24 103.142.21.0/24 IPv6: 2001:df7:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 49:8c:a3:fb:11:34:6c:d3:de:40:4c:b6:ee:ec:93:72:08:d0: d6:8f:d6:3d:bc:be:f7:67:8a:df:12:34:cc:72:87:f2:ff:ec: ad:de:21:ef:96:41:86:6c:5c:3f:de:f3:37:2d:60:d8:00:6c: 85:f8:15:43:77:f5:ad:64:9a:51:d7:e3:2e:9e:de:d8:1b:88: 67:58:73:ca:fe:84:d4:18:7f:7c:80:7b:5b:f1:1e:46:73:16: 9a:00:88:19:8d:a4:82:8c:ef:0b:be:a9:98:4a:7d:7b:95:ee: 7b:4d:a9:f5:54:ef:b4:70:3d:8f:a7:62:84:c6:5f:68:e3:22: b1:61:79:bf:c6:95:df:f5:52:aa:82:9b:1a:f3:9f:e0:da:d2: 81:1b:cc:5b:af:1c:77:60:93:17:b1:10:06:93:22:49:b2:b3: 2d:b7:47:0a:02:c3:81:07:ed:6d:d8:9f:d4:4b:7b:2d:28:dd: 32:bf:ef:38:9e:b3:04:20:f2:28:21:8b:c9:99:6e:ed:33:52: 56:35:27:ea:f9:72:eb:39:3b:4b:20:78:83:b4:73:cf:0d:01: 1a:87:4f:e3:29:c6:25:c4:76:a0:e3:ed:3b:54:a9:fd:c3:42: b9:4a:07:5b:d7:37:4d:fa:be:b5:fe:4a:b5:4f:43:d4:ca:71: e1:6d:1d:55 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUcGh6+I5HbaLnZcj6d8yLLbTsFu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDEzN1oX DTI3MDUwMjAxMDYzN1owMzExMC8GA1UEAxMoMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0 MkI3MTQxMUY3MkRBMDMzQzhDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+xDKBNIMdpjgjsx/cN6TaCjc3p3ewkJRZp72MMWt8qYlVXPrxG/B5xOZ1N ox9ZSNvEzqzdsitwIlItbagPhRQyU252ovaHPzehMdDmj3B2Dp9rmd1lg/iWQ5eI 7F5YFG4hTNm43wGsGpbmlbNUXFNnROnUqMr3bML8sJVp5prBEnLMiSSwjcNvNV2j acCUNsGA9XigLRf7qbFmni3RXVFRvpw3ZJQAHGtRWwil8IkPnoj8nWv9ToqMvIps ZnMdhzIEnaNJYmLDje68f1AitpFQuvjgKt3ZYcnO7ZNyYIo+aVJ+91nmuY6aI8mr xBTRLhpA7PxyeApCND12ix2arV8CAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDaTvbjZU51Tl41CtxQR9y2gM8jOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdiMTMwYjc1LTQ1OTMtNDE0MS1hMDZmLTU3YTIyYTAyM2RkMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YjEzMGI3 NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8zNjkzQkRCOEQ5NTM5RDUz OTc4RDQyQjcxNDExRjcyREEwMzNDOENFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAY AwQAZ3OkAwQAZ3l6AwQAZ4U4AwQAZ44VMA8EAgACMAkDBwAgAQ33mwAwDQYJKoZI hvcNAQELBQADggEBAEmMo/sRNGzT3kBMtu7sk3II0NaP1j28vvdnit8SNMxyh/L/ 7K3eIe+WQYZsXD/e8zctYNgAbIX4FUN39a1kmlHX4y6e3tgbiGdYc8r+hNQYf3yA e1vxHkZzFpoAiBmNpIKM7wu+qZhKfXuV7ntNqfVU77RwPY+nYoTGX2jjIrFheb/G ld/1UqqCmxrzn+Da0oEbzFuvHHdgkxexEAaTIkmysy23RwoCw4EH7W3Yn9RLey0o 3TK/7zieswQg8ighi8mZbu0zUlY1J+r5cus5O0sgeIO0c88NARqHT+MpxiXEdqDj 7TtUqf3DQrlKB1vXN036vrX+SrVPQ9TKceFtHVU= -----END CERTIFICATE-----Generated at Tue May 12 22:45:27 2026 by rpki-client