$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer File: 36987F1D265142449AF11F138E84E3AE2398BB71.cer (raw, json) Hash identifier: +x6jPJXa8ci+Qgx2IHGaX3m/F0L+ChNMXt1dMqKTeg0= Subject key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 52B78188B7F2539DA4328612E1448C7D9C96B9E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:22 +0000 Certificate not after: Sun 02 May 2027 02:03:22 +0000 Subordinate resources: IP: 103.112.223.0/24 IP: 2001:df4:bd00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b7:81:88:b7:f2:53:9d:a4:32:86:12:e1:44:8c:7d:9c:96:b9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:22 2026 GMT Not After : May 2 02:03:22 2027 GMT Subject: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:f4:42:a1:f0:b2:fa:3d:0a:ed:20:f6:be: 6f:0c:41:62:c6:2b:33:1c:64:36:45:bf:be:5e:4e: 1e:1d:db:2e:88:5a:1e:4a:c1:42:34:ce:90:d8:8a: 50:d7:b0:1d:4c:9f:32:84:14:4e:c3:bb:79:00:b8: cb:20:21:e8:72:a2:a6:f4:20:62:c3:0f:a0:60:ec: b4:2a:5f:63:b1:d7:c7:68:20:b4:d8:6a:60:87:84: b4:2c:d2:a5:6a:a6:1a:98:32:36:08:08:b4:c6:e9: 0f:c3:60:d7:7f:8c:89:f3:40:db:d9:7f:66:5c:79: 86:20:4c:7f:2d:f8:a4:1c:ad:c3:b4:b3:f5:eb:30: fc:35:77:7f:87:f2:22:43:04:ce:ec:7f:2a:2e:af: 25:8a:e1:6f:ad:cb:de:98:f6:29:9f:0b:1e:61:f3: 95:4b:35:9f:ee:dc:d1:e0:b0:51:9a:90:95:73:5f: 49:53:7c:72:c0:3b:f0:d3:a9:e7:f6:e3:0c:c8:b6: 93:62:55:a9:f8:29:2d:7f:b8:6e:f0:92:26:88:d8: ba:de:32:d7:cd:d5:76:b0:87:08:f9:51:8a:83:ed: 60:4c:ab:5f:68:24:7f:c7:87:16:72:96:40:19:a6: 9e:67:34:61:4d:dc:d1:b5:e7:47:1d:87:64:8c:e1: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.223.0/24 IPv6: 2001:df4:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 30:1d:04:2b:2d:a4:6b:fe:41:9e:06:9d:a7:cd:30:9a:e6:d4: 8e:12:bb:bc:10:f4:69:97:8a:b9:a7:94:60:76:7d:1a:55:28: 59:2d:3e:10:36:ea:5f:d0:4f:52:59:73:79:46:fc:f3:6b:f6: 22:6e:93:ad:de:50:68:5a:0e:1d:51:f6:50:33:40:b0:85:a4: 3d:30:59:c9:e2:ab:8f:29:e5:c6:ce:42:c7:15:d0:4c:fa:e9: 2d:0d:4c:08:f3:83:91:8b:94:b8:66:42:c8:01:74:1d:f7:2c: 9d:65:b4:af:56:47:a1:c4:5a:83:83:94:0b:e3:5b:dc:ee:76: bd:57:db:48:05:03:96:80:3d:ed:1e:c1:76:49:5e:85:02:9d: 3b:1b:04:2d:ee:bf:f0:66:01:a5:b4:ce:ee:f7:77:62:ef:32: bb:fe:9c:16:5b:b5:be:3e:5c:3a:6a:2a:1a:f8:70:83:d8:19: ab:08:c2:d5:c9:a8:82:de:38:d2:83:d2:3c:0c:8d:87:13:83: 87:32:e4:ee:ee:08:bb:db:fe:ff:e4:06:9a:06:9c:84:b8:c3: 0a:03:3a:3a:1e:cb:a9:d5:fb:6a:9d:b8:3c:6e:9a:1e:4e:2e: 4e:eb:43:9d:f8:c9:9e:08:fa:8e:89:19:aa:32:19:38:8f:0e: 72:0d:17:1f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUUreBiLfyU52kMoYS4USMfZyWuecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgyMloX DTI3MDUwMjAyMDMyMlowMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjEx RjEzOEU4NEUzQUUyMzk4QkI3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC99EKh8LL6PQrtIPa+bwxBYsYrMxxkNkW/vl5OHh3bLohaHkrBQjTOkNiK UNewHUyfMoQUTsO7eQC4yyAh6HKipvQgYsMPoGDstCpfY7HXx2ggtNhqYIeEtCzS pWqmGpgyNggItMbpD8Ng13+MifNA29l/Zlx5hiBMfy34pBytw7Sz9esw/DV3f4fy IkMEzux/Ki6vJYrhb63L3pj2KZ8LHmHzlUs1n+7c0eCwUZqQlXNfSVN8csA78NOp 5/bjDMi2k2JVqfgpLX+4bvCSJojYut4y183VdrCHCPlRioPtYEyrX2gkf8eHFnKW QBmmnmc0YU3c0bXnRx2HZIzhmXsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDaYfx0mUUJEmvEfE46E464jmLtxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QyZDZkMGRmLWMyMWUtNDkxYy1iMTE2LTRhMWQ5YTJjNzRiZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMmQ2ZDBk Zi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC8zNjk4N0YxRDI2NTE0MjQ0 OUFGMTFGMTM4RTg0RTNBRTIzOThCQjcxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3DfMA8EAgACMAkDBwAgAQ30vQAwDQYJKoZIhvcNAQELBQADggEBADAdBCst pGv+QZ4GnafNMJrm1I4Su7wQ9GmXirmnlGB2fRpVKFktPhA26l/QT1JZc3lG/PNr 9iJuk63eUGhaDh1R9lAzQLCFpD0wWcniq48p5cbOQscV0Ez66S0NTAjzg5GLlLhm QsgBdB33LJ1ltK9WR6HEWoODlAvjW9zudr1X20gFA5aAPe0ewXZJXoUCnTsbBC3u v/BmAaW0zu73d2LvMrv+nBZbtb4+XDpqKhr4cIPYGasIwtXJqILeONKD0jwMjYcT g4cy5O7uCLvb/v/kBpoGnIS4wwoDOjoey6nV+2qduDxumh5OLk7rQ534yZ4I+o6J GaoyGTiPDnINFx8= -----END CERTIFICATE-----Generated at Tue May 12 22:32:44 2026 by rpki-client