$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer File: 36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer (raw, json) Hash identifier: fkj5duNQx+/WEATuo6dugqVsw5HMF+WiIjQ/UVgfiYk= Subject key identifier: 36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53537C92AB914F65E44E0555C575A274A4F0C78A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:17:29 +0000 Certificate not after: Sun 02 May 2027 02:22:29 +0000 Subordinate resources: IP: 103.155.44.0/24 IP: 2001:df4:b280::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:53:7c:92:ab:91:4f:65:e4:4e:05:55:c5:75:a2:74:a4:f0:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:17:29 2026 GMT Not After : May 2 02:22:29 2027 GMT Subject: CN=36E426816DDAEB8BE08D8A8210459EC65295BFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:73:41:09:2f:13:0e:70:6f:f5:6d:57:a6: e1:2f:65:a2:7b:1e:6e:60:7e:31:71:7b:fd:05:7d: 17:ae:fe:64:d6:0e:ed:46:3b:37:31:9c:62:02:a1: 70:ca:fa:7b:09:a9:3f:6d:ea:5f:1f:ac:2b:44:f1: 42:aa:12:90:1f:64:25:16:2a:88:e1:9d:da:43:8b: 32:9f:f2:33:c8:21:d1:49:88:38:81:70:4f:af:58: 66:60:86:03:9c:26:74:d2:1a:35:81:60:58:7b:83: 9d:c1:4b:7f:d4:68:aa:6c:93:94:ca:fd:a2:23:39: 7f:23:da:f3:77:88:6c:ae:d6:14:f4:b2:e3:ae:71: d8:d0:90:c1:90:e1:15:1a:c4:7c:86:82:c8:d1:90: fc:c2:56:2f:52:95:3e:1e:8d:83:42:86:d6:7b:60: 79:77:3b:f0:2d:a0:32:a8:4b:53:4a:1b:58:d5:0c: ff:fe:03:d5:66:0f:eb:60:d0:91:02:d3:bb:18:4b: aa:38:23:e8:84:2e:19:fc:04:39:96:46:fb:e2:37: 35:47:fd:4e:8c:2b:9b:6f:2b:37:9a:42:65:cb:33: ec:ad:fd:44:ae:0f:1f:82:18:9a:70:ee:78:b6:b0: 12:c4:20:65:7e:cd:03:02:67:57:27:38:8d:fd:f3: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.44.0/24 IPv6: 2001:df4:b280::/48 Signature Algorithm: sha256WithRSAEncryption 57:8d:de:e6:48:83:83:0e:41:96:c6:21:40:b8:97:ab:94:38: 6e:a0:ab:75:c5:99:65:63:14:57:6c:67:84:aa:73:33:56:84: ef:86:06:bc:f2:fd:45:45:cc:a1:7b:2b:5f:b2:04:b8:6f:d6: d6:1b:26:71:46:1c:0d:5e:67:24:b3:04:38:d8:c1:06:60:39: 6d:c4:ba:71:00:d1:ee:ce:63:72:e1:cc:1f:3b:b4:96:54:b6: 2c:a3:35:3a:a7:3d:0a:2d:b6:25:a8:97:bc:7d:53:bd:a8:6a: 75:61:00:ec:5f:c5:f1:fc:1a:7c:98:e8:24:48:12:62:01:d2: 60:82:39:3b:41:09:9b:5f:a2:d7:12:5e:59:55:ba:36:63:32: f2:6c:ff:f1:52:92:19:a7:fe:ea:6d:6c:71:cd:26:6a:60:ac: 1f:89:6a:8a:8d:b2:25:33:ad:6d:23:8b:c4:67:c8:ac:3f:71: 8d:f4:df:b4:0c:90:ca:6b:7e:9f:1b:26:bc:d3:f1:3a:e8:81: 40:09:22:e4:f9:1c:d6:fc:71:5f:2f:5c:58:90:cc:9b:9b:b7: f7:f5:61:3a:be:05:94:1a:25:49:6b:16:17:73:74:f6:2d:5d: 0b:02:9b:aa:f6:5d:a1:b0:16:56:95:b2:ab:17:d0:97:bd:f1: e8:30:11:03 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUU1N8kquRT2XkTgVVxXWidKTwx4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTcyOVoX DTI3MDUwMjAyMjIyOVowMzExMC8GA1UEAxMoMzZFNDI2ODE2RERBRUI4QkUwOEQ4 QTgyMTA0NTlFQzY1Mjk1QkZFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANsIc0EJLxMOcG/1bVem4S9lonsebmB+MXF7/QV9F67+ZNYO7UY7NzGcYgKh cMr6ewmpP23qXx+sK0TxQqoSkB9kJRYqiOGd2kOLMp/yM8gh0UmIOIFwT69YZmCG A5wmdNIaNYFgWHuDncFLf9RoqmyTlMr9oiM5fyPa83eIbK7WFPSy465x2NCQwZDh FRrEfIaCyNGQ/MJWL1KVPh6Ng0KG1ntgeXc78C2gMqhLU0obWNUM//4D1WYP62DQ kQLTuxhLqjgj6IQuGfwEOZZG++I3NUf9Towrm28rN5pCZcsz7K39RK4PH4IYmnDu eLawEsQgZX7NAwJnVyc4jf3zdjsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDbkJoFt2uuL4I2KghBFnsZSlb/qMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U3MDQyMTkwLTYyZGUtNGM3Yi1iM2EyLTdiMTVkZTI3ZTVkYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNzA0MjE5 MC02MmRlLTRjN2ItYjNhMi03YjE1ZGUyN2U1ZGMvMC8zNkU0MjY4MTZEREFFQjhC RTA4RDhBODIxMDQ1OUVDNjUyOTVCRkVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5ssMA8EAgACMAkDBwAgAQ30soAwDQYJKoZIhvcNAQELBQADggEBAFeN3uZI g4MOQZbGIUC4l6uUOG6gq3XFmWVjFFdsZ4SqczNWhO+GBrzy/UVFzKF7K1+yBLhv 1tYbJnFGHA1eZySzBDjYwQZgOW3EunEA0e7OY3LhzB87tJZUtiyjNTqnPQottiWo l7x9U72oanVhAOxfxfH8GnyY6CRIEmIB0mCCOTtBCZtfotcSXllVujZjMvJs//FS khmn/uptbHHNJmpgrB+JaoqNsiUzrW0ji8RnyKw/cY3037QMkMprfp8bJrzT8Tro gUAJIuT5HNb8cV8vXFiQzJubt/f1YTq+BZQaJUlrFhdzdPYtXQsCm6r2XaGwFlaV sqsX0Je98egwEQM= -----END CERTIFICATE-----Generated at Tue May 12 22:45:56 2026 by rpki-client