$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer File: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer (raw, json) Hash identifier: cmDFEUHX8RuzNHVT17DcF0PrOlpZNKSTh8PmFIPkR2U= Subject key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DFFE9AFBC11473D48691B09A04692ECA8C545BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:17:10 +0000 Certificate not after: Sun 02 May 2027 01:22:10 +0000 Subordinate resources: IP: 43.230.128.0/22 IP: 103.103.136.0/22 IP: 103.238.200.0/22 IP: 2406:be40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ff:e9:af:bc:11:47:3d:48:69:1b:09:a0:46:92:ec:a8:c5:45:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:17:10 2026 GMT Not After : May 2 01:22:10 2027 GMT Subject: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:b0:db:9a:cf:4f:af:18:14:5b:aa:04:71: 59:aa:0e:45:33:61:dd:a7:c1:e6:7f:2f:d2:9a:63: 81:a1:b4:76:e6:85:f0:e4:3b:98:1a:16:b4:93:31: 8d:fc:26:5d:5f:f5:17:fd:86:d8:a4:e7:d4:b0:5b: 99:68:8f:a7:13:27:22:4a:49:4f:c5:01:b7:13:52: f0:62:b8:34:fe:a7:40:67:bc:b9:c1:d5:9d:49:de: 71:c3:04:c5:0a:42:a6:cc:b9:c1:01:2c:6d:1b:e2: 8d:dd:2d:33:40:02:14:91:b6:db:a4:49:7e:69:da: ba:e7:f5:55:3d:fc:3b:c1:14:f6:d8:f6:07:ed:f8: f6:a9:ba:1a:47:20:ff:bd:7c:af:ee:c0:39:e9:4a: fa:69:bc:2f:3c:ef:7d:ad:09:86:e0:60:2a:0e:95: 5e:a0:a2:84:11:4a:ac:87:00:3f:b4:c5:0d:56:12: 53:d2:17:1f:dc:22:11:df:9d:6f:4d:7b:c4:94:62: cc:1a:6b:ae:49:01:73:60:37:c0:c7:70:e2:84:eb: ea:2e:23:47:bb:79:98:b7:10:b3:b5:44:dd:8d:51: ec:e3:fa:12:ad:c0:4e:89:58:a1:59:75:5c:a2:09: a5:43:97:7c:a5:51:94:32:de:87:16:e5:b8:52:cd: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.128.0/22 103.103.136.0/22 103.238.200.0/22 IPv6: 2406:be40::/32 Signature Algorithm: sha256WithRSAEncryption 77:55:9a:67:2b:ae:f4:52:8f:4d:34:b5:61:ee:88:32:24:08: 15:fe:4b:71:cb:46:98:85:fa:06:5b:d1:52:d0:ce:18:ec:4b: 16:88:c9:a3:4e:1e:9e:a3:de:ac:b1:a8:ad:cc:4c:61:f5:de: 8a:eb:a9:7f:89:c9:90:f3:52:f3:3d:ad:c4:eb:7a:e1:b0:4b: 4c:38:c5:5d:1c:a8:c2:f7:f8:43:e0:0f:09:30:ca:ea:74:57: 77:1f:7b:43:a3:90:34:21:90:c4:bd:32:a0:86:01:4a:7a:30: ca:85:af:8f:98:ac:6d:3a:c4:47:03:d6:60:97:70:91:52:6b: 81:61:63:1b:fd:6a:49:2c:b8:8f:31:a6:8a:48:f4:ae:d4:bd: dd:b4:79:36:2e:a3:ad:32:f3:58:ce:1d:93:71:04:d7:83:95: 94:0f:6f:cf:60:4d:70:27:c2:82:cd:11:b2:b2:c5:bf:66:74: 27:cf:05:38:8b:76:de:bf:1f:42:61:68:cf:7f:d6:ec:1a:e2: a4:d5:36:d9:96:be:fd:d2:f8:3c:b4:34:d1:f4:e3:35:a2:83: 4e:d3:1a:c3:3f:82:1b:d9:10:73:16:83:31:ba:77:5d:af:0f: d2:96:ac:6e:e1:90:74:04:ed:e3:3c:22:b9:65:1d:bd:51:29: 72:3e:96:2b -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUHf/pr7wRRz1IaRsJoEaS7KjFRb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTcxMFoX DTI3MDUwMjAxMjIxMFowMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5 RTkwMUEyQjE3OEVGMzUxNTFFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjZsNuaz0+vGBRbqgRxWaoORTNh3afB5n8v0ppjgaG0duaF8OQ7mBoWtJMx jfwmXV/1F/2G2KTn1LBbmWiPpxMnIkpJT8UBtxNS8GK4NP6nQGe8ucHVnUneccME xQpCpsy5wQEsbRvijd0tM0ACFJG226RJfmnauuf1VT38O8EU9tj2B+349qm6Gkcg /718r+7AOelK+mm8Lzzvfa0JhuBgKg6VXqCihBFKrIcAP7TFDVYSU9IXH9wiEd+d b017xJRizBprrkkBc2A3wMdw4oTr6i4jR7t5mLcQs7VE3Y1R7OP6Eq3ATolYoVl1 XKIJpUOXfKVRlDLehxbluFLNvS0CAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDgDr9p7zNfb5c6ekBorF47zUVHlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkxMTQxN2MwLTM3YmItNDQ2ZC04N2YyLWQ4MTg0MTc4YzE0OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MTE0MTdj MC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8zODAzQUZEQTdCQ0NEN0RC RTVDRTlFOTAxQTJCMTc4RUYzNTE1MUU1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCK+aAAwQCZ2eIAwQCZ+7IMA0EAgACMAcDBQAkBr5AMA0GCSqGSIb3DQEBCwUA A4IBAQB3VZpnK670Uo9NNLVh7ogyJAgV/ktxy0aYhfoGW9FS0M4Y7EsWiMmjTh6e o96ssaitzExh9d6K66l/icmQ81LzPa3E63rhsEtMOMVdHKjC9/hD4A8JMMrqdFd3 H3tDo5A0IZDEvTKghgFKejDKha+PmKxtOsRHA9Zgl3CRUmuBYWMb/WpJLLiPMaaK SPSu1L3dtHk2LqOtMvNYzh2TcQTXg5WUD2/PYE1wJ8KCzRGyssW/ZnQnzwU4i3be vx9CYWjPf9bsGuKk1TbZlr790vg8tDTR9OM1ooNO0xrDP4Ib2RBzFoMxunddrw/S lqxu4ZB0BO3jPCK5ZR29USlyPpYr -----END CERTIFICATE-----Generated at Tue May 12 22:10:08 2026 by rpki-client