$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer File: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer (raw, json) Hash identifier: WXc1PSbb8zwUtClHn+y5k5QlAOutJUTYRIGULWaA57o= Subject key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1753D7F34A3D05279347392F26C4B674DF6A3CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:08:40 +0000 Certificate not after: Sun 02 May 2027 00:13:40 +0000 Subordinate resources: IP: 103.99.136.0/23 IP: 2001:df4:7c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:53:d7:f3:4a:3d:05:27:93:47:39:2f:26:c4:b6:74:df:6a:3c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:08:40 2026 GMT Not After : May 2 00:13:40 2027 GMT Subject: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:65:3d:81:49:44:c9:55:ec:7d:3c:52:6a: c6:2c:50:27:a0:17:a9:d9:6e:a8:84:41:7f:3d:70: 3f:3e:b5:8c:fb:ad:49:b9:0b:c3:4d:60:9e:f2:02: 82:37:d5:4f:88:06:e3:17:af:55:91:94:6b:58:19: 99:a1:17:52:84:95:c2:49:0c:39:04:bc:70:73:e0: dd:4c:ea:53:9a:e1:a8:d9:06:46:e2:56:36:1d:e0: e4:9c:b0:f8:b8:16:29:e2:e1:2c:ee:a1:32:f9:70: 44:4c:4e:5a:d8:15:e5:de:44:a4:01:a9:4c:86:50: 3b:08:7f:8c:00:c0:07:4a:5f:51:68:df:79:e9:52: e3:c4:c7:e6:25:b0:ed:43:a9:ca:78:89:94:7c:c6: ec:e0:40:99:29:aa:1c:50:b5:e6:a3:5f:e7:16:0a: c6:89:fe:21:29:3b:58:e3:4a:ae:54:ef:21:45:df: ed:90:7f:9b:d8:ff:f6:4d:d2:4b:09:df:54:7d:2e: 02:d0:15:3b:bb:33:9b:e1:38:6a:52:67:d2:cf:e0: 70:5e:a8:9d:62:8b:02:80:6e:3e:04:d9:79:4d:5d: 17:ae:af:63:8c:0f:51:74:43:2c:e8:2b:8b:29:30: fe:8a:59:c6:5e:ee:61:cc:e2:d4:9c:1c:85:fa:8a: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.99.136.0/23 IPv6: 2001:df4:7c0::/48 Signature Algorithm: sha256WithRSAEncryption 89:db:b4:5a:bc:7a:af:fb:72:08:02:d3:a2:92:ba:3c:7d:09: c6:0b:a3:37:99:3d:93:fd:e6:cd:1c:36:8c:88:98:70:b5:32: fe:a9:eb:c6:a7:52:5c:e7:94:4b:fd:32:23:ca:16:fa:8d:b0: c5:05:aa:e6:e6:8e:82:f9:b8:d5:11:3f:f1:bb:60:c7:2d:3d: 23:ca:92:c9:1e:0c:70:99:cf:10:60:2b:f4:ad:c0:5a:bc:49: 91:7c:45:fd:17:d8:5c:fb:c1:07:be:4f:36:19:8b:a4:3a:16: 33:3a:c6:4b:aa:ab:07:99:c4:c6:e0:98:fb:20:ec:f3:f9:52: 95:c5:c1:26:d7:f3:43:1f:51:6c:9e:77:93:06:a5:33:c7:e5: a1:90:82:37:d8:f6:2e:bc:b2:18:45:d3:b3:6f:d6:e6:61:04: d0:73:39:39:79:b1:0f:0c:9d:06:50:7a:33:bc:d6:4c:63:5e: be:0d:06:c2:cf:f4:00:5a:e8:2c:17:88:69:68:b9:31:a4:94: 28:5c:ee:c9:06:cb:d1:82:80:df:87:c9:02:d4:39:85:72:de: d8:55:67:8e:8a:79:10:19:35:71:8f:48:09:fc:81:a8:fb:71: fe:fd:b9:25:06:b1:a8:63:d4:e0:2b:69:38:16:33:4d:ab:6b: c3:6b:ee:7e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUF1PX80o9BSeTRzkvJsS2dN9qPO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDg0MFoX DTI3MDUwMjAwMTM0MFowMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJE MkYzQjIyOUQ5RjMzNzJERDNCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSTZT2BSUTJVex9PFJqxixQJ6AXqdluqIRBfz1wPz61jPutSbkLw01gnvIC gjfVT4gG4xevVZGUa1gZmaEXUoSVwkkMOQS8cHPg3UzqU5rhqNkGRuJWNh3g5Jyw +LgWKeLhLO6hMvlwRExOWtgV5d5EpAGpTIZQOwh/jADAB0pfUWjfeelS48TH5iWw 7UOpyniJlHzG7OBAmSmqHFC15qNf5xYKxon+ISk7WONKrlTvIUXf7ZB/m9j/9k3S SwnfVH0uAtAVO7szm+E4alJn0s/gcF6onWKLAoBuPgTZeU1dF66vY4wPUXRDLOgr iykw/opZxl7uYczi1JwchfqKTXcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDh9qV/5nT/LK7vS87Ip2fM3LdO4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJjMjgwYWYzLWFhMWQtNDI3MS04YzA2LWEzZmEyODg5ODQyNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYzI4MGFm My1hYTFkLTQyNzEtOGMwNi1hM2ZhMjg4OTg0MjYvMC8zODdEQTk1RkY5OUQzRkNC MkJCQkQyRjNCMjI5RDlGMzM3MkREM0I4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ2OIMA8EAgACMAkDBwAgAQ30B8AwDQYJKoZIhvcNAQELBQADggEBAInbtFq8 eq/7cggC06KSujx9CcYLozeZPZP95s0cNoyImHC1Mv6p68anUlznlEv9MiPKFvqN sMUFqubmjoL5uNURP/G7YMctPSPKkskeDHCZzxBgK/StwFq8SZF8Rf0X2Fz7wQe+ TzYZi6Q6FjM6xkuqqweZxMbgmPsg7PP5UpXFwSbX80MfUWyed5MGpTPH5aGQgjfY 9i68shhF07Nv1uZhBNBzOTl5sQ8MnQZQejO81kxjXr4NBsLP9ABa6CwXiGlouTGk lChc7skGy9GCgN+HyQLUOYVy3thVZ46KeRAZNXGPSAn8gaj7cf79uSUGsahj1OAr aTgWM02ra8Nr7n4= -----END CERTIFICATE-----Generated at Tue May 12 22:38:50 2026 by rpki-client