$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer File: 38A016716413D0128BA473D046A93A222EF258E1.cer (raw, json) Hash identifier: I3Zeb9iCS28+mTtvrrhKBqOVyb3oYyUbVgM97mBX7ec= Subject key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 201B7CF0F09DA6D968B37C8B880888B970FD16BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:51 +0000 Certificate not after: Sun 02 May 2027 01:05:51 +0000 Subordinate resources: IP: 103.21.216.0/22 IP: 202.77.96.0/19 IP: 202.137.0.0 -- 202.137.23.255 IP: 2405:100::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1b:7c:f0:f0:9d:a6:d9:68:b3:7c:8b:88:08:88:b9:70:fd:16:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:51 2026 GMT Not After : May 2 01:05:51 2027 GMT Subject: CN=38A016716413D0128BA473D046A93A222EF258E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:98:56:c2:0a:76:b3:ca:d9:19:2e:8c:8f: 5d:7b:dd:65:a5:0c:e4:a0:a0:b5:25:3f:33:2e:bd: 52:94:f7:de:f2:6b:b8:12:54:f7:f4:90:65:36:92: be:0f:b3:77:4a:cb:95:f2:88:e3:0c:f4:40:f2:96: 6e:02:cf:95:f7:56:72:b0:6a:58:bc:bd:e3:4e:ba: cd:de:28:cb:1e:9a:85:18:65:c7:db:00:2b:c2:13: 9b:ed:17:c5:ff:4b:6a:94:62:24:33:ff:83:1b:6f: c7:98:6a:af:2d:b1:11:d1:b3:c5:fb:54:40:32:dd: 6d:18:03:b4:70:c3:46:bb:88:b9:72:ca:f7:19:f6: 4f:1a:68:20:76:ae:77:37:f2:d4:52:ae:8e:32:b0: 2c:55:cf:ed:d8:5c:d1:87:4a:33:cb:59:2c:d7:93: f0:fc:2b:d6:e0:50:76:17:67:28:0d:0f:3b:6e:1b: a5:36:97:05:45:4b:81:e3:4c:83:fd:1b:b6:a3:5a: 92:0f:13:20:50:ff:79:cc:72:8b:4c:78:a8:d1:2e: a5:72:e0:1c:cf:93:ce:d7:dd:63:21:12:10:7d:ec: 35:77:85:b2:26:2e:cc:ed:e8:e6:5d:fe:f6:09:da: b9:88:99:58:2d:c8:e5:3c:2b:1a:f6:b0:e2:72:83: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.216.0/22 202.77.96.0/19 202.137.0.0-202.137.23.255 IPv6: 2405:100::/32 Signature Algorithm: sha256WithRSAEncryption 67:12:c2:08:05:39:cf:b6:3e:47:c7:67:d8:e9:06:2d:f5:76: c2:60:8c:80:12:ee:1c:b4:78:e7:53:af:a3:72:b4:43:bb:73: 88:94:ff:5a:a9:60:4d:7e:64:d6:71:91:15:ae:2f:95:6b:bf: cc:66:bd:1e:65:87:2c:28:43:ae:37:fb:d6:10:7a:13:fe:b3: d0:b8:8a:3d:d9:a6:be:7c:4a:38:ec:99:9d:3f:b9:1c:93:5f: 20:b4:df:cc:8a:c2:e5:f7:51:3b:8d:fd:72:2b:b4:6c:ae:69: 9f:33:bb:29:57:3d:e2:90:27:a0:d1:0a:2d:a1:61:06:15:97: 48:e0:78:14:d6:49:72:da:36:26:dd:8e:4e:21:1c:e2:6f:c1: df:df:e4:25:de:68:18:53:13:97:1d:eb:28:6f:42:cc:32:f4: 78:fa:ea:ec:31:8e:fb:e7:22:ff:2e:72:d1:e6:a8:99:da:59: a5:c1:b3:d8:79:21:19:c6:c0:e8:33:ef:81:36:ac:98:bb:b1: 89:5e:8a:46:b5:d7:53:52:55:ab:17:a6:fb:82:dc:a4:4c:81: 12:35:02:10:c5:b1:f8:d5:82:72:5b:39:38:d7:4d:b3:5e:4b: b7:9f:5f:0b:d5:d7:a3:c7:a2:6e:f4:c6:e8:45:27:f0:96:ef: 90:e2:42:61 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUIBt88PCdptlos3yLiAiIuXD9FrswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDA1MVoX DTI3MDUwMjAxMDU1MVowMzExMC8GA1UEAxMoMzhBMDE2NzE2NDEzRDAxMjhCQTQ3 M0QwNDZBOTNBMjIyRUYyNThFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKkmFbCCnazytkZLoyPXXvdZaUM5KCgtSU/My69UpT33vJruBJU9/SQZTaS vg+zd0rLlfKI4wz0QPKWbgLPlfdWcrBqWLy94066zd4oyx6ahRhlx9sAK8ITm+0X xf9LapRiJDP/gxtvx5hqry2xEdGzxftUQDLdbRgDtHDDRruIuXLK9xn2TxpoIHau dzfy1FKujjKwLFXP7dhc0YdKM8tZLNeT8Pwr1uBQdhdnKA0PO24bpTaXBUVLgeNM g/0btqNakg8TIFD/ecxyi0x4qNEupXLgHM+TztfdYyESEH3sNXeFsiYuzO3o5l3+ 9gnauYiZWC3I5TwrGvaw4nKDzF8CAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDigFnFkE9ASi6Rz0EapOiIu8ljhMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc5YzA1ZWUzLTdmYzgtNDQwNy1iMmMwLWNiNDBiZmNmYjg2Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OWMwNWVl My03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC8zOEEwMTY3MTY0MTNEMDEy OEJBNDczRDA0NkE5M0EyMjJFRjI1OEUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAfBAIAATAZ AwQCZxXYAwQFyk1gMAsDAwDKiQMEA8qJEDANBAIAAjAHAwUAJAUBADANBgkqhkiG 9w0BAQsFAAOCAQEAZxLCCAU5z7Y+R8dn2OkGLfV2wmCMgBLuHLR451Ovo3K0Q7tz iJT/WqlgTX5k1nGRFa4vlWu/zGa9HmWHLChDrjf71hB6E/6z0LiKPdmmvnxKOOyZ nT+5HJNfILTfzIrC5fdRO439ciu0bK5pnzO7KVc94pAnoNEKLaFhBhWXSOB4FNZJ cto2Jt2OTiEc4m/B39/kJd5oGFMTlx3rKG9CzDL0ePrq7DGO++ci/y5y0eaomdpZ pcGz2HkhGcbA6DPvgTasmLuxiV6KRrXXU1JVqxem+4LcpEyBEjUCEMWx+NWCcls5 ONdNs15Lt59fC9XXo8eibvTG6EUn8JbvkOJCYQ== -----END CERTIFICATE-----Generated at Tue May 12 22:33:08 2026 by rpki-client