$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer (raw, json) Hash identifier: h/tLXzs8cRvUS5XiUlGW2FkdcimTMAM9R5KXAhCh1Tg= Subject key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2FF96F29DC70901CC6D3569D288263746EBC1938 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:30 +0000 Certificate not after: Sun 02 May 2027 02:00:30 +0000 Subordinate resources: IP: 103.156.14.0/23 IP: 2406:7b40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f9:6f:29:dc:70:90:1c:c6:d3:56:9d:28:82:63:74:6e:bc:19:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:55:30 2026 GMT Not After : May 2 02:00:30 2027 GMT Subject: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:d8:17:bd:09:61:94:5b:8e:bd:c5:d2:47: cc:d4:4e:6d:ec:ec:37:de:db:f5:02:4a:be:65:22: d1:51:5e:a6:e7:2b:ed:4a:dd:6e:df:3d:ad:2d:6c: f1:7f:c6:78:ff:79:cf:10:a3:bb:c4:4e:ca:ea:33: df:d5:34:9f:0d:7e:40:4f:fa:99:e1:b0:12:7c:89: 86:33:53:63:95:6a:80:f0:a2:a6:87:4b:29:b5:1a: 28:52:b6:18:3e:1c:6f:98:99:4c:bb:d7:89:57:ed: 06:01:45:c3:9c:0d:f9:a2:1e:e0:6f:5e:fc:d9:95: 5f:52:e7:b8:1e:2c:dc:cb:f8:53:d3:87:9d:1c:5d: 34:38:7f:e4:fd:a9:4e:b5:d3:26:96:78:9b:11:3e: 39:36:04:b3:7c:5d:cb:7e:8f:a2:44:60:00:11:4e: 85:28:c8:27:df:94:dd:f9:89:8c:0f:84:0d:78:b3: e7:e5:ce:34:0e:d4:91:b5:53:21:43:54:60:08:22: bc:d7:cb:9f:56:13:b7:6a:a5:c6:b9:bb:ef:46:2a: ce:64:9d:5a:e4:06:18:b1:05:80:d2:81:b7:96:df: 92:68:cf:10:bf:89:b2:ea:81:30:c4:42:1f:f2:22: 1b:c3:57:8c:be:86:54:1e:6e:8a:2d:2c:69:7b:1c: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.14.0/23 IPv6: 2406:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 7e:18:c3:2d:ed:c0:cb:c5:7b:50:ac:2f:c8:75:6d:64:25:1d: d0:01:cf:d3:15:1f:68:b7:b2:39:48:f2:aa:c5:74:85:4c:d7: 03:33:df:81:18:20:01:54:72:86:e1:1a:ad:6b:74:f8:20:f3: 5f:56:ab:15:42:5d:eb:ca:b1:a5:84:91:45:f8:19:20:8c:41: c1:c6:09:a2:b9:85:14:0e:98:ff:e2:62:af:95:37:98:99:d8: 62:47:b0:54:29:5a:cd:3d:08:3d:12:15:8d:dc:c4:b9:02:6a: 8c:f1:8a:bd:aa:71:32:ab:d9:90:4d:3c:5e:90:0b:7f:9f:dd: da:e7:2e:9f:91:24:c2:d0:f2:21:8a:a4:9e:00:bd:e2:f2:d7: 51:d2:c6:40:cf:61:c1:10:7a:45:8c:cb:ff:22:65:ee:e9:93: 8d:e7:4a:3c:e2:39:7f:97:7b:ef:7c:bc:8d:1d:bd:60:85:27: d3:64:9f:b6:da:60:30:b5:8b:1c:d0:e6:42:b8:5d:33:5d:56: 7d:98:4f:83:f6:d9:43:d9:75:3b:40:4e:04:0b:f6:45:0c:73: 40:ee:96:d7:a5:b7:a5:82:61:b1:2e:7b:2d:b7:0b:87:a5:a0: 05:b1:f7:fa:c6:15:ac:c4:cd:53:ed:43:34:29:db:21:15:19: a2:c4:88:04 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUL/lvKdxwkBzG01adKIJjdG68GTgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTUzMFoX DTI3MDUwMjAyMDAzMFowMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0Ix Njg0QzdBQUQ2RDg1QTlBMEU4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBX2Be9CWGUW469xdJHzNRObezsN97b9QJKvmUi0VFepucr7Urdbt89rS1s 8X/GeP95zxCju8ROyuoz39U0nw1+QE/6meGwEnyJhjNTY5VqgPCipodLKbUaKFK2 GD4cb5iZTLvXiVftBgFFw5wN+aIe4G9e/NmVX1LnuB4s3Mv4U9OHnRxdNDh/5P2p TrXTJpZ4mxE+OTYEs3xdy36PokRgABFOhSjIJ9+U3fmJjA+EDXiz5+XONA7UkbVT IUNUYAgivNfLn1YTt2qlxrm770YqzmSdWuQGGLEFgNKBt5bfkmjPEL+JsuqBMMRC H/IiG8NXjL6GVB5uii0saXscCL8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDi5B8PiwRDOZjsWhMeq1thamg6LMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NlMWVhNTEzLWFjNmUtNGE1Zi1iM2ViLWQ1MzUyY2FmNDg2Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZTFlYTUx My1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8zOEI5MDdDM0UyQzExMENF NjYzQjE2ODRDN0FBRDZEODVBOUEwRThCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5wOMA0EAgACMAcDBQAkBntAMA0GCSqGSIb3DQEBCwUAA4IBAQB+GMMt7cDL xXtQrC/IdW1kJR3QAc/TFR9ot7I5SPKqxXSFTNcDM9+BGCABVHKG4Rqta3T4IPNf VqsVQl3ryrGlhJFF+BkgjEHBxgmiuYUUDpj/4mKvlTeYmdhiR7BUKVrNPQg9EhWN 3MS5AmqM8Yq9qnEyq9mQTTxekAt/n93a5y6fkSTC0PIhiqSeAL3i8tdR0sZAz2HB EHpFjMv/ImXu6ZON50o84jl/l3vvfLyNHb1ghSfTZJ+22mAwtYsc0OZCuF0zXVZ9 mE+D9tlD2XU7QE4EC/ZFDHNA7pbXpbelgmGxLnsttwuHpaAFsff6xhWsxM1T7UM0 KdshFRmixIgE -----END CERTIFICATE-----Generated at Tue May 12 22:02:54 2026 by rpki-client