$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer File: 38C91BA9AF338721219232C9918431499404172C.cer (raw, json) Hash identifier: kvswYUatQxXVnNZz5J73pkD2ile+W8eA+7tpgcYQY28= Subject key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1CAE321418C902BB405A7346ACBDD1312BEB1FE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:15:25 +0000 Certificate not after: Sun 02 May 2027 02:20:25 +0000 Subordinate resources: IP: 103.46.186.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ae:32:14:18:c9:02:bb:40:5a:73:46:ac:bd:d1:31:2b:eb:1f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:15:25 2026 GMT Not After : May 2 02:20:25 2027 GMT Subject: CN=38C91BA9AF338721219232C9918431499404172C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:95:fb:57:27:1e:1c:4a:4b:e8:d2:2d:42: fa:5e:76:ab:dd:ae:d6:65:0e:d9:24:6f:41:6e:d2: 1a:75:de:2e:29:be:20:be:0b:83:58:61:e6:aa:a2: 9d:a4:96:a3:a3:87:12:48:99:e1:ba:65:23:5d:da: 57:46:e9:a1:e8:74:b9:9b:4f:98:b7:61:28:dc:bf: 41:a8:7e:0d:46:c9:23:4b:70:fb:1d:17:9c:2b:b3: 21:11:8b:a9:6f:b2:e5:6d:27:57:2a:56:97:4b:46: ee:79:ee:23:bf:ae:91:64:ad:36:63:31:b4:44:75: 5f:18:cb:af:1b:a3:7e:af:cf:79:f2:5f:c9:6f:23: f4:52:58:ec:c0:43:28:0c:da:95:ec:59:af:73:cf: fd:de:cb:be:bb:14:ca:79:a2:5a:36:ea:f7:4e:2a: ed:51:6b:60:b0:c3:b0:36:46:3e:f5:63:eb:9d:24: 94:84:92:e2:e3:0e:89:20:4a:d0:ab:98:3c:c8:ec: 3f:ad:8b:6a:62:8c:e1:2d:8c:ef:f4:f6:70:65:7f: b7:0f:89:8f:26:71:d0:47:ee:99:a9:2f:39:00:a8: 3e:c2:5a:7d:97:d0:f7:43:71:25:97:46:39:65:96: 66:49:76:df:5a:df:c4:46:8b:a9:d1:e4:43:8f:fd: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.186.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:9d:d7:36:70:3a:21:e6:77:60:bf:1d:76:fc:2d:1d:91:64: 7b:27:15:ad:70:7b:59:7a:42:e0:2c:86:5d:b8:6b:36:e5:7d: 22:e1:ac:f7:e5:d8:0d:7b:a9:4e:e2:21:4a:66:57:0b:98:88: c1:d7:79:5e:92:8d:98:4a:60:4a:1a:70:23:40:09:0f:24:36: b4:97:21:b9:05:ef:cb:cc:93:4f:d3:6b:77:eb:cf:1d:85:fc: 46:91:ee:6d:24:ee:64:54:f5:49:83:93:14:2e:8f:ba:6f:10: 19:bb:67:23:e8:ca:87:a7:e2:33:ac:62:5e:12:76:0c:71:0f: fc:8e:85:95:5a:b8:e0:d2:46:65:ca:96:be:20:19:53:19:06: 2d:00:18:0a:6c:cb:17:68:7a:93:83:15:85:77:29:54:46:54: c9:77:68:90:39:16:80:62:cf:f3:3c:79:1c:12:a5:93:7f:1b: 10:c1:8b:60:2b:bc:31:b8:06:8c:2a:aa:cb:59:08:37:e5:95: 4e:44:fc:eb:ff:d1:53:6b:c9:8a:d2:e9:d5:78:cc:e0:07:9d: 01:e1:6e:48:5e:8e:d7:f2:1f:70:2a:d2:44:93:b8:d3:59:84: f2:e4:99:94:03:18:0e:b2:28:5b:41:e3:b4:4d:65:1a:4a:3f: aa:8d:d6:c1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHK4yFBjJArtAWnNGrL3RMSvrH+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTUyNVoX DTI3MDUwMjAyMjAyNVowMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIz MkM5OTE4NDMxNDk5NDA0MTcyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYklftXJx4cSkvo0i1C+l52q92u1mUO2SRvQW7SGnXeLim+IL4Lg1hh5qqi naSWo6OHEkiZ4bplI13aV0bpoeh0uZtPmLdhKNy/Qah+DUbJI0tw+x0XnCuzIRGL qW+y5W0nVypWl0tG7nnuI7+ukWStNmMxtER1XxjLrxujfq/PefJfyW8j9FJY7MBD KAzalexZr3PP/d7LvrsUynmiWjbq904q7VFrYLDDsDZGPvVj650klISS4uMOiSBK 0KuYPMjsP62LamKM4S2M7/T2cGV/tw+JjyZx0EfumakvOQCoPsJafZfQ90NxJZdG OWWWZkl231rfxEaLqdHkQ4/9ucUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDjJG6mvM4chIZIyyZGEMUmUBBcsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U1NDMyNDFiLWNmZDEtNGNiYi05MjE5LWM3YTM2MjM3YzE0OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNTQzMjQx Yi1jZmQxLTRjYmItOTIxOS1jN2EzNjIzN2MxNDgvMC8zOEM5MUJBOUFGMzM4NzIx MjE5MjMyQzk5MTg0MzE0OTk0MDQxNzJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZy66MA0GCSqGSIb3DQEBCwUAA4IBAQBLndc2cDoh5ndgvx12/C0dkWR7JxWt cHtZekLgLIZduGs25X0i4az35dgNe6lO4iFKZlcLmIjB13leko2YSmBKGnAjQAkP JDa0lyG5Be/LzJNP02t3688dhfxGke5tJO5kVPVJg5MULo+6bxAZu2cj6MqHp+Iz rGJeEnYMcQ/8joWVWrjg0kZlypa+IBlTGQYtABgKbMsXaHqTgxWFdylURlTJd2iQ ORaAYs/zPHkcEqWTfxsQwYtgK7wxuAaMKqrLWQg35ZVORPzr/9FTa8mK0unVeMzg B50B4W5IXo7X8h9wKtJEk7jTWYTy5JmUAxgOsihbQeO0TWUaSj+qjdbB -----END CERTIFICATE-----Generated at Tue May 12 22:03:25 2026 by rpki-client