$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer File: 38D72675FCFA53571947E587993417F0A2E84774.cer (raw, json) Hash identifier: wtRlUu/SuhE7y/xAuPE26bN1msSwGlTJhplSt5gDX5g= Subject key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D892106F746315E3DB364AD48E07C721A8235F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:52:04 +0000 Certificate not after: Sun 02 May 2027 01:57:04 +0000 Subordinate resources: IP: 114.141.88.0/21 IP: 2001:df0:b2::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:89:21:06:f7:46:31:5e:3d:b3:64:ad:48:e0:7c:72:1a:82:35:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:52:04 2026 GMT Not After : May 2 01:57:04 2027 GMT Subject: CN=38D72675FCFA53571947E587993417F0A2E84774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:cb:fa:6f:f5:3a:15:57:9e:1e:9a:89:ab: 15:3e:f2:fb:79:e6:a6:9d:04:34:5a:2b:b2:ac:3e: fe:42:ed:2b:99:79:7d:a2:51:e0:34:85:44:0d:67: c2:ab:f4:30:98:59:b6:c2:cd:be:b4:06:dc:ce:2c: 6f:90:87:ec:ce:b4:9c:0e:61:17:d4:d9:64:98:72: 1e:fd:d9:32:6f:83:da:5f:24:b8:57:78:7a:91:20: 73:43:0b:50:42:7c:66:39:60:fc:4b:6d:5e:73:6d: f5:a9:69:4c:f9:92:4c:53:52:60:51:f4:c7:3b:4a: 93:e6:40:6f:3a:11:c9:ec:fc:1c:ce:d8:8f:96:d5: 3a:f6:66:c8:2d:28:50:8e:bf:09:1f:c9:40:ee:38: de:23:04:19:49:9c:80:81:d6:3b:37:a7:e1:45:e6: e3:0a:94:74:a4:62:93:02:ed:0e:0e:c6:82:82:a3: f3:de:02:c1:d1:5d:f2:13:93:41:ea:39:10:d0:1f: a9:f6:a5:06:fd:99:b1:6e:46:49:ad:e5:b9:d0:74: 7e:6d:f9:40:17:05:74:66:46:cc:07:09:5e:26:e8: 12:d6:14:0c:c3:f2:50:2c:5b:22:24:51:80:93:48: c4:a3:41:68:4a:b8:d9:61:e5:57:cc:6d:a4:c0:0f: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.88.0/21 IPv6: 2001:df0:b2::/48 Signature Algorithm: sha256WithRSAEncryption 0e:bf:fb:73:3f:03:d7:39:f1:72:c1:16:b4:93:c3:77:f2:82: e2:3b:8f:62:fe:c4:5c:31:fc:a1:07:12:16:d9:d7:1c:08:c0: 0a:eb:0f:b7:7e:cd:a3:7c:02:e5:12:b4:b2:2b:86:a1:1e:62: e5:f7:29:15:a4:8d:95:e0:92:ac:72:ae:ae:dd:7f:5c:8a:a9: 2f:40:02:b8:a7:bc:0c:82:20:0d:31:d5:7c:01:63:00:44:41: 65:d7:20:82:51:92:6b:cf:3f:b6:e4:5d:2d:7a:f3:8b:6f:f1: ee:44:65:86:e3:20:b8:b6:66:b9:74:9d:a2:bd:15:22:65:56: e8:f3:32:70:70:46:b2:ce:b3:48:05:b2:f6:bd:f2:98:b6:5c: 4a:45:1c:22:f4:0e:30:b5:72:f3:02:e3:d9:7f:fb:e2:c8:98: 3e:8c:0f:01:9c:eb:1b:55:49:11:45:09:73:c8:18:4e:48:f9: f1:37:bd:b6:92:20:81:6d:8c:19:ad:c6:0c:8f:12:45:3f:53: 87:9e:c6:34:77:81:0a:1f:49:0a:fe:9b:c7:d3:56:e3:7d:a7: 83:88:aa:72:ad:2f:0f:fa:ba:b6:44:08:eb:c3:d3:9f:fc:d5: 41:43:57:cb:0c:24:c0:0b:ea:81:29:17:8e:6d:4a:45:e6:33: 51:02:3b:e9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUPYkhBvdGMV49s2StSOB8chqCNfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTIwNFoX DTI3MDUwMjAxNTcwNFowMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdF NTg3OTkzNDE3RjBBMkU4NDc3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrmy/pv9ToVV54emomrFT7y+3nmpp0ENForsqw+/kLtK5l5faJR4DSFRA1n wqv0MJhZtsLNvrQG3M4sb5CH7M60nA5hF9TZZJhyHv3ZMm+D2l8kuFd4epEgc0ML UEJ8Zjlg/EttXnNt9alpTPmSTFNSYFH0xztKk+ZAbzoRyez8HM7Yj5bVOvZmyC0o UI6/CR/JQO443iMEGUmcgIHWOzen4UXm4wqUdKRikwLtDg7GgoKj894CwdFd8hOT Qeo5ENAfqfalBv2ZsW5GSa3ludB0fm35QBcFdGZGzAcJXiboEtYUDMPyUCxbIiRR gJNIxKNBaEq42WHlV8xtpMAP4fcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDjXJnX8+lNXGUflh5k0F/Ci6Ed0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M3ZmM1NGZiLTcyNGUtNDMxNi1iOWJjLTFjNGIwNmVhNTdhZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jN2ZjNTRm Yi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8zOEQ3MjY3NUZDRkE1MzU3 MTk0N0U1ODc5OTM0MTdGMEEyRTg0Nzc0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQDco1YMA8EAgACMAkDBwAgAQ3wALIwDQYJKoZIhvcNAQELBQADggEBAA6/+3M/ A9c58XLBFrSTw3fyguI7j2L+xFwx/KEHEhbZ1xwIwArrD7d+zaN8AuUStLIrhqEe YuX3KRWkjZXgkqxyrq7df1yKqS9AArinvAyCIA0x1XwBYwBEQWXXIIJRkmvPP7bk XS1684tv8e5EZYbjILi2Zrl0naK9FSJlVujzMnBwRrLOs0gFsva98pi2XEpFHCL0 DjC1cvMC49l/++LImD6MDwGc6xtVSRFFCXPIGE5I+fE3vbaSIIFtjBmtxgyPEkU/ U4eexjR3gQofSQr+m8fTVuN9p4OIqnKtLw/6urZECOvD05/81UFDV8sMJMAL6oEp F45tSkXmM1ECO+k= -----END CERTIFICATE-----Generated at Tue May 12 22:03:36 2026 by rpki-client