$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer File: 38F5CCFB43C14A0A6D836EE754A8073545066216.cer (raw, json) Hash identifier: ViGlS08+fChqRdWoMY8QltTez5wCXtWVNne278kQDcM= Subject key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76989C00598F07C479F68D28EAF49A41AA139E9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:47:49 +0000 Certificate not after: Sat 01 May 2027 23:52:49 +0000 Subordinate resources: IP: 103.168.149.0/24 IP: 2407:a1c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:98:9c:00:59:8f:07:c4:79:f6:8d:28:ea:f4:9a:41:aa:13:9e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:47:49 2026 GMT Not After : May 1 23:52:49 2027 GMT Subject: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:35:64:39:8c:cc:13:a3:84:86:8f:21:d6: 61:42:40:6a:82:a9:28:cb:6e:ad:d9:ef:83:6f:0a: bf:0a:75:e7:4a:e4:c6:fb:75:c2:5e:d3:d2:77:90: cb:5e:7d:3c:b7:7b:99:81:04:0e:a6:52:51:7a:6e: 4c:8e:6a:f0:08:e5:77:d9:f3:9e:fd:7a:f4:62:ce: d2:f9:91:e1:4f:bb:ff:f3:a7:48:eb:a9:9a:6e:c2: 89:cf:e2:aa:f8:d8:39:7d:8e:89:3e:ef:81:b8:23: da:0f:72:79:ed:c3:7c:eb:25:01:eb:34:5b:9e:64: 94:70:33:41:8e:c5:1f:74:f9:9f:c4:ef:e7:b4:ab: 93:03:c6:e2:32:7d:8b:92:a2:14:c6:f7:c8:e6:bb: 36:a4:34:e8:2d:5c:bf:1d:3e:9f:a8:2a:ba:39:da: fb:91:46:38:7f:d7:5d:b4:a5:6c:0b:c8:21:35:db: 9c:23:a0:ad:8e:83:ab:56:a6:f7:66:89:f3:3b:d5: 00:41:44:7c:63:17:37:31:62:00:bb:10:46:7e:34: f5:08:62:3b:76:d9:77:62:82:51:62:eb:f0:8f:57: 69:c0:4a:11:35:d4:86:44:10:17:9c:45:4c:60:1c: a2:fe:2c:93:bb:04:f8:c9:49:e5:59:db:8c:43:15: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.149.0/24 IPv6: 2407:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 39:29:43:74:e3:0f:a8:96:e5:18:83:7f:59:79:f6:6e:07:6a: 92:8b:3e:86:fd:5e:ec:38:de:3b:b8:2a:9e:0b:65:0a:82:9b: 43:62:75:41:ae:6a:b7:6a:92:24:6d:a3:a4:f4:e5:5b:e0:6e: 36:c7:34:37:ad:98:6a:93:06:5c:0d:bb:7d:e5:8e:09:65:03: e1:de:c2:35:6a:47:db:72:11:7a:1e:3b:3b:7d:29:6b:08:fd: e7:c1:70:f2:f0:3e:1d:84:07:f9:6e:e6:d9:0f:87:57:3d:8e: 96:e7:81:78:30:ee:88:66:b7:44:96:5e:3d:a6:5a:4b:8f:15: 93:c6:20:dc:fc:6c:6d:db:5b:f9:29:15:4c:2f:83:bd:35:d6: 6a:4a:c9:65:c8:49:be:5a:95:9a:22:43:72:7c:07:b6:5b:c4: 0d:8b:dd:e4:e7:e5:c1:97:ca:d0:ea:81:9d:ed:74:25:3f:5e: 2d:e3:19:7b:da:d2:12:0b:9b:68:21:46:5d:9c:d0:c7:10:51: 13:58:20:ec:5e:ad:30:79:24:c6:47:40:5b:37:83:3b:9e:60: 86:b8:ec:81:ea:aa:32:fb:2a:d5:f3:07:4a:dc:d0:6e:de:53: b3:89:2d:a7:0e:49:21:4b:18:4f:25:71:cc:54:4a:f8:b3:9e: 1d:c4:78:7f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUdpicAFmPB8R59o0o6vSaQaoTnpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDc0OVoX DTI3MDUwMTIzNTI0OVowMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2 RUU3NTRBODA3MzU0NTA2NjIxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIzYNWQ5jMwTo4SGjyHWYUJAaoKpKMturdnvg28Kvwp150rkxvt1wl7T0neQ y159PLd7mYEEDqZSUXpuTI5q8Ajld9nznv169GLO0vmR4U+7//OnSOupmm7Cic/i qvjYOX2OiT7vgbgj2g9yee3DfOslAes0W55klHAzQY7FH3T5n8Tv57SrkwPG4jJ9 i5KiFMb3yOa7NqQ06C1cvx0+n6gqujna+5FGOH/XXbSlbAvIITXbnCOgrY6Dq1am 92aJ8zvVAEFEfGMXNzFiALsQRn409QhiO3bZd2KCUWLr8I9XacBKETXUhkQQF5xF TGAcov4sk7sE+MlJ5VnbjEMVGCMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDj1zPtDwUoKbYNu51SoBzVFBmIWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBkZDA3OGZlLTA5MzAtNDVkYy1iNDAzLTNjZTRlODYzZjhiNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZGQwNzhm ZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMC8zOEY1Q0NGQjQzQzE0QTBB NkQ4MzZFRTc1NEE4MDczNTQ1MDY2MjE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQAZ6iVMA0EAgACMAcDBQAkB6HAMA0GCSqGSIb3DQEBCwUAA4IBAQA5KUN04w+o luUYg39ZefZuB2qSiz6G/V7sON47uCqeC2UKgptDYnVBrmq3apIkbaOk9OVb4G42 xzQ3rZhqkwZcDbt95Y4JZQPh3sI1akfbchF6Hjs7fSlrCP3nwXDy8D4dhAf5bubZ D4dXPY6W54F4MO6IZrdEll49plpLjxWTxiDc/Gxt21v5KRVML4O9NdZqSsllyEm+ WpWaIkNyfAe2W8QNi93k5+XBl8rQ6oGd7XQlP14t4xl72tISC5toIUZdnNDHEFET WCDsXq0weSTGR0BbN4M7nmCGuOyB6qoy+yrV8wdK3NBu3lOziS2nDkkhSxhPJXHM VEr4s54dxHh/ -----END CERTIFICATE-----Generated at Tue May 12 22:16:41 2026 by rpki-client