$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer File: 399FBE55CFD957C1E3849C75FE378403E394BB45.cer (raw, json) Hash identifier: cI3iHj3M/+VQiXrwcaaeGCRBAS6vajZxvligXDKd5tc= Subject key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37D8CDF01E3DCE35F75787C2374D56208DA8D9C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:06 +0000 Certificate not after: Sun 02 May 2027 01:37:06 +0000 Subordinate resources: IP: 103.170.30.0/23 IP: 2407:b4c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d8:cd:f0:1e:3d:ce:35:f7:57:87:c2:37:4d:56:20:8d:a8:d9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:06 2026 GMT Not After : May 2 01:37:06 2027 GMT Subject: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:c7:a3:cc:fb:f3:92:4e:fc:4d:2f:eb:da: b6:10:97:a1:cb:29:aa:5d:30:21:f7:5f:ee:40:14: 00:59:1d:84:7b:23:58:ed:9b:a7:df:72:6c:cf:d3: f8:a0:26:02:2f:69:32:08:26:ca:e4:71:e8:ef:ff: b1:48:67:04:e2:c9:53:63:71:4d:df:ab:91:3d:4c: 88:56:47:7b:42:68:d7:7a:73:78:f2:0c:7f:7c:14: 0f:25:89:da:be:c5:74:a7:70:65:95:ba:e8:1b:6f: f2:9a:91:2c:3b:e2:f7:e6:8a:9b:76:2b:26:c2:06: 61:d8:0c:34:cd:c1:25:cc:62:2e:57:58:a1:d5:ba: 75:b0:f3:eb:29:cf:5f:c7:e3:a7:48:ea:3e:e9:85: 23:9c:f4:5d:56:88:96:e2:c1:11:bb:67:d9:be:41: 85:c7:00:44:5a:ae:d4:e3:5c:da:f4:87:6d:d2:75: b9:06:ca:f7:b8:a2:94:76:4f:a1:a3:b0:d0:24:d1: 1c:0d:79:56:fb:20:e6:ac:a9:23:f4:59:08:8b:12: 34:7b:6d:f0:e7:9c:c1:b6:c1:48:8a:e4:bc:30:be: 30:11:c1:ac:92:31:eb:46:6a:bf:1d:17:b9:ed:3d: e7:ad:9c:bc:bc:ce:62:d2:ad:a3:7d:26:7a:85:28: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.30.0/23 IPv6: 2407:b4c0::/32 Signature Algorithm: sha256WithRSAEncryption 64:10:cc:77:fd:8e:51:46:8c:fa:39:fd:c2:1b:78:ae:da:88: 66:8a:2d:71:ac:bb:49:a4:19:3a:d6:9c:3a:3f:6b:d0:34:0b: 62:5f:42:54:b6:50:9b:3c:92:47:f6:17:d2:d3:6d:5a:4f:87: ea:b2:b2:e1:a4:bc:90:0c:eb:cb:1d:59:3e:07:3c:21:7d:45: 67:51:c4:8d:69:a1:4e:d0:9c:20:b4:01:49:cf:b4:47:d3:24: a1:cb:91:9a:c9:32:ff:e3:08:a4:6d:84:82:4d:ea:f0:37:16: 2b:8a:b8:fb:f4:c9:aa:f3:3f:4e:e2:b4:9a:6f:33:50:a9:4b: e2:1c:43:a4:7c:be:68:e2:2e:6f:a0:c4:80:d7:81:e9:78:c5: 2b:e4:27:7a:41:00:e7:fa:1f:c3:64:29:a5:ed:49:f1:c4:21: 85:91:b9:ce:e1:be:88:25:05:3f:f6:11:59:d9:5c:13:33:df: a4:ce:58:03:77:2b:51:9f:13:11:9a:dc:9c:16:45:9b:87:2a: fa:02:48:de:db:4e:06:72:01:7e:68:eb:b7:fd:36:91:30:2f: 8f:f0:d2:db:7e:39:29:65:11:ea:ff:df:b8:5d:15:82:b0:d7: 9e:a2:89:92:3e:38:39:98:8a:e6:02:c0:b3:3c:24:af:ce:52: be:df:c1:25 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUN9jN8B49zjX3V4fCN01WII2o2cgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzIwNloX DTI3MDUwMjAxMzcwNlowMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5 Qzc1RkUzNzg0MDNFMzk0QkI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1px6PM+/OSTvxNL+vathCXocspql0wIfdf7kAUAFkdhHsjWO2bp99ybM/T +KAmAi9pMggmyuRx6O//sUhnBOLJU2NxTd+rkT1MiFZHe0Jo13pzePIMf3wUDyWJ 2r7FdKdwZZW66Btv8pqRLDvi9+aKm3YrJsIGYdgMNM3BJcxiLldYodW6dbDz6ynP X8fjp0jqPumFI5z0XVaIluLBEbtn2b5BhccARFqu1ONc2vSHbdJ1uQbK97iilHZP oaOw0CTRHA15Vvsg5qypI/RZCIsSNHtt8OecwbbBSIrkvDC+MBHBrJIx60Zqvx0X ue09562cvLzOYtKto30meoUoLGECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDmfvlXP2VfB44Scdf43hAPjlLtFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E3MGRmYjVhLTg0NWUtNGRkZi1hY2E3LWE5YjMxYzMxZGZmNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNzBkZmI1 YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8zOTlGQkU1NUNGRDk1N0Mx RTM4NDlDNzVGRTM3ODQwM0UzOTRCQjQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ6oeMA0EAgACMAcDBQAkB7TAMA0GCSqGSIb3DQEBCwUAA4IBAQBkEMx3/Y5R Roz6Of3CG3iu2ohmii1xrLtJpBk61pw6P2vQNAtiX0JUtlCbPJJH9hfS021aT4fq srLhpLyQDOvLHVk+BzwhfUVnUcSNaaFO0JwgtAFJz7RH0yShy5GayTL/4wikbYSC TerwNxYrirj79Mmq8z9O4rSabzNQqUviHEOkfL5o4i5voMSA14HpeMUr5Cd6QQDn +h/DZCml7UnxxCGFkbnO4b6IJQU/9hFZ2VwTM9+kzlgDdytRnxMRmtycFkWbhyr6 Akje204GcgF+aOu3/TaRMC+P8NLbfjkpZRHq/9+4XRWCsNeeoomSPjg5mIrmAsCz PCSvzlK+38El -----END CERTIFICATE-----Generated at Tue May 12 22:32:48 2026 by rpki-client