$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer File: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer (raw, json) Hash identifier: N+IykQTgJGWYfukBS5DxgpRaBCgwBe2wivhVW4EFoSY= Subject key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2328B885731816ECA2DBB7BB5E8CBCAA2EE2301E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:13:26 +0000 Certificate not after: Sun 02 May 2027 01:18:26 +0000 Subordinate resources: IP: 103.191.129.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:28:b8:85:73:18:16:ec:a2:db:b7:bb:5e:8c:bc:aa:2e:e2:30:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:13:26 2026 GMT Not After : May 2 01:18:26 2027 GMT Subject: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:f1:7e:54:5b:bf:60:5a:ed:48:f6:b2:97: f4:35:fe:70:f3:bc:7f:d3:71:c1:09:b4:73:79:96: 8c:f4:76:d7:51:eb:c7:83:10:31:ce:41:de:ea:7e: 29:b0:e6:02:7f:f5:f5:81:15:b4:ee:d3:13:23:8f: fb:91:05:45:9f:e7:59:69:9c:c4:ad:9f:35:f0:fa: 02:0a:28:c7:19:b3:ab:79:9c:4b:a7:70:f9:d8:57: b7:22:23:5a:1a:4d:60:ad:6f:12:d1:59:f0:86:a3: 7d:1b:03:1a:0b:c9:15:fb:c0:b2:1e:96:be:b5:26: fc:16:3c:9f:47:22:8f:7b:da:ee:10:2a:60:f7:22: ce:53:3e:f2:a5:a0:d8:15:33:d3:08:80:b1:29:63: 84:0e:7a:17:bd:71:c9:d5:ef:d1:7b:74:05:51:e9: e7:cc:31:98:c3:d0:bc:0f:12:cc:de:a0:1d:fb:3a: 88:40:15:fb:93:70:78:c9:11:fa:c5:51:32:7c:8f: 7a:30:e0:4d:7a:d1:4e:89:7a:11:e7:55:8a:f8:36: 9d:90:db:67:94:b2:5c:51:bb:f9:d5:ac:02:77:a8: dd:f3:15:fc:85:69:87:bf:29:27:90:c9:0c:b3:c6: c7:90:7c:54:c4:d2:32:be:66:7f:de:6c:9e:7b:53: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.129.0/24 Signature Algorithm: sha256WithRSAEncryption 95:0d:b1:23:a9:24:08:f6:33:cc:dd:fb:a0:86:2f:98:1f:5f: ba:e5:16:51:70:0e:0a:94:0e:d2:95:36:39:bb:02:79:2c:7b: 5a:e9:d0:07:5e:f9:f0:91:b4:b3:a4:1d:ee:c3:70:90:a1:d1: 76:93:0f:71:cb:03:fe:a8:65:63:97:97:f3:59:5f:50:50:bb: b6:ce:5e:6f:d3:05:f9:f6:2e:1a:8d:9d:0c:26:32:43:17:0d: 1d:9a:7b:df:43:c8:bb:9b:dc:bf:f1:ea:b7:a8:eb:e3:4b:e4: 1f:1d:be:77:43:a0:7b:00:a3:93:cc:1d:c0:cf:9a:24:5d:7f: 2d:f9:68:f8:4d:ae:8c:5d:91:ac:b0:1f:54:3a:70:c6:68:07: 2f:50:56:fb:38:2a:e3:ba:23:8f:35:72:fd:6d:4f:cd:05:d4: d2:58:55:bb:6b:ac:be:ea:dd:c1:d6:db:4f:e4:d7:96:48:cd: fa:d7:ed:8e:33:07:b3:e7:85:cb:96:0a:a0:ad:64:a1:b4:f4: 04:07:30:8f:84:bb:0e:53:6c:93:9e:a1:b4:8e:ee:b0:7a:75: a3:20:bd:d6:46:d9:4b:54:11:67:dc:e6:3f:ad:42:48:77:19: 89:8d:9b:bf:4f:06:05:50:bb:63:ca:53:44:f2:50:e8:c4:29: 0b:54:59:ee -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIyi4hXMYFuyi27e7Xoy8qi7iMB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTMyNloX DTI3MDUwMjAxMTgyNlowMzExMC8GA1UEAxMoMzlFRjU2MEUwN0MwQjQyRUYwNDU3 RjdENUE3MEY4REJGRjI0Qzc5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+T8X5UW79gWu1I9rKX9DX+cPO8f9NxwQm0c3mWjPR211Hrx4MQMc5B3up+ KbDmAn/19YEVtO7TEyOP+5EFRZ/nWWmcxK2fNfD6Agooxxmzq3mcS6dw+dhXtyIj WhpNYK1vEtFZ8IajfRsDGgvJFfvAsh6WvrUm/BY8n0cij3va7hAqYPcizlM+8qWg 2BUz0wiAsSljhA56F71xydXv0Xt0BVHp58wxmMPQvA8SzN6gHfs6iEAV+5NweMkR +sVRMnyPejDgTXrRTol6EedVivg2nZDbZ5SyXFG7+dWsAneo3fMV/IVph78pJ5DJ DLPGx5B8VMTSMr5mf95snntTFysCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDnvVg4HwLQu8EV/fVpw+Nv/JMeYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhhZDMzNzcwLWYxNTEtNDNmMy05NTY5LTZhMjdkNzUwNDI0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YWQzMzc3 MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMC8zOUVGNTYwRTA3QzBCNDJF RjA0NTdGN0Q1QTcwRjhEQkZGMjRDNzk4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7+BMA0GCSqGSIb3DQEBCwUAA4IBAQCVDbEjqSQI9jPM3fughi+YH1+65RZR cA4KlA7SlTY5uwJ5LHta6dAHXvnwkbSzpB3uw3CQodF2kw9xywP+qGVjl5fzWV9Q ULu2zl5v0wX59i4ajZ0MJjJDFw0dmnvfQ8i7m9y/8eq3qOvjS+QfHb53Q6B7AKOT zB3Az5okXX8t+Wj4Ta6MXZGssB9UOnDGaAcvUFb7OCrjuiOPNXL9bU/NBdTSWFW7 a6y+6t3B1ttP5NeWSM361+2OMwez54XLlgqgrWShtPQEBzCPhLsOU2yTnqG0ju6w enWjIL3WRtlLVBFn3OY/rUJIdxmJjZu/TwYFULtjylNE8lDoxCkLVFnu -----END CERTIFICATE-----Generated at Tue May 12 22:16:36 2026 by rpki-client