$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer (raw, json) Hash identifier: Rx3OQc+zS+firYnhbF8xXow9ox9yR/v/Ug+COCJI4sE= Subject key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 68235C7A4070BC9D581F8490FE0EAA243A4C19A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:20:37 +0000 Certificate not after: Sun 02 May 2027 02:25:37 +0000 Subordinate resources: IP: 103.183.58.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:23:5c:7a:40:70:bc:9d:58:1f:84:90:fe:0e:aa:24:3a:4c:19:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:20:37 2026 GMT Not After : May 2 02:25:37 2027 GMT Subject: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:6b:3a:6e:4e:00:74:5e:f5:a3:f6:55:d4: 54:25:85:f7:c7:cd:1e:62:9e:7c:f1:19:29:d0:e7: 4e:21:21:d6:3a:b6:56:38:8d:08:76:18:79:bd:8d: b9:9b:b3:53:fd:57:7a:34:35:2c:e5:74:ac:61:e4: a6:36:65:fe:39:4c:ae:0b:0b:26:e2:c0:73:c2:a2: 87:99:8c:45:5f:a0:de:9a:9a:f6:94:fd:9f:bc:d3: 05:7b:ea:2f:6f:f7:65:3a:58:8b:6c:0a:bd:28:be: 1a:c3:20:6b:d2:b4:87:8d:68:c5:68:69:fd:95:5e: 19:08:aa:c9:84:91:c4:5d:46:4b:b3:60:77:a8:3a: 88:85:ae:03:e4:b3:d4:ac:cb:15:d4:e7:0e:3c:c6: 5b:9b:20:ba:84:29:2f:bf:cf:7b:ae:d6:dc:4f:aa: 20:46:05:f9:99:7d:25:18:a8:e6:f9:59:a2:37:9a: 8b:77:41:d6:31:eb:c9:8b:17:72:e1:0b:4d:4f:16: cc:6f:40:50:29:ca:b1:79:e8:19:85:b3:10:46:12: 1d:69:c0:80:37:0d:6c:12:7a:eb:cb:82:25:ab:6b: f9:0d:88:55:c3:c5:c6:e0:22:88:bb:48:70:8d:ae: 3a:97:86:b3:a1:2c:89:94:de:ae:2c:44:07:a8:93: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.58.0/23 Signature Algorithm: sha256WithRSAEncryption 90:5b:d5:95:0d:43:33:56:f2:65:39:54:83:87:eb:64:ca:c2: 09:f0:ed:0d:34:0d:2e:cf:e6:cf:f0:13:b4:19:9d:1b:8d:31: f5:44:ad:da:b7:fe:8d:36:9f:8e:1a:15:3c:ef:65:03:f8:29: f6:fa:34:ad:4b:a6:e4:0a:2d:15:0d:0a:f6:07:cf:09:13:69: f6:be:9c:52:53:34:be:55:dc:cf:e2:4a:9d:84:87:43:cd:83: 23:c3:d2:9c:79:a6:96:83:40:c9:00:01:07:7f:9a:f8:1a:0f: 40:2b:95:47:02:ee:ee:b7:51:69:e8:97:9f:42:a4:56:ad:6a: 55:ae:0e:b9:91:65:41:7a:4d:6a:1e:07:4c:ff:df:0c:15:9a: 65:4c:21:a3:9d:1d:48:23:90:1e:96:1f:27:17:01:a4:59:cb: f3:40:da:14:8b:2d:5d:68:99:08:e8:5c:0f:1c:d4:40:52:de: 98:0f:cb:b4:ad:18:12:f4:e0:f7:15:d9:bc:4a:17:11:53:ba: 1a:20:d3:37:dd:40:69:80:fb:7b:f6:36:ac:c6:0e:ca:a8:46: 13:c6:be:76:ff:4b:61:7b:0e:2d:24:5c:e3:0c:0b:20:ab:c9: 7b:96:db:5e:72:68:7e:7a:92:2c:dd:1e:42:a1:90:ee:b1:48: 75:10:65:af -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaCNcekBwvJ1YH4SQ/g6qJDpMGaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjAzN1oX DTI3MDUwMjAyMjUzN1owMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1 OTNBMTBDN0Y2NEE2RDRGQURENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJXazpuTgB0XvWj9lXUVCWF98fNHmKefPEZKdDnTiEh1jq2VjiNCHYYeb2N uZuzU/1XejQ1LOV0rGHkpjZl/jlMrgsLJuLAc8Kih5mMRV+g3pqa9pT9n7zTBXvq L2/3ZTpYi2wKvSi+GsMga9K0h41oxWhp/ZVeGQiqyYSRxF1GS7Ngd6g6iIWuA+Sz 1KzLFdTnDjzGW5sguoQpL7/Pe67W3E+qIEYF+Zl9JRio5vlZojeai3dB1jHryYsX cuELTU8WzG9AUCnKsXnoGYWzEEYSHWnAgDcNbBJ668uCJatr+Q2IVcPFxuAiiLtI cI2uOpeGs6EsiZTerixEB6iTirsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDpSpu9Fcy+C2UNZOhDH9kptT63UMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U5OWI2MDRmLTE1NzgtNGEwYi04ZjdhLTU4ZDlmMTNjOTc2OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lOTliNjA0 Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC8zQTUyQTZFRjQ1NzMyRjgy RDk0MzU5M0ExMEM3RjY0QTZENEZBREQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7c6MA0GCSqGSIb3DQEBCwUAA4IBAQCQW9WVDUMzVvJlOVSDh+tkysIJ8O0N NA0uz+bP8BO0GZ0bjTH1RK3at/6NNp+OGhU872UD+Cn2+jStS6bkCi0VDQr2B88J E2n2vpxSUzS+VdzP4kqdhIdDzYMjw9KceaaWg0DJAAEHf5r4Gg9AK5VHAu7ut1Fp 6JefQqRWrWpVrg65kWVBek1qHgdM/98MFZplTCGjnR1II5Aelh8nFwGkWcvzQNoU iy1daJkI6FwPHNRAUt6YD8u0rRgS9OD3Fdm8ShcRU7oaINM33UBpgPt79jasxg7K qEYTxr52/0thew4tJFzjDAsgq8l7lttecmh+epIs3R5CoZDusUh1EGWv -----END CERTIFICATE-----Generated at Tue May 12 22:03:23 2026 by rpki-client