$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer (raw, json) Hash identifier: S55xn+6pIF/a5hxdpwZ2UcfS98dfMWpIE6eHxRQLM6Y= Subject key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4DE657FBCB6F2CAF9F3DB7DA25DD19C523DCAE1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:01 +0000 Certificate not after: Sun 02 May 2027 01:38:01 +0000 Subordinate resources: IP: 103.143.70.0/23 IP: 2405:4a40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e6:57:fb:cb:6f:2c:af:9f:3d:b7:da:25:dd:19:c5:23:dc:ae:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:01 2026 GMT Not After : May 2 01:38:01 2027 GMT Subject: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:87:dc:23:86:e6:4c:c1:56:32:ab:14:88: dd:b9:9a:ad:1c:35:1b:44:25:49:e7:35:9b:d1:9c: f9:e2:db:d0:bb:f9:86:64:f1:63:b6:8c:5c:94:ff: 02:74:db:1a:08:f5:3f:01:87:1f:41:79:6b:a6:96: ce:59:cc:c9:71:7d:81:dd:47:35:b4:9d:58:60:21: 27:dd:9b:ae:1c:73:ab:40:61:e1:4a:18:90:c6:79: 99:43:ca:ea:e7:78:70:16:e0:27:b3:28:7b:e1:b3: 13:34:58:af:12:c4:70:1d:67:75:51:ca:8a:cc:cd: 5b:9c:1c:fa:fa:b8:8a:1c:2a:82:56:f8:17:66:87: ae:76:72:9b:56:46:4f:4e:a7:ab:81:b4:fa:f3:29: c5:85:d6:d0:0f:02:4a:51:3e:4e:24:2e:7e:70:d0: c4:4f:a2:e7:18:dd:3f:2c:04:62:0e:9d:35:45:15: a2:85:df:b7:e6:da:88:af:dc:21:93:e3:f4:de:fc: 53:40:ca:f2:58:76:bb:f9:da:ee:8d:52:a7:82:4c: e6:b1:c3:70:87:b1:c8:3c:6e:c8:70:d4:17:97:28: 0a:69:e7:45:92:f7:f6:ae:a1:53:c9:b7:7e:43:4f: 74:51:07:bb:9f:83:43:52:d4:0e:80:98:f2:4a:8f: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.70.0/23 IPv6: 2405:4a40::/32 Signature Algorithm: sha256WithRSAEncryption 02:f9:2b:8e:c5:2b:79:bf:ad:a4:f6:be:ed:58:88:b9:8e:2e: 86:cc:8a:a5:2a:19:0a:9b:23:b0:b1:71:11:a8:01:33:ec:37: 49:d2:f2:92:55:68:04:ae:69:e5:c0:6a:95:58:f4:33:4d:0b: 87:72:34:b2:0e:59:82:06:78:57:02:10:db:12:26:a6:3d:0f: bd:25:6a:3e:f3:b9:66:c9:bf:cb:5c:e6:f8:35:fa:02:24:dd: 10:5e:b8:c9:55:b2:91:97:ff:0f:55:4b:4a:61:23:25:64:2c: 9c:dc:81:1b:2d:93:e1:ef:a4:16:b2:46:64:7c:a7:9b:fe:2b: ac:08:66:ab:fb:0b:3a:65:91:a7:d2:e6:94:70:30:5d:c5:ba: ed:1d:09:f7:ad:81:69:48:2e:68:23:b8:ad:a1:66:37:5e:63: c3:9e:1e:b3:0c:31:c9:dd:08:b4:29:e1:1b:64:6b:3d:16:a0: 3c:ac:cc:ff:86:8d:22:84:65:d9:f2:cb:4a:69:96:79:66:00: 48:7d:b2:f3:e9:b0:88:73:cb:d0:88:7f:9d:dc:8e:d8:21:d1: a7:2a:55:80:a4:24:03:b5:20:86:24:22:47:a2:23:91:59:91: 73:b7:ee:6a:c5:4b:12:ac:dc:4a:0c:2b:18:c8:66:40:39:d0: 6b:b6:39:4c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUTeZX+8tvLK+fPbfaJd0ZxSPcrh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMwMVoX DTI3MDUwMjAxMzgwMVowMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIx OEZBRjk0MDY2NzVGQUY3MEIyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMpEh9wjhuZMwVYyqxSI3bmarRw1G0QlSec1m9Gc+eLb0Lv5hmTxY7aMXJT/ AnTbGgj1PwGHH0F5a6aWzlnMyXF9gd1HNbSdWGAhJ92brhxzq0Bh4UoYkMZ5mUPK 6ud4cBbgJ7Moe+GzEzRYrxLEcB1ndVHKiszNW5wc+vq4ihwqglb4F2aHrnZym1ZG T06nq4G0+vMpxYXW0A8CSlE+TiQufnDQxE+i5xjdPywEYg6dNUUVooXft+baiK/c IZPj9N78U0DK8lh2u/na7o1Sp4JM5rHDcIexyDxuyHDUF5coCmnnRZL39q6hU8m3 fkNPdFEHu5+DQ1LUDoCY8kqP8csCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDrVmarpbuFqXYIY+vlAZnX69wskMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4N2MyYjdlLTI2NjMtNGQ2OC1iMjVhLTVmY2YwNWUwN2JiNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hODdjMmI3 ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC8zQUQ1OTlBQUU5NkVFMTZB NUQ4MjE4RkFGOTQwNjY3NUZBRjcwQjI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ49GMA0EAgACMAcDBQAkBUpAMA0GCSqGSIb3DQEBCwUAA4IBAQAC+SuOxSt5 v62k9r7tWIi5ji6GzIqlKhkKmyOwsXERqAEz7DdJ0vKSVWgErmnlwGqVWPQzTQuH cjSyDlmCBnhXAhDbEiamPQ+9JWo+87lmyb/LXOb4NfoCJN0QXrjJVbKRl/8PVUtK YSMlZCyc3IEbLZPh76QWskZkfKeb/iusCGar+ws6ZZGn0uaUcDBdxbrtHQn3rYFp SC5oI7itoWY3XmPDnh6zDDHJ3Qi0KeEbZGs9FqA8rMz/ho0ihGXZ8stKaZZ5ZgBI fbLz6bCIc8vQiH+d3I7YIdGnKlWApCQDtSCGJCJHoiORWZFzt+5qxUsSrNxKDCsY yGZAOdBrtjlM -----END CERTIFICATE-----Generated at Tue May 12 22:03:34 2026 by rpki-client