$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer File: 3AF015F925061D7540F9BBFA45C6C7A944312663.cer (raw, json) Hash identifier: HmkFHaxPOr1mDUAP1+4CxPgCS76/VFa0X2nuacXUqLQ= Subject key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 358A2327E5DF92FAC36043872841FE87BBBA5803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:41 +0000 Certificate not after: Sun 02 May 2027 01:10:41 +0000 Subordinate resources: IP: 103.12.112.0/22 IP: 203.153.212.0/22 IP: 2404:e700::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8a:23:27:e5:df:92:fa:c3:60:43:87:28:41:fe:87:bb:ba:58:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:05:41 2026 GMT Not After : May 2 01:10:41 2027 GMT Subject: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:58:90:0a:55:bd:4b:80:ce:1d:e0:f8:b5: b5:9d:d2:dc:cf:28:82:b8:d2:07:39:ab:8f:38:ac: 0e:b0:b6:69:02:91:3c:5a:fb:68:86:f6:8b:53:3a: 22:ef:18:ab:d3:07:51:2f:0b:2d:1f:87:b6:4e:28: f4:b5:8b:98:ea:ed:a8:fd:54:86:cd:d3:18:3e:92: 06:7e:fe:9c:d0:1e:62:a8:39:0c:00:b6:97:f3:4a: b4:8d:38:fb:7b:3e:f7:aa:2d:df:cf:f1:c7:71:a4: af:95:32:4e:4a:c2:52:a4:e8:af:66:7c:d7:88:44: e8:5d:57:4f:e2:65:04:a6:b1:61:44:d5:38:0f:7e: c1:11:05:8b:91:6f:a4:9f:ff:49:d3:de:8f:3f:58: e3:e3:9b:37:a6:8f:6e:26:73:e4:5a:dc:a2:34:97: e9:2b:94:95:46:cc:3d:31:c0:2d:5b:f3:ee:a2:ef: d7:5b:ab:67:96:34:a3:6e:b2:6c:b3:c9:82:70:aa: 92:d1:46:db:c1:03:9c:19:78:21:4a:fe:32:44:bb: 3b:91:79:1b:c6:7a:ea:12:94:e5:bf:27:fc:c6:fe: a3:40:ed:dd:74:b3:5f:3c:f0:ea:14:ad:9d:a3:8b: 9a:29:cf:80:76:e9:5c:98:e8:87:a9:45:f5:02:b5: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.12.112.0/22 203.153.212.0/22 IPv6: 2404:e700::/32 Signature Algorithm: sha256WithRSAEncryption 36:e5:5d:2e:70:c4:7a:29:b0:71:8d:f1:75:2f:0b:94:51:02: 1d:38:43:d4:97:5a:04:18:34:25:17:f9:57:ea:27:b1:73:6f: f8:d9:29:83:19:f3:9c:83:e6:62:c2:dd:f4:d7:15:a7:de:69: 53:5a:9e:66:e7:96:a2:71:22:3f:c3:75:86:04:60:d9:5c:75: e9:e4:a8:33:f5:e1:c3:2b:bc:b0:ed:d7:c1:55:79:b9:93:c6: e8:30:1d:c4:db:32:a2:bd:b1:8c:95:dc:21:bd:f4:e4:84:e5: d7:6e:15:4b:dd:b9:3b:8b:86:ab:04:2a:12:f4:5b:0f:55:ca: c6:9d:dc:30:8e:44:23:63:8d:83:ef:36:ca:d6:10:96:c8:78: a9:a2:05:cd:e0:65:f1:da:e5:99:bd:3b:ab:13:20:9d:af:29: c9:5f:06:58:fc:7a:ec:0b:58:f7:d7:7e:2b:25:48:fb:17:e9: 9b:2e:7c:a1:64:21:50:ad:7f:be:0a:50:10:b3:29:19:b2:5b: da:a8:63:41:a5:6a:69:78:fc:3d:53:8c:83:c4:0d:55:9a:99: e5:39:50:96:7f:b1:70:b7:fe:77:23:0b:63:db:ae:65:de:20: 54:d6:76:d4:dd:bc:96:71:00:cb:61:e0:8f:66:1f:f7:b1:be: 77:63:58:96 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUNYojJ+XfkvrDYEOHKEH+h7u6WAMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDU0MVoX DTI3MDUwMjAxMTA0MVowMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlC QkZBNDVDNkM3QTk0NDMxMjY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCOWJAKVb1LgM4d4Pi1tZ3S3M8ogrjSBzmrjzisDrC2aQKRPFr7aIb2i1M6 Iu8Yq9MHUS8LLR+Htk4o9LWLmOrtqP1Uhs3TGD6SBn7+nNAeYqg5DAC2l/NKtI04 +3s+96ot38/xx3Gkr5UyTkrCUqTor2Z814hE6F1XT+JlBKaxYUTVOA9+wREFi5Fv pJ//SdPejz9Y4+ObN6aPbiZz5FrcojSX6SuUlUbMPTHALVvz7qLv11urZ5Y0o26y bLPJgnCqktFG28EDnBl4IUr+MkS7O5F5G8Z66hKU5b8n/Mb+o0Dt3XSzXzzw6hSt naOLminPgHbpXJjoh6lF9QK1BFECAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDrwFfklBh11QPm7+kXGx6lEMSZjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwMTVhODU1LWIyOWMtNDUwMi1hZjgxLWNiYjhiNGY3ZjBmNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MDE1YTg1 NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC8zQUYwMTVGOTI1MDYxRDc1 NDBGOUJCRkE0NUM2QzdBOTQ0MzEyNjYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZwxwAwQCy5nUMA0EAgACMAcDBQAkBOcAMA0GCSqGSIb3DQEBCwUAA4IBAQA2 5V0ucMR6KbBxjfF1LwuUUQIdOEPUl1oEGDQlF/lX6iexc2/42SmDGfOcg+Ziwt30 1xWn3mlTWp5m55aicSI/w3WGBGDZXHXp5Kgz9eHDK7yw7dfBVXm5k8boMB3E2zKi vbGMldwhvfTkhOXXbhVL3bk7i4arBCoS9FsPVcrGndwwjkQjY42D7zbK1hCWyHip ogXN4GXx2uWZvTurEyCdrynJXwZY/HrsC1j3134rJUj7F+mbLnyhZCFQrX++ClAQ sykZslvaqGNBpWppePw9U4yDxA1VmpnlOVCWf7Fwt/53Iwtj265l3iBU1nbU3byW cQDLYeCPZh/3sb53Y1iW -----END CERTIFICATE-----Generated at Tue May 12 22:03:46 2026 by rpki-client