$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer File: 3B15BA656D26B1B7E87FC6809B5DC98888377711.cer (raw, json) Hash identifier: W+K9M0oYqjeofoZpGEpMYrcvcoliRbaBxDRdzhUV4Rg= Subject key identifier: 3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C4DD4B2F1A7C77CD8B1888DFB582CAFA51C7B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:45 +0000 Certificate not after: Sun 02 May 2027 02:04:45 +0000 Subordinate resources: IP: 103.169.6.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4d:d4:b2:f1:a7:c7:7c:d8:b1:88:8d:fb:58:2c:af:a5:1c:7b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:59:45 2026 GMT Not After : May 2 02:04:45 2027 GMT Subject: CN=3B15BA656D26B1B7E87FC6809B5DC98888377711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:8e:3a:d5:fd:c8:c2:b8:3a:da:d4:5b:73: 07:6f:4b:06:67:0b:36:4c:df:f8:c6:2a:3d:a9:ac: 90:a3:55:c9:f8:0a:f8:71:a8:08:75:30:b5:dc:e0: 00:5b:4c:73:ee:80:43:d8:eb:d2:2e:84:d7:03:9e: 0f:4b:15:95:04:00:58:3c:a0:18:42:1e:93:a0:11: 36:76:d0:58:48:49:73:21:93:cb:a5:69:18:67:43: d2:f0:ee:fd:21:d1:1b:ac:d4:bd:ad:aa:f3:b2:fd: 43:20:91:35:dd:d4:b8:51:1f:52:0c:01:24:00:77: 97:d2:6a:f2:4a:62:5b:b4:b2:ed:c0:ee:8c:aa:73: a6:4e:c4:57:b8:8e:0a:3c:8a:80:4d:59:80:88:5f: 47:64:e6:b4:cb:05:0c:d1:0d:2c:99:5a:c2:8d:e9: f4:81:9b:e8:b5:d6:a8:54:1a:90:f1:31:81:20:a0: 83:9e:05:96:9e:4c:8f:07:b3:4e:89:27:e5:77:7e: 53:8a:8f:e3:1d:2b:43:0d:35:91:60:b8:6b:c1:1e: fc:79:99:c3:25:e3:77:92:1a:00:ae:33:ec:3b:aa: 59:c3:ba:55:9c:74:bf:6d:59:9f:a3:bd:6e:28:20: 8d:96:29:86:81:ae:8b:83:92:2b:ed:e7:ca:d1:29: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.6.0/23 Signature Algorithm: sha256WithRSAEncryption 18:ca:e7:9a:e0:4c:d7:89:48:0b:6e:d9:15:02:a6:0f:08:08: 57:b0:7c:aa:45:ab:9d:94:c1:42:cb:e3:32:50:ed:8b:9a:bc: 87:46:6d:36:06:10:de:fe:eb:a5:e1:ff:7e:23:00:30:68:41: 56:d0:36:f9:91:0e:35:37:8f:47:c1:71:76:1f:de:b5:c5:50: 55:e9:47:3b:d2:76:47:3d:29:51:d6:49:22:7c:68:84:27:37: 8c:e2:55:df:0d:d4:32:31:3d:35:5d:c7:b5:01:b4:ad:2f:f5: b0:71:00:a7:c0:23:63:01:b3:f6:40:d4:c5:8c:d1:aa:81:17: 34:c3:f2:ae:00:c8:7f:04:e3:5a:a6:27:75:dc:13:ed:8e:aa: 32:e3:4a:68:65:12:c8:70:ed:c9:d8:20:de:a1:1a:e7:83:82: 72:b7:b0:20:56:3e:29:26:1a:b1:b1:0b:41:10:3a:c0:21:db: 66:36:e4:08:03:03:c7:3b:e0:2f:14:b7:36:3d:d0:61:52:29: 20:86:3d:8c:c4:5c:b2:ff:8f:49:38:56:f7:7e:9e:93:af:f1: 11:3c:34:ad:55:4a:ce:78:e5:4e:25:3e:b7:76:4a:ad:c2:f2: 14:6e:c5:a8:6d:96:98:d8:63:a9:3d:0c:1f:66:cb:7e:d5:f3: db:49:ed:ff -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULE3UsvGnx3zYsYiN+1gsr6UcexgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTk0NVoX DTI3MDUwMjAyMDQ0NVowMzExMC8GA1UEAxMoM0IxNUJBNjU2RDI2QjFCN0U4N0ZD NjgwOUI1REM5ODg4ODM3NzcxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2ajjrV/cjCuDra1FtzB29LBmcLNkzf+MYqPamskKNVyfgK+HGoCHUwtdzg AFtMc+6AQ9jr0i6E1wOeD0sVlQQAWDygGEIek6ARNnbQWEhJcyGTy6VpGGdD0vDu /SHRG6zUva2q87L9QyCRNd3UuFEfUgwBJAB3l9Jq8kpiW7Sy7cDujKpzpk7EV7iO CjyKgE1ZgIhfR2TmtMsFDNENLJlawo3p9IGb6LXWqFQakPExgSCgg54Flp5Mjwez Tokn5Xd+U4qP4x0rQw01kWC4a8Ee/HmZwyXjd5IaAK4z7DuqWcO6VZx0v21Zn6O9 biggjZYphoGui4OSK+3nytEpUeECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDsVumVtJrG36H/GgJtdyYiIN3cRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q1M2U0YWY1LWFhZjUtNDZjZS1iMTE5LWQ3ZTc2ZGFlMjBiOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNTNlNGFm NS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC8zQjE1QkE2NTZEMjZCMUI3 RTg3RkM2ODA5QjVEQzk4ODg4Mzc3NzExLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6kGMA0GCSqGSIb3DQEBCwUAA4IBAQAYyuea4EzXiUgLbtkVAqYPCAhXsHyq RaudlMFCy+MyUO2LmryHRm02BhDe/uul4f9+IwAwaEFW0Db5kQ41N49HwXF2H961 xVBV6Uc70nZHPSlR1kkifGiEJzeM4lXfDdQyMT01Xce1AbStL/WwcQCnwCNjAbP2 QNTFjNGqgRc0w/KuAMh/BONapid13BPtjqoy40poZRLIcO3J2CDeoRrng4Jyt7Ag Vj4pJhqxsQtBEDrAIdtmNuQIAwPHO+AvFLc2PdBhUikghj2MxFyy/49JOFb3fp6T r/ERPDStVUrOeOVOJT63dkqtwvIUbsWobZaY2GOpPQwfZst+1fPbSe3/ -----END CERTIFICATE-----Generated at Wed May 13 00:43:30 2026 by rpki-client