$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.cer (raw, json) Hash identifier: XbLMmhv7Bw8lxzuR+k1jyUUdEHt4KDUtabBVC+e63Pc= Subject key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 50F1BE675D7C3452661F48D84DD1FD5C5B183EE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:13:11 +0000 Certificate not after: Sun 02 May 2027 00:18:11 +0000 Subordinate resources: IP: 103.165.148.0/23 IP: 2001:df3:1940::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f1:be:67:5d:7c:34:52:66:1f:48:d8:4d:d1:fd:5c:5b:18:3e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:13:11 2026 GMT Not After : May 2 00:18:11 2027 GMT Subject: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:14:57:e1:69:eb:74:70:27:64:84:d0:b2: fd:e6:2e:ab:ed:9b:31:a9:55:4b:9c:f0:fc:98:c5: 8f:5b:c3:f7:be:77:58:46:e1:82:56:5e:5f:97:83: c2:45:0b:49:58:b7:fe:8a:18:42:63:ba:ba:ac:db: 66:ca:1a:1f:95:e8:a4:2d:d9:d4:3d:0e:f3:bd:06: 33:0d:3d:f0:5a:89:1c:72:16:96:d5:e8:1d:62:de: 9a:fd:95:a2:dd:1d:3d:c0:b9:57:1a:11:ee:34:fb: b9:76:c0:57:13:e9:ef:83:d5:d3:fb:ec:c2:d7:bb: a4:f1:e5:79:7e:c7:ff:c1:3b:82:af:82:13:6a:fa: 80:fb:1c:f9:48:37:a5:f7:5b:ca:c3:62:46:6e:5c: d6:4a:da:e9:ea:de:dd:25:7c:83:c4:7c:98:06:e5: 74:23:4f:db:71:d3:d0:d1:ee:37:73:a5:66:3b:d6: 2e:6b:40:82:48:0a:42:4d:cc:7a:f4:c2:c1:28:26: 7a:6c:75:25:b8:36:83:a5:b7:ae:c6:4b:1a:2d:3f: cc:b4:b3:41:b1:dc:56:2e:56:4e:4d:e8:d1:ae:24: b2:df:e2:e0:b8:4d:a0:c3:eb:06:10:15:19:82:34: 85:db:d7:2e:d0:ea:52:1a:7d:93:f4:0f:2c:0f:86: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.148.0/23 IPv6: 2001:df3:1940::/48 Signature Algorithm: sha256WithRSAEncryption 74:dd:80:c6:c6:9e:2a:cc:78:2b:45:f3:42:38:f5:51:d6:63: 0f:97:ca:37:1d:bf:e5:25:64:0f:a3:94:28:c3:82:22:54:a3: c9:b3:d9:1e:23:f7:ba:22:83:d1:4e:98:b9:02:8d:28:6d:65: 7e:84:93:54:0e:81:99:9e:d1:18:8f:6b:bf:e5:94:af:69:fc: 7c:42:cb:60:32:82:07:67:aa:64:91:9f:7f:aa:25:50:03:2c: a4:29:4a:93:97:d6:3e:8d:cd:5d:36:a5:bc:4f:39:30:97:5b: f4:63:79:f6:8b:4e:8d:4a:26:09:6c:d0:f9:dd:bd:81:34:ba: c1:48:4f:08:d0:21:eb:6b:24:21:66:bc:d7:a8:36:d0:57:4f: c5:67:e5:b1:75:db:d4:05:06:ce:71:51:85:27:f0:2b:d2:6d: 6f:20:2f:03:41:f1:3c:9c:6d:78:15:dd:9b:1c:3c:7c:ae:e4: d3:79:36:ef:8c:e9:20:ff:33:6e:2c:11:f5:08:fc:28:9e:2c: d3:fe:d1:92:26:26:5a:15:6e:b4:91:7c:6b:cd:d0:e4:57:58: 50:80:95:b9:40:43:d3:30:f3:85:7f:e1:0a:0d:5f:7f:b8:c1: 47:2d:d2:9e:60:1c:ad:15:de:71:8e:2a:a4:0b:92:4c:71:bb: c1:3c:08:c7 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUUPG+Z118NFJmH0jYTdH9XFsYPugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTMxMVoX DTI3MDUwMjAwMTgxMVowMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0 MTRERTM2MkU0MDVGMzFEMzJEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAME0FFfhaet0cCdkhNCy/eYuq+2bMalVS5zw/JjFj1vD9753WEbhglZeX5eD wkULSVi3/ooYQmO6uqzbZsoaH5XopC3Z1D0O870GMw098FqJHHIWltXoHWLemv2V ot0dPcC5VxoR7jT7uXbAVxPp74PV0/vswte7pPHleX7H/8E7gq+CE2r6gPsc+Ug3 pfdbysNiRm5c1kra6ere3SV8g8R8mAbldCNP23HT0NHuN3OlZjvWLmtAgkgKQk3M evTCwSgmemx1Jbg2g6W3rsZLGi0/zLSzQbHcVi5WTk3o0a4kst/i4LhNoMPrBhAV GYI0hdvXLtDqUhp9k/QPLA+GuL8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDtJAT9ztaevE39BTeNi5AXzHTLcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMyZjNmNWQ5LWNmYjgtNDEyMy1hMmIxLWIwYjUyOTlmOWM2ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMmYzZjVk OS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC8zQjQ5MDEzRjczQjVBN0FG MTM3RjQxNERFMzYyRTQwNUYzMUQzMkRDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ6WUMA8EAgACMAkDBwAgAQ3zGUAwDQYJKoZIhvcNAQELBQADggEBAHTdgMbG nirMeCtF80I49VHWYw+Xyjcdv+UlZA+jlCjDgiJUo8mz2R4j97oig9FOmLkCjSht ZX6Ek1QOgZme0RiPa7/llK9p/HxCy2AyggdnqmSRn3+qJVADLKQpSpOX1j6NzV02 pbxPOTCXW/RjefaLTo1KJgls0PndvYE0usFITwjQIetrJCFmvNeoNtBXT8Vn5bF1 29QFBs5xUYUn8CvSbW8gLwNB8TycbXgV3ZscPHyu5NN5Nu+M6SD/M24sEfUI/Cie LNP+0ZImJloVbrSRfGvN0ORXWFCAlblAQ9Mw84V/4QoNX3+4wUct0p5gHK0V3nGO KqQLkkxxu8E8CMc= -----END CERTIFICATE-----Generated at Tue May 12 22:16:53 2026 by rpki-client