$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer File: 3B5092CF38247651A4F776617E70229749D4DF27.cer (raw, json) Hash identifier: W29tIcPiHxYQXb3I1hdMK6pG+HKiCyQKTJ/CkOWuVqs= Subject key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 528B66AA3B5CCAB129CFD270A4E7F8DAFC9D4DBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:14 +0000 Certificate not after: Sun 02 May 2027 02:01:14 +0000 Subordinate resources: IP: 43.240.224.0/22 IP: 103.248.216.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8b:66:aa:3b:5c:ca:b1:29:cf:d2:70:a4:e7:f8:da:fc:9d:4d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:56:14 2026 GMT Not After : May 2 02:01:14 2027 GMT Subject: CN=3B5092CF38247651A4F776617E70229749D4DF27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:99:ee:0b:c0:0b:78:39:43:cd:22:2b:83: 75:ec:9b:30:f1:6e:1a:04:55:c2:59:fc:2b:06:01: a9:28:da:c0:e8:8f:b2:e4:73:03:7e:3d:81:f4:81: ba:10:52:e5:4f:db:ee:ad:e4:6d:58:de:94:33:00: 12:ec:76:79:bd:1f:4e:47:b7:0c:c3:0c:af:67:2a: a0:f5:61:78:0a:d1:17:4f:27:86:d8:66:73:cf:27: 33:5a:81:59:e8:e0:2c:85:ee:0f:b1:95:68:43:b3: 29:e0:cd:d9:e5:32:09:20:8f:91:29:58:35:c1:f6: d9:b4:ff:5a:03:10:3d:f1:c8:5e:fa:5d:40:c2:62: 8a:87:4e:a6:9d:35:f6:ea:85:09:80:c8:52:6c:5c: a1:da:22:c2:d8:c7:e3:d0:ae:b5:80:02:7b:97:b3: 74:77:ab:f5:a9:cc:d1:f2:c9:56:4c:e7:91:c4:61: 82:8a:b2:26:38:89:19:7d:45:c2:98:0f:b5:59:91: c9:7b:08:1d:ef:f1:77:ca:70:aa:89:6e:24:aa:6a: 63:6a:40:5c:cb:d0:23:25:a5:a8:c3:90:9d:25:f1: 61:e4:30:73:6a:d2:c7:96:5c:fe:de:fb:73:a2:7e: 93:ae:3f:50:2f:ca:99:7d:bd:1d:6e:bf:27:86:ed: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.224.0/22 103.248.216.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:9c:b5:a4:67:3c:e0:68:de:8f:0c:1e:31:49:4f:11:3f:83: 80:79:5b:87:7f:1e:57:5c:a3:99:95:f7:da:bf:5c:56:b9:71: d6:f8:4c:33:1c:35:5b:36:ee:ae:73:9e:2e:d1:0e:09:9b:f6: 3f:3f:f6:17:97:6e:1c:95:e6:e1:ee:5d:3c:30:b2:85:95:9a: 9d:52:a3:87:5b:a4:f6:72:7e:2b:c8:21:3a:1c:6f:c3:91:bd: 97:09:40:e3:f5:31:ac:74:c1:f5:b7:76:0c:a0:7d:7d:a7:44: 01:c5:29:4d:f9:07:b2:15:b0:57:62:0e:73:f5:e4:39:14:87: cf:5f:32:49:0e:55:05:bc:86:6a:68:1d:3a:45:0d:5f:5e:c9: eb:fa:ae:c1:e1:78:fd:81:22:e8:9c:de:67:4c:33:eb:29:3e: 3f:f5:f5:94:12:b3:eb:1c:7d:d6:ff:1d:58:08:63:01:18:ac: af:a9:7d:b3:e3:6a:78:d0:ef:a2:66:77:60:3f:2a:ea:a7:40: 5d:85:23:95:aa:d8:5d:07:f6:ed:ae:cc:78:59:8a:74:d2:14: 9b:b5:41:e9:6c:ab:94:47:d1:e0:88:36:c9:90:43:a1:75:dc: 53:7e:9c:a9:52:fb:c2:81:0a:8d:90:de:55:38:16:a0:e3:ad: 7d:ca:1b:2b -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUUotmqjtcyrEpz9JwpOf42vydTbwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTYxNFoX DTI3MDUwMjAyMDExNFowMzExMC8GA1UEAxMoM0I1MDkyQ0YzODI0NzY1MUE0Rjc3 NjYxN0U3MDIyOTc0OUQ0REYyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnome4LwAt4OUPNIiuDdeybMPFuGgRVwln8KwYBqSjawOiPsuRzA349gfSB uhBS5U/b7q3kbVjelDMAEux2eb0fTke3DMMMr2cqoPVheArRF08nhthmc88nM1qB WejgLIXuD7GVaEOzKeDN2eUyCSCPkSlYNcH22bT/WgMQPfHIXvpdQMJiiodOpp01 9uqFCYDIUmxcodoiwtjH49CutYACe5ezdHer9anM0fLJVkznkcRhgoqyJjiJGX1F wpgPtVmRyXsIHe/xd8pwqoluJKpqY2pAXMvQIyWlqMOQnSXxYeQwc2rSx5Zc/t77 c6J+k64/UC/KmX29HW6/J4btU5kCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDtQks84JHZRpPd2YX5wIpdJ1N8nMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NmYWJlYzcxLTdlY2ItNGRiZC1hNDIxLTk5YjljZDIwOTAzYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZmFiZWM3 MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8zQjUwOTJDRjM4MjQ3NjUx QTRGNzc2NjE3RTcwMjI5NzQ5RDRERjI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCK/DgAwQCZ/jYMA0GCSqGSIb3DQEBCwUAA4IBAQAbnLWkZzzgaN6PDB4xSU8R P4OAeVuHfx5XXKOZlffav1xWuXHW+EwzHDVbNu6uc54u0Q4Jm/Y/P/YXl24clebh 7l08MLKFlZqdUqOHW6T2cn4ryCE6HG/Dkb2XCUDj9TGsdMH1t3YMoH19p0QBxSlN +QeyFbBXYg5z9eQ5FIfPXzJJDlUFvIZqaB06RQ1fXsnr+q7B4Xj9gSLonN5nTDPr KT4/9fWUErPrHH3W/x1YCGMBGKyvqX2z42p40O+iZndgPyrqp0BdhSOVqthdB/bt rsx4WYp00hSbtUHpbKuUR9HgiDbJkEOhddxTfpypUvvCgQqNkN5VOBag4619yhsr -----END CERTIFICATE-----Generated at Tue May 12 22:02:56 2026 by rpki-client