$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer File: 3B905656ECAB5F25C747565B1F6158A544607342.cer (raw, json) Hash identifier: VCO3W4QOjAIeM2YhxssS3mvqvTVxK80tPJtcOZdBrGc= Subject key identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D30DD8F50C665498DD9DA28DD1E0CE51C572AD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:11 +0000 Certificate not after: Sun 02 May 2027 01:32:11 +0000 Subordinate resources: IP: 103.156.140.0/23 IP: 2406:89c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:30:dd:8f:50:c6:65:49:8d:d9:da:28:dd:1e:0c:e5:1c:57:2a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:27:11 2026 GMT Not After : May 2 01:32:11 2027 GMT Subject: CN=3B905656ECAB5F25C747565B1F6158A544607342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:87:b2:c7:00:3e:3c:9d:ea:3d:3f:96:f7: 34:3a:c5:08:ca:b4:c5:aa:64:dc:5e:99:85:a8:f8: 94:02:10:d1:4d:cc:24:f0:ea:a4:ce:39:0e:68:a1: d6:db:05:16:51:1e:0c:47:46:cc:e5:fe:0b:c4:e1: 0f:fd:1c:54:14:ba:48:ff:b6:a2:6a:c3:af:48:33: 19:cc:db:c1:53:55:03:03:18:20:ca:24:6d:80:c4: d5:c9:c4:75:a8:62:00:8f:23:4d:39:04:29:4e:5f: ad:9d:79:1f:b3:d4:f3:cb:07:3c:25:11:29:0b:f3: bd:82:03:77:1a:31:d3:6b:5f:a4:91:85:3d:44:1d: b7:57:d6:25:43:83:0b:29:a7:ec:d8:4f:f0:77:80: 55:10:08:53:00:33:02:c8:fe:c9:ef:81:3f:80:c4: dc:07:e3:58:36:b5:16:a6:8a:51:29:f9:e9:16:63: 92:cb:83:31:cd:9b:50:5f:e4:7f:dd:c9:aa:de:b4: 62:23:38:82:90:a0:77:b1:64:b1:f4:0c:51:f1:1c: f2:c9:1b:8a:99:e1:88:ae:fd:ed:de:ed:7a:d5:db: 21:ff:fe:a8:d6:b1:c9:9e:88:8e:bf:ee:1f:99:4a: e6:0f:00:5f:52:bf:74:88:df:ed:a5:8d:c3:c6:a6: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.140.0/23 IPv6: 2406:89c0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:57:8c:1a:2a:e5:4d:16:da:96:c9:87:79:69:d8:a5:b4:58: 3d:77:1e:fb:fd:36:34:b6:42:80:4f:dc:19:a8:14:b5:53:a6: 0d:5b:74:62:0e:a5:10:d0:ec:e5:c8:20:94:40:35:bb:c8:9c: ce:16:48:c1:53:f5:06:fa:f4:dd:88:20:7b:1d:96:f9:75:c4: 2b:b6:4f:44:96:da:9e:4f:c3:94:56:94:21:88:b5:4e:67:90: c5:e2:7e:fb:a4:d5:f4:47:96:05:f0:e6:4f:a4:3e:5a:99:b6: 1f:a7:41:43:80:0f:67:4a:43:83:2d:58:d4:cc:cc:a6:18:97: bd:74:8d:4d:57:0a:6e:b4:f9:36:1e:cf:95:2e:37:7c:05:e2: 50:41:3a:a2:d6:fc:0d:37:a5:3d:c0:f2:73:37:14:54:70:cf: 51:55:10:ac:5c:a0:c8:c4:31:26:02:90:f4:b6:36:16:17:76: c6:b5:4d:40:d3:35:58:a4:74:d3:9d:61:33:20:da:6b:84:bb: bc:4b:f6:08:c7:1f:b2:82:a7:7f:a7:b8:15:ef:0f:29:f3:16: 98:c0:73:e9:fb:e7:81:85:07:a5:36:24:09:4a:d9:a8:0d:3d: 10:6b:65:05:2f:85:92:74:8a:18:62:d6:b1:9a:aa:c4:df:33: c3:30:39:6c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUPTDdj1DGZUmN2doo3R4M5RxXKtQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjcxMVoX DTI3MDUwMjAxMzIxMVowMzExMC8GA1UEAxMoM0I5MDU2NTZFQ0FCNUYyNUM3NDc1 NjVCMUY2MTU4QTU0NDYwNzM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI4ch7LHAD48neo9P5b3NDrFCMq0xapk3F6Zhaj4lAIQ0U3MJPDqpM45Dmih 1tsFFlEeDEdGzOX+C8ThD/0cVBS6SP+2omrDr0gzGczbwVNVAwMYIMokbYDE1cnE dahiAI8jTTkEKU5frZ15H7PU88sHPCURKQvzvYIDdxox02tfpJGFPUQdt1fWJUOD Cymn7NhP8HeAVRAIUwAzAsj+ye+BP4DE3AfjWDa1FqaKUSn56RZjksuDMc2bUF/k f93Jqt60YiM4gpCgd7FksfQMUfEc8skbipnhiK797d7tetXbIf/+qNaxyZ6Ijr/u H5lK5g8AX1K/dIjf7aWNw8amsQUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDuQVlbsq18lx0dWWx9hWKVEYHNCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EwOTE3OTNlLWJkNjktNDVhNC05N2E4LWM2OGFhM2RkNDdhMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMDkxNzkz ZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC8zQjkwNTY1NkVDQUI1RjI1 Qzc0NzU2NUIxRjYxNThBNTQ0NjA3MzQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5yMMA0EAgACMAcDBQAkBonAMA0GCSqGSIb3DQEBCwUAA4IBAQCNV4waKuVN FtqWyYd5adiltFg9dx77/TY0tkKAT9wZqBS1U6YNW3RiDqUQ0OzlyCCUQDW7yJzO FkjBU/UG+vTdiCB7HZb5dcQrtk9EltqeT8OUVpQhiLVOZ5DF4n77pNX0R5YF8OZP pD5ambYfp0FDgA9nSkODLVjUzMymGJe9dI1NVwputPk2Hs+VLjd8BeJQQTqi1vwN N6U9wPJzNxRUcM9RVRCsXKDIxDEmApD0tjYWF3bGtU1A0zVYpHTTnWEzINprhLu8 S/YIxx+ygqd/p7gV7w8p8xaYwHPp++eBhQelNiQJStmoDT0Qa2UFL4WSdIoYYtax mqrE3zPDMDls -----END CERTIFICATE-----Generated at Tue May 12 22:03:48 2026 by rpki-client