$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer File: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer (raw, json) Hash identifier: Oq54tBPBBmMLz1v9zwjabe0PNgClT2k+RNFva0Bsg9s= Subject key identifier: 3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D072DE54FD2A563C64323CB02406DF722673127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:15 +0000 Certificate not after: Sun 02 May 2027 01:59:15 +0000 Subordinate resources: IP: 103.171.240.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:07:2d:e5:4f:d2:a5:63:c6:43:23:cb:02:40:6d:f7:22:67:31:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:54:15 2026 GMT Not After : May 2 01:59:15 2027 GMT Subject: CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:d0:65:09:72:83:07:50:21:76:d1:53:85: 6c:2c:84:b9:c6:3a:5c:21:5b:0b:bc:9c:22:d9:a7: 9c:2e:72:4a:dc:7a:32:b8:a9:71:3b:1d:58:1c:f3: e3:56:9a:11:a5:5a:4c:9d:93:7d:9e:59:0f:5d:c5: 4e:2e:ad:0f:01:56:70:d4:20:0a:7a:43:c3:2c:b4: da:0f:b7:13:86:42:51:0d:63:6f:a0:01:d4:5d:90: 99:b9:f6:27:46:13:0e:8d:5d:80:47:3b:68:7d:a2: 99:a7:4d:1c:3d:b3:1e:35:ae:14:91:03:fb:25:99: 07:ca:63:09:47:b1:e9:98:13:0c:f0:0b:c5:b0:dc: 97:76:60:e1:b8:67:aa:af:e0:52:8a:27:ff:4a:2d: a2:ba:32:af:c1:b3:73:7c:18:66:95:b2:30:4a:f3: a8:72:3b:c3:0a:f8:87:f4:1f:40:ed:bd:dd:5f:ec: 86:f5:d1:7a:c7:f0:49:bd:1e:52:f6:d2:d0:ad:d6: 53:fa:24:0d:4f:87:2a:96:58:20:5b:11:d8:75:59: 89:94:4e:a1:63:4d:ac:67:0b:81:7a:f8:13:6d:86: 19:da:4c:4b:2e:cf:9a:95:f7:a1:a4:8c:eb:73:1b: 94:ed:a9:9b:36:d7:5b:1a:4b:01:2b:a0:d9:8c:0e: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.240.0/23 Signature Algorithm: sha256WithRSAEncryption 77:51:5e:ff:48:99:10:b9:2e:fe:77:c8:b8:09:f1:6d:48:c4: a4:eb:e8:6f:2e:56:86:9c:23:98:70:78:24:00:5b:db:c9:98: 16:89:b1:cc:a5:2d:ea:00:11:b2:d4:12:4f:70:b8:53:e0:cd: ad:84:96:8b:7b:2c:dc:0c:7e:bf:d3:aa:12:a1:e6:1a:ca:72: fc:4a:9d:11:f8:20:35:6e:b2:72:77:68:14:53:b1:d6:6b:ab: bc:03:f9:ac:ea:3a:af:5b:1d:f3:15:2b:95:05:c3:8f:93:5a: 87:c0:75:c9:49:82:d9:ff:53:27:b2:88:ca:9c:d4:e8:06:3f: 8c:84:1e:a6:b2:1e:46:96:d4:ee:76:92:81:71:fe:0f:77:ac: 58:22:64:6f:07:c2:4e:f3:57:63:41:f0:a9:ad:1d:ec:0d:59: d3:7e:e4:c6:ee:e5:80:51:a1:fe:5e:7d:d9:3d:fa:61:da:69: fb:89:a1:ed:8b:e6:35:b2:2e:ac:4d:02:6d:a2:9e:f0:f4:fc: 79:de:59:da:09:97:99:be:e5:6c:b7:08:1d:cf:87:37:17:8b: 8f:23:15:0d:7a:69:30:bc:eb:02:55:c3:66:32:96:c7:c9:7d: 26:02:73:21:8c:07:7a:d5:b2:17:00:ac:29:50:4a:6e:e0:1e: 52:26:1f:e8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXQct5U/SpWPGQyPLAkBt9yJnMScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTQxNVoX DTI3MDUwMjAxNTkxNVowMzExMC8GA1UEAxMoM0M1QjM2OUVFQzZBMjRCMjUxNEJF OTY1OEMwRDM4N0E5NUQ0QUU0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrV0GUJcoMHUCF20VOFbCyEucY6XCFbC7ycItmnnC5yStx6MripcTsdWBzz 41aaEaVaTJ2TfZ5ZD13FTi6tDwFWcNQgCnpDwyy02g+3E4ZCUQ1jb6AB1F2Qmbn2 J0YTDo1dgEc7aH2imadNHD2zHjWuFJED+yWZB8pjCUex6ZgTDPALxbDcl3Zg4bhn qq/gUoon/0otoroyr8Gzc3wYZpWyMErzqHI7wwr4h/QfQO293V/shvXResfwSb0e UvbS0K3WU/okDU+HKpZYIFsR2HVZiZROoWNNrGcLgXr4E22GGdpMSy7PmpX3oaSM 63MblO2pmzbXWxpLASug2YwO+DcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDxbNp7saiSyUUvpZYwNOHqV1K5IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NiNDNmNzg2LTgyMzUtNGE5MC04YTA3LTVkZjljNmQ2NDQ0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYjQzZjc4 Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC8zQzVCMzY5RUVDNkEyNEIy NTE0QkU5NjU4QzBEMzg3QTk1RDRBRTQ4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6vwMA0GCSqGSIb3DQEBCwUAA4IBAQB3UV7/SJkQuS7+d8i4CfFtSMSk6+hv LlaGnCOYcHgkAFvbyZgWibHMpS3qABGy1BJPcLhT4M2thJaLeyzcDH6/06oSoeYa ynL8Sp0R+CA1brJyd2gUU7HWa6u8A/ms6jqvWx3zFSuVBcOPk1qHwHXJSYLZ/1Mn sojKnNToBj+MhB6msh5GltTudpKBcf4Pd6xYImRvB8JO81djQfCprR3sDVnTfuTG 7uWAUaH+Xn3ZPfph2mn7iaHti+Y1si6sTQJtop7w9Px53lnaCZeZvuVstwgdz4c3 F4uPIxUNemkwvOsCVcNmMpbHyX0mAnMhjAd61bIXAKwpUEpu4B5SJh/o -----END CERTIFICATE-----Generated at Wed May 13 00:34:06 2026 by rpki-client