$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer (raw, json) Hash identifier: LH6C867OQ50CWUhL8IvnIcfT4v0TTExtlKpVYlnm5ag= Subject key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53484402615874884FB53299E5ACBC5F53EEF6C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:03 +0000 Certificate not after: Sun 02 May 2027 01:53:03 +0000 Subordinate resources: IP: 103.170.115.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:48:44:02:61:58:74:88:4f:b5:32:99:e5:ac:bc:5f:53:ee:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:03 2026 GMT Not After : May 2 01:53:03 2027 GMT Subject: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:cc:d2:b2:05:b5:90:b0:00:99:c7:f5:dd: 7d:e1:3c:5b:68:17:58:69:9c:3e:e0:f9:d4:e6:22: 0c:a6:b9:54:bb:78:98:30:4a:e2:89:1e:81:08:12: 1e:a9:a0:b1:21:26:76:50:96:12:37:7f:61:c0:bf: 90:5c:72:84:c0:4e:79:e6:c9:90:1b:18:52:f4:7f: 1a:dd:dc:90:1d:a5:9e:8f:0e:cc:65:4a:a6:7f:14: 03:e6:5c:8c:e7:89:ee:b0:58:2e:f1:1d:67:7e:0d: 6f:d1:72:7f:66:d4:0b:ff:99:00:ba:47:0f:6f:90: 45:1f:d7:1f:a2:1a:23:74:3e:38:e2:f3:d6:09:d1: 6e:78:12:e7:b6:ca:63:52:a2:6d:1b:ad:d5:26:c8: df:3e:10:d1:de:92:d5:fc:ef:c1:86:1d:2a:9a:20: 4c:60:5d:59:37:4c:66:d7:3a:51:02:d9:89:84:c6: 33:0f:93:c4:63:ee:d8:e9:b4:1f:32:fd:82:6f:f6: 02:f6:22:cb:42:57:08:9b:49:d8:ee:9f:33:9f:36: 7d:46:05:21:f9:03:1c:c3:67:18:94:26:c9:0d:dd: 57:ac:ec:68:73:ab:eb:0b:d4:8a:c4:c8:92:0e:62: bc:49:4b:9d:1e:6e:2b:92:0f:6a:77:54:f0:c4:df: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.115.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:9e:76:16:03:7c:2d:99:54:04:20:46:a2:fe:6f:e4:da:7c: 31:5b:32:dd:29:cc:c0:89:39:5a:3d:cf:d1:a8:19:b0:c0:ef: f7:76:4e:3b:e3:24:d6:f9:fb:46:6c:d4:c4:be:ef:71:ea:ea: 67:ab:86:d1:35:3b:b7:47:ff:eb:55:6e:cd:64:e6:d2:ec:a7: 9d:ed:82:d7:53:e8:86:fd:04:50:84:12:33:c1:e5:10:43:81: d3:f0:1a:bc:ab:35:9f:b0:dd:ee:d6:07:8e:19:69:33:d9:9a: 9f:c1:09:2f:87:b2:d9:18:ce:f2:9f:13:d8:a1:02:42:c7:39: 36:c8:59:91:26:57:7a:8d:f3:48:20:34:f9:9b:c9:37:25:e1: 62:8e:98:bc:f5:85:28:83:52:26:6c:67:1e:5c:eb:c7:21:32: f0:f4:af:e2:2a:f0:da:43:d5:28:f4:a3:f6:a9:a7:16:85:80: e9:d4:59:97:41:95:70:3a:c2:69:25:b8:a3:51:33:b7:ea:63: ca:93:12:3f:c2:19:2c:8a:a5:7b:8d:ae:03:7f:6e:89:c5:9b: 88:47:b4:6f:17:ed:5f:01:6f:e9:48:72:2c:df:ab:91:e0:05: c6:bd:51:b8:fb:ff:d3:b5:e1:ce:f0:b1:b6:34:5c:38:da:cd: af:e6:c1:4f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUU0hEAmFYdIhPtTKZ5ay8X1Pu9sAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDgwM1oX DTI3MDUwMjAxNTMwM1owMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRD NEJBRUE4NjBEQTZBQUMxRUVFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAND/zNKyBbWQsACZx/XdfeE8W2gXWGmcPuD51OYiDKa5VLt4mDBK4okegQgS HqmgsSEmdlCWEjd/YcC/kFxyhMBOeebJkBsYUvR/Gt3ckB2lno8OzGVKpn8UA+Zc jOeJ7rBYLvEdZ34Nb9Fyf2bUC/+ZALpHD2+QRR/XH6IaI3Q+OOLz1gnRbngS57bK Y1KibRut1SbI3z4Q0d6S1fzvwYYdKpogTGBdWTdMZtc6UQLZiYTGMw+TxGPu2Om0 HzL9gm/2AvYiy0JXCJtJ2O6fM582fUYFIfkDHMNnGJQmyQ3dV6zsaHOr6wvUisTI kg5ivElLnR5uK5IPandU8MTffT0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDy2g2HKx6gI9/3EuuqGDaaqwe7vMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MxYmMzZjI5LTZmOWQtNDdkMy05ZTc3LWMyODllNWZlZTc4ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMWJjM2Yy OS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC8zQ0I2ODM2MUNBQzdBODA4 RjdGREM0QkFFQTg2MERBNkFBQzFFRUVGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6pzMA0GCSqGSIb3DQEBCwUAA4IBAQCcnnYWA3wtmVQEIEai/m/k2nwxWzLd KczAiTlaPc/RqBmwwO/3dk474yTW+ftGbNTEvu9x6upnq4bRNTu3R//rVW7NZObS 7Ked7YLXU+iG/QRQhBIzweUQQ4HT8Bq8qzWfsN3u1geOGWkz2ZqfwQkvh7LZGM7y nxPYoQJCxzk2yFmRJld6jfNIIDT5m8k3JeFijpi89YUog1ImbGceXOvHITLw9K/i KvDaQ9Uo9KP2qacWhYDp1FmXQZVwOsJpJbijUTO36mPKkxI/whksiqV7ja4Df26J xZuIR7RvF+1fAW/pSHIs36uR4AXGvVG4+//TteHO8LG2NFw42s2v5sFP -----END CERTIFICATE-----Generated at Tue May 12 22:52:42 2026 by rpki-client