$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer (raw, json) Hash identifier: aP/2m9m8GPlWNngVJY+eRWzYMxtzGQHFBIJRJ5XoL9I= Subject key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 030DB7C3C8C813929CF6644BDACDCD0A7CDB4588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:37 +0000 Certificate not after: Sun 02 May 2027 01:50:37 +0000 Subordinate resources: IP: 202.149.64.0/19 IP: 2405:5100::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0d:b7:c3:c8:c8:13:92:9c:f6:64:4b:da:cd:cd:0a:7c:db:45:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:45:37 2026 GMT Not After : May 2 01:50:37 2027 GMT Subject: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:ff:fd:80:b6:81:b6:0c:11:c0:71:ce:c6: 7f:37:42:5c:ab:e9:ac:43:d4:b3:0f:74:7b:e3:9f: 5b:f1:2f:67:34:b4:54:8e:57:cc:84:9b:99:22:db: df:dd:40:28:4b:c1:6b:2e:c7:d4:23:64:b6:90:aa: 24:d1:5e:87:fc:a2:47:dc:4a:05:62:95:52:b1:81: 3d:c2:32:5b:7a:23:b0:d9:32:d8:f7:f5:d4:42:6d: 17:68:52:c0:77:43:67:99:1a:1d:b8:d4:ee:4f:1e: d9:34:4a:06:7d:58:51:08:52:e2:0b:12:05:ca:a8: d2:2a:80:f7:96:e9:45:6d:53:3e:2d:c8:2d:4c:2a: 11:ab:70:8d:68:cd:5d:0d:6e:3f:cf:2b:04:f2:87: 96:ea:e2:c7:82:c2:3e:b5:9a:0d:19:ac:d9:dc:5e: 4e:3c:79:d5:7e:b7:01:50:af:6d:92:64:2e:a9:18: e9:45:54:b6:b1:3c:37:a7:f9:8e:f4:63:44:fe:c9: f0:48:16:76:e2:ad:98:36:ae:ba:15:30:9d:43:62: ce:f9:64:3b:f9:a0:51:8b:89:a6:18:f6:b7:c2:a0: eb:f1:a6:d0:4d:5c:d4:a2:ad:ec:35:b6:54:d4:b3: ac:81:11:ab:c1:bb:f3:21:be:3b:4e:c8:8c:53:79: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.149.64.0/19 IPv6: 2405:5100::/32 Signature Algorithm: sha256WithRSAEncryption 82:ca:2b:ae:a6:3f:6a:36:b1:a1:28:9e:7b:ce:79:dd:c6:6f: 64:eb:b8:1f:bc:9e:33:7a:8e:89:aa:48:52:8c:fe:6e:22:5c: eb:2f:06:83:9e:6c:fe:f9:b2:5c:e7:bd:53:6e:8c:71:fd:b3: 74:ef:f5:07:51:62:e7:05:2f:53:fa:32:b3:70:7b:17:b0:90: 74:0b:39:1b:55:cb:9e:00:c0:d2:9a:06:0b:0e:a2:40:7a:2f: 25:2b:29:7c:1b:90:b5:50:6d:7a:47:45:1a:67:63:21:fb:7a: d7:d5:d1:43:af:44:11:ce:0a:1b:59:a4:8a:7b:d1:62:dc:3b: 90:a6:96:58:53:71:a7:47:aa:5a:11:ab:f2:5b:e4:9d:bd:7b: 99:8d:b6:ca:11:82:9b:9e:f7:cc:a7:c4:6d:7b:6e:28:49:31: c5:b9:33:7b:ea:d2:81:f2:d5:2e:e7:c3:ad:d4:ab:8a:89:38: be:f5:99:e8:e4:6c:5a:68:af:15:9d:e5:4a:c9:4a:7e:27:3d: 67:4f:fc:be:87:81:4a:4e:c3:10:cb:af:a1:da:6e:31:17:28: 32:f9:40:38:93:21:38:96:e2:ff:f2:74:ec:f3:e1:ad:4d:35: 9d:dd:a2:46:1e:28:ff:9e:2d:c8:d2:36:1d:11:c4:c5:a2:48: 19:51:cf:07 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUAw23w8jIE5Kc9mRL2s3NCnzbRYgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDUzN1oX DTI3MDUwMjAxNTAzN1owMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENF ODk3NjNBQjM5M0E2MUQ1NUFFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOQ//2AtoG2DBHAcc7GfzdCXKvprEPUsw90e+OfW/EvZzS0VI5XzISbmSLb 391AKEvBay7H1CNktpCqJNFeh/yiR9xKBWKVUrGBPcIyW3ojsNky2Pf11EJtF2hS wHdDZ5kaHbjU7k8e2TRKBn1YUQhS4gsSBcqo0iqA95bpRW1TPi3ILUwqEatwjWjN XQ1uP88rBPKHlurix4LCPrWaDRms2dxeTjx51X63AVCvbZJkLqkY6UVUtrE8N6f5 jvRjRP7J8EgWduKtmDauuhUwnUNizvlkO/mgUYuJphj2t8Kg6/Gm0E1c1KKt7DW2 VNSzrIERq8G78yG+O07IjFN5nxkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDy93+pL5raEX4zol2OrOTph1VrpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JkZDFlYWNkLWEwNjctNDkyNC05Mjg0LWJjNmYxMGQ4ZDVhOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZGQxZWFj ZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8zQ0JEREZFQTRCRTZCNjg0 NUY4Q0U4OTc2M0FCMzkzQTYxRDU1QUU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQFypVAMA0EAgACMAcDBQAkBVEAMA0GCSqGSIb3DQEBCwUAA4IBAQCCyiuupj9q NrGhKJ57znndxm9k67gfvJ4zeo6JqkhSjP5uIlzrLwaDnmz++bJc571Tboxx/bN0 7/UHUWLnBS9T+jKzcHsXsJB0CzkbVcueAMDSmgYLDqJAei8lKyl8G5C1UG16R0Ua Z2Mh+3rX1dFDr0QRzgobWaSKe9Fi3DuQppZYU3GnR6paEavyW+SdvXuZjbbKEYKb nvfMp8Rte24oSTHFuTN76tKB8tUu58Ot1KuKiTi+9Zno5GxaaK8VneVKyUp+Jz1n T/y+h4FKTsMQy6+h2m4xFygy+UA4kyE4luL/8nTs8+GtTTWd3aJGHij/ni3I0jYd EcTFokgZUc8H -----END CERTIFICATE-----Generated at Tue May 12 22:03:22 2026 by rpki-client