$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer (raw, json) Hash identifier: c3MWT0qntHUjN9SLHuTQoo+R47kYfuIoaEW/L9qY3/Y= Subject key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 557A1B14F1FBECC0E265B3C1EDF0926668E878AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:46:30 +0000 Certificate not after: Sun 02 May 2027 00:51:30 +0000 Subordinate resources: IP: 103.184.50.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7a:1b:14:f1:fb:ec:c0:e2:65:b3:c1:ed:f0:92:66:68:e8:78:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:46:30 2026 GMT Not After : May 2 00:51:30 2027 GMT Subject: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:eb:aa:ea:ad:b6:1f:7b:ef:bf:37:cd:a5: 5f:e2:e1:6b:04:67:e8:6b:ec:03:27:47:79:1d:83: 14:ad:a7:10:d0:0c:00:f6:35:fd:bd:f4:17:1b:98: d6:4a:fc:c8:ec:a8:ec:ff:c6:fb:af:2d:36:65:e5: 5a:eb:e4:d1:a3:4e:2d:6c:18:8d:6c:89:5b:40:e5: ca:55:05:27:34:91:bb:4e:f7:15:44:39:2b:c3:56: af:e9:66:f7:93:06:e5:af:ab:37:ab:a8:22:42:18: 5c:12:cd:b6:e8:8f:11:2c:d0:3a:22:c3:2d:67:8a: de:50:bd:87:4b:5f:ef:6d:55:a1:fd:bf:eb:97:2f: 47:9d:21:30:48:f0:b0:07:df:ec:a3:2c:fc:88:2e: 63:f4:9d:bc:88:88:9c:4b:75:9d:c3:ce:67:24:de: ed:2f:bd:f6:6a:89:e7:9a:89:53:6c:b6:47:6e:cc: bc:9b:c0:7d:e6:27:f0:6d:c9:55:b3:b8:d4:a5:7b: f6:30:be:70:00:b2:b1:36:e3:e1:75:43:11:59:7b: a4:66:f2:9f:82:6a:3d:73:81:87:a5:72:5c:46:2d: 37:77:c1:c4:88:a1:f5:ee:29:af:26:4e:55:db:5a: c0:77:2d:e1:6b:0d:1f:86:c0:9f:e5:ca:d2:32:40: 47:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.50.0/23 Signature Algorithm: sha256WithRSAEncryption 59:0b:2d:d7:b0:a9:d8:57:94:6e:8f:9a:0f:d3:33:54:9b:f7: 00:b5:c9:5e:b7:d4:26:ad:73:71:2f:5c:a2:21:7e:de:fc:fe: dd:b6:0c:e9:e3:b6:d2:76:31:24:03:b2:b0:ab:10:d3:2c:89: 33:7a:16:33:4a:5f:d9:7a:24:41:e0:8a:f4:ac:72:61:04:73: ec:d8:38:5d:89:03:30:e1:b8:1b:d0:bf:0a:30:4b:e7:6e:f4: 19:0c:07:c7:24:68:c3:ee:65:c3:1a:40:0d:40:2b:33:24:fd: 65:df:58:99:e8:41:f0:e7:d0:ec:3e:73:41:c4:4a:9b:b0:3a: f0:57:d0:52:9f:af:4c:a7:7a:4c:7a:d5:99:d4:f9:40:f7:1e: b3:44:ce:5b:40:ce:ab:9c:89:2e:64:95:a2:fe:4e:66:30:25: a6:42:23:f6:69:2d:fe:6d:c6:c5:62:85:f9:82:8f:59:ba:c1: d4:af:ba:df:2a:c3:79:ff:01:3b:b1:46:e6:5c:88:ee:1d:72: 11:e9:56:f3:18:4d:01:e8:76:9b:4a:79:8e:48:22:8b:8c:e0: f2:3a:5a:c8:e2:d4:dd:66:61:ce:97:d3:6e:4d:b8:51:c7:ce: 82:e6:2a:ea:74:b0:b9:b9:3f:4a:2a:cd:d2:3d:da:00:83:f2: 7b:3b:f4:88 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVXobFPH77MDiZbPB7fCSZmjoeKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDYzMFoX DTI3MDUwMjAwNTEzMFowMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlD NjI0NURGMDE3MDE3MjgwNUVDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALz566rqrbYfe++/N82lX+LhawRn6GvsAydHeR2DFK2nENAMAPY1/b30FxuY 1kr8yOyo7P/G+68tNmXlWuvk0aNOLWwYjWyJW0DlylUFJzSRu073FUQ5K8NWr+lm 95MG5a+rN6uoIkIYXBLNtuiPESzQOiLDLWeK3lC9h0tf721Vof2/65cvR50hMEjw sAff7KMs/IguY/SdvIiInEt1ncPOZyTe7S+99mqJ55qJU2y2R27MvJvAfeYn8G3J VbO41KV79jC+cACysTbj4XVDEVl7pGbyn4JqPXOBh6VyXEYtN3fBxIih9e4pryZO VdtawHct4WsNH4bAn+XK0jJAR/cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDzRrKPW/8072InGJF3wFwFygF7AMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYzYzE5N2Y4LTRlMmUtNDZkOS1iZTJiLWUzNDhhMTMzZGM1Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82M2MxOTdm OC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC8zQ0QxQUNBM0Q2RkZDRDNC RDg4OUM2MjQ1REYwMTcwMTcyODA1RUMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7gyMA0GCSqGSIb3DQEBCwUAA4IBAQBZCy3XsKnYV5Ruj5oP0zNUm/cAtcle t9QmrXNxL1yiIX7e/P7dtgzp47bSdjEkA7KwqxDTLIkzehYzSl/ZeiRB4Ir0rHJh BHPs2DhdiQMw4bgb0L8KMEvnbvQZDAfHJGjD7mXDGkANQCszJP1l31iZ6EHw59Ds PnNBxEqbsDrwV9BSn69Mp3pMetWZ1PlA9x6zRM5bQM6rnIkuZJWi/k5mMCWmQiP2 aS3+bcbFYoX5go9ZusHUr7rfKsN5/wE7sUbmXIjuHXIR6VbzGE0B6HabSnmOSCKL jODyOlrI4tTdZmHOl9NuTbhRx86C5irqdLC5uT9KKs3SPdoAg/J7O/SI -----END CERTIFICATE-----Generated at Tue May 12 22:03:51 2026 by rpki-client