$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer (raw, json) Hash identifier: 3HQpEFJ9KnUUhrO/roxEQzGsQRv8PpYp4xsvxpc28DU= Subject key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7E4A50AB80647DF87B21720C300C3731D358DB8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:44:02 +0000 Certificate not after: Sun 02 May 2027 01:49:02 +0000 Subordinate resources: IP: 103.102.148.0/22 IP: 2001:df2:dd00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4a:50:ab:80:64:7d:f8:7b:21:72:0c:30:0c:37:31:d3:58:db:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:44:02 2026 GMT Not After : May 2 01:49:02 2027 GMT Subject: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:8f:e9:79:6d:fe:1e:52:66:b7:18:a8:12: 17:02:65:92:3b:36:63:c0:3b:00:82:ab:02:4f:c0: 9f:b6:ea:ed:b5:77:ca:64:7f:41:92:df:97:d1:ec: af:e0:7a:bf:ca:12:66:9f:6c:39:b8:21:3f:c7:42: c9:bb:67:85:21:c2:b7:14:71:dd:01:be:92:72:35: 07:ad:89:31:ee:04:d8:14:28:aa:c0:34:c2:77:f5: 29:e1:fe:95:6f:29:76:8c:8c:8e:22:5a:aa:00:b1: 9f:46:aa:8f:fd:2a:bd:8f:c4:67:4c:8a:fd:bc:b8: 99:53:5a:14:31:e1:71:65:33:22:96:a1:ef:83:b2: fb:ba:bc:48:78:ff:5d:5d:ac:db:0a:3b:ca:35:94: 9d:07:b9:d8:89:13:2c:c2:66:73:cd:0a:ec:db:40: 9a:2b:6f:f4:da:e0:df:ec:51:42:91:ea:7e:24:41: 36:e1:f7:58:15:ad:03:18:fe:2a:78:33:b4:0e:6a: c4:58:a1:35:f9:de:17:0b:d6:97:f5:91:c7:2a:d4: bf:3b:fb:32:a3:c0:a7:38:fb:1c:52:28:ee:9a:6d: 0c:fc:9d:75:25:59:7d:d6:ac:d5:0d:31:b9:b6:16: d9:86:88:b1:c0:3c:ff:ea:d6:3e:e9:32:2b:99:28: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.148.0/22 IPv6: 2001:df2:dd00::/48 Signature Algorithm: sha256WithRSAEncryption 79:73:77:bc:f6:c4:a0:28:27:1a:4d:e0:0b:bb:51:17:b7:2d: 18:48:9f:d1:df:6b:4b:4e:c1:30:02:65:7c:fe:c4:66:0c:24: ba:21:6d:64:36:18:c7:a3:e0:f2:7e:27:fd:1b:4d:4a:aa:3c: 5b:fe:16:d8:c2:3e:f7:82:ab:c8:57:54:36:15:82:4f:88:2e: 23:bf:ec:b4:79:33:76:a2:f3:a7:bb:aa:d4:26:ab:3e:56:80: 35:de:66:8f:de:1c:b0:94:e5:77:36:ff:56:74:93:f5:d6:d6: 1b:11:5b:aa:e8:9d:d4:d2:2c:5d:27:4e:18:89:2f:97:72:0b: 09:6a:d6:c9:21:37:21:ce:72:f3:b1:77:d0:3e:96:4f:62:a9: 26:b4:30:74:79:5e:f5:35:b7:72:95:f3:ea:5c:d7:31:c1:2e: 83:e4:ca:fb:f9:38:2e:4a:84:11:9e:f8:f3:47:31:b5:d4:91: 8f:73:76:ff:94:fe:57:0b:ff:a6:41:56:96:16:26:65:12:c8: 0c:88:1e:d6:c8:73:d5:fc:72:83:27:7d:80:d6:37:69:1c:9d: b6:d7:8d:9d:99:43:df:e0:4f:58:80:33:80:d2:7c:eb:50:9e: 8f:5c:1f:41:eb:86:35:96:37:6d:46:16:58:9d:85:bc:4a:20: d7:d6:ab:1b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUfkpQq4Bkffh7IXIMMAw3MdNY244wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDQwMloX DTI3MDUwMjAxNDkwMlowMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFD MjM1OEMxQ0EyMkEyNDhBMTUxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMphj+l5bf4eUma3GKgSFwJlkjs2Y8A7AIKrAk/An7bq7bV3ymR/QZLfl9Hs r+B6v8oSZp9sObghP8dCybtnhSHCtxRx3QG+knI1B62JMe4E2BQoqsA0wnf1KeH+ lW8pdoyMjiJaqgCxn0aqj/0qvY/EZ0yK/by4mVNaFDHhcWUzIpah74Oy+7q8SHj/ XV2s2wo7yjWUnQe52IkTLMJmc80K7NtAmitv9Nrg3+xRQpHqfiRBNuH3WBWtAxj+ KngztA5qxFihNfneFwvWl/WRxyrUvzv7MqPApzj7HFIo7pptDPyddSVZfdas1Q0x ubYW2YaIscA8/+rWPukyK5koclECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD1XyyJx8udHDyrCNYwcoiokihUZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JhOWY4MWNiLTVhNTktNDBmMy04NmEwLWNkZTViOTRjZWY4Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYTlmODFj Yi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8zRDU3Q0IyMjcxRjJFNzQ3 MEYyQUMyMzU4QzFDQTIyQTI0OEExNTE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ2aUMA8EAgACMAkDBwAgAQ3y3QAwDQYJKoZIhvcNAQELBQADggEBAHlzd7z2 xKAoJxpN4Au7URe3LRhIn9Hfa0tOwTACZXz+xGYMJLohbWQ2GMej4PJ+J/0bTUqq PFv+FtjCPveCq8hXVDYVgk+ILiO/7LR5M3ai86e7qtQmqz5WgDXeZo/eHLCU5Xc2 /1Z0k/XW1hsRW6rondTSLF0nThiJL5dyCwlq1skhNyHOcvOxd9A+lk9iqSa0MHR5 XvU1t3KV8+pc1zHBLoPkyvv5OC5KhBGe+PNHMbXUkY9zdv+U/lcL/6ZBVpYWJmUS yAyIHtbIc9X8coMnfYDWN2kcnbbXjZ2ZQ9/gT1iAM4DSfOtQno9cH0HrhjWWN21G FlidhbxKINfWqxs= -----END CERTIFICATE-----Generated at Tue May 12 22:03:13 2026 by rpki-client