$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer File: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer (raw, json) Hash identifier: 2KiTtMnKc7bB7k4FJGN/ZSgRvQ8bXmqWLVxNVCkMk1M= Subject key identifier: 3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59522B85422A0070A4FD6D4CB92F7EFF3DE7A66B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft caRepository: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:24:10 +0000 Certificate not after: Sun 02 May 2027 00:29:10 +0000 Subordinate resources: IP: 103.224.136.0/22 IP: 2400:9280::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:52:2b:85:42:2a:00:70:a4:fd:6d:4c:b9:2f:7e:ff:3d:e7:a6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:24:10 2026 GMT Not After : May 2 00:29:10 2027 GMT Subject: CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:a3:83:56:a5:32:03:8e:e0:9f:ee:ce:fd: c7:fb:a4:6c:e5:cb:7d:73:19:81:09:1d:19:01:e1: 37:c9:cd:8c:13:3a:60:88:12:4e:13:5d:05:24:47: cf:35:3e:84:3c:ae:6a:45:79:bc:de:88:99:56:0a: ad:fd:1b:86:6b:35:d1:26:f7:01:df:f5:88:6b:ae: 15:aa:4e:f6:3a:de:96:1a:38:0e:24:fe:2c:f1:56: 51:5c:8c:ea:46:b5:22:55:f7:0c:5f:62:d5:49:85: 93:ba:a8:f9:1a:63:13:5d:82:c9:b4:76:eb:4b:bc: d7:7c:7f:51:3a:fc:dc:07:e3:5f:0c:f4:3b:ff:d4: 7e:79:86:d9:74:39:32:a7:da:be:a2:99:83:5b:be: 31:96:43:76:04:b0:40:fb:95:bc:bf:40:2e:03:7d: 20:11:db:c6:52:ba:e2:dc:44:94:4c:03:98:13:61: 1b:17:a0:09:84:56:6f:f6:ae:e6:8a:db:1c:2d:54: 87:e8:4b:20:21:7c:33:40:e6:6b:b6:72:8d:cc:34: 68:36:ee:d2:99:08:5e:cd:16:10:6f:5b:1e:17:7f: d6:94:61:94:9c:73:ee:f7:7a:80:8f:f1:ce:f2:ab: b8:06:33:ff:f2:b9:40:ad:45:6a:e0:60:d2:25:b0: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.136.0/22 IPv6: 2400:9280::/32 Signature Algorithm: sha256WithRSAEncryption 5b:df:4b:eb:0f:d1:e2:23:77:61:3d:42:4d:ff:05:4a:37:a2: d5:9a:93:85:9c:59:0a:66:0f:01:fa:a2:3a:9a:1a:4e:48:57: e1:e1:21:24:42:6f:f9:a4:5d:a7:c3:61:90:13:94:d4:87:5d: d8:30:0c:eb:b5:a9:6a:b3:6d:ce:14:76:63:32:4c:19:61:c8: 1e:9f:3a:91:5a:e3:0e:0c:0d:a0:aa:1f:00:ac:95:e7:74:a1: bf:20:74:4b:5d:d3:86:b0:c8:aa:23:c1:19:ee:1a:37:55:8e: ea:20:46:e7:59:06:b9:0c:1f:6e:dc:0d:41:ae:91:73:87:ed: 3d:29:b7:3b:a2:8c:0e:42:ab:3e:f0:84:8a:7f:73:aa:39:98: e8:e9:4e:a0:01:d2:e0:f7:47:72:9c:de:e6:70:9f:c8:44:a3: 89:3e:46:6b:29:fd:65:a4:0b:79:d1:9a:ba:c3:50:48:07:df: 23:5b:fd:f5:09:81:fb:a9:97:62:41:ea:9f:05:99:72:97:ba: cf:54:8e:e8:72:d2:4b:4b:6a:7a:b0:b5:c7:31:db:b3:0d:21: 19:5d:60:e2:70:5a:a9:73:a1:3b:6b:48:85:24:2c:f2:16:42: 20:e4:49:8c:f4:c2:d6:10:48:33:1e:12:a8:16:16:95:0f:4e: ee:a4:f3:3f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUWVIrhUIqAHCk/W1MuS9+/z3npmswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjQxMFoX DTI3MDUwMjAwMjkxMFowMzExMC8GA1UEAxMoM0YwNTdDOUJFQjE2Q0U3NzRGRjE0 ODMxMThGQ0ZERDNCQzA4MUM5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYNo4NWpTIDjuCf7s79x/ukbOXLfXMZgQkdGQHhN8nNjBM6YIgSThNdBSRH zzU+hDyuakV5vN6ImVYKrf0bhms10Sb3Ad/1iGuuFapO9jrelho4DiT+LPFWUVyM 6ka1IlX3DF9i1UmFk7qo+RpjE12CybR260u813x/UTr83AfjXwz0O//UfnmG2XQ5 MqfavqKZg1u+MZZDdgSwQPuVvL9ALgN9IBHbxlK64txElEwDmBNhGxegCYRWb/au 5orbHC1Uh+hLICF8M0Dma7Zyjcw0aDbu0pkIXs0WEG9bHhd/1pRhlJxz7vd6gI/x zvKruAYz//K5QK1FauBg0iWwO0MCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD8FfJvrFs53T/FIMRj8/dO8CByZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQyZjM5YzE3LTY3MjUtNDJiZS1iZWQ0LWYwZWJiYmEyZDRmZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MmYzOWMx Ny02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC8zRjA1N0M5QkVCMTZDRTc3 NEZGMTQ4MzExOEZDRkREM0JDMDgxQzk5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ+CIMA0EAgACMAcDBQAkAJKAMA0GCSqGSIb3DQEBCwUAA4IBAQBb30vrD9Hi I3dhPUJN/wVKN6LVmpOFnFkKZg8B+qI6mhpOSFfh4SEkQm/5pF2nw2GQE5TUh13Y MAzrtalqs23OFHZjMkwZYcgenzqRWuMODA2gqh8ArJXndKG/IHRLXdOGsMiqI8EZ 7ho3VY7qIEbnWQa5DB9u3A1BrpFzh+09Kbc7oowOQqs+8ISKf3OqOZjo6U6gAdLg 90dynN7mcJ/IRKOJPkZrKf1lpAt50Zq6w1BIB98jW/31CYH7qZdiQeqfBZlyl7rP VI7octJLS2p6sLXHMduzDSEZXWDicFqpc6E7a0iFJCzyFkIg5EmM9MLWEEgzHhKo FhaVD07upPM/ -----END CERTIFICATE-----Generated at Wed May 13 01:07:06 2026 by rpki-client