$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer File: 3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer (raw, json) Hash identifier: LhAGEDzLWqUpKPJ02zxmUyFBWJuNGpQAAwNFHKgWkbM= Subject key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 69921D5FD2AB478AB602BD970048C0FB50BBF56C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:24:49 +0000 Certificate not after: Sun 02 May 2027 01:29:49 +0000 Subordinate resources: IP: 103.134.48.0/22 IP: 2404:5d40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:92:1d:5f:d2:ab:47:8a:b6:02:bd:97:00:48:c0:fb:50:bb:f5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:24:49 2026 GMT Not After : May 2 01:29:49 2027 GMT Subject: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:66:ea:0d:58:9e:5c:dc:90:6b:51:0d:60:b3: 5f:88:2e:06:72:e9:dc:49:5e:1d:41:4f:ab:b3:5d: 46:4f:4b:f8:30:33:db:bf:34:e5:74:ef:7a:0d:8e: 41:83:23:c0:1a:54:5b:67:d6:b3:7f:06:07:47:21: 72:e9:55:65:af:79:c6:56:f2:fd:f1:79:de:11:0e: c0:79:d3:71:0b:f2:cc:98:1e:22:14:8b:60:3e:6a: 11:f8:12:14:8d:e3:c8:04:78:b7:99:e8:c8:62:74: c4:28:31:79:64:3d:55:7e:ab:6f:fe:0f:71:3d:98: d4:7f:47:e1:f0:9e:12:17:b0:04:ef:bc:ab:29:16: 6e:81:fe:da:2f:3f:05:ee:09:9a:74:f8:be:aa:66: b0:5d:d4:96:98:05:c9:31:bb:bc:80:df:2b:6c:e6: d1:ed:89:aa:ab:07:14:31:08:32:62:70:39:2e:ea: 49:88:a1:79:19:cf:11:60:58:49:82:e5:ee:ce:70: 3a:7d:bb:c7:43:c1:b1:80:1c:94:ce:19:95:ab:0a: b3:c2:af:4e:38:63:2f:c6:55:9e:70:cb:8c:e8:39: 86:c0:69:17:da:10:9d:cc:69:60:aa:f7:6d:05:1c: 37:d8:d5:ca:99:58:0d:2b:dd:5e:2d:8c:28:fd:6b: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.48.0/22 IPv6: 2404:5d40::/32 Signature Algorithm: sha256WithRSAEncryption 9f:05:50:8f:2a:ed:c5:19:8e:eb:4b:08:7a:a3:bc:fd:04:c1: 98:13:7f:73:67:4e:b7:d3:ba:72:77:b8:d1:66:b7:38:19:7b: dc:82:83:ee:4e:da:57:a7:74:92:be:7d:86:87:9a:2c:22:42: 2d:85:7c:44:17:5f:80:a4:82:6d:14:68:a5:76:a5:72:9b:60: ad:d1:fd:9f:db:43:24:bb:4f:10:57:a7:45:47:37:c2:c4:c0: 6e:db:4f:22:4d:3e:ea:63:2f:96:82:0c:b4:5d:26:f1:a9:4c: 13:44:8c:7e:2f:21:65:8a:b6:3f:b1:ba:28:f9:be:0e:90:2a: 28:30:c2:05:e0:12:c7:9c:fe:2f:e7:33:8b:6e:42:0b:e6:b7: 40:51:e9:c1:01:b4:30:97:56:08:d0:33:63:19:e0:eb:87:dc: 85:3c:95:4a:d3:8a:91:3f:78:aa:40:ce:7c:9a:d1:97:e3:bf: 2a:0f:24:a5:b6:fa:f8:a2:d2:ba:f7:97:e5:f4:66:e7:b1:74: d7:7c:18:f5:94:88:e4:e5:d1:f2:24:93:2b:d3:16:c3:28:d6: 60:b3:a7:f1:0d:db:33:38:79:d0:de:b0:01:c4:3d:3a:c3:8f: 08:68:a7:4a:dc:f5:cc:0e:1b:57:1f:16:20:a7:0a:15:b9:92: d9:5a:d4:01 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUaZIdX9KrR4q2Ar2XAEjA+1C79WwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjQ0OVoX DTI3MDUwMjAxMjk0OVowMzExMC8GA1UEAxMoM0Y2MjgxNDA0NEVERjhCNUU3N0Qy QjgyMDk1QkY2NjI3RTEzNkY0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPtm6g1YnlzckGtRDWCzX4guBnLp3EleHUFPq7NdRk9L+DAz27805XTveg2O QYMjwBpUW2fWs38GB0chculVZa95xlby/fF53hEOwHnTcQvyzJgeIhSLYD5qEfgS FI3jyAR4t5noyGJ0xCgxeWQ9VX6rb/4PcT2Y1H9H4fCeEhewBO+8qykWboH+2i8/ Be4JmnT4vqpmsF3UlpgFyTG7vIDfK2zm0e2JqqsHFDEIMmJwOS7qSYiheRnPEWBY SYLl7s5wOn27x0PBsYAclM4ZlasKs8KvTjhjL8ZVnnDLjOg5hsBpF9oQncxpYKr3 bQUcN9jVyplYDSvdXi2MKP1rrhUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD9igUBE7fi1530rgglb9mJ+E29LMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzljODVjNmI5LTM0ZjktNGE4NS05Y2VhLWMxNmU5OGE4YjVlMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85Yzg1YzZi OS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8zRjYyODE0MDQ0RURGOEI1 RTc3RDJCODIwOTVCRjY2MjdFMTM2RjRCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ4YwMA0EAgACMAcDBQAkBF1AMA0GCSqGSIb3DQEBCwUAA4IBAQCfBVCPKu3F GY7rSwh6o7z9BMGYE39zZ06307pyd7jRZrc4GXvcgoPuTtpXp3SSvn2Gh5osIkIt hXxEF1+ApIJtFGildqVym2Ct0f2f20Mku08QV6dFRzfCxMBu208iTT7qYy+Wggy0 XSbxqUwTRIx+LyFlirY/sboo+b4OkCooMMIF4BLHnP4v5zOLbkIL5rdAUenBAbQw l1YI0DNjGeDrh9yFPJVK04qRP3iqQM58mtGX478qDySltvr4otK695fl9GbnsXTX fBj1lIjk5dHyJJMr0xbDKNZgs6fxDdszOHnQ3rABxD06w48IaKdK3PXMDhtXHxYg pwoVuZLZWtQB -----END CERTIFICATE-----Generated at Tue May 12 22:03:48 2026 by rpki-client