$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer File: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer (raw, json) Hash identifier: 7digOm2wSYwLOxQWKez50kr/HRYL76ycqcbxhBxRYEQ= Subject key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6BE79A3F25575B06FCF4C509530476DA601D9F7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:34:46 +0000 Certificate not after: Sun 02 May 2027 01:39:46 +0000 Subordinate resources: IP: 103.36.68.0/24 IP: 103.37.229.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e7:9a:3f:25:57:5b:06:fc:f4:c5:09:53:04:76:da:60:1d:9f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:34:46 2026 GMT Not After : May 2 01:39:46 2027 GMT Subject: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:bf:f0:ff:4d:8e:1b:50:32:42:f3:f2:14: 50:41:22:0f:e4:24:8c:59:e7:33:4a:b9:ff:92:b1: 4e:2a:dc:a2:60:ab:3b:ff:20:ca:5a:65:25:64:fc: 04:58:4e:92:31:e6:e4:52:d5:92:69:8a:a1:e9:4c: f6:66:0b:a8:11:16:5d:61:e1:fc:6d:f3:6f:49:dd: 50:24:95:4f:df:80:8c:41:17:9e:aa:12:76:26:42: 22:1e:33:e5:07:4a:fe:89:09:c4:ac:50:de:a4:63: 99:58:c6:13:d0:ec:7e:f1:f6:12:b2:de:92:22:5e: 3f:4c:83:38:1b:44:10:7c:4a:1b:b6:4a:ed:f6:e6: ab:a1:32:d4:33:be:68:35:86:7d:fb:90:86:f1:02: ae:a1:39:b6:33:1b:28:a5:e9:ce:5d:e6:d3:b5:a8: 03:4b:53:0b:08:72:05:6d:53:ea:66:a3:54:71:ce: 09:ff:85:00:d2:d7:49:cc:11:86:c7:aa:4a:a4:23: db:b4:85:ca:3c:d3:d0:b8:ce:42:1e:d0:f1:41:76: 3c:9a:16:70:32:51:5e:47:31:b3:bd:4a:75:e8:91: aa:07:da:de:e5:40:d2:57:19:12:74:52:44:a9:bf: a3:1a:7e:fe:b3:c2:0e:54:87:c3:41:5d:05:d2:42: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.68.0/24 103.37.229.0/24 Signature Algorithm: sha256WithRSAEncryption a2:fa:7d:c8:a7:ee:34:a2:e0:0a:85:c2:89:d8:e4:33:7a:bf: c2:21:55:8a:43:72:57:e3:6b:db:6a:e8:d5:1c:85:cf:03:da: da:ba:7e:e2:62:50:d0:64:c7:9f:58:b2:4e:71:6c:4c:29:47: fa:24:1c:50:91:2b:a1:b5:fd:2b:6d:6f:74:e0:b5:d5:5e:fb: 4f:83:0d:2f:7e:a5:36:d0:03:2a:42:88:25:20:f2:a3:21:a8: 8f:ec:21:10:3d:77:1e:e9:03:9b:85:94:ef:5f:8f:c9:ae:54: 4b:b1:c6:0f:f4:ce:33:bc:20:80:0f:40:1d:55:16:39:ba:af: 49:6d:2d:97:60:70:2a:c4:a4:ca:e5:ba:30:22:5f:0c:48:9e: 3f:ea:df:da:10:12:e3:e2:84:82:bd:27:3b:67:52:93:4e:d9: 31:c9:90:af:17:2a:77:1b:f0:08:cc:18:d3:6a:b1:51:de:e5: 8f:b8:a3:45:9a:e5:eb:e9:a2:26:65:1d:9b:ac:0d:23:f6:91: b9:1e:48:41:d8:63:15:02:5a:56:e0:2d:4e:9d:e6:b3:33:fc: de:0a:3b:8c:af:4c:47:61:bc:e4:24:25:43:ea:bf:a7:7a:45: 19:2f:45:bd:84:6c:19:35:c5:b3:13:d5:32:80:b8:14:87:9b: 1d:7a:77:27 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUa+eaPyVXWwb89MUJUwR22mAdn3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzQ0NloX DTI3MDUwMjAxMzk0NlowMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJG Rjc2NjUwQ0I1QjQwREJFRUY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI37v/D/TY4bUDJC8/IUUEEiD+QkjFnnM0q5/5KxTircomCrO/8gylplJWT8 BFhOkjHm5FLVkmmKoelM9mYLqBEWXWHh/G3zb0ndUCSVT9+AjEEXnqoSdiZCIh4z 5QdK/okJxKxQ3qRjmVjGE9DsfvH2ErLekiJeP0yDOBtEEHxKG7ZK7fbmq6Ey1DO+ aDWGffuQhvECrqE5tjMbKKXpzl3m07WoA0tTCwhyBW1T6majVHHOCf+FANLXScwR hseqSqQj27SFyjzT0LjOQh7Q8UF2PJoWcDJRXkcxs71KdeiRqgfa3uVA0lcZEnRS RKm/oxp+/rPCDlSHw0FdBdJCLiUCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD/kXeD9kuK9g7v/dmUMtbQNvu9HMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FiMzEzZDE3LTViOWItNGQyMy05NDI0LTc0NTc5NTA4YmE1NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYjMxM2Qx Ny01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC8zRkU0NURFMEZEOTJFMkJE ODNCQkZGNzY2NTBDQjVCNDBEQkVFRjQ3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZyREAwQAZyXlMA0GCSqGSIb3DQEBCwUAA4IBAQCi+n3Ip+40ouAKhcKJ2OQz er/CIVWKQ3JX42vbaujVHIXPA9raun7iYlDQZMefWLJOcWxMKUf6JBxQkSuhtf0r bW904LXVXvtPgw0vfqU20AMqQoglIPKjIaiP7CEQPXce6QObhZTvX4/JrlRLscYP 9M4zvCCAD0AdVRY5uq9JbS2XYHAqxKTK5bowIl8MSJ4/6t/aEBLj4oSCvSc7Z1KT TtkxyZCvFyp3G/AIzBjTarFR3uWPuKNFmuXr6aImZR2brA0j9pG5HkhB2GMVAlpW 4C1OneazM/zeCjuMr0xHYbzkJCVD6r+nekUZL0W9hGwZNcWzE9UygLgUh5sdencn -----END CERTIFICATE-----Generated at Tue May 12 22:04:03 2026 by rpki-client