$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer File: 4063368E83B93018DA72EDEB060702A5F8F9269C.cer (raw, json) Hash identifier: +y4JG5agrm7tprCiFJKHAXcrvtSVNuoLBbXLMp+anBg= Subject key identifier: 40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E08909B86378639E20AE6B5AC441DDF373837E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:56 +0000 Certificate not after: Sun 02 May 2027 00:57:56 +0000 Subordinate resources: IP: 103.147.164.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:08:90:9b:86:37:86:39:e2:0a:e6:b5:ac:44:1d:df:37:38:37:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:56 2026 GMT Not After : May 2 00:57:56 2027 GMT Subject: CN=4063368E83B93018DA72EDEB060702A5F8F9269C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:07:fd:f1:0c:d4:c2:ca:9f:c2:33:2a:fa: 54:ee:c8:fe:81:08:ec:16:fb:d8:2e:b3:ac:fe:13: ab:ad:8b:86:3c:74:ed:6d:d6:30:1c:81:cf:e6:a0: 3c:18:07:15:ad:52:2b:f7:17:1b:98:41:ab:dc:46: 93:d2:b0:70:9d:ad:02:2a:dc:af:bc:9b:05:42:ea: 7d:4c:b2:19:50:80:2e:bf:0d:b3:ca:b2:bd:44:30: fc:9e:c6:47:e6:2b:a1:51:7c:7b:f7:14:5c:8b:8d: 0e:c5:93:75:2a:10:3e:be:d8:b6:43:b8:bc:f5:f7: a0:31:a9:15:c1:52:26:47:2f:08:25:1a:2f:e0:21: f5:c2:66:a6:36:1e:95:00:92:98:5d:0c:43:22:12: 8f:18:0a:dd:c9:8a:30:78:34:c6:ff:95:9e:03:0a: b6:2d:a4:65:91:79:e9:93:dc:c2:5c:c0:d0:7c:55: 57:38:35:37:6b:53:a2:da:76:90:35:87:9d:21:c1: 65:b9:e9:f2:8c:1b:e4:05:46:93:a1:96:ac:7f:90: 3a:1e:a7:ef:e9:d5:69:9a:2b:98:be:f6:bc:12:d0: ce:46:a0:aa:e7:77:f6:6b:1a:65:04:88:57:a0:ab: eb:f1:54:18:96:ba:c8:91:c6:ef:2b:c0:86:8f:48: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.164.0/23 Signature Algorithm: sha256WithRSAEncryption 64:ed:21:d7:39:bc:08:9f:57:5e:3e:3c:c7:2b:d9:65:b5:d6: 33:01:df:1d:26:fd:e9:23:53:1a:88:8a:9a:d6:fb:5a:2a:0d: 74:bd:7b:9e:63:71:3e:d6:be:f4:20:43:20:99:d8:eb:4d:80: 2f:ef:9f:53:51:d0:5c:e6:f9:bd:c0:06:ac:0b:e8:3e:42:44: 33:6a:07:31:c3:9d:40:a1:96:6c:55:58:ef:77:d4:ee:25:49: 2c:37:9d:e8:b5:52:81:bc:ad:6a:ae:e9:33:21:7b:c0:c8:d4: 39:18:39:22:8b:73:84:33:ed:0c:3b:86:17:ff:ee:7b:e3:50: 2f:6c:4b:df:f1:0e:ea:b9:7d:6a:d6:f0:92:ba:9c:64:10:4f: 7d:9f:63:98:24:0f:20:4e:40:c3:cb:d7:39:d5:66:10:c4:f2: d9:de:65:e5:8b:da:33:8f:61:d3:cb:2f:c7:55:c1:35:9a:d8: 61:d0:7d:7a:11:21:2f:75:d1:84:68:e5:8e:80:4b:0d:96:2b: c0:20:99:2d:89:96:69:ae:f6:e4:06:18:3c:94:17:a2:68:00: 9d:79:03:a3:e1:5e:8b:01:dd:f5:90:dc:95:b8:dc:df:3d:f5: 9e:60:0a:4a:f3:3d:09:bd:45:9b:62:06:81:75:d8:4c:dd:ef: a8:65:2d:16 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULgiQm4Y3hjniCua1rEQd3zc4N+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTI1NloX DTI3MDUwMjAwNTc1NlowMzExMC8GA1UEAxMoNDA2MzM2OEU4M0I5MzAxOERBNzJF REVCMDYwNzAyQTVGOEY5MjY5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJiB/3xDNTCyp/CMyr6VO7I/oEI7Bb72C6zrP4Tq62Lhjx07W3WMByBz+ag PBgHFa1SK/cXG5hBq9xGk9KwcJ2tAircr7ybBULqfUyyGVCALr8Ns8qyvUQw/J7G R+YroVF8e/cUXIuNDsWTdSoQPr7YtkO4vPX3oDGpFcFSJkcvCCUaL+Ah9cJmpjYe lQCSmF0MQyISjxgK3cmKMHg0xv+VngMKti2kZZF56ZPcwlzA0HxVVzg1N2tTotp2 kDWHnSHBZbnp8owb5AVGk6GWrH+QOh6n7+nVaZormL72vBLQzkagqud39msaZQSI V6Cr6/FUGJa6yJHG7yvAho9Idh0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEBjNo6DuTAY2nLt6wYHAqX4+SacMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZlNGM2MWFjLTdiNWMtNGQ5NC1hMzY1LWM0MDIxYzE3MDljNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZTRjNjFh Yy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC80MDYzMzY4RTgzQjkzMDE4 REE3MkVERUIwNjA3MDJBNUY4RjkyNjlDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5OkMA0GCSqGSIb3DQEBCwUAA4IBAQBk7SHXObwIn1dePjzHK9lltdYzAd8d Jv3pI1MaiIqa1vtaKg10vXueY3E+1r70IEMgmdjrTYAv759TUdBc5vm9wAasC+g+ QkQzagcxw51AoZZsVVjvd9TuJUksN53otVKBvK1qrukzIXvAyNQ5GDkii3OEM+0M O4YX/+5741AvbEvf8Q7quX1q1vCSupxkEE99n2OYJA8gTkDDy9c51WYQxPLZ3mXl i9ozj2HTyy/HVcE1mthh0H16ESEvddGEaOWOgEsNlivAIJktiZZprvbkBhg8lBei aACdeQOj4V6LAd31kNyVuNzfPfWeYApK8z0JvUWbYgaBddhM3e+oZS0W -----END CERTIFICATE-----Generated at Tue May 12 22:45:43 2026 by rpki-client