$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.cer (raw, json) Hash identifier: Bccwwsik2+ZpslCJtpXLxjs8yS8/HaryJsyZH7fzkDA= Subject key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E1D9C2C0475845F4F5F4462DB491AD285DA2669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:05 +0000 Certificate not after: Sun 02 May 2027 02:09:05 +0000 Subordinate resources: IP: 103.175.205.0/24 IP: 2001:df0:23c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1d:9c:2c:04:75:84:5f:4f:5f:44:62:db:49:1a:d2:85:da:26:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:05 2026 GMT Not After : May 2 02:09:05 2027 GMT Subject: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:ff:b1:77:ed:59:f6:23:c9:fd:c5:d5:f7: 37:9e:53:c1:10:c3:ca:91:26:8e:6b:7d:64:b3:c2: 9b:e5:92:32:83:e6:60:a8:d3:60:0e:12:ff:e2:01: 88:87:24:5f:b8:96:3b:15:2e:e6:83:14:3d:cc:ff: ef:29:4a:11:bf:8c:ec:94:e4:35:06:4b:90:c7:09: e0:6a:3d:f4:09:0d:90:81:76:e0:d5:61:69:e2:00: 9f:82:85:90:28:03:0e:11:7b:54:16:46:46:42:44: fd:da:b6:2f:69:96:7d:59:1e:d8:b9:82:2d:fa:18: 5c:1c:a6:34:6b:83:e4:ac:78:d5:12:95:7c:43:07: 61:51:df:6d:80:36:ab:c2:10:84:5e:e4:50:e6:8d: 2d:f2:94:5f:e7:84:c1:10:c6:59:34:3d:0d:af:be: a9:c0:ee:c4:44:db:a3:74:b4:63:55:98:ad:b1:71: 6a:cd:df:bb:36:20:ba:39:b7:e4:50:f1:a3:36:6e: 4c:cd:e8:d4:d0:91:25:d2:ee:ec:4e:33:3b:b7:15: 63:de:e3:20:6f:3f:6b:e4:ea:d6:cd:9b:53:97:ab: 4b:31:dd:5b:2c:48:ed:7e:76:8d:92:0f:14:2e:61: c1:a5:b2:73:89:5c:91:f9:0f:4f:bc:c1:a0:9a:1d: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.205.0/24 IPv6: 2001:df0:23c0::/48 Signature Algorithm: sha256WithRSAEncryption 73:98:68:18:89:59:b2:2c:08:4a:28:02:0c:d1:65:81:23:44: e4:0b:6d:39:4f:86:d1:4b:b4:23:63:a9:33:d8:b2:ad:12:78: 3a:b2:5f:60:39:9c:2a:ea:ba:92:a1:68:7c:99:d3:d7:ec:14: 5a:cc:df:6b:16:2c:56:28:57:46:d1:88:ca:30:d8:59:6d:f1: df:e8:ae:72:2f:79:9f:64:72:62:93:c3:fd:f5:b7:db:6f:29: 02:23:ca:0c:bf:55:82:26:29:c1:55:f1:c4:df:b9:a2:de:dc: 54:c8:9a:51:ca:56:aa:f0:da:1d:ae:70:7a:bd:c9:4c:ac:00: 7c:57:d8:52:9d:9f:e6:eb:c8:1b:5e:aa:65:2d:d7:e5:64:9d: 4c:1e:27:94:ca:cf:28:5e:74:f2:d6:ca:6c:45:d2:fb:4a:72: af:7b:78:0e:c7:c7:05:10:20:69:84:66:80:86:aa:28:10:e9: 5d:8f:65:67:43:7b:7f:7f:0a:79:86:3d:f9:51:48:35:16:1f: 6b:0a:d1:fb:ff:76:10:74:13:ec:39:ef:78:43:8a:c2:d6:12: 8d:52:e1:f5:6f:2f:e4:09:7a:08:51:52:c3:fb:04:a2:13:e4: bc:f6:b6:21:77:27:d1:28:0b:d6:1b:11:fd:37:46:1e:e2:e8: f7:5c:55:75 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULh2cLAR1hF9PX0Ri20ka0oXaJmkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQwNVoX DTI3MDUwMjAyMDkwNVowMzExMC8GA1UEAxMoNDExRThDNDU4OTQyNjdEQ0VGQTIw NTE0Qzg5MTY1RUU3QzE3QzRDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNQ/7F37Vn2I8n9xdX3N55TwRDDypEmjmt9ZLPCm+WSMoPmYKjTYA4S/+IB iIckX7iWOxUu5oMUPcz/7ylKEb+M7JTkNQZLkMcJ4Go99AkNkIF24NVhaeIAn4KF kCgDDhF7VBZGRkJE/dq2L2mWfVke2LmCLfoYXBymNGuD5Kx41RKVfEMHYVHfbYA2 q8IQhF7kUOaNLfKUX+eEwRDGWTQ9Da++qcDuxETbo3S0Y1WYrbFxas3fuzYgujm3 5FDxozZuTM3o1NCRJdLu7E4zO7cVY97jIG8/a+Tq1s2bU5erSzHdWyxI7X52jZIP FC5hwaWyc4lckfkPT7zBoJodRLkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEEejEWJQmfc76IFFMiRZe58F8TEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RjMDIwMWUzLTg3NWQtNDljNC04ZTE0LTk5OTk0OTM2ZDQ5MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYzAyMDFl My04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC80MTFFOEM0NTg5NDI2N0RD RUZBMjA1MTRDODkxNjVFRTdDMTdDNEM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ6/NMA8EAgACMAkDBwAgAQ3wI8AwDQYJKoZIhvcNAQELBQADggEBAHOYaBiJ WbIsCEooAgzRZYEjROQLbTlPhtFLtCNjqTPYsq0SeDqyX2A5nCrqupKhaHyZ09fs FFrM32sWLFYoV0bRiMow2Flt8d/ornIveZ9kcmKTw/31t9tvKQIjygy/VYImKcFV 8cTfuaLe3FTImlHKVqrw2h2ucHq9yUysAHxX2FKdn+bryBteqmUt1+VknUweJ5TK zyhedPLWymxF0vtKcq97eA7HxwUQIGmEZoCGqigQ6V2PZWdDe39/CnmGPflRSDUW H2sK0fv/dhB0E+w573hDisLWEo1S4fVvL+QJeghRUsP7BKIT5Lz2tiF3J9EoC9Yb Ef03Rh7i6PdcVXU= -----END CERTIFICATE-----Generated at Tue May 12 22:16:27 2026 by rpki-client