$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer File: 412965964A4E12BD59BDF602A054F3394E99DC57.cer (raw, json) Hash identifier: YsmiurL1Md+7rvJyduldFYJrQG8oxmS1kOSp8pqGOS0= Subject key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F9A558BD24F6A3A7DCABE05963C108ADDB3A36D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft caRepository: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:01:18 +0000 Certificate not after: Sun 02 May 2027 00:06:18 +0000 Subordinate resources: IP: 103.6.34.0/24 IP: 103.8.238.0/24 IP: 103.16.48.0/23 IP: 103.18.117.0/24 IP: 103.225.242.0/24 IP: 2001:df3:8000::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9a:55:8b:d2:4f:6a:3a:7d:ca:be:05:96:3c:10:8a:dd:b3:a3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:01:18 2026 GMT Not After : May 2 00:06:18 2027 GMT Subject: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:78:6b:c3:8d:d5:cd:84:71:92:f6:03:7c: 3d:11:e4:f0:d8:73:14:f9:b5:bd:25:7f:8d:0a:a2: 15:4b:b6:12:ba:81:f7:fa:d4:f1:43:63:41:39:49: 1a:75:7c:63:e1:eb:cd:b5:92:1e:30:12:4b:ae:93: 99:a6:e1:7a:ce:4c:7c:f4:87:ac:4d:5b:01:f8:68: 74:38:02:57:d7:de:53:0c:dc:2c:bd:b1:24:85:e1: 7b:15:65:74:d4:6e:c8:03:a7:68:c0:cc:3d:35:c6: 69:f2:1d:24:fb:c9:06:4f:30:9b:06:3e:7e:ab:39: a0:a0:c1:a5:45:26:0f:94:25:7a:9c:63:a4:99:ca: c3:e8:00:9a:56:3b:95:db:3f:54:16:83:c1:e4:ab: 34:e0:ee:e1:10:38:c8:b2:f7:b7:f4:02:bb:48:e9: 03:94:aa:18:45:3b:6a:bf:17:24:8c:6c:09:59:ba: 88:e2:3a:23:4e:35:7c:4d:70:96:26:30:bb:00:ac: f3:44:7e:df:46:f1:9d:0b:86:ec:1a:e1:05:fd:45: 46:3e:1c:21:95:1d:a4:31:a4:39:d2:c4:07:90:c9: 7e:f2:c2:81:c4:c1:76:8e:cb:f4:e5:22:67:ca:4f: d9:93:5b:b7:1d:8f:c6:bd:04:6a:75:1e:74:f3:88: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.34.0/24 103.8.238.0/24 103.16.48.0/23 103.18.117.0/24 103.225.242.0/24 IPv6: 2001:df3:8000::/48 Signature Algorithm: sha256WithRSAEncryption 1b:03:91:f5:21:23:d1:8d:46:af:df:30:8c:06:20:cd:06:d1: 36:6c:0f:f8:99:6a:25:6e:76:e0:46:dc:c8:af:a7:1f:5f:93: 73:16:39:50:67:e3:d1:26:4a:d8:6e:18:4f:c2:86:9b:a8:fb: 66:19:64:0c:d8:61:5b:cb:08:3c:bf:2b:8f:49:39:32:26:75: 4f:a1:f1:33:71:aa:d5:87:e0:eb:5d:9c:c8:87:69:70:48:32: c1:38:1f:dc:ae:7b:38:ce:22:e3:65:a9:ce:19:64:04:35:87: 0c:3b:fd:83:86:32:65:8c:f2:e1:47:87:27:34:ae:6c:af:76: 08:cf:fa:77:cb:12:50:91:ec:ad:f3:d5:cf:7b:7d:29:3d:e9: c7:a7:f1:fe:d8:3f:b5:d0:c5:b1:c8:b9:07:78:66:07:d9:66: 8f:58:fe:74:cb:d7:14:37:7c:96:d1:4a:c0:27:05:f9:34:d4: 72:7f:84:18:c4:48:b7:ae:d0:dd:bb:a5:a5:59:dd:7b:bd:bf: c8:a8:ef:64:b6:35:c1:6b:0f:75:dd:cc:db:03:53:ba:2d:f1: 7d:98:cf:76:84:6c:3f:46:76:1a:5e:39:2b:ad:9d:1a:7d:b3: 5a:40:36:97:9f:38:4e:ea:4d:fb:e0:8e:51:ac:b7:2d:4f:56: f7:11:fc:39 -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgIUX5pVi9JPajp9yr4FljwQit2zo20wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDExOFoX DTI3MDUwMjAwMDYxOFowMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRG NjAyQTA1NEYzMzk0RTk5REM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+UeGvDjdXNhHGS9gN8PRHk8NhzFPm1vSV/jQqiFUu2ErqB9/rU8UNjQTlJ GnV8Y+HrzbWSHjASS66Tmabhes5MfPSHrE1bAfhodDgCV9feUwzcLL2xJIXhexVl dNRuyAOnaMDMPTXGafIdJPvJBk8wmwY+fqs5oKDBpUUmD5QlepxjpJnKw+gAmlY7 lds/VBaDweSrNODu4RA4yLL3t/QCu0jpA5SqGEU7ar8XJIxsCVm6iOI6I041fE1w liYwuwCs80R+30bxnQuG7BrhBf1FRj4cIZUdpDGkOdLEB5DJfvLCgcTBdo7L9OUi Z8pP2ZNbtx2Pxr0EanUedPOIi3ECAwEAAaOCAuIwggLeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEEpZZZKThK9Wb32AqBU8zlOmdxXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIwZjdiZTA2LTk2NzItNDY0MS05N2JkLTliZmRmOTU1ZGUxNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMGY3YmUw Ni05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC80MTI5NjU5NjRBNEUxMkJE NTlCREY2MDJBMDU0RjMzOTRFOTlEQzU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAe AwQAZwYiAwQAZwjuAwQBZxAwAwQAZxJ1AwQAZ+HyMA8EAgACMAkDBwAgAQ3zgAAw DQYJKoZIhvcNAQELBQADggEBABsDkfUhI9GNRq/fMIwGIM0G0TZsD/iZaiVuduBG 3Mivpx9fk3MWOVBn49EmSthuGE/Chpuo+2YZZAzYYVvLCDy/K49JOTImdU+h8TNx qtWH4OtdnMiHaXBIMsE4H9yuezjOIuNlqc4ZZAQ1hww7/YOGMmWM8uFHhyc0rmyv dgjP+nfLElCR7K3z1c97fSk96cen8f7YP7XQxbHIuQd4ZgfZZo9Y/nTL1xQ3fJbR SsAnBfk01HJ/hBjESLeu0N27paVZ3Xu9v8io72S2NcFrD3XdzNsDU7ot8X2Yz3aE bD9GdhpeOSutnRp9s1pANpefOE7qTfvgjlGsty1PVvcR/Dk= -----END CERTIFICATE-----Generated at Tue May 12 22:16:18 2026 by rpki-client