$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.cer (raw, json) Hash identifier: ywZ5QPvJ7N43+bnwGjShnUGizQ+0rHPICcDNoMJpJoA= Subject key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F36DB7D2D142909924E924DE40C17E426E7AFE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft caRepository: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:35:00 +0000 Certificate not after: Sun 02 May 2027 00:40:00 +0000 Subordinate resources: IP: 103.30.244.0/22 IP: 202.83.120.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:36:db:7d:2d:14:29:09:92:4e:92:4d:e4:0c:17:e4:26:e7:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:35:00 2026 GMT Not After : May 2 00:40:00 2027 GMT Subject: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:f6:2b:ca:5a:fa:96:c4:62:6d:5a:90:66: 0a:92:98:9b:10:91:e0:df:d3:df:46:ed:5b:34:49: ba:eb:55:fa:37:f5:c1:39:6c:56:1a:43:a2:90:c5: b4:b0:14:51:ab:81:b0:c0:93:b2:9e:91:38:41:39: 37:95:31:f6:80:a7:a5:93:73:ab:d0:89:3c:a9:92: 48:f1:b8:84:33:34:50:b1:2e:91:7c:7e:32:ef:5d: a2:f3:d3:95:dc:b5:de:8f:2b:04:e3:df:eb:99:bc: 4c:9a:8b:5e:82:7d:5a:44:e3:ae:37:c8:a8:1d:04: 05:30:91:7a:38:b2:f2:43:7d:c8:29:c9:20:6c:59: 58:59:67:f5:12:73:bc:0c:0b:44:c5:87:ec:7e:ab: 9e:55:0d:c9:9e:60:49:d6:96:bf:b2:81:c8:98:73: dc:ee:16:b6:dd:64:b6:6f:88:c4:72:2b:8d:41:ac: 23:bd:b8:ab:4a:ca:da:fb:8c:a8:a0:f5:79:68:6a: 5b:2b:3f:4e:52:aa:18:25:d3:e8:d3:d0:5a:8c:27: 10:b2:ab:15:f8:e3:d2:e4:13:ff:09:40:57:42:80: ca:ab:40:d0:6c:ac:41:34:64:3b:19:9d:e6:2c:ff: a3:2e:39:e9:29:fc:d6:0b:8a:0b:72:5c:70:e2:91: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.244.0/22 202.83.120.0/22 Signature Algorithm: sha256WithRSAEncryption a1:8f:61:0c:e8:fa:66:12:c9:38:24:9d:db:b6:bd:39:41:d6: 00:08:5d:e4:65:a6:2d:52:f7:82:a7:3e:4c:ed:ad:b3:50:36: a9:33:ec:6a:4f:3b:a0:b1:ed:56:83:4d:09:c5:7d:2b:a2:3e: 3d:ca:28:4d:db:bb:6a:b1:e7:5e:8d:d3:b8:e0:5c:a9:ee:06: a4:ac:33:52:ad:8e:06:d4:97:b3:d9:db:45:f1:f5:42:a8:93: 6a:68:4e:d4:da:93:9c:32:01:7d:4a:bd:54:b3:64:02:8e:85: 69:e5:b5:b2:8a:0f:07:ef:f8:5b:82:a3:db:df:02:04:03:a0: 47:01:76:57:1c:7a:80:ef:30:80:5b:9d:ae:7a:b5:e9:cb:f4: 29:e9:4d:b7:70:cc:aa:dc:0e:46:c5:42:5f:78:cd:f0:66:4a: 75:49:4b:99:a4:c7:1a:20:b3:3e:05:d8:d0:c1:c8:1b:d1:c0: ec:c9:18:61:fd:1c:c9:e8:e2:c3:d2:6f:5c:05:2d:ef:1d:e2: ee:a0:85:25:05:26:56:e3:eb:0d:3e:98:19:8c:6b:4f:2b:30: a9:2c:3e:d3:6f:ff:ca:d7:b0:1d:37:57:64:f2:ab:ea:00:dd: 36:d1:d8:15:e8:ff:96:37:b7:44:33:22:2c:a8:2a:fb:47:c3: 6d:5f:d2:3f -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIULzbbfS0UKQmSTpJN5AwX5Cbnr+AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzUwMFoX DTI3MDUwMjAwNDAwMFowMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYx Q0RERjQ0MkQ0MEJENzYyMkQyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+p9ivKWvqWxGJtWpBmCpKYmxCR4N/T30btWzRJuutV+jf1wTlsVhpDopDF tLAUUauBsMCTsp6ROEE5N5Ux9oCnpZNzq9CJPKmSSPG4hDM0ULEukXx+Mu9dovPT ldy13o8rBOPf65m8TJqLXoJ9WkTjrjfIqB0EBTCRejiy8kN9yCnJIGxZWFln9RJz vAwLRMWH7H6rnlUNyZ5gSdaWv7KByJhz3O4Wtt1ktm+IxHIrjUGsI724q0rK2vuM qKD1eWhqWys/TlKqGCXT6NPQWownELKrFfjj0uQT/wlAV0KAyqtA0GysQTRkOxmd 5iz/oy456Sn81guKC3JccOKROYsCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEHVlKgc55AsW4Yc3fRC1AvXYi0jMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUzOGM2MjFkLTA1YmMtNGJjZC05NjU3LWNkZjMzODYwZjIxYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MzhjNjIx ZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC80MUQ1OTRBODFDRTc5MDJD NUI4NjFDRERGNDQyRDQwQkQ3NjIyRDIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCZx70AwQCylN4MA0GCSqGSIb3DQEBCwUAA4IBAQChj2EM6PpmEsk4JJ3btr05 QdYACF3kZaYtUveCpz5M7a2zUDapM+xqTzugse1Wg00JxX0roj49yihN27tqsede jdO44Fyp7gakrDNSrY4G1Jez2dtF8fVCqJNqaE7U2pOcMgF9Sr1Us2QCjoVp5bWy ig8H7/hbgqPb3wIEA6BHAXZXHHqA7zCAW52uerXpy/Qp6U23cMyq3A5GxUJfeM3w Zkp1SUuZpMcaILM+BdjQwcgb0cDsyRhh/RzJ6OLD0m9cBS3vHeLuoIUlBSZW4+sN PpgZjGtPKzCpLD7Tb//K17AdN1dk8qvqAN020dgV6P+WN7dEMyIsqCr7R8NtX9I/ -----END CERTIFICATE-----Generated at Tue May 12 22:03:50 2026 by rpki-client