$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer File: 4242BEFAB7FD9E772FB16847C540331384EE1024.cer (raw, json) Hash identifier: vptJfr7tCH7fDC9o1G7F/olYd9b6Szae4TzvMDAcIu4= Subject key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1324AE3A9CF59E9585B753ADC178BD990BA3A871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:24:18 +0000 Certificate not after: Sun 02 May 2027 02:29:18 +0000 Subordinate resources: IP: 103.71.224.0/22 IP: 103.93.224.0/21 IP: 103.94.96.0/22 IP: 202.95.128.0/19 IP: 202.182.160.0/19 IP: 203.83.26.0 -- 203.83.29.255 IP: 2001:f20::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:24:ae:3a:9c:f5:9e:95:85:b7:53:ad:c1:78:bd:99:0b:a3:a8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:24:18 2026 GMT Not After : May 2 02:29:18 2027 GMT Subject: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:85:ea:f5:90:d1:1a:62:b8:18:09:57:bf: a6:27:8f:86:b0:c7:0a:f8:82:27:7b:25:b0:0b:42: 05:e4:1b:27:e7:31:81:75:e8:c3:19:99:46:12:42: 1a:75:43:b4:4d:98:b4:1e:c8:b8:9d:82:7b:a1:92: 76:b7:fb:e5:f5:d7:d4:f4:f5:c9:66:76:77:54:21: a8:51:33:8b:4e:38:21:2b:28:8d:b0:7a:11:2e:86: 8b:3f:60:d9:20:91:0b:dd:a0:93:c2:e9:d8:d3:ba: 9c:4a:d4:5a:d6:31:95:48:e6:e2:0b:b0:fd:93:9a: a0:5c:49:8d:22:91:1b:d9:00:fe:76:00:c7:95:86: a1:b6:44:aa:53:a1:f4:5b:3a:22:82:72:58:6e:68: 04:95:24:09:b4:c3:94:5a:bc:8e:9b:a1:5c:ae:d5: 33:27:fa:35:92:d3:1f:74:94:bc:28:aa:67:a7:6c: 4f:be:f5:87:6a:bf:e6:4b:7f:fb:80:bc:be:9a:92: 69:c7:f9:4f:d0:86:9b:0a:55:85:7c:7d:27:bc:5c: 18:27:27:1e:54:be:96:4d:4f:ca:f3:52:fb:a7:fd: 38:26:85:28:cf:6a:d9:10:b7:45:fb:89:17:13:c5: a9:74:55:32:85:80:d5:b9:28:10:f3:ea:79:49:6f: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.224.0/22 103.93.224.0/21 103.94.96.0/22 202.95.128.0/19 202.182.160.0/19 203.83.26.0-203.83.29.255 IPv6: 2001:f20::/32 Signature Algorithm: sha256WithRSAEncryption 0e:e4:80:89:9a:b3:26:cc:0f:1a:f1:4c:f9:a6:ae:ab:e1:2c: af:ba:65:e9:77:c6:19:7c:ae:07:15:af:ba:17:82:8f:07:bf: 8b:03:4c:bb:0c:71:aa:97:f3:37:ce:ea:c7:16:85:d8:01:5f: 47:b7:bf:38:15:67:18:61:68:b7:c2:2e:21:0f:a0:15:22:3b: c5:ce:63:00:ce:13:1f:30:35:5c:73:2e:e2:1e:57:a2:22:8a: 2a:8f:bf:46:8a:2e:f2:9a:c5:15:86:1d:f4:a1:eb:53:36:5e: 20:07:55:53:d5:94:89:84:e0:df:5b:7f:db:a3:1a:89:ac:74: 4c:5a:01:97:01:c2:27:44:b5:40:d3:71:34:25:09:15:6a:68: 7c:0e:d2:f6:76:81:cd:05:97:05:56:a7:72:17:08:8b:7f:52: 84:48:c3:48:0b:44:8a:7d:44:12:49:4b:b6:8e:79:40:b4:32: 0a:0d:a6:4a:c4:f3:29:e7:96:ba:a3:15:0d:54:21:9c:3b:f0: e4:15:eb:9c:db:40:c1:af:b8:7f:5c:88:12:52:10:73:a4:3c: cd:46:75:c8:0f:91:2d:f5:fb:49:f3:89:66:d5:2a:95:e2:11: 6e:98:c7:5e:fd:2a:ac:e0:a5:d3:b1:57:e6:76:2b:12:38:eb: 78:a5:f6:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEySuOpz1npWFt1OtwXi9mQujqHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjQxOFoX DTI3MDUwMjAyMjkxOFowMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2 ODQ3QzU0MDMzMTM4NEVFMTAyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtyher1kNEaYrgYCVe/piePhrDHCviCJ3slsAtCBeQbJ+cxgXXowxmZRhJC GnVDtE2YtB7IuJ2Ce6GSdrf75fXX1PT1yWZ2d1QhqFEzi044ISsojbB6ES6Giz9g 2SCRC92gk8Lp2NO6nErUWtYxlUjm4guw/ZOaoFxJjSKRG9kA/nYAx5WGobZEqlOh 9Fs6IoJyWG5oBJUkCbTDlFq8jpuhXK7VMyf6NZLTH3SUvCiqZ6dsT771h2q/5kt/ +4C8vpqSacf5T9CGmwpVhXx9J7xcGCcnHlS+lk1PyvNS+6f9OCaFKM9q2RC3RfuJ FxPFqXRVMoWA1bkoEPPqeUlviC8CAwEAAaOCAu4wggLqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEJCvvq3/Z53L7FoR8VAMxOE7hAkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ViYmZlNzc2LTAwYTMtNDc3Ni1iZjNmLTUyMTE5NDYxMDFjMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYmJmZTc3 Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC80MjQyQkVGQUI3RkQ5RTc3 MkZCMTY4NDdDNTQwMzMxMzg0RUUxMDI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAs AwQCZ0fgAwQDZ13gAwQCZ15gAwQFyl+AAwQFyragMAwDBAHLUxoDBAHLUxwwDQQC AAIwBwMFACABDyAwDQYJKoZIhvcNAQELBQADggEBAA7kgImasybMDxrxTPmmrqvh LK+6Zel3xhl8rgcVr7oXgo8Hv4sDTLsMcaqX8zfO6scWhdgBX0e3vzgVZxhhaLfC LiEPoBUiO8XOYwDOEx8wNVxzLuIeV6IiiiqPv0aKLvKaxRWGHfSh61M2XiAHVVPV lImE4N9bf9ujGomsdExaAZcBwidEtUDTcTQlCRVqaHwO0vZ2gc0FlwVWp3IXCIt/ UoRIw0gLRIp9RBJJS7aOeUC0MgoNpkrE8ynnlrqjFQ1UIZw78OQV65zbQMGvuH9c iBJSEHOkPM1GdcgPkS31+0nziWbVKpXiEW6Yx179KqzgpdOxV+Z2KxI463il9u8= -----END CERTIFICATE-----Generated at Tue May 12 22:47:38 2026 by rpki-client