$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer File: 42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer (raw, json) Hash identifier: S5kHxiFABIYwi0cZg8ZVUYSgp6S9dP8syI7iMOfoKzk= Subject key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A63C020B5E54F3922A88197795BB2E5E00F1724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:47:25 +0000 Certificate not after: Sat 01 May 2027 23:52:25 +0000 Subordinate resources: IP: 103.112.136.0/22 IP: 2402:aa40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:63:c0:20:b5:e5:4f:39:22:a8:81:97:79:5b:b2:e5:e0:0f:17:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:47:25 2026 GMT Not After : May 1 23:52:25 2027 GMT Subject: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:ec:26:b1:cf:aa:70:b4:6b:50:03:c2:6b: 35:72:28:72:b2:b9:cb:d7:11:71:33:8c:35:85:0f: 81:b1:90:93:95:cf:2c:42:4a:4e:53:3d:d8:a0:6c: 55:1a:9d:cf:5f:8c:a2:5b:45:ea:42:48:f3:2a:df: d1:d4:c4:e3:58:98:57:62:89:78:14:17:20:21:e4: 46:c5:45:96:73:62:fb:38:7e:a6:6a:98:13:14:36: 58:42:c6:3d:ea:b1:84:e1:4b:61:d3:2d:df:e5:f7: d9:9c:f8:3c:18:f5:b5:57:25:43:d9:35:07:18:33: 16:c1:1b:57:59:dc:65:66:a3:c9:e5:c3:99:96:4f: f0:74:81:a4:b6:25:04:5e:df:3f:45:3d:14:b8:58: 95:18:c5:37:d3:65:b0:dd:bc:bf:17:11:de:8c:ba: da:79:30:5c:49:e0:8e:7e:89:51:d3:ca:cb:9f:11: 65:a5:23:9e:3a:82:6d:26:a8:51:3a:52:9b:02:06: 66:5d:ca:23:04:49:6c:9f:19:79:0b:4e:7b:10:88: eb:1e:7d:7e:ff:f0:8c:db:c9:8f:d6:fe:ec:7e:fb: 40:90:63:fe:cc:20:1d:60:96:19:43:91:8f:6b:9f: d3:67:72:58:06:6b:a3:f4:8b:e8:32:4b:9d:ce:48: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.136.0/22 IPv6: 2402:aa40::/32 Signature Algorithm: sha256WithRSAEncryption 09:24:76:43:a7:1e:17:91:97:06:f8:63:59:d6:09:04:cb:77: 5e:cf:84:53:72:67:d6:02:2a:92:ac:31:95:10:6b:22:72:14: cd:06:28:66:13:50:3b:50:57:fc:b6:6b:91:1d:4e:b0:29:8d: 31:2f:22:3a:10:d2:df:c5:ac:ef:8b:72:d9:25:62:61:eb:bc: 54:c5:b3:6c:7d:05:08:cc:9a:b7:c0:3e:43:b1:8e:c1:19:3e: 92:57:81:7a:8d:78:fd:19:d2:b7:79:34:ec:64:dc:5a:34:9b: a8:62:a8:6e:a0:78:6b:aa:25:6f:a5:5b:0f:b4:62:93:4a:28: 58:7a:1c:ef:8b:f4:3a:12:0b:ca:25:3d:3f:8f:03:ac:44:41: ce:04:b8:15:bc:0c:83:bb:32:38:ac:2c:2e:42:20:e6:8f:2b: da:52:72:0d:ad:a2:b5:fc:dd:45:79:4f:7d:da:f4:40:72:3e: 8d:c6:57:b1:cf:5a:4b:38:10:68:8e:1c:01:e8:6a:be:dd:22: a9:2c:5c:ed:2c:10:d9:e3:28:e6:83:05:5c:11:fb:a3:fd:16: 97:b9:6b:3b:11:c4:4c:8b:38:4e:8a:6b:82:ee:7f:28:b5:f2: 7e:d5:64:0f:05:32:18:49:8e:6a:f8:1d:fd:cf:53:e3:2b:dd: 17:69:bc:91 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUWmPAILXlTzkiqIGXeVuy5eAPFyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDcyNVoX DTI3MDUwMTIzNTIyNVowMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIy NDBDOUY3QkUyRjlDOUY1MUVGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhv7Caxz6pwtGtQA8JrNXIocrK5y9cRcTOMNYUPgbGQk5XPLEJKTlM92KBs VRqdz1+MoltF6kJI8yrf0dTE41iYV2KJeBQXICHkRsVFlnNi+zh+pmqYExQ2WELG PeqxhOFLYdMt3+X32Zz4PBj1tVclQ9k1BxgzFsEbV1ncZWajyeXDmZZP8HSBpLYl BF7fP0U9FLhYlRjFN9NlsN28vxcR3oy62nkwXEngjn6JUdPKy58RZaUjnjqCbSao UTpSmwIGZl3KIwRJbJ8ZeQtOexCI6x59fv/wjNvJj9b+7H77QJBj/swgHWCWGUOR j2uf02dyWAZro/SL6DJLnc5IPu8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEK8yTwVrE0YUaIkDJ974vnJ9R7xMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBjMzRmZjA4LWQyMWYtNDIwYi04N2RmLTUzMTAzYjZkYzI1My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wYzM0ZmYw OC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC80MkJDQzkzQzE1QUM0RDE4 NTFBMjI0MEM5RjdCRTJGOUM5RjUxRUYxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3CIMA0EAgACMAcDBQAkAqpAMA0GCSqGSIb3DQEBCwUAA4IBAQAJJHZDpx4X kZcG+GNZ1gkEy3dez4RTcmfWAiqSrDGVEGsichTNBihmE1A7UFf8tmuRHU6wKY0x LyI6ENLfxazvi3LZJWJh67xUxbNsfQUIzJq3wD5DsY7BGT6SV4F6jXj9GdK3eTTs ZNxaNJuoYqhuoHhrqiVvpVsPtGKTSihYehzvi/Q6EgvKJT0/jwOsREHOBLgVvAyD uzI4rCwuQiDmjyvaUnINraK1/N1FeU992vRAcj6Nxlexz1pLOBBojhwB6Gq+3SKp LFztLBDZ4yjmgwVcEfuj/RaXuWs7EcRMizhOimuC7n8otfJ+1WQPBTIYSY5q+B39 z1PjK90XabyR -----END CERTIFICATE-----Generated at Tue May 12 22:03:55 2026 by rpki-client