$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer File: 43E1CC61CDE59968FE0810D4937130A67D6541DC.cer (raw, json) Hash identifier: x9MDfVJotu7AP5DtzGwvxBjjevOiwK+cod9yMbQ+Pog= Subject key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A33598DC629FCA0FE8C869237F44A4225FD5D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:50:36 +0000 Certificate not after: Sun 02 May 2027 01:55:36 +0000 Subordinate resources: IP: 203.190.112.0/21 IP: 2405:a540::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:33:59:8d:c6:29:fc:a0:fe:8c:86:92:37:f4:4a:42:25:fd:5d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:50:36 2026 GMT Not After : May 2 01:55:36 2027 GMT Subject: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:b3:44:a9:98:2b:5e:59:bc:60:5b:2e:cb: 58:9c:66:b1:3b:7d:24:a6:b7:05:54:d0:92:dd:77: dc:02:b5:72:ae:04:a5:99:6f:e9:7e:97:f8:fa:8a: f7:6d:42:40:14:80:22:28:b4:3a:0e:e0:bf:5d:b1: 4c:38:b1:19:48:5e:54:39:9d:1a:f4:b3:30:f3:d7: c3:65:c8:7e:3d:fa:ba:f7:15:74:c1:b7:a8:29:76: 7e:c9:82:50:e9:a5:de:56:01:8d:68:f0:51:8f:c8: 5c:bb:21:83:f7:04:2a:88:3e:1c:53:d7:95:0f:6a: f2:59:c4:c1:fd:c6:c4:f2:99:9b:79:f5:d3:f1:2d: 77:b4:44:31:07:93:fa:1f:9b:1a:99:5a:97:91:32: d5:58:01:e0:74:fa:fb:96:3e:20:f0:e5:51:29:6a: 07:1a:7a:e1:6b:cd:af:6a:53:23:f3:f0:2b:41:c3: af:e9:8e:22:3a:2c:74:59:d6:e5:70:4b:f0:36:5a: a2:00:8f:ec:77:66:4c:f4:55:62:32:23:96:99:d5: 20:2a:9b:b9:ea:67:94:ea:04:1c:be:43:25:63:ea: 1f:a9:17:ee:64:f0:69:06:f0:4a:b0:fc:a3:4d:b6: 68:40:55:4d:52:7a:32:ff:11:6f:c2:fe:79:0f:7f: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.112.0/21 IPv6: 2405:a540::/32 Signature Algorithm: sha256WithRSAEncryption 59:a5:a7:8f:3f:e1:49:2a:7f:9a:f2:14:5f:71:85:b6:49:0d: d3:bb:a1:4d:54:ed:1e:d7:7c:90:ec:cd:42:23:ab:3e:21:1c: a4:e9:84:1a:da:c1:a6:cb:36:6d:ec:cf:e7:ec:8f:f6:c5:0e: 44:98:56:2b:95:7d:0f:f6:c4:5b:9e:30:6b:08:25:98:0a:92: 27:8e:96:d1:b8:96:5e:69:53:a3:35:0a:90:49:a6:ad:46:3e: 68:6b:1a:4e:c1:58:fc:f0:07:e0:16:f7:29:4e:6e:8f:11:69: cb:19:23:f3:af:09:84:f9:63:54:49:f9:fc:89:81:bd:aa:4d: a5:62:77:f9:b5:dd:27:bc:8e:fd:35:3f:9b:4f:fa:20:79:8e: 69:6a:eb:65:8c:75:48:07:2d:5c:bc:0d:e5:b0:54:24:c9:ae: 5f:6f:f0:b7:8b:f0:12:fb:a1:93:19:2d:6d:d8:17:6d:ed:e7: 7c:32:fe:23:00:76:1a:b8:08:d3:55:3a:80:71:6a:9b:8a:ea: a9:89:e3:da:be:0e:3d:bc:99:80:b4:5d:45:b4:be:b6:9d:e9: 88:93:67:8b:88:e4:a3:7d:f5:fe:9f:0d:a6:7f:f4:a6:91:27: 9a:ad:37:8a:1a:ca:f3:1a:54:be:50:2b:00:b8:be:8d:bc:38: 25:e6:ba:b0 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUCjNZjcYp/KD+jIaSN/RKQiX9XQEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTAzNloX DTI3MDUwMjAxNTUzNlowMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgx MEQ0OTM3MTMwQTY3RDY1NDFEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnns0SpmCteWbxgWy7LWJxmsTt9JKa3BVTQkt133AK1cq4EpZlv6X6X+PqK 921CQBSAIii0Og7gv12xTDixGUheVDmdGvSzMPPXw2XIfj36uvcVdMG3qCl2fsmC UOml3lYBjWjwUY/IXLshg/cEKog+HFPXlQ9q8lnEwf3GxPKZm3n10/Etd7REMQeT +h+bGplal5Ey1VgB4HT6+5Y+IPDlUSlqBxp64WvNr2pTI/PwK0HDr+mOIjosdFnW 5XBL8DZaogCP7HdmTPRVYjIjlpnVICqbuepnlOoEHL5DJWPqH6kX7mTwaQbwSrD8 o022aEBVTVJ6Mv8Rb8L+eQ9/aVsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEPhzGHN5Zlo/ggQ1JNxMKZ9ZUHcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M1ZDNkMjJhLTMzOGItNDMwMi05M2Y0LWMwMjFlYTZhZDU0OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNWQzZDIy YS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC80M0UxQ0M2MUNERTU5OTY4 RkUwODEwRDQ5MzcxMzBBNjdENjU0MURDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDy75wMA0EAgACMAcDBQAkBaVAMA0GCSqGSIb3DQEBCwUAA4IBAQBZpaePP+FJ Kn+a8hRfcYW2SQ3Tu6FNVO0e13yQ7M1CI6s+IRyk6YQa2sGmyzZt7M/n7I/2xQ5E mFYrlX0P9sRbnjBrCCWYCpInjpbRuJZeaVOjNQqQSaatRj5oaxpOwVj88AfgFvcp Tm6PEWnLGSPzrwmE+WNUSfn8iYG9qk2lYnf5td0nvI79NT+bT/ogeY5pautljHVI By1cvA3lsFQkya5fb/C3i/AS+6GTGS1t2Bdt7ed8Mv4jAHYauAjTVTqAcWqbiuqp iePavg49vJmAtF1FtL62nemIk2eLiOSjffX+nw2mf/SmkSearTeKGsrzGlS+UCsA uL6NvDgl5rqw -----END CERTIFICATE-----Generated at Tue May 12 22:16:22 2026 by rpki-client