$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer (raw, json) Hash identifier: Lk8+DqbOqeRI5nU0AQYFGHm5YBlv4jysujM2U+4l9gs= Subject key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F6A10C6406A63455772F223DD10B13CAEE5E26C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:41:52 +0000 Certificate not after: Sat 01 May 2027 23:46:52 +0000 Subordinate resources: IP: 103.168.250.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:6a:10:c6:40:6a:63:45:57:72:f2:23:dd:10:b1:3c:ae:e5:e2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:41:52 2026 GMT Not After : May 1 23:46:52 2027 GMT Subject: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:b4:d7:8e:6a:ba:19:1c:cb:81:95:09:89: 26:c0:90:f8:1e:b1:13:de:8b:4d:ef:a5:d5:f9:a4: 30:9c:f3:1b:31:98:e7:b2:01:bf:6a:15:56:41:47: 6f:08:b3:4a:4c:83:ee:20:59:d5:93:4b:71:7f:fb: a3:fa:fc:85:49:18:5f:7e:98:2f:7f:5d:79:4a:89: f1:99:09:a4:e6:0c:1d:c7:6d:8d:45:75:9f:fd:b3: 71:ad:62:c1:9c:cc:be:04:fe:08:88:f2:ea:eb:3a: 4a:1e:26:08:0a:88:85:79:d1:4b:39:a7:88:36:a9: b1:c6:03:e5:4a:51:73:f5:13:51:22:b1:09:cc:ae: 4f:51:79:a1:f5:54:51:ef:3a:74:1a:8f:0c:ec:13: bf:ae:8f:dc:26:31:85:73:5c:71:fb:e3:fd:ca:fc: a9:d0:e9:51:42:23:cb:a4:5f:99:85:fb:7e:0c:29: 74:36:7a:f8:53:1e:a3:2f:66:94:f3:f9:63:78:0e: cb:b5:10:1d:83:98:cc:10:33:c8:29:76:63:1d:37: 92:c4:49:db:45:5b:2e:49:f1:85:07:cf:78:f3:90: 6f:51:0d:9a:68:9c:65:00:cf:76:22:2e:25:8d:7c: d8:06:5b:69:4f:95:44:e2:d5:f5:95:9b:63:aa:17: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.250.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:2d:1f:76:78:8a:b8:cb:13:aa:7c:52:e1:b5:3c:29:47:7d: fc:68:88:2f:70:d9:bc:e3:f2:d9:04:88:03:e8:34:c9:97:02: f6:13:cc:b4:d2:77:21:25:db:9a:f4:ee:db:47:36:29:f8:02: b4:9e:a1:88:82:b1:1f:44:b1:45:ff:c4:57:6f:a2:bb:5d:bf: 48:2b:79:2e:9e:60:b1:79:41:52:10:73:3f:ae:ed:f3:07:51: 44:94:9d:1b:08:a6:ca:5c:a0:ea:54:2c:84:9d:9d:21:11:6a: 09:20:01:65:76:9a:53:a4:89:a5:87:fa:93:be:66:61:ab:9e: 60:af:76:9e:de:79:02:e8:d3:6f:64:51:5a:03:0e:02:1c:58: f0:80:67:86:8f:d9:a6:be:81:54:16:4a:44:ef:54:39:74:9d: a4:ac:54:47:83:6f:e8:8b:c2:9f:a7:83:65:a8:55:04:cc:7c: ca:b1:77:99:a1:8b:73:7b:55:ca:cf:e5:e4:7f:28:72:0a:ed: d8:51:cb:20:11:86:a3:22:10:7f:d1:d6:4d:c9:cd:59:1b:c8: d7:fe:2c:68:75:8e:69:16:73:bf:89:c1:31:8a:9c:cd:d6:fd: 6a:90:bf:dd:30:2a:82:7f:95:d7:7b:dc:a8:d9:d2:f9:73:ae: d2:2a:4b:22 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUT2oQxkBqY0VXcvIj3RCxPK7l4mwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDE1MloX DTI3MDUwMTIzNDY1MlowMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0Iy QjYxNzlEOUFEODk2OUY0ODI5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLEtNeOaroZHMuBlQmJJsCQ+B6xE96LTe+l1fmkMJzzGzGY57IBv2oVVkFH bwizSkyD7iBZ1ZNLcX/7o/r8hUkYX36YL39deUqJ8ZkJpOYMHcdtjUV1n/2zca1i wZzMvgT+CIjy6us6Sh4mCAqIhXnRSzmniDapscYD5UpRc/UTUSKxCcyuT1F5ofVU Ue86dBqPDOwTv66P3CYxhXNccfvj/cr8qdDpUUIjy6RfmYX7fgwpdDZ6+FMeoy9m lPP5Y3gOy7UQHYOYzBAzyCl2Yx03ksRJ20VbLknxhQfPePOQb1ENmmicZQDPdiIu JY182AZbaU+VROLV9ZWbY6oXdA0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEPnowpZe7Mpc8srYXnZrYlp9IKeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAzOGQ1ODBiLTQ1MmUtNDJkNy1iMDQxLTkwMWRjMzNkNjg1Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMzhkNTgw Yi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80M0U3QTMwQTU5N0JCMzI5 NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4MjlFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6j6MA0GCSqGSIb3DQEBCwUAA4IBAQCaLR92eIq4yxOqfFLhtTwpR338aIgv cNm84/LZBIgD6DTJlwL2E8y00nchJdua9O7bRzYp+AK0nqGIgrEfRLFF/8RXb6K7 Xb9IK3kunmCxeUFSEHM/ru3zB1FElJ0bCKbKXKDqVCyEnZ0hEWoJIAFldppTpIml h/qTvmZhq55gr3ae3nkC6NNvZFFaAw4CHFjwgGeGj9mmvoFUFkpE71Q5dJ2krFRH g2/oi8Kfp4NlqFUEzHzKsXeZoYtze1XKz+XkfyhyCu3YUcsgEYajIhB/0dZNyc1Z G8jX/ixodY5pFnO/icExipzN1v1qkL/dMCqCf5XXe9yo2dL5c67SKksi -----END CERTIFICATE-----Generated at Wed May 13 02:19:34 2026 by rpki-client