$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer File: 44428DF327C8FF800708E2196181BCB000E14F9B.cer (raw, json) Hash identifier: IzS6WMMJIG/DGqXki3jRzoCshW+WJe099aST5SKXubA= Subject key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D0EE9C1957A1CFF64778E787B78771F7581CCB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:11:56 +0000 Certificate not after: Sun 02 May 2027 00:16:56 +0000 Subordinate resources: IP: 103.160.201.0/24 IP: 2001:df3:af40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0e:e9:c1:95:7a:1c:ff:64:77:8e:78:7b:78:77:1f:75:81:cc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:11:56 2026 GMT Not After : May 2 00:16:56 2027 GMT Subject: CN=44428DF327C8FF800708E2196181BCB000E14F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:53:45:00:d6:65:c7:86:18:de:9d:a7:b8: 0d:e8:13:3f:df:10:f5:44:95:4e:68:e9:4f:4b:53: 42:4c:44:78:9f:0f:9c:84:f8:04:b8:32:e2:ad:a0: 24:46:72:d0:2e:21:20:42:d2:6d:b3:c7:6e:48:41: bc:9b:28:af:00:29:07:aa:33:42:59:d4:7f:35:52: 6e:91:2b:d8:52:80:aa:4c:c6:d6:a6:32:32:ac:cd: 5a:66:af:7d:fb:e8:93:68:db:12:7b:a4:56:15:06: 64:78:10:2b:37:fc:5c:0e:3e:33:fa:ba:6f:2a:89: 53:a3:66:b3:14:c2:f4:8e:15:be:63:14:ff:c6:41: 48:3f:e4:29:7d:1c:fa:15:f9:72:de:4d:ca:1b:7b: 35:18:fa:d2:43:4e:f4:04:e5:18:0b:b7:c9:f3:2f: 33:d3:d9:8a:97:c0:2f:97:9e:e0:47:38:9c:49:51: fd:db:3e:a8:c0:a0:7b:ef:f7:58:2f:de:3b:ac:13: b3:cf:42:ad:76:1d:46:dc:70:db:1f:a8:87:9e:f0: ac:1f:79:c2:38:31:8f:9e:89:cc:ad:1b:72:c8:ac: 90:cb:3d:0d:a8:64:bf:aa:06:1f:0b:b4:2e:31:dc: 83:89:39:d9:27:a3:16:81:91:84:c9:52:f3:25:ea: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.201.0/24 IPv6: 2001:df3:af40::/48 Signature Algorithm: sha256WithRSAEncryption 78:e9:d5:13:36:1a:ae:ef:3b:72:d1:bb:ec:5a:ba:d4:57:52: 1e:7c:e6:c9:db:fe:5e:e8:98:0e:f2:f7:27:9a:3f:0b:27:04: 00:4a:58:95:d0:3e:d6:cd:34:d2:22:24:ba:91:a5:de:aa:3c: 58:d1:e9:6f:fc:3e:2f:58:81:58:74:71:7a:c8:48:0d:0e:29: 43:81:9c:aa:fc:f5:08:59:61:a9:28:a3:c8:1c:97:d7:f3:f8: cf:4d:c3:33:6a:ee:c4:30:a0:1a:26:3a:0a:3e:4a:42:ee:49: 95:ca:c9:1e:36:8e:1f:44:55:28:75:88:5a:2d:d1:3b:8f:90: a1:c7:51:45:ac:62:f9:0b:02:b7:c9:b8:20:d8:e4:74:64:82: 51:6a:22:dc:47:ac:da:e1:04:5f:59:2e:1a:64:25:c7:c3:df: 5f:af:52:d0:99:15:df:c9:d2:57:eb:b3:71:30:fd:a8:0c:0d: b2:50:59:70:c2:f5:ac:25:8d:b8:b2:b5:a0:86:b5:ec:cb:81: d4:83:17:da:fe:0f:f0:33:cc:e7:6b:ee:e8:c0:ed:27:50:3d: 6b:be:46:c6:bf:2a:d6:00:a7:07:c3:b6:89:22:67:25:c3:b3: 37:98:6e:fc:da:69:a7:4a:25:46:0f:aa:d4:f6:c8:d8:d3:48: d4:44:ab:61 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULQ7pwZV6HP9kd454e3h3H3WBzLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTE1NloX DTI3MDUwMjAwMTY1NlowMzExMC8GA1UEAxMoNDQ0MjhERjMyN0M4RkY4MDA3MDhF MjE5NjE4MUJDQjAwMEUxNEY5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDCU0UA1mXHhhjenae4DegTP98Q9USVTmjpT0tTQkxEeJ8PnIT4BLgy4q2g JEZy0C4hIELSbbPHbkhBvJsorwApB6ozQlnUfzVSbpEr2FKAqkzG1qYyMqzNWmav ffvok2jbEnukVhUGZHgQKzf8XA4+M/q6byqJU6NmsxTC9I4VvmMU/8ZBSD/kKX0c +hX5ct5Nyht7NRj60kNO9ATlGAu3yfMvM9PZipfAL5ee4Ec4nElR/ds+qMCge+/3 WC/eO6wTs89CrXYdRtxw2x+oh57wrB95wjgxj56JzK0bcsiskMs9Dahkv6oGHwu0 LjHcg4k52SejFoGRhMlS8yXqhxMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFERCjfMnyP+ABwjiGWGBvLAA4U+bMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMxNDRkOTdhLWUzZmItNGZmYy1iN2Y3LWY3YjhiNjY1OWFjNC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMTQ0ZDk3 YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS80NDQyOERGMzI3QzhGRjgw MDcwOEUyMTk2MTgxQkNCMDAwRTE0RjlCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ6DJMA8EAgACMAkDBwAgAQ3zr0AwDQYJKoZIhvcNAQELBQADggEBAHjp1RM2 Gq7vO3LRu+xautRXUh585snb/l7omA7y9yeaPwsnBABKWJXQPtbNNNIiJLqRpd6q PFjR6W/8Pi9YgVh0cXrISA0OKUOBnKr89QhZYakoo8gcl9fz+M9NwzNq7sQwoBom Ogo+SkLuSZXKyR42jh9EVSh1iFot0TuPkKHHUUWsYvkLArfJuCDY5HRkglFqItxH rNrhBF9ZLhpkJcfD31+vUtCZFd/J0lfrs3Ew/agMDbJQWXDC9awljbiytaCGtezL gdSDF9r+D/AzzOdr7ujA7SdQPWu+Rsa/KtYApwfDtokiZyXDszeYbvzaaadKJUYP qtT2yNjTSNREq2E= -----END CERTIFICATE-----Generated at Tue May 12 22:38:55 2026 by rpki-client