$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer File: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer (raw, json) Hash identifier: q3L5yZfCYvW0JpF9OONa130Md0/SsvGcnEomIkPFOFE= Subject key identifier: 44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 619B39A03FB05FB59501187BF7F42E79F6954E3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:18 +0000 Certificate not after: Sun 02 May 2027 00:36:18 +0000 Subordinate resources: IP: 103.68.214.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9b:39:a0:3f:b0:5f:b5:95:01:18:7b:f7:f4:2e:79:f6:95:4e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:31:18 2026 GMT Not After : May 2 00:36:18 2027 GMT Subject: CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:dc:1d:e8:a1:02:00:2c:18:f1:cc:74:15: ad:3a:fd:d9:1c:61:66:ce:6e:81:7c:a9:a8:be:0f: c4:17:ad:2c:6c:d0:80:b6:2a:4e:08:54:65:53:3a: 28:70:0e:d8:49:91:52:69:3c:a8:80:03:f0:2b:c1: b6:eb:47:84:96:c3:e1:7d:16:b4:ba:dd:8c:25:e0: 3a:5b:ce:77:b8:cc:fa:99:15:a6:99:bb:64:58:d2: cc:c4:94:5c:76:34:9e:60:e2:7d:72:7a:b7:00:20: 7d:5c:36:d4:e3:ec:e2:f3:a6:a9:a2:b9:02:88:32: e4:15:43:1d:d5:9f:b5:fe:d3:5c:0a:56:fd:da:12: 75:4c:3e:60:a8:95:0f:04:57:eb:4e:50:fe:99:e0: b2:db:2f:9a:82:46:01:e4:b3:39:53:9b:2b:6a:f7: 6e:25:d0:66:41:9f:b2:19:31:2b:5e:7d:c1:9e:56: b1:4f:19:96:ca:ba:53:49:29:14:06:f9:40:c1:99: 49:1e:30:02:24:fc:fb:ba:f8:01:c7:48:3b:39:59: d1:2f:4e:d8:ea:d6:93:e7:01:4f:6a:f2:20:73:11: 88:73:ca:17:44:c7:68:42:2f:3c:61:cb:01:ec:92: 66:34:cd:74:74:ca:8a:83:90:c6:62:98:71:71:12: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.214.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:a6:2c:88:6f:11:df:14:74:ac:51:97:b0:ec:ab:cd:b8:5f: 41:c3:bb:38:3e:ab:4e:80:15:e3:eb:48:95:0f:21:cc:9f:f6: 25:7c:0d:b7:26:fc:fc:b3:f1:ba:dd:f9:a4:20:78:05:db:cb: 1d:40:2b:10:c6:8e:e4:0a:81:88:58:22:27:95:b6:65:cb:7a: 62:75:e9:d7:da:f5:8f:57:4f:b6:e0:37:8a:80:b2:a2:7b:02: 97:71:51:44:a3:1e:59:c4:bc:54:97:85:a3:d6:d2:5c:62:87: 51:4b:ab:a1:4d:74:40:32:38:54:23:5d:7b:fc:c7:ec:38:58: 81:32:2f:04:e9:fc:3d:7f:3a:92:f1:3a:c6:ae:f4:7c:8b:11: 80:7c:67:23:ca:b4:7d:3f:7e:3f:8e:3a:a6:76:42:64:0f:16: fc:da:c5:61:8a:d7:cb:c4:a4:19:3f:a3:27:df:dd:fa:f3:61: 36:e1:88:dc:b0:8c:85:ea:78:2e:a8:ef:2f:78:94:d7:65:e1: 8a:30:d7:c8:56:fb:6a:a6:35:d8:9d:a3:03:41:6e:37:63:00: ba:7e:78:3b:09:56:99:4b:15:b3:38:93:e2:e2:8f:3b:4a:56: 14:51:41:2a:a3:bc:32:35:2c:7d:51:9b:3c:c6:1e:4b:2b:0b: 8f:bc:e6:d4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYZs5oD+wX7WVARh79/QuefaVTjowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzExOFoX DTI3MDUwMjAwMzYxOFowMzExMC8GA1UEAxMoNDQ1RkUwRjM2M0FCMzA2RTUzRjFF MkNEOTM5RUZEOEM4QTEwMjMzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPJ3B3ooQIALBjxzHQVrTr92RxhZs5ugXypqL4PxBetLGzQgLYqTghUZVM6 KHAO2EmRUmk8qIAD8CvBtutHhJbD4X0WtLrdjCXgOlvOd7jM+pkVppm7ZFjSzMSU XHY0nmDifXJ6twAgfVw21OPs4vOmqaK5Aogy5BVDHdWftf7TXApW/doSdUw+YKiV DwRX605Q/pngstsvmoJGAeSzOVObK2r3biXQZkGfshkxK159wZ5WsU8Zlsq6U0kp FAb5QMGZSR4wAiT8+7r4AcdIOzlZ0S9O2OrWk+cBT2ryIHMRiHPKF0THaEIvPGHL AeySZjTNdHTKioOQxmKYcXESbEkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFERf4PNjqzBuU/HizZOe/YyKECM4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRlYmY2M2VkLWQ0NTAtNDc3ZS1iMzFiLWFmOTJiMTcyNmQyZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZWJmNjNl ZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC80NDVGRTBGMzYzQUIzMDZF NTNGMUUyQ0Q5MzlFRkQ4QzhBMTAyMzM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0TWMA0GCSqGSIb3DQEBCwUAA4IBAQA6piyIbxHfFHSsUZew7KvNuF9Bw7s4 PqtOgBXj60iVDyHMn/YlfA23Jvz8s/G63fmkIHgF28sdQCsQxo7kCoGIWCInlbZl y3pidenX2vWPV0+24DeKgLKiewKXcVFEox5ZxLxUl4Wj1tJcYodRS6uhTXRAMjhU I117/MfsOFiBMi8E6fw9fzqS8TrGrvR8ixGAfGcjyrR9P34/jjqmdkJkDxb82sVh itfLxKQZP6Mn393682E24YjcsIyF6nguqO8veJTXZeGKMNfIVvtqpjXYnaMDQW43 YwC6fng7CVaZSxWzOJPi4o87SlYUUUEqo7wyNSx9UZs8xh5LKwuPvObU -----END CERTIFICATE-----Generated at Tue May 12 22:03:43 2026 by rpki-client