$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer (raw, json) Hash identifier: jO20mVL3DOWxT7Alaan49HQmpJKVzg5U6I7EQs9//SM= Subject key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0F1237898BA9FA9DFF2216FA42A8065DF45A1EDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:40:03 +0000 Certificate not after: Sun 02 May 2027 02:45:03 +0000 Subordinate resources: IP: 103.65.212.0/22 IP: 2405:ad80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:12:37:89:8b:a9:fa:9d:ff:22:16:fa:42:a8:06:5d:f4:5a:1e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:40:03 2026 GMT Not After : May 2 02:45:03 2027 GMT Subject: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:ed:ae:bb:1e:cb:06:c8:5a:ba:e7:f6:d4: a0:47:56:6c:95:99:03:ac:93:57:05:d1:ae:6c:1e: 3e:3c:2d:78:b0:5a:35:4c:a2:93:62:07:e4:8a:43: a0:b9:67:98:d6:86:83:41:32:7f:bc:80:40:f5:0c: 52:5b:8b:f2:c6:ba:8a:b9:9b:10:21:f8:08:90:2f: 09:9c:45:39:ac:d9:90:33:9d:f1:35:bb:59:96:59: 76:16:33:a2:3b:d2:c1:b1:b4:7c:a9:d3:46:79:c2: 16:3f:d3:d9:15:05:a6:f9:87:15:33:23:d3:f5:b6: 6d:3d:5d:f8:99:72:b2:95:ae:c7:12:70:4e:2d:b8: b2:fb:98:6e:bd:f8:14:60:1d:1c:b8:44:bc:3b:b4: 1c:61:a8:65:c1:c2:9b:d8:39:2e:8f:10:ba:5b:43: b1:6a:c8:e1:48:9a:50:71:d6:55:ae:9c:e8:f7:d7: e6:1a:f6:60:c5:63:5b:64:2a:f9:4a:d1:a1:8e:fb: bb:32:33:ce:6a:86:ad:ab:cc:85:b4:56:ae:19:39: bc:50:84:77:ce:ec:b7:9b:31:59:c6:94:9d:ec:cd: 3c:3c:ba:40:4d:87:cc:94:a3:ca:0e:a4:91:16:8d: 4a:7d:0f:29:31:05:df:2b:a2:6f:f8:f5:52:2c:7a: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.212.0/22 IPv6: 2405:ad80::/32 Signature Algorithm: sha256WithRSAEncryption 57:a7:c2:b6:ca:bf:16:a2:f6:3c:ae:fd:62:9d:e4:0b:f4:b5: 0a:18:bd:72:da:3c:04:e3:65:1a:b7:e8:ca:67:93:63:77:e7: 4c:f4:29:5e:c6:a5:ab:79:ef:73:cf:5d:4e:cd:fb:2f:17:12: 57:a5:3e:70:56:ef:7a:9a:3d:f7:32:29:df:35:e3:8d:cb:39: 8c:a7:48:58:dd:fc:eb:0f:83:a1:8a:2f:cc:85:ea:04:bb:a1: 99:96:4b:28:a6:0d:8c:45:08:fb:ab:eb:28:61:84:33:c8:67: 05:57:7c:b0:75:df:13:aa:df:50:c5:49:db:25:c2:66:be:b6: d2:1b:fa:0a:b7:b3:7c:01:0d:64:59:e4:d2:70:1f:d8:7d:9e: a5:10:55:47:5d:f9:5f:3e:f8:35:a7:3f:05:73:b5:d1:01:7c: 7e:13:3a:4d:31:bd:0b:2d:1e:ad:f0:e9:02:27:f0:66:fa:08: 29:63:ec:16:30:c0:7b:1b:12:cc:e9:3e:25:ea:3a:df:6b:39: cb:2e:54:ba:b8:d2:2c:0a:be:a3:0a:02:92:57:5d:a2:3a:1e: f1:02:36:12:b4:3b:bb:de:e3:55:8f:7f:10:47:c3:70:18:01: 0d:82:d6:ef:6d:64:f7:32:bd:cf:2e:89:3e:88:f3:ba:46:c8: d2:7f:0d:12 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUDxI3iYup+p3/Ihb6QqgGXfRaHtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDAwM1oX DTI3MDUwMjAyNDUwM1owMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1 Njk5QzZEREFBN0Y5NUZBRUMzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXv7a67HssGyFq65/bUoEdWbJWZA6yTVwXRrmwePjwteLBaNUyik2IH5IpD oLlnmNaGg0Eyf7yAQPUMUluL8sa6irmbECH4CJAvCZxFOazZkDOd8TW7WZZZdhYz ojvSwbG0fKnTRnnCFj/T2RUFpvmHFTMj0/W2bT1d+JlyspWuxxJwTi24svuYbr34 FGAdHLhEvDu0HGGoZcHCm9g5Lo8QultDsWrI4UiaUHHWVa6c6PfX5hr2YMVjW2Qq +UrRoY77uzIzzmqGravMhbRWrhk5vFCEd87st5sxWcaUnezNPDy6QE2HzJSjyg6k kRaNSn0PKTEF3yuib/j1Uix6zE8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEUy+ACn61vLXbBWmcbdqn+V+uw2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y4NDIzYjhhLWZlMjItNDNhZC05NTA3LTFhOTlhYmJhN2Q5NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mODQyM2I4 YS1mZTIyLTQzYWQtOTUwNy0xYTk5YWJiYTdkOTQvMC80NTMyRjgwMEE3RUI1QkNC NURCMDU2OTlDNkREQUE3Rjk1RkFFQzM2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ0HUMA0EAgACMAcDBQAkBa2AMA0GCSqGSIb3DQEBCwUAA4IBAQBXp8K2yr8W ovY8rv1ineQL9LUKGL1y2jwE42Uat+jKZ5Njd+dM9ClexqWree9zz11OzfsvFxJX pT5wVu96mj33MinfNeONyzmMp0hY3fzrD4Ohii/MheoEu6GZlksopg2MRQj7q+so YYQzyGcFV3ywdd8Tqt9QxUnbJcJmvrbSG/oKt7N8AQ1kWeTScB/YfZ6lEFVHXflf Pvg1pz8Fc7XRAXx+EzpNMb0LLR6t8OkCJ/Bm+ggpY+wWMMB7GxLM6T4l6jrfaznL LlS6uNIsCr6jCgKSV12iOh7xAjYStDu73uNVj38QR8NwGAENgtbvbWT3Mr3PLok+ iPO6RsjSfw0S -----END CERTIFICATE-----Generated at Tue May 12 22:10:24 2026 by rpki-client