$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4560165A105018777E945437E2CDF8199768DFF6.cer File: 4560165A105018777E945437E2CDF8199768DFF6.cer (raw, json) Hash identifier: 1M7W7yQ3vPlGFzFg3azEZ/C6J6QQ7YeVQAOULlZPJEg= Subject key identifier: 45:60:16:5A:10:50:18:77:7E:94:54:37:E2:CD:F8:19:97:68:DF:F6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C3B574D4CE6FB84150622BB61C100208CFACD16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:32:13 +0000 Certificate not after: Sun 02 May 2027 00:37:13 +0000 Subordinate resources: IP: 103.133.24.0/22 IP: 2404:4640::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3b:57:4d:4c:e6:fb:84:15:06:22:bb:61:c1:00:20:8c:fa:cd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:32:13 2026 GMT Not After : May 2 00:37:13 2027 GMT Subject: CN=4560165A105018777E945437E2CDF8199768DFF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8d:f0:cd:67:13:e9:55:62:9e:15:55:31:71: 8e:64:ca:f5:96:69:e9:a9:83:fa:77:0d:e0:e9:7e: ac:cd:24:d2:62:74:53:1c:50:0f:6b:8f:80:eb:41: ec:5e:59:c4:92:68:b3:62:dd:d8:6b:9c:01:dd:54: 0d:0f:f5:62:8f:b2:bb:36:27:03:3b:c7:11:09:31: 91:85:09:35:2d:3e:b0:14:73:3f:51:03:77:c0:d0: bc:ba:14:1e:7c:11:d6:69:69:e3:85:e8:b5:c8:4c: 9e:db:3b:23:c2:f4:60:4a:d1:5b:8b:1d:e8:23:f5: 1b:3e:1b:d9:56:89:42:6a:79:28:7f:ff:7b:18:bd: 49:f6:a5:39:78:23:0a:c4:0d:b0:4d:cf:08:9d:5e: a7:30:e0:7f:a4:d3:58:1d:e7:f8:90:ab:5d:3e:1a: 5c:30:db:ad:99:f3:ab:ec:e6:74:7e:ee:d4:6e:c5: 3a:ce:f4:d0:fb:9e:90:d4:f5:b3:d5:76:1f:44:00: b2:7a:b9:f4:4d:b3:50:f1:49:77:97:35:d2:b5:13: e8:2a:cb:ca:d7:0d:52:c9:3c:2f:98:08:e7:f7:4e: a1:f9:ab:6e:03:43:91:0d:8b:2f:62:51:a8:03:b6: d7:7d:92:71:48:e0:e2:ae:fb:20:a0:2c:27:7f:a9: 32:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:60:16:5A:10:50:18:77:7E:94:54:37:E2:CD:F8:19:97:68:DF:F6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.24.0/22 IPv6: 2404:4640::/32 Signature Algorithm: sha256WithRSAEncryption 03:d3:2d:7a:23:22:bf:9c:b6:6f:40:8a:25:85:7e:c9:9c:1d: d2:31:cb:48:97:04:7c:c5:ad:e2:88:5a:06:95:91:7e:05:be: 0c:55:0c:31:7d:d3:ee:2b:0c:0e:79:84:b3:d9:9a:cb:3c:cf: 07:e6:de:38:0d:ec:0a:3b:9c:9b:82:51:05:75:c4:05:f6:99: 44:87:99:b7:aa:81:59:7f:ca:0c:7f:17:56:bb:23:0b:df:36: 33:65:00:75:05:31:de:06:62:57:ce:c5:8f:11:e1:0e:57:80: 7b:01:45:9a:77:d3:e2:e0:e2:b3:a3:bb:c9:33:56:0b:86:fc: fa:39:b3:2f:1f:0a:1a:5b:65:46:07:18:5a:99:4f:06:81:3f: 17:1d:f0:57:1c:98:2b:d3:e2:1b:b2:92:4c:c3:d3:cc:e4:76: 1b:8f:79:40:74:6f:5c:bb:45:1d:c1:cc:fa:90:7e:01:a8:39: 3d:15:0e:85:b4:65:bd:62:30:5d:bc:e2:79:fe:36:5f:2f:fa: 71:9c:16:bb:61:d8:15:0a:57:ab:00:e1:90:2e:f2:6e:83:67: c5:c9:3b:54:6e:f8:00:39:e3:36:b9:39:82:7b:fa:17:65:46: e7:19:e4:a6:8a:53:7b:7a:85:c8:2c:89:b8:8f:df:9f:36:0c: 2b:5c:8f:a8 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIULDtXTUzm+4QVBiK7YcEAIIz6zRYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzIxM1oX DTI3MDUwMjAwMzcxM1owMzExMC8GA1UEAxMoNDU2MDE2NUExMDUwMTg3NzdFOTQ1 NDM3RTJDREY4MTk5NzY4REZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANeN8M1nE+lVYp4VVTFxjmTK9ZZp6amD+ncN4Ol+rM0k0mJ0UxxQD2uPgOtB 7F5ZxJJos2Ld2GucAd1UDQ/1Yo+yuzYnAzvHEQkxkYUJNS0+sBRzP1EDd8DQvLoU HnwR1mlp44XotchMnts7I8L0YErRW4sd6CP1Gz4b2VaJQmp5KH//exi9SfalOXgj CsQNsE3PCJ1epzDgf6TTWB3n+JCrXT4aXDDbrZnzq+zmdH7u1G7FOs700PuekNT1 s9V2H0QAsnq59E2zUPFJd5c10rUT6CrLytcNUsk8L5gI5/dOofmrbgNDkQ2LL2JR qAO2132ScUjg4q77IKAsJ3+pMvcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEVgFloQUBh3fpRUN+LN+BmXaN/2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRmZGZmMzkwLTE2OTUtNDRlZS04OGU1LTQyZWQxMjgxNmIwMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZmRmZjM5 MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC80NTYwMTY1QTEwNTAxODc3 N0U5NDU0MzdFMkNERjgxOTk3NjhERkY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ4UYMA0EAgACMAcDBQAkBEZAMA0GCSqGSIb3DQEBCwUAA4IBAQAD0y16IyK/ nLZvQIolhX7JnB3SMctIlwR8xa3iiFoGlZF+Bb4MVQwxfdPuKwwOeYSz2ZrLPM8H 5t44DewKO5ybglEFdcQF9plEh5m3qoFZf8oMfxdWuyML3zYzZQB1BTHeBmJXzsWP EeEOV4B7AUWad9Pi4OKzo7vJM1YLhvz6ObMvHwoaW2VGBxhamU8GgT8XHfBXHJgr 0+IbspJMw9PM5HYbj3lAdG9cu0Udwcz6kH4BqDk9FQ6FtGW9YjBdvOJ5/jZfL/px nBa7YdgVClerAOGQLvJug2fFyTtUbvgAOeM2uTmCe/oXZUbnGeSmilN7eoXILIm4 j9+fNgwrXI+o -----END CERTIFICATE-----Generated at Tue May 12 22:02:58 2026 by rpki-client