$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer (raw, json) Hash identifier: QlzJj+MUd7TiEuAvUBNNesNkIg4eQiuqAmHUMDSliCs= Subject key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E77547F27ADC63AB4DB82AC78AF48169F7CF96A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft caRepository: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:01 +0000 Certificate not after: Sun 02 May 2027 00:22:01 +0000 Subordinate resources: IP: 103.153.126.0/23 IP: 2406:44c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:77:54:7f:27:ad:c6:3a:b4:db:82:ac:78:af:48:16:9f:7c:f9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:01 2026 GMT Not After : May 2 00:22:01 2027 GMT Subject: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:76:92:ee:c2:cb:4e:74:bf:ab:a9:5c:48: cb:41:e6:f4:9e:34:19:66:76:90:46:cb:b4:bf:72: 95:51:67:41:4b:a4:3b:81:cc:3f:7c:fd:5c:5e:43: a7:77:71:9b:5b:69:ca:2e:9f:0d:28:6e:a2:07:08: 58:89:5a:fb:ad:d7:3c:6a:4a:a9:c7:5d:35:24:1c: e2:cf:df:8c:47:85:d1:74:a8:f8:b9:f8:8d:ed:54: 69:e2:db:cd:f8:78:64:dc:a0:b4:94:5b:7d:a5:87: 28:e6:29:10:6e:dd:b4:b1:62:d0:c8:1e:3b:cd:f7: 5a:22:7b:62:f1:ec:05:4b:5a:e4:a4:6e:f8:37:7e: be:21:98:8e:51:a3:da:b9:05:ef:db:76:d5:dc:88: cf:c2:3c:c6:46:d2:1f:0a:be:19:80:88:f1:15:29: 12:11:a3:41:96:cc:2e:d3:41:65:fc:ad:00:f7:f9: 5e:a6:55:89:14:e5:b2:ee:d3:9c:d6:e1:2d:e9:b5: 77:04:20:a4:86:f6:da:59:1d:1b:ad:c3:f9:18:29: 4e:fd:8c:8e:dc:6b:47:16:85:b5:d6:9a:2c:eb:24: 84:9e:aa:aa:6d:3d:e3:54:e1:c8:a7:5e:c3:f5:b1: 23:f1:ab:91:58:42:dc:77:c6:e0:5a:92:fa:9d:af: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.126.0/23 IPv6: 2406:44c0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:f7:51:73:5d:f9:30:32:00:d5:b3:a6:b3:67:22:c7:20:0d: 35:35:d1:91:4e:ea:7b:f3:91:14:d7:3b:1e:4a:35:87:81:6e: f8:b3:cc:16:b4:05:29:b6:a2:ae:e8:20:52:18:32:2b:6f:fa: ab:ed:4f:63:b1:80:4e:ab:27:1e:08:db:7c:16:0e:be:dd:f8: 87:1b:69:f0:ce:5d:5b:ac:29:08:2c:91:b3:9b:e5:cd:79:c1: d2:0a:fb:f7:e2:d4:98:8b:df:ee:81:51:44:f5:94:35:67:64: 0b:1b:96:b6:ad:30:18:fc:60:65:ed:50:40:60:0c:98:3c:a0: ee:20:9e:d2:a7:5c:02:bc:fd:ce:f7:69:96:01:1b:48:b1:88: 77:65:56:58:61:25:73:42:93:65:b6:d1:83:fc:5b:d5:65:48: cb:e6:18:73:30:93:bc:58:0f:32:e0:a0:9b:d3:a6:b1:23:71: e8:71:19:93:18:65:38:3e:44:9b:07:bc:e9:12:24:36:66:ff: f3:8a:39:11:27:05:2d:aa:96:f9:e4:10:b2:45:6d:e5:30:7d: 8b:6d:b5:a0:c8:8b:e9:ce:3b:bc:33:8b:c7:a7:c8:d9:4b:dc: 47:97:d2:f6:95:ba:11:84:00:86:25:1e:34:d2:f7:46:99:c4: c0:2f:25:79 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUbndUfyetxjq024KseK9IFp98+WowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTcwMVoX DTI3MDUwMjAwMjIwMVowMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJB MDIzRUVDMkQ1OUUzNjEwOEQwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPidpLuwstOdL+rqVxIy0Hm9J40GWZ2kEbLtL9ylVFnQUukO4HMP3z9XF5D p3dxm1tpyi6fDShuogcIWIla+63XPGpKqcddNSQc4s/fjEeF0XSo+Ln4je1UaeLb zfh4ZNygtJRbfaWHKOYpEG7dtLFi0MgeO833WiJ7YvHsBUta5KRu+Dd+viGYjlGj 2rkF79t21dyIz8I8xkbSHwq+GYCI8RUpEhGjQZbMLtNBZfytAPf5XqZViRTlsu7T nNbhLem1dwQgpIb22lkdG63D+RgpTv2MjtxrRxaFtdaaLOskhJ6qqm0941ThyKde w/WxI/GrkVhC3HfG4FqS+p2vbpECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEWhw/Hcp7fMqNugI+7C1Z42EI0CMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM4M2VkN2FiLTFhYzktNGY0Mi1hY2RkLTUzNTU3YWM3YjNmMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zODNlZDdh Yi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC80NUExQzNGMURDQTdCN0ND QThEQkEwMjNFRUMyRDU5RTM2MTA4RDAyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5l+MA0EAgACMAcDBQAkBkTAMA0GCSqGSIb3DQEBCwUAA4IBAQB+91FzXfkw MgDVs6azZyLHIA01NdGRTup785EU1zseSjWHgW74s8wWtAUptqKu6CBSGDIrb/qr 7U9jsYBOqyceCNt8Fg6+3fiHG2nwzl1brCkILJGzm+XNecHSCvv34tSYi9/ugVFE 9ZQ1Z2QLG5a2rTAY/GBl7VBAYAyYPKDuIJ7Sp1wCvP3O92mWARtIsYh3ZVZYYSVz QpNlttGD/FvVZUjL5hhzMJO8WA8y4KCb06axI3HocRmTGGU4PkSbB7zpEiQ2Zv/z ijkRJwUtqpb55BCyRW3lMH2LbbWgyIvpzju8M4vHp8jZS9xHl9L2lboRhACGJR40 0vdGmcTALyV5 -----END CERTIFICATE-----Generated at Tue May 12 22:04:05 2026 by rpki-client