$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer (raw, json) Hash identifier: xfn8v+yqzW81udfPA9dptamosx+TDFP56XRXbRw3k5w= Subject key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 08BC76D9E4D13A4756C68042596AF36D34946F2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:34 +0000 Certificate not after: Sun 02 May 2027 00:07:34 +0000 Subordinate resources: IP: 103.35.154.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bc:76:d9:e4:d1:3a:47:56:c6:80:42:59:6a:f3:6d:34:94:6f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:34 2026 GMT Not After : May 2 00:07:34 2027 GMT Subject: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:92:8b:52:b7:08:99:b8:45:f0:48:3e:92: 88:6b:bc:91:4a:ee:fe:2a:47:76:91:a1:ae:bd:38: ab:cb:2d:e4:f0:c4:18:c3:79:d2:09:34:11:cb:5b: 37:20:e9:43:d7:33:3e:69:cd:62:3c:e5:92:0f:8c: 53:b6:27:9a:c9:5e:da:06:3a:b2:17:2d:ff:47:d3: ed:61:c4:9e:89:0e:fd:4a:46:c0:fc:f6:de:e2:fb: 44:4c:55:9d:b1:1d:29:9d:c0:57:7b:e2:13:f9:18: 85:29:5a:28:66:f3:6c:78:34:85:01:1a:30:86:c5: 0d:42:5e:aa:d0:b4:99:c5:5c:59:b6:19:ce:3e:f4: 02:ad:ff:ba:48:a0:d1:b3:64:29:20:dd:6b:41:97: 12:2b:48:2c:a7:82:e5:5b:6a:df:ca:58:2f:e2:d7: 65:38:23:8b:58:be:55:55:8c:45:cd:31:e2:5d:47: 60:25:76:f9:49:21:3f:80:09:6a:ac:f0:ad:a3:7f: 42:42:4d:73:2d:9e:2a:75:a3:df:05:af:f0:fa:3c: d3:18:2b:7e:27:6e:64:20:35:97:f3:34:df:c3:8c: e8:86:c3:df:04:40:22:56:9e:ec:87:9f:00:7a:6f: 81:55:e8:25:9f:7b:51:5e:45:0e:80:af:9f:1d:92: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.154.0/23 Signature Algorithm: sha256WithRSAEncryption 05:dd:7d:8c:2f:42:4e:86:dc:16:e0:63:88:b7:cd:db:d2:1a: ed:fa:32:13:79:46:a9:23:df:52:fd:4d:52:a2:2f:26:66:6b: 93:68:ba:66:f0:1e:77:29:e4:ab:1c:ca:cc:97:cd:e6:34:13: 99:78:8c:95:81:4d:81:f0:1e:32:0c:8f:c6:3a:41:80:75:de: 0b:de:f5:1f:b3:1e:b5:9d:5e:eb:fc:1a:3c:0e:bf:07:b9:89: a7:6d:72:46:b7:b8:14:0e:e0:f3:e1:e8:36:a0:18:b2:66:c7: a8:0d:a9:52:b4:e6:fe:5d:b9:1b:57:b5:b5:1d:19:f5:ce:9c: 56:d9:53:d7:71:69:a9:f6:4b:fc:e4:71:e2:d7:e9:3c:5b:5b: 5b:88:1e:69:b4:d3:d2:f2:f6:fa:ad:1f:3c:48:f6:a0:e1:82: 3d:3c:3f:53:53:ea:94:b1:68:c3:e0:8f:7a:2d:eb:06:61:97: ea:f4:e7:1d:6a:e6:99:86:27:1c:de:7a:ff:43:d5:68:c0:34: b7:fc:97:af:c9:51:a6:2e:9f:b2:18:ab:e7:93:39:a8:88:4e: 50:ed:1d:06:bc:b3:74:37:be:dc:71:ca:95:58:e7:be:3d:44: dd:34:69:fe:f2:b5:01:56:b7:4a:77:48:86:1e:9c:01:29:78: ff:0d:d7:d0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCLx22eTROkdWxoBCWWrzbTSUbyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDIzNFoX DTI3MDUwMjAwMDczNFowMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJC QTM0QTcxNjUyNkM0NzBFQzBERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMPkotStwiZuEXwSD6SiGu8kUru/ipHdpGhrr04q8st5PDEGMN50gk0Ectb NyDpQ9czPmnNYjzlkg+MU7Ynmsle2gY6shct/0fT7WHEnokO/UpGwPz23uL7RExV nbEdKZ3AV3viE/kYhSlaKGbzbHg0hQEaMIbFDUJeqtC0mcVcWbYZzj70Aq3/ukig 0bNkKSDda0GXEitILKeC5Vtq38pYL+LXZTgji1i+VVWMRc0x4l1HYCV2+UkhP4AJ aqzwraN/QkJNcy2eKnWj3wWv8Po80xgrfiduZCA1l/M038OM6IbD3wRAIlae7Ief AHpvgVXoJZ97UV5FDoCvnx2SCasCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEW9DQy1p8TEm/u6NKcWUmxHDsDeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIyOTMyOWNmLTMxMjMtNGNlMC1hNjg3LTBhMDNjZDc1ODczOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMjkzMjlj Zi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC80NUJEMEQwQ0I1QTdDNEM0 OUJGQkJBMzRBNzE2NTI2QzQ3MEVDMERFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZyOaMA0GCSqGSIb3DQEBCwUAA4IBAQAF3X2ML0JOhtwW4GOIt83b0hrt+jIT eUapI99S/U1Soi8mZmuTaLpm8B53KeSrHMrMl83mNBOZeIyVgU2B8B4yDI/GOkGA dd4L3vUfsx61nV7r/Bo8Dr8HuYmnbXJGt7gUDuDz4eg2oBiyZseoDalStOb+Xbkb V7W1HRn1zpxW2VPXcWmp9kv85HHi1+k8W1tbiB5ptNPS8vb6rR88SPag4YI9PD9T U+qUsWjD4I96LesGYZfq9OcdauaZhicc3nr/Q9VowDS3/JevyVGmLp+yGKvnkzmo iE5Q7R0GvLN0N77cccqVWOe+PUTdNGn+8rUBVrdKd0iGHpwBKXj/DdfQ -----END CERTIFICATE-----Generated at Wed May 13 00:44:24 2026 by rpki-client