$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer File: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer (raw, json) Hash identifier: Hq+3YIli0Mw2fuMj93VZqOU9TZSTBf/z15TAP3nYvx0= Subject key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 73FF4B517B65C2816F5E8FEC4E59C9A95A56F944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:44:26 +0000 Certificate not after: Sun 02 May 2027 02:49:26 +0000 Subordinate resources: IP: 103.151.226.0/23 IP: 2406:21c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ff:4b:51:7b:65:c2:81:6f:5e:8f:ec:4e:59:c9:a9:5a:56:f9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:44:26 2026 GMT Not After : May 2 02:49:26 2027 GMT Subject: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:93:55:5a:e3:d8:1a:1a:0a:30:68:8a:25: 8c:cb:d6:49:4a:3c:a8:f8:d2:c9:5a:b0:3d:1e:de: ba:6a:29:1d:34:d7:fc:07:ba:ef:f6:b1:e6:7b:28: 60:9c:4a:c1:99:d1:00:23:5b:de:c6:34:17:ec:b3: 7b:01:c8:2a:9e:ca:16:df:ff:b8:ea:18:ae:f9:60: b0:08:48:4f:48:f1:2c:28:c5:72:35:2c:6d:dc:25: fd:b3:7d:bd:f5:a2:1f:3c:aa:06:06:1d:ee:ad:cf: 67:db:b3:20:a8:9a:45:fe:0d:86:0a:ae:70:ff:88: 21:44:a0:0c:66:ab:41:3e:1f:3d:ef:ed:9b:05:0a: d6:b3:26:7f:2d:ed:bd:df:7b:27:f4:e4:02:db:e8: 5e:39:70:48:ec:aa:8d:d0:0d:68:3b:77:56:cc:b1: 01:fa:4a:a4:b0:aa:87:11:f5:68:ff:70:31:5b:6b: 93:fa:1c:29:81:2e:0f:1b:e9:42:ca:88:45:ad:19: b6:80:cb:2c:47:bf:14:a5:7d:ec:9b:60:dd:ff:99: fb:72:dd:89:50:53:4f:ca:a8:c4:36:0a:2f:2c:87: 8a:f5:ba:f3:41:e7:44:21:52:d1:eb:46:74:0e:0d: 9b:07:43:18:e1:50:54:8c:f4:d1:ef:05:00:a3:c9: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.226.0/23 IPv6: 2406:21c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:d5:c5:28:60:25:03:38:56:bb:43:d4:3a:83:4b:5e:cd:c5: 13:cc:32:0e:83:8e:32:0b:98:8c:96:87:dd:81:33:4b:96:f3: f4:d7:98:41:88:e6:28:3c:e9:4f:6f:50:a3:c0:33:26:4e:cb: 85:66:ae:1d:5c:1d:2f:61:18:07:51:17:bc:2f:42:3a:6c:02: ad:2b:fb:66:0b:5c:69:22:27:49:5d:60:32:d8:78:d4:ba:67: 48:9d:b9:e9:71:77:9a:7c:cc:65:56:78:45:69:63:20:c3:f4: 76:1e:f7:0f:46:7e:85:e6:a7:fb:9d:4b:90:bf:37:c3:b6:06: 8c:f5:4a:a6:7d:f2:3c:2c:f6:5e:dc:24:36:23:e2:21:d8:33: 70:68:53:56:79:0b:fc:d7:f3:a4:a2:78:50:cd:70:6c:5c:36: d2:47:51:f5:33:60:9d:bc:d1:bf:0e:1f:24:74:93:98:39:03: bf:3e:71:3e:e3:20:3f:ef:9a:83:f4:9a:fc:32:68:88:76:8e: fb:28:46:52:d5:bd:01:f3:8a:85:b2:2e:27:fd:b7:33:5e:85: d5:e9:47:ec:a2:c1:00:a3:44:fd:92:b3:70:47:2f:54:26:cb: 41:af:c0:77:97:7a:ad:7d:49:ca:fa:be:17:ce:8e:96:8a:3b: ea:1b:a4:f1 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUc/9LUXtlwoFvXo/sTlnJqVpW+UQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDQyNloX DTI3MDUwMjAyNDkyNlowMzExMC8GA1UEAxMoNDVGMzUwRTAyNDhDQThBMkIyMEI1 M0EyMkJERDNCNkZDRjE2QzdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL53k1Va49gaGgowaIoljMvWSUo8qPjSyVqwPR7eumopHTTX/Ae67/ax5nso YJxKwZnRACNb3sY0F+yzewHIKp7KFt//uOoYrvlgsAhIT0jxLCjFcjUsbdwl/bN9 vfWiHzyqBgYd7q3PZ9uzIKiaRf4NhgqucP+IIUSgDGarQT4fPe/tmwUK1rMmfy3t vd97J/TkAtvoXjlwSOyqjdANaDt3VsyxAfpKpLCqhxH1aP9wMVtrk/ocKYEuDxvp QsqIRa0ZtoDLLEe/FKV97Jtg3f+Z+3LdiVBTT8qoxDYKLyyHivW680HnRCFS0etG dA4NmwdDGOFQVIz00e8FAKPJUjUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEXzUOAkjKiisgtToivdO2/PFsesMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZjMmFiMDYyLTg3MDMtNGRhNi1hZDcyLTgwZDI1YWU4YmY1Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYzJhYjA2 Mi04NzAzLTRkYTYtYWQ3Mi04MGQyNWFlOGJmNWYvMC80NUYzNTBFMDI0OENBOEEy QjIwQjUzQTIyQkREM0I2RkNGMTZDN0FDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5fiMA0EAgACMAcDBQAkBiHAMA0GCSqGSIb3DQEBCwUAA4IBAQAz1cUoYCUD OFa7Q9Q6g0tezcUTzDIOg44yC5iMlofdgTNLlvP015hBiOYoPOlPb1CjwDMmTsuF Zq4dXB0vYRgHURe8L0I6bAKtK/tmC1xpIidJXWAy2HjUumdInbnpcXeafMxlVnhF aWMgw/R2HvcPRn6F5qf7nUuQvzfDtgaM9UqmffI8LPZe3CQ2I+Ih2DNwaFNWeQv8 1/OkonhQzXBsXDbSR1H1M2CdvNG/Dh8kdJOYOQO/PnE+4yA/75qD9Jr8MmiIdo77 KEZS1b0B84qFsi4n/bczXoXV6UfsosEAo0T9krNwRy9UJstBr8B3l3qtfUnK+r4X zo6WijvqG6Tx -----END CERTIFICATE-----Generated at Wed May 13 02:40:44 2026 by rpki-client