$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer File: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer (raw, json) Hash identifier: 5HW2g8GyEpMj3ILIPRRlv4uvoJfalk+JXe6jHsybM4o= Subject key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 75C42147A20E62F9C89113BF34ED56BF7C274915 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:32 +0000 Certificate not after: Sun 02 May 2027 01:32:32 +0000 Subordinate resources: IP: 103.105.98.0/23 IP: 103.133.20.0/23 IP: 2001:df3:7100::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c4:21:47:a2:0e:62:f9:c8:91:13:bf:34:ed:56:bf:7c:27:49:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:27:32 2026 GMT Not After : May 2 01:32:32 2027 GMT Subject: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:02:e9:ea:5f:52:69:41:15:fe:03:d1:c0: 11:69:64:74:9e:21:a9:51:26:23:4a:c3:b6:97:58: bc:c6:e2:7b:c1:be:9a:93:21:78:bf:9b:00:32:fd: 7d:ba:86:da:f7:74:0b:cd:cd:34:59:51:99:8e:8a: 48:a2:16:58:0e:93:a9:79:d3:1d:c4:a5:02:44:59: b9:3a:6f:d6:14:11:35:4c:95:2f:90:17:92:6a:e2: 9f:cb:fe:6e:f9:75:a8:9c:36:5c:33:ea:e4:e6:af: 39:39:cf:1a:04:57:d0:8b:52:de:05:2d:00:9e:3f: e2:7b:3e:81:98:37:2b:80:4f:47:c9:40:56:ef:34: 1a:8c:fb:03:c0:72:46:a1:5e:3d:83:ce:fd:84:65: 4f:96:6c:e2:e9:df:e6:0d:8e:d7:57:ec:cd:cf:21: c7:dc:d3:77:fa:0a:eb:3c:b8:ef:34:10:4a:69:28: 1e:8f:21:b7:14:c0:f7:58:01:60:12:9e:b7:19:97: 6a:00:b7:87:fc:fb:ac:0d:be:c9:16:35:00:b1:df: 55:ac:fc:07:64:9b:30:cf:b1:8c:64:0e:0b:12:b4: 9d:34:a5:70:da:95:b9:aa:4d:fc:0c:26:d8:dc:fa: 2d:80:f0:24:d2:85:c6:8b:da:0e:8d:2c:a8:c6:4c: 8a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.98.0/23 103.133.20.0/23 IPv6: 2001:df3:7100::/48 Signature Algorithm: sha256WithRSAEncryption 48:a4:8a:b7:8f:81:01:18:39:68:75:8d:39:55:93:61:1a:fb: 77:df:db:9e:6a:f7:c3:8c:84:11:fd:d8:4b:ef:09:7d:e8:17: c9:c6:d4:a1:b9:35:92:67:65:a9:2c:cc:33:42:02:05:71:fa: b9:da:e0:15:fe:61:1a:b3:64:b2:1d:42:5e:2c:65:25:78:d3: fc:4d:0c:32:f7:e8:88:df:4a:93:1d:c4:8d:75:09:75:f1:95: d0:02:e5:c4:81:4d:f3:67:79:69:6b:90:51:ef:70:b0:9b:c6: e7:bc:12:d4:ee:b3:1c:64:ed:e4:59:71:35:80:bd:15:16:1d: 4c:d3:da:69:16:63:2c:a1:2f:e1:74:b1:39:3c:85:75:f4:b2: b6:11:df:87:98:60:59:a8:2c:25:fe:af:a0:70:77:98:c9:10: be:4b:d8:28:1f:d1:8e:d7:0a:82:db:e0:2b:51:be:1a:19:7a: 1e:f2:d3:4f:e9:cf:71:b5:19:6c:c5:3c:75:d9:72:a6:9f:34: 2e:63:58:54:32:39:60:db:e4:cc:ed:a5:1d:a5:4f:a3:ad:cb: 79:04:5e:90:15:fe:59:71:ee:26:90:a1:97:ea:8b:c0:85:7c: fd:66:dd:a3:a4:e7:e3:66:7c:b0:71:a2:c2:f2:6d:7c:55:98: 2d:77:91:fe -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUdcQhR6IOYvnIkRO/NO1Wv3wnSRUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjczMloX DTI3MDUwMjAxMzIzMlowMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4 REQ3MjNCNUU5QjU1MDJCMzI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJAbAunqX1JpQRX+A9HAEWlkdJ4hqVEmI0rDtpdYvMbie8G+mpMheL+bADL9 fbqG2vd0C83NNFlRmY6KSKIWWA6TqXnTHcSlAkRZuTpv1hQRNUyVL5AXkmrin8v+ bvl1qJw2XDPq5OavOTnPGgRX0ItS3gUtAJ4/4ns+gZg3K4BPR8lAVu80Goz7A8By RqFePYPO/YRlT5Zs4unf5g2O11fszc8hx9zTd/oK6zy47zQQSmkoHo8htxTA91gB YBKetxmXagC3h/z7rA2+yRY1ALHfVaz8B2SbMM+xjGQOCxK0nTSlcNqVuapN/Awm 2Nz6LYDwJNKFxovaDo0sqMZMiosCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEX06zeqF4okK42N1yO16bVQKzJ7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ExMjRhYThjLWRlZGMtNDM3Ni05MzgxLTBhODFlNmJjYzU2NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMTI0YWE4 Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80NUY0RUIzN0FBMTc4QTI0 MkI4RDhERDcyM0I1RTlCNTUwMkIzMjdCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZ2liAwQBZ4UUMA8EAgACMAkDBwAgAQ3zcQAwDQYJKoZIhvcNAQELBQADggEB AEikirePgQEYOWh1jTlVk2Ea+3ff255q98OMhBH92EvvCX3oF8nG1KG5NZJnZaks zDNCAgVx+rna4BX+YRqzZLIdQl4sZSV40/xNDDL36IjfSpMdxI11CXXxldAC5cSB TfNneWlrkFHvcLCbxue8EtTusxxk7eRZcTWAvRUWHUzT2mkWYyyhL+F0sTk8hXX0 srYR34eYYFmoLCX+r6Bwd5jJEL5L2Cgf0Y7XCoLb4CtRvhoZeh7y00/pz3G1GWzF PHXZcqafNC5jWFQyOWDb5MztpR2lT6Oty3kEXpAV/llx7iaQoZfqi8CFfP1m3aOk 5+NmfLBxosLybXxVmC13kf4= -----END CERTIFICATE-----Generated at Tue May 12 22:16:36 2026 by rpki-client