$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer (raw, json) Hash identifier: ckSiPB637KoOFCIjBYMQG4KkDek0OppKVZre1A43FhY= Subject key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71675F57D2B35818C4CDF917A62EA950B7C5CFE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:14:49 +0000 Certificate not after: Sun 02 May 2027 00:19:49 +0000 Subordinate resources: IP: 103.3.233.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:67:5f:57:d2:b3:58:18:c4:cd:f9:17:a6:2e:a9:50:b7:c5:cf:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:14:49 2026 GMT Not After : May 2 00:19:49 2027 GMT Subject: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:6b:e0:8b:f3:8f:0d:a9:c6:37:15:47:e1: b9:e0:2d:31:88:19:6c:a6:2a:9a:4e:bf:a9:75:8d: b9:84:a5:fc:23:c6:a3:1b:7d:d5:3b:46:66:9c:2a: a1:7f:b8:75:8c:2b:6f:ef:7c:94:a4:78:b7:c3:d1: ad:99:e2:93:0e:4f:90:8c:f6:c8:b7:5b:a6:10:ca: 13:73:02:e5:70:fb:ed:ac:29:65:ca:ed:9c:8f:0c: e4:b8:73:55:8f:fa:ae:28:67:69:64:7e:fe:c4:eb: 2d:23:77:ba:11:a0:b3:fd:19:8f:30:9c:8f:d4:88: 11:2e:71:32:20:bc:39:0a:ae:60:85:c7:30:86:d4: df:a5:e7:36:b5:e4:1a:a2:9e:83:57:b1:49:b6:46: 2d:55:7e:06:cc:73:5c:ec:9d:d2:80:47:9c:76:72: 88:83:cf:86:57:78:81:e9:d4:fd:46:2d:fb:0b:2d: fc:98:be:87:76:8a:9f:08:f5:04:d7:de:05:b0:c0: d7:58:0b:99:04:db:19:7b:0d:f1:88:2a:21:c7:fd: 24:47:e2:63:e7:0c:ce:47:36:f0:cb:6e:b7:28:86: 1c:92:c1:b5:22:c7:3f:54:25:4b:9a:9e:e8:a2:fc: 32:47:18:91:a5:34:df:66:75:4c:54:68:4d:b1:8e: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.233.0/24 Signature Algorithm: sha256WithRSAEncryption 20:48:54:66:8c:11:9c:2c:00:f9:be:69:66:f3:ca:0a:ad:bd: 12:46:4d:e4:75:7d:05:7f:4b:36:e6:0f:0a:dc:4b:78:0a:71: e9:9e:d5:b4:06:e4:7e:be:65:41:50:be:1c:70:f6:1d:e0:2e: d5:e6:25:7a:9e:d8:79:dc:01:34:6a:12:9d:4e:86:93:cc:00: a0:c1:2b:f9:97:61:d3:ea:7b:67:d3:ff:d3:fe:46:62:be:99: 03:e4:e6:ec:73:fa:d8:a7:3b:2a:8d:1f:b1:e9:34:11:ea:9b: 9b:33:71:47:0f:f8:d7:9e:62:ae:8b:4d:7c:ad:bf:5a:c7:86: fe:bd:9e:21:2c:9e:05:6d:03:cd:4b:f7:a8:06:e5:8c:66:7c: b7:cf:94:9f:18:03:c4:32:7b:ad:1c:58:b3:a5:86:60:11:1f: 11:e5:11:16:c6:6e:ad:52:89:8c:06:24:08:12:dd:a7:7a:b8: c6:72:47:2c:58:1c:65:23:62:82:d3:c0:27:74:3d:30:0b:61: 34:e1:de:b8:04:ae:a2:2d:f5:1d:cc:82:9d:56:b0:f0:86:9c: 66:1a:52:30:cd:a4:cb:cd:40:a7:f3:49:7d:1a:4b:a3:da:06: 3b:26:0a:5e:55:e5:e7:12:1d:e5:ef:b0:f3:58:8d:ca:98:3b: 6b:b5:ec:76 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcWdfV9KzWBjEzfkXpi6pULfFz+EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTQ0OVoX DTI3MDUwMjAwMTk0OVowMzExMC8GA1UEAxMoNDc5QjkyOERCRUU5MDAxQjk5QjIx RkMzQ0EwQkE1RjM3RDEwQ0NBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyBa+CL848NqcY3FUfhueAtMYgZbKYqmk6/qXWNuYSl/CPGoxt91TtGZpwq oX+4dYwrb+98lKR4t8PRrZnikw5PkIz2yLdbphDKE3MC5XD77awpZcrtnI8M5Lhz VY/6rihnaWR+/sTrLSN3uhGgs/0ZjzCcj9SIES5xMiC8OQquYIXHMIbU36XnNrXk GqKeg1exSbZGLVV+BsxzXOyd0oBHnHZyiIPPhld4genU/UYt+wst/Ji+h3aKnwj1 BNfeBbDA11gLmQTbGXsN8YgqIcf9JEfiY+cMzkc28MtutyiGHJLBtSLHP1QlS5qe 6KL8MkcYkaU032Z1TFRoTbGOEkcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEebko2+6QAbmbIfw8oLpfN9EMymMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM0M2YyOWVhLTg3NGEtNGQxYS1hYmNjLTc1MjkzY2I1MWE2ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNDNmMjll YS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC80NzlCOTI4REJFRTkwMDFC OTlCMjFGQzNDQTBCQTVGMzdEMTBDQ0E2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZwPpMA0GCSqGSIb3DQEBCwUAA4IBAQAgSFRmjBGcLAD5vmlm88oKrb0SRk3k dX0Ff0s25g8K3Et4CnHpntW0BuR+vmVBUL4ccPYd4C7V5iV6nth53AE0ahKdToaT zACgwSv5l2HT6ntn0//T/kZivpkD5Obsc/rYpzsqjR+x6TQR6pubM3FHD/jXnmKu i018rb9ax4b+vZ4hLJ4FbQPNS/eoBuWMZny3z5SfGAPEMnutHFizpYZgER8R5REW xm6tUomMBiQIEt2nerjGckcsWBxlI2KC08AndD0wC2E04d64BK6iLfUdzIKdVrDw hpxmGlIwzaTLzUCn80l9Gkuj2gY7JgpeVeXnEh3l77DzWI3KmDtrtex2 -----END CERTIFICATE-----Generated at Tue May 12 22:47:26 2026 by rpki-client