$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer File: 4916565C52234EF87B2101E4B733E4674131F669.cer (raw, json) Hash identifier: DepnTlKnHTFt/QiEMuGiqIm2wQl9ncZPdKXNQEBeakY= Subject key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7FF9B6AA154AF56D38A8B1C085AB3A8836565B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:03:23 +0000 Certificate not after: Sun 02 May 2027 02:08:23 +0000 Subordinate resources: IP: 103.123.104.0/22 IP: 2403:9fc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f9:b6:aa:15:4a:f5:6d:38:a8:b1:c0:85:ab:3a:88:36:56:5b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:03:23 2026 GMT Not After : May 2 02:08:23 2027 GMT Subject: CN=4916565C52234EF87B2101E4B733E4674131F669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:a8:7d:d8:ab:66:27:6d:ef:61:cf:4d:0d: 7e:c3:c4:6b:11:bf:4c:6f:f4:70:50:6f:0e:95:2d: 32:17:65:e8:b8:1b:20:5e:a2:c4:68:23:0d:4b:d5: d4:96:d1:a0:c7:d9:35:63:51:e5:38:26:dc:80:fc: 5b:73:2f:25:83:a0:ec:8f:d7:7e:90:fc:30:10:84: a5:98:21:41:8a:45:90:2c:63:21:cc:c3:3f:78:63: bf:20:63:36:ba:2e:3b:18:3f:de:d7:16:58:37:39: c3:45:27:f3:ff:9f:1f:5a:fa:e2:a7:f0:7c:e0:3a: a0:7a:cb:fb:23:10:b5:1e:f1:0a:10:e1:98:35:1a: db:fb:71:3a:0e:5c:bb:82:9b:08:c0:82:82:a9:14: 51:7d:6a:ff:75:68:d9:dc:d8:18:e1:48:d7:d9:fe: a5:a4:40:4c:2e:8b:a9:d5:49:3f:d3:a6:b1:dc:b2: 54:d2:6d:bc:5e:9a:f2:02:b5:55:06:c0:8b:d3:af: e0:ba:14:50:46:62:31:87:ef:58:b9:83:af:e6:0c: 8c:de:c9:1a:cf:99:81:55:b6:16:65:95:92:cc:d4: 2a:92:2d:03:69:bd:03:60:00:de:51:55:86:0b:94: 2a:1e:e3:0e:e3:bb:85:cf:1f:e8:93:44:8d:a0:d9: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.104.0/22 IPv6: 2403:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption 68:f0:44:a6:1a:90:07:16:ba:8a:9d:b6:0e:03:5c:92:2d:3f: ec:da:02:8f:f2:e1:3c:99:52:f9:f2:dd:41:f7:41:d5:a9:76: 45:2f:c5:2d:55:d7:da:ec:fa:03:26:d3:ff:fa:28:8e:cf:72: d0:f9:dd:65:86:75:f9:c9:77:31:cb:88:48:6e:21:f3:c9:7e: e0:06:46:1e:8f:6f:4c:69:29:b2:b1:58:a4:82:0f:a6:e4:d3: 78:0c:d0:b2:45:35:d4:8d:71:5a:d4:e7:ed:c2:4e:4c:05:15: a3:c9:9b:d0:66:7e:07:62:e0:5a:01:f5:31:cd:40:4c:20:e5: d3:66:d1:90:e1:eb:78:52:60:f4:72:cd:65:3b:ed:21:52:08: 86:8f:25:0c:4b:df:a1:14:ce:94:9a:9f:4f:95:27:1f:c8:43: fd:23:05:13:d8:4e:95:5a:b1:5b:30:63:52:a5:40:9f:26:20: 11:22:d1:06:5d:71:ae:f2:a8:db:fb:35:e5:70:45:4a:43:f3: 54:41:ab:d8:d8:b5:b5:ff:9b:ce:b1:8c:81:36:b7:a5:38:e3: 83:a7:0c:bd:f7:9a:07:16:e2:a5:66:04:24:e3:3e:a3:62:ad: 67:15:a0:20:d3:77:27:0b:0d:d5:06:9a:16:36:6f:a7:88:30: 9e:81:6f:4a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUf/m2qhVK9W04qLHAhas6iDZWW34wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDMyM1oX DTI3MDUwMjAyMDgyM1owMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEw MUU0QjczM0U0Njc0MTMxRjY2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALT3qH3Yq2Ynbe9hz00NfsPEaxG/TG/0cFBvDpUtMhdl6LgbIF6ixGgjDUvV 1JbRoMfZNWNR5Tgm3ID8W3MvJYOg7I/XfpD8MBCEpZghQYpFkCxjIczDP3hjvyBj NrouOxg/3tcWWDc5w0Un8/+fH1r64qfwfOA6oHrL+yMQtR7xChDhmDUa2/txOg5c u4KbCMCCgqkUUX1q/3Vo2dzYGOFI19n+paRATC6LqdVJP9OmsdyyVNJtvF6a8gK1 VQbAi9Ov4LoUUEZiMYfvWLmDr+YMjN7JGs+ZgVW2FmWVkszUKpItA2m9A2AA3lFV hguUKh7jDuO7hc8f6JNEjaDZPmECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEkWVlxSI074eyEB5Lcz5GdBMfZpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RhZDY3ZDVmLTU3MTMtNDE1My04NzFiLTFiMDA4ZjdmZmRkMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYWQ2N2Q1 Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC80OTE2NTY1QzUyMjM0RUY4 N0IyMTAxRTRCNzMzRTQ2NzQxMzFGNjY5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3toMA0EAgACMAcDBQAkA5/AMA0GCSqGSIb3DQEBCwUAA4IBAQBo8ESmGpAH FrqKnbYOA1ySLT/s2gKP8uE8mVL58t1B90HVqXZFL8UtVdfa7PoDJtP/+iiOz3LQ +d1lhnX5yXcxy4hIbiHzyX7gBkYej29MaSmysVikgg+m5NN4DNCyRTXUjXFa1Oft wk5MBRWjyZvQZn4HYuBaAfUxzUBMIOXTZtGQ4et4UmD0cs1lO+0hUgiGjyUMS9+h FM6Ump9PlScfyEP9IwUT2E6VWrFbMGNSpUCfJiARItEGXXGu8qjb+zXlcEVKQ/NU QavY2LW1/5vOsYyBNrelOOODpwy995oHFuKlZgQk4z6jYq1nFaAg03cnCw3VBpoW Nm+niDCegW9K -----END CERTIFICATE-----Generated at Tue May 12 22:15:47 2026 by rpki-client