$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer File: 498B4126F814B92E742642C1F871ADD317C2ABF3.cer (raw, json) Hash identifier: /G8qiiNWBdJWI/7qwrTDYNjPi4TS3qUhyp3HFL1vToU= Subject key identifier: 49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C318A128BCF56EA6100FB8E0DF06F919E268BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:53:12 +0000 Certificate not after: Sun 02 May 2027 01:58:12 +0000 Subordinate resources: IP: 103.228.24.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:31:8a:12:8b:cf:56:ea:61:00:fb:8e:0d:f0:6f:91:9e:26:8b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:53:12 2026 GMT Not After : May 2 01:58:12 2027 GMT Subject: CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:94:8b:47:4c:c6:f7:22:24:97:a1:c8:30:8d: 40:42:5b:ed:f3:b1:2e:61:d5:c3:4c:4d:31:9d:18: 8b:be:a1:b5:b8:9f:0b:d2:64:a9:14:e0:ad:1f:5a: da:89:67:e4:02:5e:25:e0:36:ab:fb:0e:27:cb:1c: 9a:be:9a:f1:c8:b3:ed:e6:f1:a4:5d:f8:bc:82:bc: b2:a8:e2:34:d7:f3:77:88:ce:9f:d0:07:de:5e:50: f5:44:a6:cd:3b:44:3a:67:7d:48:eb:17:8c:81:62: b6:18:09:64:da:9f:ec:04:54:00:70:cd:4c:66:ff: 74:51:84:56:9c:f3:1d:9b:b1:92:fd:5a:8c:75:9c: 2a:f5:d2:3f:cb:e7:3e:8a:e8:73:b8:bc:74:5f:90: d6:e3:57:2f:2c:1b:d9:b9:28:4a:0d:70:d2:16:a8: a8:0e:9d:e4:ef:4a:bb:99:9f:2e:47:13:2c:d1:83: b1:51:75:b2:ae:31:7d:2a:64:a1:9e:a2:5d:b0:c9: c6:0a:f7:ca:d0:bd:6f:20:88:79:73:9a:58:da:dc: 16:2f:49:fb:aa:e9:7b:8a:04:3b:93:01:7f:bc:eb: 0d:24:db:3e:49:eb:5c:17:d0:1d:20:c7:9e:17:1d: c8:9b:25:78:f1:8d:e5:e1:35:4c:41:c3:b7:93:d5: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.24.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:b7:28:e7:7a:97:f3:af:13:e3:cb:37:8b:1a:65:ab:4d:3f: 8c:18:77:87:b5:9d:a4:97:fb:40:99:13:08:84:f7:75:34:a4: 95:e4:a5:73:d6:08:18:72:3b:2f:a4:5e:98:83:c1:76:f5:17: ba:31:92:cc:2d:ba:82:32:10:4a:30:e5:30:b8:8f:34:4b:23: d9:f3:a1:1e:42:11:54:d7:ef:1e:26:b2:91:32:2b:12:da:ea: f5:b5:5f:06:99:df:8c:68:ce:04:11:0e:33:e9:d2:13:22:75: 54:54:66:c5:08:30:a9:65:8c:cd:2f:41:30:8b:d3:5d:18:70: 82:df:47:cf:65:dc:f4:f2:ec:3d:ee:83:8c:fe:f4:8b:8e:d0: b3:5c:d2:98:cc:1d:c0:de:dd:25:b0:38:69:8f:f9:3d:fd:ea: b2:6a:9f:ee:2f:c5:be:bb:2f:1a:b1:64:48:36:d1:02:c6:f6: da:80:06:6e:a0:2a:c6:5a:d3:b7:0c:83:ad:3e:0c:2b:54:c7: a5:0b:cc:a5:35:41:5e:a6:de:6a:55:b1:f3:65:c4:dd:38:d8: ef:de:16:dd:98:8b:e4:50:8f:fd:3d:38:29:7a:a6:0e:00:28: 69:ec:eb:d6:46:72:8f:ce:84:fb:74:e8:bf:dd:20:3b:6d:a2: 17:81:7d:d5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDDGKEovPVuphAPuODfBvkZ4mi9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTMxMloX DTI3MDUwMjAxNTgxMlowMzExMC8GA1UEAxMoNDk4QjQxMjZGODE0QjkyRTc0MjY0 MkMxRjg3MUFERDMxN0MyQUJGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOiUi0dMxvciJJehyDCNQEJb7fOxLmHVw0xNMZ0Yi76htbifC9JkqRTgrR9a 2oln5AJeJeA2q/sOJ8scmr6a8ciz7ebxpF34vIK8sqjiNNfzd4jOn9AH3l5Q9USm zTtEOmd9SOsXjIFithgJZNqf7ARUAHDNTGb/dFGEVpzzHZuxkv1ajHWcKvXSP8vn Poroc7i8dF+Q1uNXLywb2bkoSg1w0haoqA6d5O9Ku5mfLkcTLNGDsVF1sq4xfSpk oZ6iXbDJxgr3ytC9byCIeXOaWNrcFi9J+6rpe4oEO5MBf7zrDSTbPknrXBfQHSDH nhcdyJslePGN5eE1TEHDt5PVRLUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEmLQSb4FLkudCZCwfhxrdMXwqvzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M5YjFlN2Y3LTFmNGItNDFhNi05MjUyLWY2YjgyODhmYjNhYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jOWIxZTdm Ny0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC80OThCNDEyNkY4MTRCOTJF NzQyNjQyQzFGODcxQUREMzE3QzJBQkYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ+QYMA0GCSqGSIb3DQEBCwUAA4IBAQArtyjnepfzrxPjyzeLGmWrTT+MGHeH tZ2kl/tAmRMIhPd1NKSV5KVz1ggYcjsvpF6Yg8F29Re6MZLMLbqCMhBKMOUwuI80 SyPZ86EeQhFU1+8eJrKRMisS2ur1tV8Gmd+MaM4EEQ4z6dITInVUVGbFCDCpZYzN L0Ewi9NdGHCC30fPZdz08uw97oOM/vSLjtCzXNKYzB3A3t0lsDhpj/k9/eqyap/u L8W+uy8asWRINtECxvbagAZuoCrGWtO3DIOtPgwrVMelC8ylNUFept5qVbHzZcTd ONjv3hbdmIvkUI/9PTgpeqYOAChp7OvWRnKPzoT7dOi/3SA7baIXgX3V -----END CERTIFICATE-----Generated at Tue May 12 22:39:14 2026 by rpki-client