$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer File: 498FC3DB03528A64214589740CA13E84E4775306.cer (raw, json) Hash identifier: sgYuNj7yV6CDKE54BRycIYc2Z1tbSdf/8tixZOcESgA= Subject key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 58A2BA0FBBE2DC57D97C7AEB388CEEECF1D1BF98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:50:43 +0000 Certificate not after: Sat 01 May 2027 23:55:43 +0000 Subordinate resources: IP: 103.169.148.0/23 IP: 2407:a5c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a2:ba:0f:bb:e2:dc:57:d9:7c:7a:eb:38:8c:ee:ec:f1:d1:bf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:50:43 2026 GMT Not After : May 1 23:55:43 2027 GMT Subject: CN=498FC3DB03528A64214589740CA13E84E4775306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:db:ad:3f:db:e8:a0:70:89:cc:90:eb:86: f9:af:40:2c:b4:08:ba:12:6c:c6:57:c6:47:7b:2c: 57:40:88:8d:c9:d4:7e:36:d8:86:a7:63:c3:fa:48: b0:7a:dc:c8:8a:b5:9f:ee:64:af:30:d3:d9:45:3e: ab:03:ce:d8:57:17:0a:0b:05:2b:31:d0:13:78:26: 80:1f:87:38:31:b4:49:e7:c3:46:92:e3:90:35:c7: 88:75:ad:2d:f6:b9:fb:e5:76:5a:ff:2d:d2:bc:7a: 1d:26:ff:f1:60:f7:ad:33:9f:40:b8:33:50:77:9d: 86:30:e5:82:50:72:4e:04:92:42:2e:16:9c:f5:10: 4d:33:05:90:52:e8:25:f3:f5:a5:bb:a7:88:44:8b: ee:aa:7b:3f:cf:90:ea:48:e4:6f:8e:e5:4e:42:17: bf:9a:c5:da:2f:d0:08:eb:9b:91:c6:1d:9f:75:f9: ec:bb:03:c1:16:f1:7c:d3:d2:d7:d5:32:8a:ff:61: f1:34:98:52:e7:80:19:70:72:df:ee:e2:0b:9a:07: d3:96:e1:20:85:2e:a2:70:3e:41:2a:86:19:7e:6e: 6f:57:07:fa:3b:36:45:ec:1a:4e:51:5a:50:6b:47: 90:86:da:92:55:42:89:0d:80:0f:0f:ae:a2:24:57: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.148.0/23 IPv6: 2407:a5c0::/32 Signature Algorithm: sha256WithRSAEncryption 72:09:10:c1:90:b1:9d:fd:10:27:5a:8d:25:c9:a4:88:ea:9f: 3c:71:78:ac:05:74:3e:f8:59:2f:bf:29:26:51:37:21:59:a2: 29:a0:0f:9e:c6:7f:09:d5:6d:a3:c0:2c:ce:ed:b9:84:2b:66: f8:83:20:1d:5e:c9:6c:93:89:33:a8:29:4d:92:bd:2b:5e:bb: 25:8d:b7:a6:3a:2b:63:58:59:5d:37:df:b7:9b:a8:aa:0f:47: 97:7d:68:f4:7c:6b:c6:86:96:7e:ad:71:67:b5:9b:82:21:71: 43:50:f1:bd:ea:f0:1c:f6:8c:80:b5:97:01:1d:9c:95:19:db: 82:1e:7b:17:5f:81:87:27:0d:25:78:91:e6:a5:51:2e:19:94: 5c:fd:c0:25:5a:5a:27:8e:38:3c:d7:68:1f:1e:ab:ae:23:ea: be:75:b0:e9:95:6f:8f:48:f1:0b:78:10:ed:c9:dd:d8:4f:44: c3:ee:3d:44:c3:81:86:63:c4:08:df:a2:5a:00:9b:8b:0d:b3: 66:5e:67:d1:2b:c8:d3:f8:04:85:38:ad:0b:29:83:9f:a3:63: 9e:42:df:f0:1e:90:db:ae:53:7f:72:93:11:6b:ef:07:00:4e: 68:f9:96:8a:48:49:94:fd:ef:46:e9:08:31:cb:47:a8:e7:bb: 2f:f4:16:5a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUWKK6D7vi3FfZfHrrOIzu7PHRv5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTA0M1oX DTI3MDUwMTIzNTU0M1owMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4 OTc0MENBMTNFODRFNDc3NTMwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2W260/2+igcInMkOuG+a9ALLQIuhJsxlfGR3ssV0CIjcnUfjbYhqdjw/pI sHrcyIq1n+5krzDT2UU+qwPO2FcXCgsFKzHQE3gmgB+HODG0SefDRpLjkDXHiHWt Lfa5++V2Wv8t0rx6HSb/8WD3rTOfQLgzUHedhjDlglByTgSSQi4WnPUQTTMFkFLo JfP1pbuniESL7qp7P8+Q6kjkb47lTkIXv5rF2i/QCOubkcYdn3X57LsDwRbxfNPS 19Uyiv9h8TSYUueAGXBy3+7iC5oH05bhIIUuonA+QSqGGX5ub1cH+js2RewaTlFa UGtHkIbaklVCiQ2ADw+uoiRXsg0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEmPw9sDUopkIUWJdAyhPoTkd1MGMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzExOTIwMjFlLTM5MDQtNDExNS1hZjVlLTNlZGI3MTNiYWExNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMTkyMDIx ZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC80OThGQzNEQjAzNTI4QTY0 MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1MzA2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ6mUMA0EAgACMAcDBQAkB6XAMA0GCSqGSIb3DQEBCwUAA4IBAQByCRDBkLGd /RAnWo0lyaSI6p88cXisBXQ++FkvvykmUTchWaIpoA+exn8J1W2jwCzO7bmEK2b4 gyAdXslsk4kzqClNkr0rXrsljbemOitjWFldN9+3m6iqD0eXfWj0fGvGhpZ+rXFn tZuCIXFDUPG96vAc9oyAtZcBHZyVGduCHnsXX4GHJw0leJHmpVEuGZRc/cAlWlon jjg812gfHquuI+q+dbDplW+PSPELeBDtyd3YT0TD7j1Ew4GGY8QI36JaAJuLDbNm XmfRK8jT+ASFOK0LKYOfo2OeQt/wHpDbrlN/cpMRa+8HAE5o+ZaKSEmU/e9G6Qgx y0eo57sv9BZa -----END CERTIFICATE-----Generated at Tue May 12 22:03:06 2026 by rpki-client