$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer (raw, json) Hash identifier: OtrRmuY+JRaqEx1MgUrS9WZgE6DY/mEkb/0L42PXc9g= Subject key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 42E654A05FBBF98D19E50C3758F5F27E168B2BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:25:29 +0000 Certificate not after: Sun 02 May 2027 01:30:29 +0000 Subordinate resources: IP: 103.175.240.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e6:54:a0:5f:bb:f9:8d:19:e5:0c:37:58:f5:f2:7e:16:8b:2b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:25:29 2026 GMT Not After : May 2 01:30:29 2027 GMT Subject: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:55:c3:7a:b8:fa:3d:8e:fb:eb:fb:6c:9d: 7f:4c:29:ae:11:2b:0a:26:00:d9:32:16:36:76:16: 2c:62:6e:ef:76:ee:67:39:e4:3f:5f:65:10:29:63: b9:ac:3f:c6:ce:16:8b:d9:97:ca:4b:da:a5:85:e8: e1:31:db:bc:5f:aa:b5:c3:a5:74:29:60:f8:69:92: 11:27:86:fe:3a:9f:88:b3:f4:00:a2:c4:1d:f7:e5: 42:3a:95:ac:b9:cf:44:ce:4c:e6:2a:34:29:8c:4d: cd:6d:d2:87:84:63:cb:8b:81:0f:b8:2e:ae:f2:32: 4d:70:6b:9d:16:bb:da:e7:1d:2a:85:68:24:07:ab: cc:f6:72:54:f5:ef:14:82:b6:4d:83:f4:55:03:a9: a2:f3:f1:d5:32:fd:86:4d:ee:3b:4b:46:e0:16:6e: 12:cd:bc:10:6d:e8:06:b1:b6:ee:79:95:31:2c:89: 94:58:e1:19:ee:b5:c1:a2:7a:0a:39:0f:c6:b2:f7: 87:11:7c:77:51:24:14:a0:dc:b1:4b:04:de:d9:85: 96:1c:38:6c:eb:26:c1:34:c6:d1:5e:be:45:98:72: 53:e9:f5:60:6f:17:fb:69:18:6a:f8:a8:c0:f0:6c: 2b:c8:6c:40:4e:f7:3d:5d:e2:56:9f:1e:81:99:d1: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.240.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:6d:d7:38:90:c6:c9:4f:18:4b:5d:5c:4f:bb:29:72:b6:1d: 40:53:65:c6:83:fb:40:da:08:bb:a9:a8:13:29:7c:47:d7:bd: 0a:4b:3e:cf:35:da:83:75:3b:e0:c1:a9:52:7b:78:a7:fa:9c: b6:65:f6:5b:e8:8a:f3:6e:e9:99:86:2c:5d:d5:44:f1:27:19: 8c:cc:5a:87:a4:92:8f:28:b1:01:b4:cd:59:24:b6:9c:e4:a7: 5f:d0:7d:bd:9b:f6:9a:a9:73:3b:e3:f1:5c:2f:19:57:85:9d: 4c:99:83:4c:c0:c2:5b:0c:8a:3c:3c:4d:7b:82:23:35:18:a7: 6c:81:8a:d9:ac:a1:e4:6b:eb:b0:ff:9c:78:f3:a3:7c:d0:b8: 6c:62:dc:0d:d4:43:f5:d9:4b:63:8f:f5:c8:1b:0d:1e:87:fc: 43:17:11:6d:7c:31:89:37:b9:02:47:8e:aa:93:ac:ef:5a:5b: 48:ab:93:4e:3e:51:76:c9:d2:6f:63:bd:6d:3d:51:6a:12:c2: 52:43:05:5c:e0:12:b2:b3:30:59:5c:4c:dc:6a:c6:58:b5:8f: 27:0a:53:bc:69:1d:18:ee:af:53:f1:6c:e4:e5:f7:8f:87:a5: 05:45:d4:e2:2c:34:ab:06:3f:ee:7c:b5:05:e8:94:25:7e:12: 3a:7d:dc:54 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQuZUoF+7+Y0Z5Qw3WPXyfhaLK9QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjUyOVoX DTI3MDUwMjAxMzAyOVowMzExMC8GA1UEAxMoNEEwMTVCMEIwQTA4RDFCM0Y3RUEz NTQ5Qjk2OERERTc2NjM4MDhEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBaVcN6uPo9jvvr+2ydf0wprhErCiYA2TIWNnYWLGJu73buZznkP19lEClj uaw/xs4Wi9mXykvapYXo4THbvF+qtcOldClg+GmSESeG/jqfiLP0AKLEHfflQjqV rLnPRM5M5io0KYxNzW3Sh4Rjy4uBD7gurvIyTXBrnRa72ucdKoVoJAerzPZyVPXv FIK2TYP0VQOpovPx1TL9hk3uO0tG4BZuEs28EG3oBrG27nmVMSyJlFjhGe61waJ6 CjkPxrL3hxF8d1EkFKDcsUsE3tmFlhw4bOsmwTTG0V6+RZhyU+n1YG8X+2kYavio wPBsK8hsQE73PV3iVp8egZnRap0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEoBWwsKCNGz9+o1Sblo3edmOAjSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlkYzFjNDljLWQ0MDQtNDVhMS05ZTdkLTg2ZjVmODUyZTI3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZGMxYzQ5 Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC80QTAxNUIwQjBBMDhEMUIz RjdFQTM1NDlCOTY4RERFNzY2MzgwOEQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6/wMA0GCSqGSIb3DQEBCwUAA4IBAQB9bdc4kMbJTxhLXVxPuylyth1AU2XG g/tA2gi7qagTKXxH170KSz7PNdqDdTvgwalSe3in+py2ZfZb6IrzbumZhixd1UTx JxmMzFqHpJKPKLEBtM1ZJLac5Kdf0H29m/aaqXM74/FcLxlXhZ1MmYNMwMJbDIo8 PE17giM1GKdsgYrZrKHka+uw/5x486N80LhsYtwN1EP12Utjj/XIGw0eh/xDFxFt fDGJN7kCR46qk6zvWltIq5NOPlF2ydJvY71tPVFqEsJSQwVc4BKyszBZXEzcasZY tY8nClO8aR0Y7q9T8Wzk5fePh6UFRdTiLDSrBj/ufLUF6JQlfhI6fdxU -----END CERTIFICATE-----Generated at Tue May 12 22:32:29 2026 by rpki-client