$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer (raw, json) Hash identifier: jiHdSpsmIGXKbiVPRQ+/Ob0Mdsd2MYyLYC5U50U9uOk= Subject key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1408BC89644DDF1FA3C3AA022141DC10F57F315B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft caRepository: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:06:48 +0000 Certificate not after: Sun 02 May 2027 00:11:48 +0000 Subordinate resources: IP: 103.204.15.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:08:bc:89:64:4d:df:1f:a3:c3:aa:02:21:41:dc:10:f5:7f:31:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:06:48 2026 GMT Not After : May 2 00:11:48 2027 GMT Subject: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:14:8c:8c:a8:e5:e0:83:fe:12:b2:ba:f3: de:d8:41:54:85:b8:88:a3:dc:f8:19:d1:bc:1b:c5: 3f:10:f1:1b:aa:6b:21:02:67:be:22:fc:41:98:13: 35:d4:36:2f:cd:1d:22:7c:69:51:0b:ef:2c:7f:9d: a1:cc:d3:80:4e:17:c7:ed:72:51:b1:09:d5:1f:42: de:e0:ba:a3:48:35:8f:3e:05:b4:78:f1:12:73:f7: 69:d8:d6:20:e1:83:42:da:86:c1:88:a8:bf:8b:ad: 33:60:a2:36:84:bd:3d:60:98:09:65:29:5e:3b:99: cf:e4:a8:72:62:70:8e:cc:d8:7b:dd:e4:56:bc:64: c6:b1:4d:b0:70:bb:14:07:f3:f7:c2:14:8d:a2:2b: 0e:a4:6d:ba:c2:71:8f:d4:7f:34:1f:59:77:4f:1e: 39:8f:77:ab:4c:44:d3:df:0c:56:0c:da:e4:58:09: ab:f3:97:e1:c4:94:fc:c3:7c:97:85:a3:05:51:64: 75:29:0f:a9:8c:7b:b0:30:ca:92:40:ca:4b:a9:8a: ff:c1:bb:7c:79:c7:f0:3a:af:df:38:d3:ab:cb:c2: 44:2a:45:a2:0b:6a:e5:db:c1:0a:57:35:91:10:6d: 61:66:b6:64:84:1f:86:c9:4d:93:dd:a8:df:3f:74: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.15.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:99:00:76:a1:7c:9a:bb:5f:ba:d3:5e:fb:7b:81:cf:8f:ec: cd:c4:17:33:92:fb:41:e9:ea:e5:5c:1a:8f:4f:49:91:c5:7a: 14:10:a6:6a:4a:82:23:c3:2c:6b:18:7d:78:bd:6d:9d:15:af: 82:eb:84:9b:1e:c4:50:73:69:5d:5d:53:1c:c9:95:70:a4:55: 7d:73:a5:67:0d:18:a9:25:0d:93:9b:17:b1:51:13:f9:16:fa: b7:aa:b3:55:31:56:b8:87:6a:60:b5:25:4d:d9:be:61:40:c3: 44:b5:49:91:20:b2:24:82:a8:12:ea:b7:6b:7c:d6:07:53:72: 19:ad:eb:c1:2a:a2:7c:ec:d0:a7:ee:c2:94:13:df:42:21:a4: c4:58:01:80:28:14:05:e2:7b:f9:d9:ce:25:e8:30:65:f1:a4: 20:9f:8b:2b:55:e3:d1:78:91:c4:05:72:6b:36:0a:0d:83:32: 67:17:22:a9:85:84:9a:fd:ff:5a:46:42:68:44:e4:8e:2b:32: 0e:11:66:5a:35:ce:6a:2a:ba:b1:66:83:6b:87:41:d1:f2:a6: 70:c4:73:3b:72:cb:11:3c:a4:51:cc:31:cc:02:ae:7c:5e:fc: fa:26:00:4c:7d:06:de:f0:5c:de:36:82:78:d4:49:cc:6b:c8: 13:97:dd:b5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFAi8iWRN3x+jw6oCIUHcEPV/MVswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDY0OFoX DTI3MDUwMjAwMTE0OFowMzExMC8GA1UEAxMoNEExOEU1NTQwRkI5Q0ZFMDdBOTVF REY4OUJBRjdDRTk3OEU5NDI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKL/FIyMqOXgg/4Ssrrz3thBVIW4iKPc+BnRvBvFPxDxG6prIQJnviL8QZgT NdQ2L80dInxpUQvvLH+doczTgE4Xx+1yUbEJ1R9C3uC6o0g1jz4FtHjxEnP3adjW IOGDQtqGwYiov4utM2CiNoS9PWCYCWUpXjuZz+SocmJwjszYe93kVrxkxrFNsHC7 FAfz98IUjaIrDqRtusJxj9R/NB9Zd08eOY93q0xE098MVgza5FgJq/OX4cSU/MN8 l4WjBVFkdSkPqYx7sDDKkkDKS6mK/8G7fHnH8Dqv3zjTq8vCRCpFogtq5dvBClc1 kRBtYWa2ZIQfhslNk92o3z90r+UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEoY5VQPuc/gepXt+JuvfOl46UJYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI5ZmM5OTZmLTcyY2EtNGQ2Yi1hMGU3LWZmNWJjNDJiMDU4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yOWZjOTk2 Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC80QTE4RTU1NDBGQjlDRkUw N0E5NUVERjg5QkFGN0NFOTc4RTk0MjU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8wPMA0GCSqGSIb3DQEBCwUAA4IBAQCdmQB2oXyau1+60177e4HPj+zNxBcz kvtB6erlXBqPT0mRxXoUEKZqSoIjwyxrGH14vW2dFa+C64SbHsRQc2ldXVMcyZVw pFV9c6VnDRipJQ2TmxexURP5Fvq3qrNVMVa4h2pgtSVN2b5hQMNEtUmRILIkgqgS 6rdrfNYHU3IZrevBKqJ87NCn7sKUE99CIaTEWAGAKBQF4nv52c4l6DBl8aQgn4sr VePReJHEBXJrNgoNgzJnFyKphYSa/f9aRkJoROSOKzIOEWZaNc5qKrqxZoNrh0HR 8qZwxHM7cssRPKRRzDHMAq58Xvz6JgBMfQbe8FzeNoJ41EnMa8gTl921 -----END CERTIFICATE-----Generated at Tue May 12 22:46:02 2026 by rpki-client