$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer (raw, json) Hash identifier: h4AjrMmSIxz3Iq2+6rOPEYxlFzpejuQN3iDSau8djhI= Subject key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6D60F3C7FE391B73756A7B095AAEEDA859AC54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:17:09 +0000 Certificate not after: Sun 02 May 2027 02:22:09 +0000 Subordinate resources: IP: 103.143.95.0/24 IP: 103.153.184.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:60:f3:c7:fe:39:1b:73:75:6a:7b:09:5a:ae:ed:a8:59:ac:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:17:09 2026 GMT Not After : May 2 02:22:09 2027 GMT Subject: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:5f:88:f9:48:ab:f9:72:a8:34:2b:e0:43: b7:c7:c8:bf:10:a4:2d:b0:f0:63:59:a9:51:79:f7: 9c:31:75:73:9b:47:eb:e8:5e:bf:0a:25:2a:d0:3a: 65:71:08:89:af:4d:6b:ed:3a:81:da:cc:b6:8e:bc: 39:c5:36:12:f5:73:54:84:e0:96:13:a1:e0:94:f3: 66:f2:6d:d5:89:83:af:04:7f:c4:25:1d:bf:6a:3c: 06:04:ce:2e:de:33:de:4a:66:f0:51:67:fa:ba:0b: 9c:36:09:c9:0d:f4:da:13:83:79:c0:c3:89:2b:a2: 04:2a:32:37:71:fc:5d:60:db:af:2c:ed:25:1d:e4: 8a:e7:a7:18:98:d0:ce:11:93:91:70:ef:c0:42:19: eb:9d:d7:82:60:53:48:aa:4c:bb:dc:50:da:28:76: d3:84:1a:b9:3a:12:94:d6:56:54:9f:b1:cb:e0:e1: 2c:b6:1e:15:3a:15:6a:80:23:2d:75:1e:71:6f:b1: ee:42:8a:93:ae:47:83:a3:53:1f:42:cb:5d:e2:c6: 88:a8:35:76:05:a9:c5:02:35:fa:55:08:2a:d0:ee: 35:b0:89:c4:36:85:78:81:4e:25:b4:75:ef:dd:01: 34:f3:92:f4:fc:4c:e0:8d:8a:a5:43:01:f6:fb:b6: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.95.0/24 103.153.184.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:76:ed:eb:7a:5d:1c:92:8a:96:0b:df:9b:9d:c7:b2:80:48: 2b:39:8b:e9:ab:79:5a:29:37:33:1b:e6:e2:27:79:c5:f1:da: 6e:5a:3d:db:c3:8f:71:f6:82:7c:c4:d6:9b:51:44:64:5a:12: 28:c6:f1:db:a0:fd:91:24:7d:c9:e7:56:ae:69:da:25:99:82: c6:9c:d8:ce:e6:66:b4:d8:b7:f7:7a:15:25:9b:08:81:0d:e7: 44:71:cc:26:de:5e:f5:bb:1c:8a:26:9e:e5:b3:09:94:b2:48: 6a:a1:44:ee:86:e1:a1:b2:76:88:cd:36:fa:54:e5:af:cc:db: d5:5b:99:b8:8b:4c:42:00:b2:65:21:1b:45:42:c5:1d:01:85: 71:ca:b4:2c:4c:50:4c:6e:a5:71:ac:0f:3f:c0:60:c3:72:7e: b1:e1:05:bd:e9:79:e5:c1:c3:e4:aa:e8:91:8e:c0:1f:39:37: 61:3c:b7:08:b8:dc:98:02:f4:dc:44:56:2b:b0:8e:10:75:b5: b2:51:9d:b6:42:fe:a9:42:44:ee:f4:77:b2:5e:0f:1a:3a:8f: 3a:a9:f1:47:5e:26:e4:c3:79:4f:76:e6:1d:cf:e9:14:f5:a9: c2:40:5f:f8:1c:31:40:a0:54:dd:d7:77:6f:cf:44:32:cb:d9: 3f:ad:60:6c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgITbWDzx/45G3N1ansJWq7tqFmsVDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDQxOUE4NUNERjhB NDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUwHhcNMjYwNTAzMDIxNzA5WhcN MjcwNTAyMDIyMjA5WjAzMTEwLwYDVQQDEyg0QTNBNjA2ODgzQjEyMjcxNjE5QzdD QjQ5REZDRDM1OUYwRjNFNkY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMNfiPlIq/lyqDQr4EO3x8i/EKQtsPBjWalRefecMXVzm0fr6F6/CiUq0Dpl cQiJr01r7TqB2sy2jrw5xTYS9XNUhOCWE6HglPNm8m3ViYOvBH/EJR2/ajwGBM4u 3jPeSmbwUWf6ugucNgnJDfTaE4N5wMOJK6IEKjI3cfxdYNuvLO0lHeSK56cYmNDO EZORcO/AQhnrndeCYFNIqky73FDaKHbThBq5OhKU1lZUn7HL4OEsth4VOhVqgCMt dR5xb7HuQoqTrkeDo1MfQstd4saIqDV2BanFAjX6VQgq0O41sInENoV4gU4ltHXv 3QE085L0/EzgjYqlQwH2+7ZezwIDAQABo4ICvzCCArswDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUSjpgaIOxInFhnHy0nfzTWfDz5vUwHwYDVR0jBBgwFoAUQZqF zfikMFFpRoadHEkgN9a8bp4wDgYDVR0PAQH/BAQDAgEGMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xLzQx OUE4NUNERjhBNDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FacUZ6 ZmlrTUZGcFJvYWRIRWtnTjlhOGJwNC5jZXIwggEsBggrBgEFBQcBCwSCAR4wggEa MFUGCCsGAQUFBzAFhklyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvMIGBBggrBgEF BQcwCoZ1cnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2OTI5OTAx LWExMzctNGEzNS04MTM0LTE4MDRmOTQ3OTJkZi8wLzRBM0E2MDY4ODNCMTIyNzE2 MTlDN0NCNDlERkNEMzU5RjBGM0U2RjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3Jwa2ktcnJkcC5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnj18DBABnmbgwDQYJKoZIhvcNAQELBQADggEBAI127et6XRySipYL35udx7KA SCs5i+mreVopNzMb5uInecXx2m5aPdvDj3H2gnzE1ptRRGRaEijG8dug/ZEkfcnn Vq5p2iWZgsac2M7mZrTYt/d6FSWbCIEN50RxzCbeXvW7HIomnuWzCZSySGqhRO6G 4aGydojNNvpU5a/M29VbmbiLTEIAsmUhG0VCxR0BhXHKtCxMUExupXGsDz/AYMNy frHhBb3peeXBw+Sq6JGOwB85N2E8twi43JgC9NxEViuwjhB1tbJRnbZC/qlCRO70 d7JeDxo6jzqp8UdeJuTDeU925h3P6RT1qcJAX/gcMUCgVN3Xd2/PRDLL2T+tYGw= -----END CERTIFICATE-----Generated at Tue May 12 22:03:13 2026 by rpki-client