$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer File: 4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer (raw, json) Hash identifier: frkenheLQHsnh3znjHj23FXkrvId8FVxGf0AQRrqjfQ= Subject key identifier: 4A:BC:46:0A:78:ED:A7:8E:D4:17:C2:15:E1:52:89:F1:FC:DD:13:CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 33C6FE4597D04CAC47BBE27CFDD0F29240BEB1A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:08 +0000 Certificate not after: Sun 02 May 2027 01:05:08 +0000 Subordinate resources: IP: 103.179.252.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c6:fe:45:97:d0:4c:ac:47:bb:e2:7c:fd:d0:f2:92:40:be:b1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:08 2026 GMT Not After : May 2 01:05:08 2027 GMT Subject: CN=4ABC460A78EDA78ED417C215E15289F1FCDD13CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:37:c9:6f:db:ae:08:41:95:db:da:aa:b9: d0:27:18:00:eb:ea:33:43:13:4f:13:3a:5e:b7:01: 92:93:67:dc:63:81:ef:48:06:0a:f5:69:af:c3:f0: 6f:e0:f8:ea:c2:1b:1a:65:4c:11:f6:d0:d8:22:fa: c2:60:90:dc:05:cb:29:7e:f6:ac:1e:2c:9a:ee:76: 96:c0:ab:3f:93:99:75:4a:d0:bf:f1:64:64:c1:25: 38:00:08:84:26:5f:f9:a9:6e:52:a2:9f:40:02:f0: d3:8b:6f:4a:aa:81:d3:c7:5a:fd:42:5a:f9:02:a3: c2:cb:23:74:00:d9:d6:44:26:14:bc:e3:cc:72:53: 6d:88:ef:a5:5e:46:5e:da:d8:72:00:21:d9:ba:0d: bf:99:76:be:02:5e:bd:e3:39:b5:f3:12:01:da:99: e1:4d:58:15:93:cd:2a:20:79:5c:6c:13:3b:00:a1: bd:91:1a:00:e1:c0:96:33:ef:9c:51:4a:5e:59:18: 91:86:ad:a6:f2:6d:d1:81:1f:e7:0c:e3:d7:1a:f1: 45:9b:2a:d2:76:99:75:4e:0e:99:a1:f4:cc:25:36: 5f:70:80:82:f2:ff:76:a8:f6:fa:1b:b0:19:d4:a6: c6:e5:ea:e6:f5:ad:34:05:cf:6f:99:67:2a:f6:b0: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:BC:46:0A:78:ED:A7:8E:D4:17:C2:15:E1:52:89:F1:FC:DD:13:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.252.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:0e:33:6b:d6:b8:81:13:1b:4a:64:7c:e8:2a:1f:67:43:9e: 3a:b4:27:ed:56:c6:75:5c:5e:38:b9:11:9c:ff:3f:46:4a:be: 4a:68:60:0f:73:46:a6:57:1e:75:3f:08:94:92:2e:dd:15:ab: 0d:61:aa:f6:fd:96:79:81:91:31:a6:8b:fa:15:b0:a4:85:54: da:a9:50:5a:65:af:0c:67:76:25:0b:d5:b9:c1:4b:fd:68:ed: f8:82:45:28:5e:54:4c:e7:86:83:31:46:98:df:8d:3d:6c:22: b9:c3:8e:2c:d8:12:35:af:25:c3:c3:5f:52:af:dd:b9:da:61: da:48:62:26:83:bf:f9:ea:94:7f:fb:c8:15:b5:8c:91:f2:f6: bc:81:56:f5:14:df:bb:1c:5a:f9:ac:85:bf:09:a7:58:90:97: 10:47:69:38:68:4e:31:12:3f:98:f4:50:2d:64:b0:05:70:4d: 32:e9:2e:ba:dc:e4:c5:21:a4:8e:10:9a:35:c5:22:60:01:d9: 00:99:bc:12:b6:4e:85:5d:42:aa:b3:2c:79:6f:d2:a7:b3:82: 7c:57:86:9c:f7:a7:d2:6c:30:e7:66:af:85:2f:74:f9:b5:11: e6:c0:46:a3:48:f3:49:60:62:9a:2f:61:1a:5c:2e:ea:c4:a1: fc:ac:ad:7f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUM8b+RZfQTKxHu+J8/dDykkC+sagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDAwOFoX DTI3MDUwMjAxMDUwOFowMzExMC8GA1UEAxMoNEFCQzQ2MEE3OEVEQTc4RUQ0MTdD MjE1RTE1Mjg5RjFGQ0REMTNDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmmN8lv264IQZXb2qq50CcYAOvqM0MTTxM6XrcBkpNn3GOB70gGCvVpr8Pw b+D46sIbGmVMEfbQ2CL6wmCQ3AXLKX72rB4smu52lsCrP5OZdUrQv/FkZMElOAAI hCZf+aluUqKfQALw04tvSqqB08da/UJa+QKjwssjdADZ1kQmFLzjzHJTbYjvpV5G XtrYcgAh2boNv5l2vgJeveM5tfMSAdqZ4U1YFZPNKiB5XGwTOwChvZEaAOHAljPv nFFKXlkYkYatpvJt0YEf5wzj1xrxRZsq0naZdU4OmaH0zCU2X3CAgvL/dqj2+huw GdSmxuXq5vWtNAXPb5lnKvaw6EkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEq8Rgp47aeO1BfCFeFSifH83RPLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc4NWJmZjQxLTI0MjAtNDJiMS05YjgzLWQ0MWMxODA0M2Q2NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ODViZmY0 MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC80QUJDNDYwQTc4RURBNzhF RDQxN0MyMTVFMTUyODlGMUZDREQxM0NCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7P8MA0GCSqGSIb3DQEBCwUAA4IBAQCaDjNr1riBExtKZHzoKh9nQ546tCft VsZ1XF44uRGc/z9GSr5KaGAPc0amVx51PwiUki7dFasNYar2/ZZ5gZExpov6FbCk hVTaqVBaZa8MZ3YlC9W5wUv9aO34gkUoXlRM54aDMUaY3409bCK5w44s2BI1ryXD w19Sr9252mHaSGImg7/56pR/+8gVtYyR8va8gVb1FN+7HFr5rIW/CadYkJcQR2k4 aE4xEj+Y9FAtZLAFcE0y6S663OTFIaSOEJo1xSJgAdkAmbwStk6FXUKqsyx5b9Kn s4J8V4ac96fSbDDnZq+FL3T5tRHmwEajSPNJYGKaL2EaXC7qxKH8rK1/ -----END CERTIFICATE-----Generated at Tue May 12 22:38:44 2026 by rpki-client