$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer File: 4AD757CB155CFF255FDEC1E6D09300FD55954787.cer (raw, json) Hash identifier: mmm2+tiGu/+rYNBUDcjcDAHSIcgCaQdK3kA+0zub8Fg= Subject key identifier: 4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A9697EBD1336D1096A8E43EC57B46295C9694B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:24 +0000 Certificate not after: Sun 02 May 2027 02:00:24 +0000 Subordinate resources: IP: 103.38.108.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:96:97:eb:d1:33:6d:10:96:a8:e4:3e:c5:7b:46:29:5c:96:94:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:55:24 2026 GMT Not After : May 2 02:00:24 2027 GMT Subject: CN=4AD757CB155CFF255FDEC1E6D09300FD55954787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:c1:e8:82:3c:78:b4:5c:62:4c:e7:8e:b6: 8d:bf:9a:dc:9b:b4:32:82:e2:88:42:00:e7:4c:8c: f9:59:ef:aa:6c:8b:7a:be:e0:10:c8:0a:8d:bc:30: 45:3a:cc:5e:a1:cb:15:bc:00:98:71:ca:be:b5:32: 20:57:35:a0:7c:9c:1c:cf:e5:9a:21:0f:2c:9f:ae: 82:0c:70:59:b2:de:44:cc:cd:4d:46:93:1b:27:68: 31:1c:95:e1:2c:4c:88:b1:51:c0:ab:4a:69:34:fa: 3e:e1:e9:62:86:29:f5:0c:34:7c:bf:06:20:ae:78: 21:8a:4b:bb:dc:5c:13:94:83:1b:8f:3b:b5:81:1a: 10:d4:2f:ae:c1:86:b1:5a:e0:c5:a7:c3:27:ad:6c: 89:27:e1:96:f8:c8:04:70:03:4b:79:d2:bb:e3:38: aa:52:3d:2b:57:a8:11:32:31:c1:d4:28:ba:65:c2: 70:72:5e:82:22:4a:d4:88:aa:86:f3:d0:9d:54:7f: 2e:1a:ab:51:b1:ea:d2:9f:96:37:e3:52:d5:7c:5b: fa:72:31:c1:0b:a4:f5:65:6b:d6:49:c8:36:bf:b3: e0:fa:96:fc:2d:75:ee:2c:cd:05:e2:67:1f:25:e5: 15:06:0e:f1:cf:5e:4c:46:1b:45:38:c6:93:76:8f: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.108.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:1d:02:69:9b:cc:0b:36:f0:51:cb:a1:cf:4d:d9:32:10:35: 2a:dd:1c:32:d3:1f:84:3d:13:de:7f:10:29:da:52:d4:8b:8f: 8d:f5:e1:0e:2d:4a:19:32:79:eb:47:5d:59:be:e8:5b:56:79: 24:b1:b3:dd:be:7d:95:35:a6:67:78:05:39:07:bb:b2:c7:96: d8:ea:7b:d8:22:3b:06:1e:a6:5e:2c:1f:e4:21:e4:e6:67:c1: 6b:83:70:39:ca:9b:c9:df:7f:cb:b4:93:0e:2b:42:aa:a8:94: 37:8b:79:40:62:43:a4:6e:ee:6a:7f:31:c3:43:75:a8:10:4a: e8:0f:34:6e:d4:b7:f1:8a:b7:58:36:d1:6a:dc:7d:85:d8:ac: ed:49:55:4f:dd:c4:e9:7c:22:d4:e8:52:a9:e2:21:f6:90:cf: e3:55:01:a3:3e:b0:e6:98:63:02:71:ce:f1:9b:79:d8:0c:d0: 64:45:e7:4a:30:f0:64:71:90:46:ed:fd:f4:29:9f:58:25:35: 08:b4:7f:04:28:17:8e:89:57:89:dc:a8:6b:c4:19:a4:5f:3a: 51:25:0b:ed:7d:61:7e:5d:ff:45:05:de:43:81:61:8e:8a:09: 8e:24:07:69:35:75:2a:d9:9a:33:2e:ca:3c:40:20:73:ee:6e: 6d:91:b5:3c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUepaX69EzbRCWqOQ+xXtGKVyWlLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTUyNFoX DTI3MDUwMjAyMDAyNFowMzExMC8GA1UEAxMoNEFENzU3Q0IxNTVDRkYyNTVGREVD MUU2RDA5MzAwRkQ1NTk1NDc4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI/PweiCPHi0XGJM5462jb+a3Ju0MoLiiEIA50yM+VnvqmyLer7gEMgKjbww RTrMXqHLFbwAmHHKvrUyIFc1oHycHM/lmiEPLJ+uggxwWbLeRMzNTUaTGydoMRyV 4SxMiLFRwKtKaTT6PuHpYoYp9Qw0fL8GIK54IYpLu9xcE5SDG487tYEaENQvrsGG sVrgxafDJ61siSfhlvjIBHADS3nSu+M4qlI9K1eoETIxwdQoumXCcHJegiJK1Iiq hvPQnVR/LhqrUbHq0p+WN+NS1Xxb+nIxwQuk9WVr1knINr+z4PqW/C117izNBeJn HyXlFQYO8c9eTEYbRTjGk3aPDy0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFErXV8sVXP8lX97B5tCTAP1VlUeHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NkYjU5YTEwLTU4ZDAtNDYyZS1iMDliLTE5MTliMWMzNWQ3Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZGI1OWEx MC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC80QUQ3NTdDQjE1NUNGRjI1 NUZERUMxRTZEMDkzMDBGRDU1OTU0Nzg3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZyZsMA0GCSqGSIb3DQEBCwUAA4IBAQALHQJpm8wLNvBRy6HPTdkyEDUq3Rwy 0x+EPRPefxAp2lLUi4+N9eEOLUoZMnnrR11ZvuhbVnkksbPdvn2VNaZneAU5B7uy x5bY6nvYIjsGHqZeLB/kIeTmZ8Frg3A5ypvJ33/LtJMOK0KqqJQ3i3lAYkOkbu5q fzHDQ3WoEEroDzRu1LfxirdYNtFq3H2F2KztSVVP3cTpfCLU6FKp4iH2kM/jVQGj PrDmmGMCcc7xm3nYDNBkRedKMPBkcZBG7f30KZ9YJTUItH8EKBeOiVeJ3KhrxBmk XzpRJQvtfWF+Xf9FBd5DgWGOigmOJAdpNXUq2ZozLso8QCBz7m5tkbU8 -----END CERTIFICATE-----Generated at Tue May 12 22:10:28 2026 by rpki-client