$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer File: 4BCE188DE42B539EBB860A376D13FE292B001147.cer (raw, json) Hash identifier: R0+yAv4lgm3zOr2JjGD00xrjMVygSSQusCxVHtBUR9M= Subject key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7E484B7A74DB64F673BCE27530CAE0971EEDE75D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft caRepository: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:08:48 +0000 Certificate not after: Sun 02 May 2027 01:13:48 +0000 Subordinate resources: IP: 103.121.196.0/22 IP: 2001:df6:5300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:48:4b:7a:74:db:64:f6:73:bc:e2:75:30:ca:e0:97:1e:ed:e7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:08:48 2026 GMT Not After : May 2 01:13:48 2027 GMT Subject: CN=4BCE188DE42B539EBB860A376D13FE292B001147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:e3:63:cb:69:62:ed:db:d8:64:d0:5e:1c: ac:02:c5:48:c1:21:b3:44:ed:4f:2f:c1:53:c6:8d: 57:f9:e9:4e:77:3a:1a:eb:81:43:a2:72:e8:2a:4f: 8c:2a:52:64:69:d8:24:a7:ae:82:51:5d:55:ad:2a: 7a:a8:ae:31:f9:bc:91:70:03:b3:a0:f5:6a:48:06: cd:f7:26:ef:97:64:c0:79:65:7e:f8:ee:88:d8:a0: d0:ef:9b:50:a3:74:3e:16:2e:ca:6a:0d:d8:da:a0: 7a:b9:e9:d0:44:46:7d:d4:ae:fc:10:34:14:7e:9d: 0e:c1:d9:b5:5d:8e:ae:af:41:ef:2a:35:4a:4e:36: 4e:1c:c8:69:96:08:3c:a0:49:3d:cf:46:9d:40:69: dd:46:23:01:62:e2:81:05:ef:15:8d:e9:33:b0:1d: 0d:f5:6f:86:a6:be:ba:c7:16:b1:b1:7a:91:3d:10: 35:f5:cb:93:80:65:9d:e0:06:42:3d:da:6e:aa:2e: 60:94:df:4d:bf:0e:3e:23:17:25:2f:e3:5a:51:6b: 0a:9a:3f:a2:96:4f:dc:a1:6a:f5:57:84:32:41:a6: 95:18:91:0e:ef:76:2c:d8:fb:48:0d:62:1d:9e:c4: a3:3a:2c:9f:1a:dd:b2:cc:b0:0f:2d:08:f9:75:63: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.196.0/22 IPv6: 2001:df6:5300::/48 Signature Algorithm: sha256WithRSAEncryption 86:27:12:bd:05:3a:55:09:d0:89:07:bd:6c:64:ed:dd:46:b6: 98:42:17:dc:2c:97:39:6e:d6:9d:74:6c:95:dd:ce:6f:22:bc: 52:67:fa:68:d3:14:cb:87:f9:d6:7e:00:d9:63:01:05:b1:33: f6:18:bf:ba:42:bf:9d:76:46:c1:e9:83:ea:e5:15:c8:eb:7b: 82:2c:f6:b3:53:c2:f2:88:cc:e7:d1:f0:cf:06:3f:22:c1:ee: 49:2f:70:96:32:12:75:98:ff:74:66:99:b3:96:ff:fc:4c:c0: 77:00:ff:a9:dd:19:82:44:13:a8:a6:17:c8:12:ba:18:1c:8e: 81:7f:27:7a:42:ff:4e:ba:72:9c:ce:7e:a3:2d:36:af:c2:d4: e6:95:05:ca:cf:3a:89:d6:d1:ad:04:3a:e5:e7:0c:57:57:74: 54:73:14:3e:dd:19:90:0c:12:ce:2a:52:4f:2a:ea:9e:ca:1a: eb:29:d5:8b:55:32:2e:11:e3:0e:31:81:75:44:15:5f:3f:36: 5c:fa:9d:c0:76:cd:30:8e:a5:d5:a8:4e:1d:12:97:0a:e8:ed: c8:67:c3:71:c7:37:44:1a:9e:dd:d1:89:cc:85:bb:9c:92:e2: 97:dc:68:f4:6d:f0:fc:04:f2:bd:56:aa:c7:de:15:cf:a6:a2: 1f:3c:c8:37 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUfkhLenTbZPZzvOJ1MMrglx7t510wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDg0OFoX DTI3MDUwMjAxMTM0OFowMzExMC8GA1UEAxMoNEJDRTE4OERFNDJCNTM5RUJCODYw QTM3NkQxM0ZFMjkyQjAwMTE0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhz42PLaWLt29hk0F4crALFSMEhs0TtTy/BU8aNV/npTnc6GuuBQ6Jy6CpP jCpSZGnYJKeuglFdVa0qeqiuMfm8kXADs6D1akgGzfcm75dkwHllfvjuiNig0O+b UKN0PhYuymoN2Nqgernp0ERGfdSu/BA0FH6dDsHZtV2Orq9B7yo1Sk42ThzIaZYI PKBJPc9GnUBp3UYjAWLigQXvFY3pM7AdDfVvhqa+uscWsbF6kT0QNfXLk4BlneAG Qj3abqouYJTfTb8OPiMXJS/jWlFrCpo/opZP3KFq9VeEMkGmlRiRDu92LNj7SA1i HZ7EozosnxrdssywDy0I+XVjCVECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEvOGI3kK1Oeu4YKN20T/ikrABFHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgzY2Q2MGIyLTBmNTctNGZjNS1iYzYyLTFkOWI2YzQ4ZmNmMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84M2NkNjBi Mi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC80QkNFMTg4REU0MkI1MzlF QkI4NjBBMzc2RDEzRkUyOTJCMDAxMTQ3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ3nEMA8EAgACMAkDBwAgAQ32UwAwDQYJKoZIhvcNAQELBQADggEBAIYnEr0F OlUJ0IkHvWxk7d1GtphCF9wslzlu1p10bJXdzm8ivFJn+mjTFMuH+dZ+ANljAQWx M/YYv7pCv512RsHpg+rlFcjre4Is9rNTwvKIzOfR8M8GPyLB7kkvcJYyEnWY/3Rm mbOW//xMwHcA/6ndGYJEE6imF8gSuhgcjoF/J3pC/066cpzOfqMtNq/C1OaVBcrP OonW0a0EOuXnDFdXdFRzFD7dGZAMEs4qUk8q6p7KGusp1YtVMi4R4w4xgXVEFV8/ Nlz6ncB2zTCOpdWoTh0Slwro7chnw3HHN0Qant3RicyFu5yS4pfcaPRt8PwE8r1W qsfeFc+moh88yDc= -----END CERTIFICATE-----Generated at Wed May 13 05:25:07 2026 by rpki-client