$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer File: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer (raw, json) Hash identifier: hGRQ4LXA34sq786f9hXoNdpGQ6qvky67NkdY3SgW7rk= Subject key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5034FE309093431731E76756375A3708AEAA215B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:36:14 +0000 Certificate not after: Sun 02 May 2027 02:41:14 +0000 Subordinate resources: IP: 103.210.68.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:34:fe:30:90:93:43:17:31:e7:67:56:37:5a:37:08:ae:aa:21:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:36:14 2026 GMT Not After : May 2 02:41:14 2027 GMT Subject: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:9d:59:58:7e:2e:fa:10:eb:9b:d9:0c:56: b0:f1:ae:5a:b6:72:48:0e:09:68:83:e6:4d:ae:3a: 1b:63:e3:0a:fb:56:87:ec:71:32:c3:54:62:db:41: 97:57:4b:64:d5:b4:db:59:91:0b:5a:e1:62:e9:8b: c0:18:a7:9f:36:65:fa:d9:40:65:30:60:dd:35:7f: 87:af:b1:1c:a9:49:32:58:6d:56:88:de:db:90:73: 01:50:7c:d2:3f:7d:e6:52:b5:a7:18:39:9e:ac:70: c5:97:7b:88:3f:93:7b:a8:3b:e1:4e:db:4f:d7:3a: 21:30:00:ec:7a:e6:26:df:96:e9:66:48:4f:93:bd: 7a:cf:ad:89:e9:77:ba:b1:ad:39:8b:59:2d:34:02: c7:7d:0a:45:52:10:d5:6e:24:20:d4:fd:3e:94:ec: e5:1e:fc:be:bb:18:1a:28:be:c6:4c:3f:e2:20:0a: 03:95:01:07:29:c9:6c:87:cd:6e:00:f2:0d:c8:92: da:53:a8:c7:28:a1:ab:11:72:47:56:a5:cc:a0:33: 9d:51:2d:93:e6:a5:9d:9f:c4:6a:f2:3c:70:63:05: cb:6b:8c:c4:16:43:d8:36:72:3a:69:64:51:dd:4a: 02:56:97:56:eb:c9:2f:1f:8f:0f:6d:61:8a:b5:04: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.68.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:e6:b3:f6:95:8d:8f:5e:d6:5f:cf:b5:35:33:be:ee:46:84: 6f:23:43:11:f7:0b:02:51:b7:72:4b:e2:9e:15:94:93:1b:44: b2:58:85:73:67:af:86:f7:6e:fd:d6:be:8a:6e:80:28:c3:35: 2c:41:f8:dd:2d:9d:d0:8e:6f:51:fa:b5:fe:0d:ec:46:df:13: e7:5b:ec:24:4c:09:6d:71:a1:d1:d4:37:1a:c4:3f:22:cc:5b: 59:71:b8:c0:06:cf:19:dd:94:cb:60:71:75:d8:10:47:2b:7a: c4:da:84:30:79:80:bb:b4:dd:09:11:48:57:92:90:64:58:9e: 8f:d8:e6:bd:db:4a:c9:92:2c:e5:bc:d2:58:d0:75:53:70:7b: 52:88:f2:0d:fc:52:0e:26:55:1d:a6:6f:35:8d:6a:1d:2b:77: 20:e5:18:b4:ed:5c:22:c9:18:50:fd:a6:49:43:d2:6d:16:bc: e0:ae:24:57:3a:d5:1e:db:33:18:a1:31:0d:10:f8:fe:e4:64: 3b:2e:75:f0:c9:d8:23:ee:b0:f5:ab:da:13:aa:6b:60:ad:a8: e9:9a:4a:90:f0:8e:47:ec:af:a6:84:7e:68:37:36:b4:2d:61: 4b:74:6c:f7:db:b8:0e:72:33:e3:9c:f2:66:b4:08:bc:cc:f3: 6f:cf:e3:8f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUDT+MJCTQxcx52dWN1o3CK6qIVswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzYxNFoX DTI3MDUwMjAyNDExNFowMzExMC8GA1UEAxMoNEJFNkMxQkJGMEU5RjUzMDk3MTk1 NTY4QURFQTIyMjY0RkI0RTFCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwTnVlYfi76EOub2QxWsPGuWrZySA4JaIPmTa46G2PjCvtWh+xxMsNUYttB l1dLZNW021mRC1rhYumLwBinnzZl+tlAZTBg3TV/h6+xHKlJMlhtVoje25BzAVB8 0j995lK1pxg5nqxwxZd7iD+Te6g74U7bT9c6ITAA7HrmJt+W6WZIT5O9es+tiel3 urGtOYtZLTQCx30KRVIQ1W4kINT9PpTs5R78vrsYGii+xkw/4iAKA5UBBynJbIfN bgDyDciS2lOoxyihqxFyR1alzKAznVEtk+alnZ/EavI8cGMFy2uMxBZD2DZyOmlk Ud1KAlaXVuvJLx+PD21hirUEDEcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEvmwbvw6fUwlxlVaK3qIiZPtOGwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y0MzhjMTk1LTQ5NGEtNDZhMi1iOTNjLThlMTU2NjhmMDViMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNDM4YzE5 NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC80QkU2QzFCQkYwRTlGNTMw OTcxOTU1NjhBREVBMjIyNjRGQjRFMUIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ9JEMA0GCSqGSIb3DQEBCwUAA4IBAQAe5rP2lY2PXtZfz7U1M77uRoRvI0MR 9wsCUbdyS+KeFZSTG0SyWIVzZ6+G92791r6KboAowzUsQfjdLZ3Qjm9R+rX+DexG 3xPnW+wkTAltcaHR1DcaxD8izFtZcbjABs8Z3ZTLYHF12BBHK3rE2oQweYC7tN0J EUhXkpBkWJ6P2Oa920rJkizlvNJY0HVTcHtSiPIN/FIOJlUdpm81jWodK3cg5Ri0 7VwiyRhQ/aZJQ9JtFrzgriRXOtUe2zMYoTENEPj+5GQ7LnXwydgj7rD1q9oTqmtg rajpmkqQ8I5H7K+mhH5oNza0LWFLdGz327gOcjPjnPJmtAi8zPNvz+OP -----END CERTIFICATE-----Generated at Tue May 12 22:32:40 2026 by rpki-client