$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer File: 4C020B9A7E561E4B66C4D84205960DF774E08E45.cer (raw, json) Hash identifier: l0r85+KJ2wh+5vsgscYqy+PBz/TdxHqopwTrhNiXJLg= Subject key identifier: 4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E9A5B1080EC605558A75F4EDD1F3426F848EA8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Tue 22 Sep 2026 14:06:21 +0000 Certificate not after: Tue 21 Sep 2027 14:11:21 +0000 Subordinate resources: AS: 131772 IP: 103.16.78.0/24 IP: 103.210.209.0/24 IP: 2001:df6:f600::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9a:5b:10:80:ec:60:55:58:a7:5f:4e:dd:1f:34:26:f8:48:ea:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 22 14:06:21 2026 GMT Not After : Sep 21 14:11:21 2027 GMT Subject: CN=4C020B9A7E561E4B66C4D84205960DF774E08E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:4b:2d:ef:97:b2:2c:f0:6b:7f:6f:e8:ad: b4:9c:cb:71:1c:ab:f6:ef:42:98:f7:ba:41:16:c6: c2:82:53:cf:98:cf:3f:af:7b:f2:b0:55:ac:05:6d: 69:4c:55:a7:45:4b:90:85:fe:90:94:60:53:d3:7a: 7a:26:81:f5:97:57:9a:89:87:77:39:c0:1a:f7:bb: a7:58:54:8b:db:38:02:89:c4:b3:26:15:26:a6:30: 74:11:b1:7e:70:b8:c9:a7:2f:a6:d4:37:84:e3:60: 8f:77:86:cd:a2:99:82:fe:d0:ec:8c:3d:5e:49:f4: 06:5c:8a:ee:93:93:1e:10:01:05:b9:92:4c:19:80: 3f:07:7c:91:1a:3c:34:bf:f8:4a:83:fb:11:bc:b3: b8:b5:98:58:f4:58:90:0b:15:ec:9d:76:1a:3c:48: 82:61:16:c8:45:0a:05:81:14:65:58:01:36:09:e1: 00:18:b4:be:d8:f6:2f:1e:3d:2a:45:96:8c:de:e0: 55:e1:26:98:76:18:4e:dd:90:42:b0:33:20:d1:f6: 0a:8e:2f:37:bf:4e:a9:2b:7f:7f:a2:f0:74:92:50: 8e:f6:30:6e:50:47:ea:0d:df:16:ed:78:20:21:da: 43:6c:3e:33:c7:13:90:1e:77:49:3c:74:f4:57:29: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.78.0/24 103.210.209.0/24 IPv6: 2001:df6:f600::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131772 Signature Algorithm: sha256WithRSAEncryption 94:ba:ba:88:41:a1:4c:5d:82:65:a5:a1:c2:b6:c8:f1:93:d1: 0e:f8:1a:14:6a:7a:68:95:e9:3c:20:1b:c7:fd:ba:d9:99:01: d2:bb:06:1a:fd:a3:80:91:64:3a:a9:08:39:16:26:fd:de:e9: 1e:d7:08:93:51:7c:3d:ec:76:73:48:7b:02:bc:48:77:75:e8: 51:c5:2e:76:3c:b5:72:53:1e:ac:cf:09:bf:8e:f8:b5:b4:91: 6a:f0:11:55:6d:e8:d8:5b:3e:eb:98:87:22:a0:4b:b4:79:c3: 4e:83:4a:4e:61:ed:90:86:5e:1c:5b:da:1e:76:88:b6:f8:78: 99:1f:23:7e:36:c8:88:32:84:c0:f4:71:e7:6e:1a:e6:eb:75: ab:59:3b:c9:62:eb:76:f0:67:1e:49:7b:73:cf:f3:ed:92:47: 01:fc:92:db:ca:9c:d2:a9:62:d6:be:13:ff:91:5b:aa:dd:3c: 5f:7b:da:92:48:43:f1:3d:c5:3e:d6:0a:88:7d:c3:b9:70:7c: 3e:28:d8:af:49:12:b1:da:1e:ce:d5:08:e5:97:26:a9:21:5f: 3e:cd:ac:19:71:d9:c9:4c:9f:cd:cf:0b:7a:b1:42:a4:02:b6: a4:10:bb:91:5b:50:0f:0f:16:99:9a:40:f8:30:98:fc:88:0d: 7a:5f:f7:04 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUbppbEIDsYFVYp19O3R80JvhI6oowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyMjE0MDYyMVoX DTI3MDkyMTE0MTEyMVowMzExMC8GA1UEAxMoNEMwMjBCOUE3RTU2MUU0QjY2QzRE ODQyMDU5NjBERjc3NEUwOEU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALncSy3vl7Is8Gt/b+ittJzLcRyr9u9CmPe6QRbGwoJTz5jPP6978rBVrAVt aUxVp0VLkIX+kJRgU9N6eiaB9ZdXmomHdznAGve7p1hUi9s4AonEsyYVJqYwdBGx fnC4yacvptQ3hONgj3eGzaKZgv7Q7Iw9Xkn0BlyK7pOTHhABBbmSTBmAPwd8kRo8 NL/4SoP7EbyzuLWYWPRYkAsV7J12GjxIgmEWyEUKBYEUZVgBNgnhABi0vtj2Lx49 KkWWjN7gVeEmmHYYTt2QQrAzINH2Co4vN79OqSt/f6LwdJJQjvYwblBH6g3fFu14 ICHaQ2w+M8cTkB53STx09FcpL00CAwEAAaOCAuwwggLoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEwCC5p+Vh5LZsTYQgWWDfd04I5FMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI3MDFmMTYxLTA4MDgtNGFiNC05NjA4LTY1MDM4ZjFlZWIzYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNzAxZjE2 MS0wODA4LTRhYjQtOTYwOC02NTAzOGYxZWViM2EvMC80QzAyMEI5QTdFNTYxRTRC NjZDNEQ4NDIwNTk2MERGNzc0RTA4RTQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZxBOAwQAZ9LRMA8EAgACMAkDBwAgAQ329gAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgK8MA0GCSqGSIb3DQEBCwUAA4IBAQCUurqIQaFMXYJlpaHCtsjxk9EO +BoUanpolek8IBvH/brZmQHSuwYa/aOAkWQ6qQg5Fib93uke1wiTUXw97HZzSHsC vEh3dehRxS52PLVyUx6szwm/jvi1tJFq8BFVbejYWz7rmIcioEu0ecNOg0pOYe2Q hl4cW9oedoi2+HiZHyN+NsiIMoTA9HHnbhrm63WrWTvJYut28GceSXtzz/PtkkcB /JLbypzSqWLWvhP/kVuq3Txfe9qSSEPxPcU+1gqIfcO5cHw+KNivSRKx2h7O1Qjl lyapIV8+zawZcdnJTJ/Nzwt6sUKkArakELuRW1APDxaZmkD4MJj8iA16X/cE -----END CERTIFICATE-----Generated at Thu Sep 24 17:01:36 2026 by rpki-client