$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer File: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer (raw, json) Hash identifier: ZN+LWVeZCaFU7AFz7XwI+u1fWr2qiJL0SrWeAsDSlwQ= Subject key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A2495C4BE4065B13242852898430D38234E1831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:25:57 +0000 Certificate not after: Sun 02 May 2027 01:30:57 +0000 Subordinate resources: IP: 103.169.130.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:24:95:c4:be:40:65:b1:32:42:85:28:98:43:0d:38:23:4e:18:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:25:57 2026 GMT Not After : May 2 01:30:57 2027 GMT Subject: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:32:3c:fd:06:df:5b:0f:2b:f4:41:29:82: 7b:63:58:e5:7b:fe:84:c7:07:10:bd:0b:77:f7:2b: c4:19:06:52:f2:9a:9a:ea:13:79:a1:e8:80:1d:84: 1d:23:c3:18:b4:be:30:1e:e8:c1:c4:99:c6:39:c3: 33:1b:79:75:fc:49:8b:85:16:21:05:b4:6e:35:b9: 5c:62:44:e7:d8:c7:c3:0d:eb:d8:1f:c1:68:f3:57: b8:95:7a:0f:ea:29:68:3e:9b:95:f9:3a:2a:85:ae: 99:d7:da:8f:4e:20:99:b1:6a:21:40:c9:d0:43:30: f0:19:a1:da:3c:dc:51:51:c0:76:29:f9:6e:84:1d: 61:39:16:10:85:08:b4:5d:11:bc:af:10:ee:9a:f0: ff:63:64:99:a7:f4:5f:59:03:62:f7:9b:02:01:64: 19:20:9f:a3:8e:8c:db:57:f4:9f:84:5f:3c:89:05: 89:37:3f:73:4c:7e:db:3d:fa:a8:8c:f3:4a:76:69: 20:87:39:4a:d0:2c:2a:2e:7e:41:3b:71:a2:b3:b3: 4a:1f:18:f7:9b:fb:2c:1c:b3:4a:d9:6f:d3:2c:f7: 9b:da:29:5d:f7:65:d0:52:18:7a:9e:a0:3e:9f:cb: f1:6f:0d:8b:df:b0:99:08:99:2e:09:c2:02:41:0b: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.130.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:38:c3:d6:69:ae:00:91:1c:61:eb:7b:b9:8e:00:1b:7c:1d: f6:a1:e7:ed:77:4d:13:d9:0c:f2:5a:4a:ad:a0:4e:0f:bf:62: aa:f8:35:09:4f:11:03:b9:71:ee:a5:41:fb:f7:a2:dd:29:53: 40:25:3d:59:39:3d:62:7d:9a:9d:55:34:0c:cf:5f:37:b4:1a: ad:78:cb:69:da:64:84:be:af:58:62:2e:55:af:20:e8:e2:83: 84:91:4c:15:f6:fc:11:d0:15:0d:86:a9:8a:28:d2:78:0c:d4: 5c:4d:1c:3d:3a:46:60:c5:0e:08:b6:0f:e9:ef:ae:73:af:5f: e4:be:f1:75:8b:90:fe:38:fb:e0:47:2c:1f:bd:65:ef:5c:44: a0:ae:aa:c5:1c:a5:cd:1e:7a:fe:7e:75:ff:32:10:90:2e:1e: 18:f2:a1:4b:b6:1b:7c:23:48:3d:27:e0:4d:b9:d5:bf:dc:3d: 80:1b:33:33:ff:f8:7a:39:29:82:12:27:a7:5f:0d:2e:8d:bc: 0f:6a:e7:c5:27:19:33:38:02:fc:50:c4:8a:fc:d6:ef:67:94: f2:a6:94:92:92:80:ac:7a:30:57:24:1f:5b:f0:1c:ac:f9:45: 83:42:8a:b0:da:8b:62:7f:db:14:2f:7c:3d:b2:0c:68:56:5d: 64:8f:4e:34 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSiSVxL5AZbEyQoUomEMNOCNOGDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjU1N1oX DTI3MDUwMjAxMzA1N1owMzExMC8GA1UEAxMoNEMwQjY0N0MxREY3RENFMjIwMTA2 QkRBMTFDMUQ3RDE2M0QxMEY1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALw2Mjz9Bt9bDyv0QSmCe2NY5Xv+hMcHEL0Ld/crxBkGUvKamuoTeaHogB2E HSPDGLS+MB7owcSZxjnDMxt5dfxJi4UWIQW0bjW5XGJE59jHww3r2B/BaPNXuJV6 D+opaD6blfk6KoWumdfaj04gmbFqIUDJ0EMw8Bmh2jzcUVHAdin5boQdYTkWEIUI tF0RvK8Q7prw/2Nkmaf0X1kDYvebAgFkGSCfo46M21f0n4RfPIkFiTc/c0x+2z36 qIzzSnZpIIc5StAsKi5+QTtxorOzSh8Y95v7LByzStlv0yz3m9opXfdl0FIYep6g Pp/L8W8Ni9+wmQiZLgnCAkELCbMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEwLZHwd99ziIBBr2hHB19Fj0Q9YMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzllM2Y2NmE4LWEwZmYtNDRmYS1iZGE2LThlNWYyN2Q2MWIzZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZTNmNjZh OC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC80QzBCNjQ3QzFERjdEQ0Uy MjAxMDZCREExMUMxRDdEMTYzRDEwRjU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6mCMA0GCSqGSIb3DQEBCwUAA4IBAQAuOMPWaa4AkRxh63u5jgAbfB32oeft d00T2QzyWkqtoE4Pv2Kq+DUJTxEDuXHupUH796LdKVNAJT1ZOT1ifZqdVTQMz183 tBqteMtp2mSEvq9YYi5VryDo4oOEkUwV9vwR0BUNhqmKKNJ4DNRcTRw9OkZgxQ4I tg/p765zr1/kvvF1i5D+OPvgRywfvWXvXESgrqrFHKXNHnr+fnX/MhCQLh4Y8qFL tht8I0g9J+BNudW/3D2AGzMz//h6OSmCEienXw0ujbwPaufFJxkzOAL8UMSK/Nbv Z5TyppSSkoCsejBXJB9b8Bys+UWDQoqw2otif9sUL3w9sgxoVl1kj040 -----END CERTIFICATE-----Generated at Tue May 12 22:52:38 2026 by rpki-client