$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer File: 4C2533216EFE900E826FB212E41459F4DC754554.cer (raw, json) Hash identifier: 6DAIcm2rb7VGJGloHa/YAHFSj7ldZ5DI2+NRcEOYleU= Subject key identifier: 4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4991940ABAAC33986291CDD5B744643003C2216B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:43:43 +0000 Certificate not after: Sat 01 May 2027 23:48:43 +0000 Subordinate resources: IP: 103.18.34.0/23 IP: 103.31.110.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:91:94:0a:ba:ac:33:98:62:91:cd:d5:b7:44:64:30:03:c2:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:43:43 2026 GMT Not After : May 1 23:48:43 2027 GMT Subject: CN=4C2533216EFE900E826FB212E41459F4DC754554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:df:ba:e5:11:e2:48:bf:28:74:ff:ea:36: 77:7d:34:77:30:f8:a5:38:fe:5f:22:3e:8d:0c:ba: ee:69:b7:db:8f:b5:c4:ae:a5:78:3c:46:1c:1d:c8: a3:cd:09:f6:c6:30:98:e6:32:8d:a4:2a:2e:9f:38: b4:ce:af:82:53:1e:5c:82:b1:55:ed:d5:66:d2:bb: 20:27:76:44:42:0a:1a:1e:9f:2c:9f:df:19:33:35: 18:8c:cf:e9:d4:e2:b3:18:ab:f5:1c:92:be:6c:92: 5f:57:16:fe:3a:df:69:3b:f4:d0:40:4e:16:40:a6: cd:c0:17:4b:a9:82:32:7f:15:3a:3a:2a:d9:eb:ea: 18:07:be:9c:ff:6a:76:20:e1:7b:40:69:df:bd:49: 13:38:16:31:50:6e:04:fc:85:b9:b1:a7:c9:4c:1a: 3c:af:a8:f2:b3:c8:76:c4:29:b0:d4:63:fa:c2:ae: 63:be:42:ea:3d:72:51:5c:82:c4:26:e6:bc:4d:bb: f2:07:d7:60:9c:f6:dc:30:66:a6:f3:33:65:51:4e: ab:de:65:09:96:3c:d7:63:f4:75:20:17:97:01:ff: 54:e8:ba:34:ce:62:09:68:6e:a6:ac:38:dd:04:05: 9b:f5:8b:be:1c:54:22:0f:9c:27:71:ca:24:e5:b3: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.34.0/23 103.31.110.0/23 Signature Algorithm: sha256WithRSAEncryption 30:ee:51:7e:da:b4:c4:59:e1:2f:52:fa:33:db:bb:14:b0:9f: 2c:9b:a4:5a:5d:67:20:2b:b9:37:aa:5e:93:a3:a3:c3:0e:82: 2e:8d:5f:41:aa:09:ef:72:c4:61:bb:27:5e:e1:c3:53:2e:64: 8f:93:e0:41:52:02:ab:b2:95:d1:6e:59:ae:7b:d6:54:06:e8: 2a:c1:d3:59:e0:94:4e:cb:ed:53:f2:63:25:35:dd:c1:c4:bf: 33:02:bd:09:a8:1a:fa:2e:bc:22:da:77:95:bd:b9:d1:bf:e7: 62:3f:93:b6:c5:09:7c:3c:71:c1:f9:b0:a4:7e:2d:4b:6a:5b: 8f:32:f6:98:23:7f:53:37:92:83:96:14:9e:34:4e:fe:6c:6e: 59:46:48:e9:61:f4:ef:17:71:3f:8f:17:85:cb:22:a4:75:a4: 3b:bd:ba:55:53:65:a7:fe:06:c3:bd:ee:3a:80:23:6d:b5:7b: d9:6e:b5:77:2d:07:ff:8d:8b:1f:60:17:47:07:04:7a:54:ea: 7d:81:d4:91:2e:dd:f6:bd:72:14:a6:d1:55:d8:fe:34:5f:d4: ee:2f:5a:57:d0:b2:42:62:eb:af:22:9f:6c:48:37:03:74:37: 7c:46:3e:ad:69:e7:74:d9:e4:f1:d1:97:29:76:c3:65:2e:07: 35:25:c0:ef -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUSZGUCrqsM5hikc3Vt0RkMAPCIWswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDM0M1oX DTI3MDUwMTIzNDg0M1owMzExMC8GA1UEAxMoNEMyNTMzMjE2RUZFOTAwRTgyNkZC MjEyRTQxNDU5RjREQzc1NDU1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJi737rlEeJIvyh0/+o2d300dzD4pTj+XyI+jQy67mm324+1xK6leDxGHB3I o80J9sYwmOYyjaQqLp84tM6vglMeXIKxVe3VZtK7ICd2REIKGh6fLJ/fGTM1GIzP 6dTisxir9RySvmySX1cW/jrfaTv00EBOFkCmzcAXS6mCMn8VOjoq2evqGAe+nP9q diDhe0Bp371JEzgWMVBuBPyFubGnyUwaPK+o8rPIdsQpsNRj+sKuY75C6j1yUVyC xCbmvE278gfXYJz23DBmpvMzZVFOq95lCZY812P0dSAXlwH/VOi6NM5iCWhupqw4 3QQFm/WLvhxUIg+cJ3HKJOWzcxMCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEwlMyFu/pAOgm+yEuQUWfTcdUVUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA1NjBkMmRmLTY1ZmYtNDNhOC1hOTgzLTMzMjBjZjlmZDI5Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNTYwZDJk Zi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC80QzI1MzMyMTZFRkU5MDBF ODI2RkIyMTJFNDE0NTlGNERDNzU0NTU0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQBZxIiAwQBZx9uMA0GCSqGSIb3DQEBCwUAA4IBAQAw7lF+2rTEWeEvUvoz27sU sJ8sm6RaXWcgK7k3ql6To6PDDoIujV9BqgnvcsRhuyde4cNTLmSPk+BBUgKrspXR blmue9ZUBugqwdNZ4JROy+1T8mMlNd3BxL8zAr0JqBr6Lrwi2neVvbnRv+diP5O2 xQl8PHHB+bCkfi1LaluPMvaYI39TN5KDlhSeNE7+bG5ZRkjpYfTvF3E/jxeFyyKk daQ7vbpVU2Wn/gbDve46gCNttXvZbrV3LQf/jYsfYBdHBwR6VOp9gdSRLt32vXIU ptFV2P40X9TuL1pX0LJCYuuvIp9sSDcDdDd8Rj6taed02eTx0ZcpdsNlLgc1JcDv -----END CERTIFICATE-----Generated at Wed May 13 00:54:15 2026 by rpki-client