$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer (raw, json) Hash identifier: JrhRdL+4KpWlcOabTiodOcR8dpRb/zncVVpcZNPiXTA= Subject key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 789051B6E0000347F36E34F74BDC4005184651CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:13 +0000 Certificate not after: Sun 02 May 2027 00:49:13 +0000 Subordinate resources: IP: 103.184.167.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:90:51:b6:e0:00:03:47:f3:6e:34:f7:4b:dc:40:05:18:46:51:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:13 2026 GMT Not After : May 2 00:49:13 2027 GMT Subject: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:83:40:8f:4d:fc:e4:16:ba:08:c8:43:1d: f1:73:06:39:32:85:cf:4b:0e:39:36:8e:f2:10:d3: d4:c4:b8:f6:0f:25:42:79:10:1e:df:f5:e9:18:19: 48:d5:51:c5:59:22:9b:be:e0:7b:eb:a2:ce:e9:c6: 38:5b:22:36:4d:a2:97:b6:a5:c7:b7:de:5c:a8:fd: 7b:d6:ba:0f:67:79:ec:00:3f:62:4c:43:d8:ad:df: c7:7f:18:7d:3b:13:2a:13:19:ae:3e:b1:c4:49:2d: 24:76:66:cc:7c:c5:54:9d:79:66:3d:79:14:91:d1: 31:19:8e:34:0b:26:7a:ba:c1:b9:e6:d4:2d:92:78: 93:35:0e:80:01:3d:81:05:67:2a:6c:4c:f1:dc:07: 47:67:c3:8b:e2:b5:ce:12:ee:04:85:73:10:5d:8e: ea:f4:64:c5:10:49:ec:2d:7d:af:f2:a1:9f:59:72: ef:2f:5b:d7:85:e5:96:ad:e6:b1:89:f6:3f:e1:7b: d0:c7:e2:6c:a7:d8:a3:8c:03:65:bd:76:22:ea:49: af:81:5e:6c:03:40:a9:78:a0:14:47:a1:f9:a4:11: 41:d1:db:f2:9f:fd:ba:08:72:05:e6:f1:32:bf:68: cd:a6:19:bb:a9:5d:c3:45:e1:26:0a:28:22:1a:d6: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.167.0/24 Signature Algorithm: sha256WithRSAEncryption 46:ac:f1:5a:d1:79:b2:9b:8b:67:93:98:db:80:bb:ca:14:fe: 16:39:a0:d3:b5:94:0b:c4:ff:6f:61:08:23:e0:21:e5:93:f5: a6:aa:27:bb:6d:0b:ff:31:f0:ba:69:c3:ed:8f:96:57:02:b1: df:18:ba:0d:83:66:05:74:77:bc:05:bc:57:4b:1f:ae:f9:85: eb:cb:f6:60:4e:56:64:19:2d:35:70:cd:3c:34:3f:4b:16:7d: 57:62:b9:01:ac:a7:9f:a0:81:fa:44:a6:ba:48:31:14:c9:62: 41:0d:c2:4c:35:39:21:ab:d3:ed:2c:e4:a6:66:22:ef:23:16: 82:70:21:89:8e:1d:6b:7e:63:07:2c:84:40:64:77:b0:5f:9d: a8:f4:25:2d:bd:90:4c:ed:33:09:a5:20:65:a8:f4:bf:a9:7f: 13:e9:c2:cc:a5:6b:52:cf:df:d8:cd:be:ea:07:5b:72:2d:32: 69:9d:10:cb:3e:7a:eb:73:fd:43:90:5a:dc:de:51:5f:97:ff: db:29:db:fd:97:75:72:34:aa:62:3b:59:78:ce:24:1e:f2:b8: fc:7a:18:da:9b:2c:eb:7f:3c:c6:ab:f7:05:5d:6c:5f:ec:ec: 45:bb:15:62:cd:2d:8f:a3:82:92:07:fc:80:fe:c8:3a:51:e6: 98:7e:49:90 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeJBRtuAAA0fzbjT3S9xABRhGUc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQxM1oX DTI3MDUwMjAwNDkxM1owMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRF M0Y4MzBCMUZBQkY4OUY0QjVGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALD0g0CPTfzkFroIyEMd8XMGOTKFz0sOOTaO8hDT1MS49g8lQnkQHt/16RgZ SNVRxVkim77ge+uizunGOFsiNk2il7alx7feXKj9e9a6D2d57AA/YkxD2K3fx38Y fTsTKhMZrj6xxEktJHZmzHzFVJ15Zj15FJHRMRmONAsmerrBuebULZJ4kzUOgAE9 gQVnKmxM8dwHR2fDi+K1zhLuBIVzEF2O6vRkxRBJ7C19r/Khn1ly7y9b14Xllq3m sYn2P+F70MfibKfYo4wDZb12IupJr4FebANAqXigFEeh+aQRQdHb8p/9ughyBebx Mr9ozaYZu6ldw0XhJgooIhrWYZsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEw7vYaD3ULEcPTj+DCx+r+J9LXyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYwNjQ5YzQ3LWRmYzMtNGEyMC1iNWI0LTg3OTY3NWU1ZGI5Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MDY0OWM0 Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC80QzNCQkQ4NjgzREQ0MkM0 NzBGNEUzRjgzMEIxRkFCRjg5RjRCNUYyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7inMA0GCSqGSIb3DQEBCwUAA4IBAQBGrPFa0Xmym4tnk5jbgLvKFP4WOaDT tZQLxP9vYQgj4CHlk/Wmqie7bQv/MfC6acPtj5ZXArHfGLoNg2YFdHe8BbxXSx+u +YXry/ZgTlZkGS01cM08ND9LFn1XYrkBrKefoIH6RKa6SDEUyWJBDcJMNTkhq9Pt LOSmZiLvIxaCcCGJjh1rfmMHLIRAZHewX52o9CUtvZBM7TMJpSBlqPS/qX8T6cLM pWtSz9/Yzb7qB1tyLTJpnRDLPnrrc/1DkFrc3lFfl//bKdv9l3VyNKpiO1l4ziQe 8rj8ehjamyzrfzzGq/cFXWxf7OxFuxVizS2Po4KSB/yA/sg6UeaYfkmQ -----END CERTIFICATE-----Generated at Tue May 12 22:45:49 2026 by rpki-client