$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer File: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer (raw, json) Hash identifier: 9POCJzCbApjWKvPLihXL5crqQ5NLzLrjLM5vJ+05INo= Subject key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45727CD8BB646A89A44D04269A3F2F9DF8D06661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:52 +0000 Certificate not after: Sun 02 May 2027 01:59:52 +0000 Subordinate resources: IP: 103.87.184.0/22 IP: 103.206.186.0/24 IP: 123.176.121.0 -- 123.176.127.255 IP: 2400:d740::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:72:7c:d8:bb:64:6a:89:a4:4d:04:26:9a:3f:2f:9d:f8:d0:66:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:54:52 2026 GMT Not After : May 2 01:59:52 2027 GMT Subject: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:2f:98:d6:31:37:3a:5c:7b:a8:cd:c2:8c: 0e:f8:ef:47:e2:bc:69:89:76:de:72:b6:e9:05:d3: 05:fb:6d:93:b9:dd:93:7f:69:1c:28:b8:7b:41:dd: fd:c8:e7:1f:f9:b0:0b:cc:e8:6e:d0:be:7a:dd:88: 95:a2:6c:b8:2d:db:f1:95:5c:ba:ae:30:55:4e:bf: 1d:63:b5:b4:b2:ff:f7:23:a7:67:59:16:6f:ea:de: 12:3f:87:92:74:f6:ad:00:ab:dc:b3:c4:3c:87:c6: 1e:76:11:2d:ff:9a:16:5e:22:dd:a8:1e:5b:39:f0: b2:20:b2:f8:96:a8:d2:7a:80:8e:5e:cb:96:d7:5e: 32:ca:ba:0f:36:ed:67:dc:f3:fa:08:96:b9:ca:e5: 0b:19:d7:b4:e9:ba:24:c5:cd:07:7d:d0:32:b9:c5: 69:a9:b4:72:bd:e4:6d:35:08:ee:ce:b3:e3:62:75: bf:84:01:60:83:78:94:9b:1a:2a:c7:4e:7c:57:aa: 16:04:fd:ce:7d:36:6f:16:06:7f:fc:0e:f5:f7:eb: 4f:66:cf:0b:77:0f:61:aa:7f:57:90:c7:8f:d4:50: c0:11:3c:02:3d:e5:40:fb:ef:ff:bc:a3:f8:6f:51: 88:f2:59:0d:19:78:ba:de:b6:d6:09:01:ae:eb:ae: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.184.0/22 103.206.186.0/24 123.176.121.0-123.176.127.255 IPv6: 2400:d740::/32 Signature Algorithm: sha256WithRSAEncryption 86:0d:56:08:a2:23:d8:ba:1a:63:b5:b8:0f:b6:81:db:2f:9d: 60:62:c7:fe:50:01:ee:ba:ec:f0:67:f4:3b:6d:ad:10:97:cc: 7b:66:db:f1:2e:ee:0b:74:76:d0:3c:eb:04:7f:da:07:77:79: 6f:d2:2a:99:3b:38:b6:57:58:44:ba:aa:0c:5f:b6:b0:bb:f6: d9:6a:40:1e:bb:95:28:07:b2:15:e8:d5:e9:46:a9:ce:84:42: 0e:84:f7:6f:0c:6e:b6:c4:7f:c2:db:d1:d9:86:80:25:9b:4c: 4d:da:f6:74:02:2e:ee:a2:2b:a7:86:19:10:50:34:ba:aa:5b: a3:b0:a4:f9:f5:b0:2b:ab:90:cf:5b:02:63:dc:05:b3:05:e0: 7b:2e:2a:39:91:b9:6b:d4:0f:28:f3:10:bf:7c:2a:6a:45:90: ab:62:07:8b:5a:e4:2b:f0:24:b9:55:9b:76:3c:73:91:73:f9: 3e:c6:e8:e5:8a:65:4f:ec:5a:fd:82:c4:9a:78:8e:1c:4a:c4: f4:48:77:98:1d:68:73:eb:5d:b6:e8:59:ad:3b:b9:e8:91:40: 91:21:78:d4:bc:1a:b4:74:35:42:e2:41:26:ff:59:07:b3:6b: 27:af:ef:ee:b6:10:0b:e8:f3:4f:54:39:09:34:c0:db:d5:7c: 89:9e:30:4f -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIURXJ82LtkaomkTQQmmj8vnfjQZmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTQ1MloX DTI3MDUwMjAxNTk1MlowMzExMC8GA1UEAxMoNEM4Mzk1MEVCOThBOEIxRjEyNDEw OUJERTA5MTAyQTJFQkMyOEFDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoqL5jWMTc6XHuozcKMDvjvR+K8aYl23nK26QXTBfttk7ndk39pHCi4e0Hd /cjnH/mwC8zobtC+et2IlaJsuC3b8ZVcuq4wVU6/HWO1tLL/9yOnZ1kWb+reEj+H knT2rQCr3LPEPIfGHnYRLf+aFl4i3ageWznwsiCy+Jao0nqAjl7LltdeMsq6Dzbt Z9zz+giWucrlCxnXtOm6JMXNB33QMrnFaam0cr3kbTUI7s6z42J1v4QBYIN4lJsa KsdOfFeqFgT9zn02bxYGf/wO9ffrT2bPC3cPYap/V5DHj9RQwBE8Aj3lQPvv/7yj +G9RiPJZDRl4ut621gkBruuuwK8CAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEyDlQ65iosfEkEJveCRAqLrworMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NjOTc2ZWM1LWIwNWEtNDgwZi04NmRhLWQ1NTdmODRhMjM2NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYzk3NmVj NS1iMDVhLTQ4MGYtODZkYS1kNTU3Zjg0YTIzNjQvMC80QzgzOTUwRUI5OEE4QjFG MTI0MTA5QkRFMDkxMDJBMkVCQzI4QUNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAa AwQCZ1e4AwQAZ866MAwDBAB7sHkDBAd7sAAwDQQCAAIwBwMFACQA10AwDQYJKoZI hvcNAQELBQADggEBAIYNVgiiI9i6GmO1uA+2gdsvnWBix/5QAe667PBn9DttrRCX zHtm2/Eu7gt0dtA86wR/2gd3eW/SKpk7OLZXWES6qgxftrC79tlqQB67lSgHshXo 1elGqc6EQg6E928MbrbEf8Lb0dmGgCWbTE3a9nQCLu6iK6eGGRBQNLqqW6OwpPn1 sCurkM9bAmPcBbMF4HsuKjmRuWvUDyjzEL98KmpFkKtiB4ta5CvwJLlVm3Y8c5Fz +T7G6OWKZU/sWv2CxJp4jhxKxPRId5gdaHPrXbboWa07ueiRQJEheNS8GrR0NULi QSb/WQezayev7+62EAvo809UOQk0wNvVfImeME8= -----END CERTIFICATE-----Generated at Tue May 12 22:33:04 2026 by rpki-client