$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer File: 4C87F894274B3B0E1928C39974942F14C8A8B54C.cer (raw, json) Hash identifier: gHLL6TNvjmkFqGYgVvDTw+hy+WRqYQZkjZ3HWaOVfis= Subject key identifier: 4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39406F32E706AABEBA094BD23661FC658A3CC274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:08 +0000 Certificate not after: Sun 02 May 2027 00:00:08 +0000 Subordinate resources: IP: 103.153.244.0/24 IP: 2001:df4:5e80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:40:6f:32:e7:06:aa:be:ba:09:4b:d2:36:61:fc:65:8a:3c:c2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:08 2026 GMT Not After : May 2 00:00:08 2027 GMT Subject: CN=4C87F894274B3B0E1928C39974942F14C8A8B54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:42:f8:10:4e:1c:aa:c1:72:31:ce:e6:d6: a8:be:0b:32:e9:0c:15:c9:86:4d:50:99:68:74:16: 5b:c0:72:84:db:4f:ab:9a:66:24:64:6e:1d:20:18: 2a:63:83:10:d6:e6:ac:92:88:60:a4:5d:b2:68:5e: 6a:0d:4e:26:87:21:ca:42:ee:05:48:16:51:de:68: 66:f8:e4:49:6e:69:5f:73:99:66:51:44:b7:f0:2d: 67:06:f2:ee:0d:f6:6e:21:92:9c:17:a7:28:57:90: 31:f4:a5:f6:ed:c1:2e:02:72:38:4e:1d:07:43:3e: 63:fc:f4:c9:e8:10:05:13:90:6b:a2:2d:c7:19:75: 96:2e:d0:a9:f5:8a:ec:8c:02:1d:59:6b:43:b0:1f: 6b:56:99:da:df:6d:bb:0d:ea:be:cb:90:c7:5e:70: 92:7e:a6:93:a0:71:76:80:6b:cf:0f:91:66:73:a0: df:c7:d2:08:e5:ea:59:c3:f6:1f:27:40:0e:5e:ce: bf:31:e1:2d:83:04:18:82:59:e2:49:ed:fc:a9:ab: a3:18:65:92:eb:e4:7d:12:be:92:17:d6:fb:cd:4a: 47:b1:d3:a2:e2:a5:f9:7c:03:d1:c2:a9:61:3a:df: 11:bd:8d:77:3c:44:97:3e:53:38:d0:4d:34:a0:76: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.244.0/24 IPv6: 2001:df4:5e80::/48 Signature Algorithm: sha256WithRSAEncryption 2b:e9:61:f9:4d:26:99:68:1b:ea:d3:e4:2c:fc:6e:d7:10:8b: 5f:17:3d:3c:96:d4:7d:24:be:06:65:95:ea:c7:b1:a1:e7:03: 8e:10:21:95:66:56:62:b4:5e:c3:b6:41:eb:4e:5b:03:1b:95: bc:d9:b8:21:98:c0:87:e7:89:9a:9e:05:c8:df:2a:d7:95:02: fb:e2:42:36:87:75:dc:40:28:b4:9c:8c:8f:df:d4:23:13:6d: 33:e8:49:0f:54:b3:61:4f:41:d6:b8:10:87:65:f8:81:f7:71: 04:23:dc:1a:48:0f:20:a9:1d:6f:a9:d4:9a:b3:01:7f:3b:45: 83:69:89:cb:3e:42:cb:94:96:0f:4a:22:ef:37:70:29:3f:73: 52:7d:dd:68:cc:e4:26:6e:de:6f:2a:2a:ac:72:7d:b2:b7:f5: 04:ab:f6:3b:ed:8a:0c:69:2b:90:a4:80:3a:cf:a7:08:55:6c: 10:ec:01:1a:fe:07:de:de:d6:e4:bd:9f:6c:42:17:a6:58:fd: 6b:57:eb:3c:7b:39:58:1e:d8:c0:54:1b:19:1c:73:a2:0f:df: 7c:33:6c:42:96:3b:5d:28:0b:2b:f3:04:e3:56:e5:53:7c:b9: 03:f2:bd:ee:d4:a0:82:e7:e3:26:37:d7:13:43:f4:ba:84:b8: b7:5d:41:89 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUOUBvMucGqr66CUvSNmH8ZYo8wnQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTUwOFoX DTI3MDUwMjAwMDAwOFowMzExMC8GA1UEAxMoNEM4N0Y4OTQyNzRCM0IwRTE5MjhD Mzk5NzQ5NDJGMTRDOEE4QjU0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLhQvgQThyqwXIxzubWqL4LMukMFcmGTVCZaHQWW8ByhNtPq5pmJGRuHSAY KmODENbmrJKIYKRdsmheag1OJochykLuBUgWUd5oZvjkSW5pX3OZZlFEt/AtZwby 7g32biGSnBenKFeQMfSl9u3BLgJyOE4dB0M+Y/z0yegQBROQa6Itxxl1li7QqfWK 7IwCHVlrQ7Afa1aZ2t9tuw3qvsuQx15wkn6mk6BxdoBrzw+RZnOg38fSCOXqWcP2 HydADl7OvzHhLYMEGIJZ4knt/KmroxhlkuvkfRK+khfW+81KR7HTouKl+XwD0cKp YTrfEb2NdzxElz5TONBNNKB2SOECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEyH+JQnSzsOGSjDmXSULxTIqLVMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE3ZTI2YWEzLTMwNzMtNDI3Ni1iZDc0LWFkODZmMDk5YzI1My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xN2UyNmFh My0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC80Qzg3Rjg5NDI3NEIzQjBF MTkyOEMzOTk3NDk0MkYxNEM4QThCNTRDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5n0MA8EAgACMAkDBwAgAQ30XoAwDQYJKoZIhvcNAQELBQADggEBACvpYflN JploG+rT5Cz8btcQi18XPTyW1H0kvgZllerHsaHnA44QIZVmVmK0XsO2QetOWwMb lbzZuCGYwIfniZqeBcjfKteVAvviQjaHddxAKLScjI/f1CMTbTPoSQ9Us2FPQda4 EIdl+IH3cQQj3BpIDyCpHW+p1JqzAX87RYNpics+QsuUlg9KIu83cCk/c1J93WjM 5CZu3m8qKqxyfbK39QSr9jvtigxpK5CkgDrPpwhVbBDsARr+B97e1uS9n2xCF6ZY /WtX6zx7OVge2MBUGxkcc6IP33wzbEKWO10oCyvzBONW5VN8uQPyve7UoILn4yY3 1xND9LqEuLddQYk= -----END CERTIFICATE-----Generated at Tue May 12 22:49:53 2026 by rpki-client