$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer (raw, json) Hash identifier: EsONuR8Utwf1laKjff82YhtFIVaN7sU65XZsMbInVhU= Subject key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1E30D019F5425A6D7968C5DFEB7EF7A548201CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:15 +0000 Certificate not after: Sun 02 May 2027 01:23:15 +0000 Subordinate resources: IP: 103.191.56.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:30:d0:19:f5:42:5a:6d:79:68:c5:df:eb:7e:f7:a5:48:20:1c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:15 2026 GMT Not After : May 2 01:23:15 2027 GMT Subject: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:29:36:9f:29:ba:3d:f7:d4:18:1f:54:a6: 95:3d:8c:99:a7:cd:0a:9f:e5:a5:d3:5a:ad:61:da: d4:b5:da:36:cd:d9:19:4f:a2:61:f1:47:47:f1:cb: f6:28:9e:5b:f6:92:b3:d6:5a:cd:2a:29:f7:75:50: 62:92:4d:52:1d:d9:ec:d5:cb:18:5e:8c:25:9e:9e: 35:29:86:ef:04:c3:dc:64:0e:95:01:5e:53:af:7f: 23:1f:80:89:ee:94:37:52:08:9a:3f:52:03:5c:8f: 8e:9e:af:47:f2:22:0c:47:6b:fc:5f:34:fb:28:2a: 1b:7b:e8:93:d6:1a:fd:0b:3d:14:ca:9a:5c:6b:2c: ad:0a:4a:44:14:70:24:bf:a6:4d:7b:4c:96:de:0a: a7:fc:0a:a2:19:10:9d:fd:18:f7:58:b2:31:a4:90: 7e:fb:ff:1c:3e:76:81:04:77:17:1b:33:14:91:5f: f6:00:df:7d:80:7e:a8:23:00:5d:30:f3:9f:21:aa: 6e:ec:9c:67:cb:9b:4f:61:e1:25:2e:c8:97:9a:17: ce:6c:68:d5:cf:75:a6:71:e3:ea:28:1a:7d:9f:1e: 28:b9:22:a5:74:55:e3:eb:cc:81:1b:58:82:49:10: a5:82:9a:b3:58:80:ba:20:4a:17:1a:3e:2d:01:96: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.56.0/23 Signature Algorithm: sha256WithRSAEncryption 70:5f:23:de:ab:0e:0c:0a:7e:e7:b8:54:9b:55:4c:46:61:36: 63:3a:84:c4:6d:d7:bf:c7:3a:2a:8a:bd:19:21:7c:a1:5e:03: 1d:d3:13:a0:16:b1:c4:cf:6c:11:4a:c5:cd:cb:31:85:b3:ff: b2:de:3f:8c:f5:50:9d:ac:44:f2:bc:bb:da:68:d7:77:3f:a7: 8c:97:73:5d:de:3e:df:0a:df:ed:0b:83:e7:dd:24:7c:3c:59: 2b:45:be:84:e0:1d:3a:04:22:90:2e:eb:c0:bd:1b:89:53:17: 52:f4:42:75:73:18:28:7b:a8:4d:f6:6c:85:fd:34:bb:ca:a8: b4:e3:01:59:54:ad:34:6a:13:81:33:c6:9b:ff:9a:a2:db:4c: 78:05:6b:31:7c:1e:eb:a6:c6:9b:42:8e:fd:3b:49:cd:9d:c1: 5a:fc:a1:14:a6:62:78:10:05:74:86:b2:c0:60:d0:9a:8f:c6: d2:38:30:2c:38:6d:f1:09:5c:4f:11:59:e3:d1:91:0c:9e:ad: 6f:bc:db:26:8b:68:6e:98:cd:2f:46:3d:f3:94:fd:0d:85:f5: e9:69:32:4d:ce:9b:50:f7:a5:8a:10:ae:91:c3:9e:dd:fe:38: 32:f8:93:5d:02:5a:9e:8a:2f:df:bf:a2:5d:cf:2e:db:a5:b2: 52:f1:c0:45 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHjDQGfVCWm15aMXf6373pUggHNkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTgxNVoX DTI3MDUwMjAxMjMxNVowMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZB OEI0Njc3QTQ0MDc2REE4OTBCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPfKTafKbo999QYH1SmlT2MmafNCp/lpdNarWHa1LXaNs3ZGU+iYfFHR/HL 9iieW/aSs9ZazSop93VQYpJNUh3Z7NXLGF6MJZ6eNSmG7wTD3GQOlQFeU69/Ix+A ie6UN1IImj9SA1yPjp6vR/IiDEdr/F80+ygqG3vok9Ya/Qs9FMqaXGssrQpKRBRw JL+mTXtMlt4Kp/wKohkQnf0Y91iyMaSQfvv/HD52gQR3FxszFJFf9gDffYB+qCMA XTDznyGqbuycZ8ubT2HhJS7Il5oXzmxo1c91pnHj6igafZ8eKLkipXRV4+vMgRtY gkkQpYKas1iAuiBKFxo+LQGWWwECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE0AitR2G8cuOt+otGd6RAdtqJCzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkyMjljYTUwLWU5NWMtNDViYi05YzMwLTYzZTEyYWY3YTVlMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MjI5Y2E1 MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC80RDAwOEFENDc2MUJDNzJF M0FERkE4QjQ2NzdBNDQwNzZEQTg5MEIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ784MA0GCSqGSIb3DQEBCwUAA4IBAQBwXyPeqw4MCn7nuFSbVUxGYTZjOoTE bde/xzoqir0ZIXyhXgMd0xOgFrHEz2wRSsXNyzGFs/+y3j+M9VCdrETyvLvaaNd3 P6eMl3Nd3j7fCt/tC4Pn3SR8PFkrRb6E4B06BCKQLuvAvRuJUxdS9EJ1cxgoe6hN 9myF/TS7yqi04wFZVK00ahOBM8ab/5qi20x4BWsxfB7rpsabQo79O0nNncFa/KEU pmJ4EAV0hrLAYNCaj8bSODAsOG3xCVxPEVnj0ZEMnq1vvNsmi2humM0vRj3zlP0N hfXpaTJNzptQ96WKEK6Rw57d/jgy+JNdAlqeii/fv6Jdzy7bpbJS8cBF -----END CERTIFICATE-----Generated at Tue May 12 22:45:40 2026 by rpki-client