$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer (raw, json) Hash identifier: leuCwPbCgpGVOpexz8grFX38CWWcxOeudAzLqEQfvF0= Subject key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 64843891E1C40F822D2A216FE4ED47D98D36ADBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:09:24 +0000 Certificate not after: Sun 02 May 2027 00:14:24 +0000 Subordinate resources: IP: 103.118.124.0/22 IP: 2403:31c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:84:38:91:e1:c4:0f:82:2d:2a:21:6f:e4:ed:47:d9:8d:36:ad:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:09:24 2026 GMT Not After : May 2 00:14:24 2027 GMT Subject: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:81:22:dd:6c:7c:05:e7:02:3b:c6:24:e3: 63:c6:11:58:e7:0e:67:83:8f:e2:ed:b8:f6:74:9d: 51:ea:0d:b6:bd:e2:09:c7:c5:68:24:06:64:b7:78: 52:bd:ab:6a:a1:61:d3:c7:ad:84:1c:7f:ff:ab:3e: fd:e4:fa:5b:fd:3a:24:25:cb:8d:06:87:26:ba:e8: d6:34:e3:fc:20:8d:30:03:ad:bc:cc:08:ae:3e:15: 0d:53:b5:51:6d:7f:d3:a4:f4:09:74:07:17:44:df: 33:73:6f:d1:7d:8b:8b:ab:04:55:2b:44:ea:7f:22: ff:50:dd:5f:9b:e1:5f:59:88:dd:25:ae:92:9f:b5: 09:3b:20:9a:30:17:6b:a8:b3:91:4f:2f:5c:a3:4b: 42:da:ca:ed:55:cf:ee:23:a6:b6:c9:a4:79:b0:6b: 66:79:02:62:00:06:02:5d:14:b0:77:0c:c7:b4:9e: da:67:65:1d:72:ac:b1:7a:0c:37:e6:d3:c6:37:bb: 9d:98:1d:05:13:3c:f0:e3:da:53:87:67:5b:72:a7: 63:9d:e5:a1:1f:11:94:ea:16:2d:0a:c5:29:16:57: fd:e8:ce:19:d6:94:5a:3b:d9:9d:8b:4a:d5:89:a1: 4e:fd:0e:8e:79:a7:fd:54:20:a1:3d:81:be:24:7f: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.124.0/22 IPv6: 2403:31c0::/32 Signature Algorithm: sha256WithRSAEncryption 26:fc:8e:53:8e:8f:8f:62:b5:2b:da:7f:ad:d4:96:14:c1:76: b1:43:14:d2:83:12:d0:95:57:ba:2a:86:59:61:1f:b7:17:f2: fb:05:a7:c5:71:ce:56:d1:a1:16:13:64:fb:ed:9e:c2:84:18: 9d:fc:bf:cc:e9:fd:80:73:39:41:84:4d:a8:e6:90:c7:41:32: 04:23:37:a0:a2:5f:e0:bc:2e:e0:59:d2:38:f9:9d:79:52:d1: b4:bd:eb:28:88:f4:c3:04:d7:56:54:2c:f9:12:92:83:37:35: ba:b5:53:79:44:f9:56:07:49:14:1d:f5:d5:d0:e5:2b:e5:1a: 44:3a:c9:07:8d:d9:56:0f:87:a6:92:1b:20:44:cb:57:8b:67: 27:99:92:a2:ab:a9:19:9f:01:90:69:80:53:fb:62:ec:f2:41: 57:3b:d5:0c:4c:f2:36:6f:f7:43:86:c0:0b:32:27:39:3a:0c: 0b:14:52:e4:dc:dd:3c:84:cd:19:be:fe:a7:3a:11:ea:b7:59: 30:a0:75:ec:b7:4d:6c:8b:30:a8:38:96:73:98:46:19:bf:d1: 93:41:87:c3:a7:be:7f:dd:dc:28:3e:fd:b4:eb:6b:c2:75:50: 7a:92:fc:cb:db:e5:b8:03:1a:24:44:28:ea:96:37:48:42:3e: 6e:c5:b9:61 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUZIQ4keHED4ItKiFv5O1H2Y02rbowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDkyNFoX DTI3MDUwMjAwMTQyNFowMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRF MjNBOTc5OTM1RjdDMkUxNjhFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLNgSLdbHwF5wI7xiTjY8YRWOcOZ4OP4u249nSdUeoNtr3iCcfFaCQGZLd4 Ur2raqFh08ethBx//6s+/eT6W/06JCXLjQaHJrro1jTj/CCNMAOtvMwIrj4VDVO1 UW1/06T0CXQHF0TfM3Nv0X2Li6sEVStE6n8i/1DdX5vhX1mI3SWukp+1CTsgmjAX a6izkU8vXKNLQtrK7VXP7iOmtsmkebBrZnkCYgAGAl0UsHcMx7Se2mdlHXKssXoM N+bTxje7nZgdBRM88OPaU4dnW3KnY53loR8RlOoWLQrFKRZX/ejOGdaUWjvZnYtK 1YmhTv0Ojnmn/VQgoT2BviR/8eUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE1zr3gTo5ar173iOpeZNffC4WjnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJkMmE1YjUxLWJjMDAtNGQ2Yi04NzYxLWM3ZDBkM2Y2ZGUxMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZDJhNWI1 MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC80RDczQUY3ODEzQTM5NkFC RDdCREUyM0E5Nzk5MzVGN0MyRTE2OEU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3Z8MA0EAgACMAcDBQAkAzHAMA0GCSqGSIb3DQEBCwUAA4IBAQAm/I5Tjo+P YrUr2n+t1JYUwXaxQxTSgxLQlVe6KoZZYR+3F/L7BafFcc5W0aEWE2T77Z7ChBid /L/M6f2AczlBhE2o5pDHQTIEIzegol/gvC7gWdI4+Z15UtG0vesoiPTDBNdWVCz5 EpKDNzW6tVN5RPlWB0kUHfXV0OUr5RpEOskHjdlWD4emkhsgRMtXi2cnmZKiq6kZ nwGQaYBT+2Ls8kFXO9UMTPI2b/dDhsALMic5OgwLFFLk3N08hM0Zvv6nOhHqt1kw oHXst01sizCoOJZzmEYZv9GTQYfDp75/3dwoPv2062vCdVB6kvzL2+W4AxokRCjq ljdIQj5uxblh -----END CERTIFICATE-----Generated at Tue May 12 22:02:32 2026 by rpki-client