$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer File: 4DC2282186B6221A7A52575CE005F2B42354E4A6.cer (raw, json) Hash identifier: P2P6lThm8wbKhLQ8Q4QQ3Q8InD7xZZh6XtIVwgu6uxA= Subject key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 19EEFC2A23B9BC7946B8DE8E53FCF8844703FCDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:48 +0000 Certificate not after: Sun 02 May 2027 01:50:48 +0000 Subordinate resources: IP: 103.36.70.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ee:fc:2a:23:b9:bc:79:46:b8:de:8e:53:fc:f8:84:47:03:fc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:45:48 2026 GMT Not After : May 2 01:50:48 2027 GMT Subject: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:29:cf:6e:65:80:67:d4:65:c5:e7:b1:60: 8b:b5:c9:9e:06:1a:d3:50:9c:5e:ce:6d:76:43:5d: a7:fd:b1:29:a4:c2:ad:1d:f3:91:8d:eb:63:9c:52: ba:96:c1:53:83:ff:7d:2b:72:d8:4e:1a:c6:9d:7e: 76:b3:69:6d:84:dc:82:27:07:51:5a:78:74:74:1d: 1b:c2:a6:21:41:3a:f0:e3:4b:6a:01:47:65:a2:87: fc:e6:fb:81:09:94:03:ac:1c:d6:16:06:60:36:07: b3:b0:a2:4d:b4:4c:e9:b7:20:1b:8c:8b:b8:0f:f8: c5:9a:11:79:59:fe:4d:88:3c:bb:6f:6f:07:ac:3f: 59:1e:a0:a4:90:f6:db:16:77:60:87:bb:90:30:6b: 60:64:1b:b3:12:e6:11:4a:bb:c0:e3:9f:81:82:05: 5b:63:03:98:e2:e7:e1:55:d5:6a:c2:38:f9:de:67: 90:6c:bd:22:b4:1f:b1:ee:88:a9:01:94:72:fe:78: eb:8e:0f:e1:0c:0b:d5:2e:92:d1:82:be:54:f1:fa: 17:83:d2:62:9a:45:91:26:32:b2:e0:dd:46:fe:b8: e3:ff:9e:43:55:ea:c2:b3:f3:c6:95:8e:de:17:08: 8a:0b:74:76:ef:71:5b:92:7e:ee:19:97:38:1f:4e: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.70.0/24 Signature Algorithm: sha256WithRSAEncryption 85:0c:7f:2f:92:38:39:f4:78:8a:52:28:9b:c8:f3:b9:f7:e0: 54:93:5c:1a:77:20:4d:52:e3:ea:40:a9:ce:e1:3e:7f:1d:49: 8f:c8:88:c7:fa:19:8d:f1:83:72:9f:6f:4b:2f:9a:7e:67:a0: 05:fc:72:82:2c:76:ed:b8:02:2c:47:72:12:02:ed:88:e0:2d: 59:cb:7a:b1:6b:08:ed:c6:f3:3b:bd:78:8d:b8:fa:9b:f7:f5: c4:1d:c9:61:72:32:08:7b:56:01:9b:85:d6:2f:dd:54:b9:95: dd:e9:e7:87:ef:0e:1e:f5:47:2f:85:cd:06:8f:a9:e7:d8:c7: 4f:4b:53:58:c4:6b:2a:00:ed:5f:f6:17:98:51:1b:68:0a:48: 58:bb:c2:69:86:9f:be:6c:f5:58:30:67:42:8a:74:ea:e7:8f: a7:c7:1a:8f:69:bc:73:4a:29:40:a7:a4:25:34:fa:b3:a5:d8: 0a:be:ff:14:3d:3b:6a:2b:75:7a:7a:08:34:28:93:b6:5a:98: 18:41:c6:f7:8d:4a:ce:52:a0:1c:fb:ae:4f:24:e9:0f:73:f5: 81:88:69:9a:33:1d:04:50:b6:d6:78:a1:f1:f0:fc:3f:03:e3: fd:f2:c7:02:8b:03:1b:ec:83:88:9f:5f:d3:c0:83:d0:9c:1b: 19:35:48:e6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGe78KiO5vHlGuN6OU/z4hEcD/NowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDU0OFoX DTI3MDUwMjAxNTA0OFowMzExMC8GA1UEAxMoNERDMjI4MjE4NkI2MjIxQTdBNTI1 NzVDRTAwNUYyQjQyMzU0RTRBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN01Kc9uZYBn1GXF57Fgi7XJngYa01CcXs5tdkNdp/2xKaTCrR3zkY3rY5xS upbBU4P/fSty2E4axp1+drNpbYTcgicHUVp4dHQdG8KmIUE68ONLagFHZaKH/Ob7 gQmUA6wc1hYGYDYHs7CiTbRM6bcgG4yLuA/4xZoReVn+TYg8u29vB6w/WR6gpJD2 2xZ3YIe7kDBrYGQbsxLmEUq7wOOfgYIFW2MDmOLn4VXVasI4+d5nkGy9IrQfse6I qQGUcv54644P4QwL1S6S0YK+VPH6F4PSYppFkSYysuDdRv644/+eQ1XqwrPzxpWO 3hcIigt0du9xW5J+7hmXOB9OylECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE3CKCGGtiIaelJXXOAF8rQjVOSmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JlMTFlOThmLWY1NGUtNDYwYi04OGYzLWJmOTFlMDQ0M2U5MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZTExZTk4 Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC80REMyMjgyMTg2QjYyMjFB N0E1MjU3NUNFMDA1RjJCNDIzNTRFNEE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZyRGMA0GCSqGSIb3DQEBCwUAA4IBAQCFDH8vkjg59HiKUiibyPO59+BUk1wa dyBNUuPqQKnO4T5/HUmPyIjH+hmN8YNyn29LL5p+Z6AF/HKCLHbtuAIsR3ISAu2I 4C1Zy3qxawjtxvM7vXiNuPqb9/XEHclhcjIIe1YBm4XWL91UuZXd6eeH7w4e9Ucv hc0Gj6nn2MdPS1NYxGsqAO1f9heYURtoCkhYu8Jphp++bPVYMGdCinTq54+nxxqP abxzSilAp6QlNPqzpdgKvv8UPTtqK3V6egg0KJO2WpgYQcb3jUrOUqAc+65PJOkP c/WBiGmaMx0EULbWeKHx8Pw/A+P98scCiwMb7IOIn1/TwIPQnBsZNUjm -----END CERTIFICATE-----Generated at Tue May 12 22:03:37 2026 by rpki-client