$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer (raw, json) Hash identifier: 5CYMh60aA+RNAi9UzWh5p/7idRpDECb8N8ep09LNe8A= Subject key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 24682E4BBED1986AB5FACBC0BDB60C35F51D831B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:15:53 +0000 Certificate not after: Sun 02 May 2027 01:20:53 +0000 Subordinate resources: IP: 103.71.160.0/22 IP: 2406:9880::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:68:2e:4b:be:d1:98:6a:b5:fa:cb:c0:bd:b6:0c:35:f5:1d:83:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:15:53 2026 GMT Not After : May 2 01:20:53 2027 GMT Subject: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:3d:b6:32:32:e4:8d:99:d9:7c:94:6d:af: 5d:2c:51:3e:1f:c1:36:1c:c4:9e:04:49:97:88:05: 8a:1c:33:cb:23:55:71:a1:25:ac:58:fa:c9:a3:07: 00:f4:2f:e8:5e:f7:04:47:7a:2f:f3:ca:2d:96:3c: 45:7c:9d:d2:60:ef:e6:bb:44:ee:1b:e2:d2:54:c1: 0b:a2:ff:78:5b:39:b7:f3:30:5f:9f:02:27:2a:5c: 10:4a:f2:34:19:4e:e2:35:52:5d:80:7e:72:32:85: 4f:3d:09:84:c3:db:4b:83:e3:23:58:39:e6:c2:a0: 40:d3:14:ce:46:2b:7b:4c:00:62:5b:a9:46:f9:8b: 4d:eb:d8:65:af:89:3e:0f:c7:1b:8a:14:da:e3:5d: ef:f6:bd:ab:68:bc:f3:b9:35:12:53:f7:5b:0f:63: a1:99:60:24:b4:f7:6c:8f:92:55:89:16:ef:17:7e: 96:3d:92:43:21:c4:ac:f5:75:06:44:50:97:49:73: c3:f8:38:ec:17:98:af:ae:0b:3c:a7:41:85:cb:70: 20:13:bb:14:c9:cf:f7:fa:e9:28:1c:68:0b:8e:33: 0d:03:a3:cb:f8:69:d0:d5:10:21:2a:48:ed:d2:42: 58:e2:c2:de:7b:93:f2:54:db:b1:f6:2c:d5:57:03: 22:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.160.0/22 IPv6: 2406:9880::/32 Signature Algorithm: sha256WithRSAEncryption 96:b3:bd:f6:00:f6:a1:a0:86:54:6b:fe:a6:0e:62:08:23:50: a9:8b:18:e4:c6:31:62:36:75:c2:27:f0:13:2d:e1:63:ef:07: 0d:89:93:be:b9:f0:09:b0:96:c7:d7:da:94:03:93:5a:76:81: a1:0f:d5:a1:3f:fe:31:43:5a:36:79:9e:d2:3e:5c:af:d9:dc: 2e:10:e4:65:ad:c1:d8:4d:e1:c3:74:e3:c5:0a:3e:cc:47:74: 15:25:b0:ae:c3:79:da:be:0a:8c:e7:a2:52:ed:93:72:1f:2c: f3:45:61:54:7d:b4:a5:b1:52:5a:2d:1b:51:9b:c3:12:6a:25: 07:f5:04:81:ea:b1:5a:2f:01:2b:be:f7:c3:f1:b7:43:97:bb: 3c:94:9e:45:60:97:1e:e2:be:71:9a:7a:c0:34:da:cf:db:8d: 03:12:31:27:e6:14:71:e3:17:94:89:e1:76:ba:2b:95:53:49: 48:68:32:c1:f1:86:d6:62:eb:90:3a:e7:24:57:7d:4f:59:bc: 27:c2:a1:9f:64:1e:0e:01:63:35:1c:ab:0e:d7:2c:22:b0:c7: 82:35:89:73:9f:a4:36:e9:c5:89:ae:c5:d8:f6:6c:30:cb:41: e3:dc:73:6e:12:e2:56:ee:9e:88:2a:f7:59:cc:71:e2:a0:77: 3f:04:dd:06 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUJGguS77RmGq1+svAvbYMNfUdgxswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTU1M1oX DTI3MDUwMjAxMjA1M1owMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMy RUYyRUY3NDJDOUJEQURDRTMwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9lPbYyMuSNmdl8lG2vXSxRPh/BNhzEngRJl4gFihwzyyNVcaElrFj6yaMH APQv6F73BEd6L/PKLZY8RXyd0mDv5rtE7hvi0lTBC6L/eFs5t/MwX58CJypcEEry NBlO4jVSXYB+cjKFTz0JhMPbS4PjI1g55sKgQNMUzkYre0wAYlupRvmLTevYZa+J Pg/HG4oU2uNd7/a9q2i887k1ElP3Ww9joZlgJLT3bI+SVYkW7xd+lj2SQyHErPV1 BkRQl0lzw/g47BeYr64LPKdBhctwIBO7FMnP9/rpKBxoC44zDQOjy/hp0NUQISpI 7dJCWOLC3nuT8lTbsfYs1VcDIrECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE3OtWC8Qo2+xOwu8u90LJva3OMKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhlYmE4NjdhLThmODQtNDY2My1iMzIwLWY0MzUyODJiOWZmZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ZWJhODY3 YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC80RENFQjU2MEJDNDI4REJF QzRFQzJFRjJFRjc0MkM5QkRBRENFMzBBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ0egMA0EAgACMAcDBQAkBpiAMA0GCSqGSIb3DQEBCwUAA4IBAQCWs732APah oIZUa/6mDmIII1CpixjkxjFiNnXCJ/ATLeFj7wcNiZO+ufAJsJbH19qUA5NadoGh D9WhP/4xQ1o2eZ7SPlyv2dwuEORlrcHYTeHDdOPFCj7MR3QVJbCuw3navgqM56JS 7ZNyHyzzRWFUfbSlsVJaLRtRm8MSaiUH9QSB6rFaLwErvvfD8bdDl7s8lJ5FYJce 4r5xmnrANNrP240DEjEn5hRx4xeUieF2uiuVU0lIaDLB8YbWYuuQOuckV31PWbwn wqGfZB4OAWM1HKsO1ywisMeCNYlzn6Q26cWJrsXY9mwwy0Hj3HNuEuJW7p6IKvdZ zHHioHc/BN0G -----END CERTIFICATE-----Generated at Tue May 12 22:10:14 2026 by rpki-client