$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer File: 4E4DE13CED941803F067EA0F530875538E7F1AA8.cer (raw, json) Hash identifier: moJTqs0kqpReZG71roDyyketiikir+eZwW+4IuxGODU= Subject key identifier: 4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 303670CFF4C66DFD765BE6006E4E0DE3572A245E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:00 +0000 Certificate not after: Sun 02 May 2027 00:57:00 +0000 Subordinate resources: IP: 103.137.32.0/23 IP: 2001:df0:1780::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:36:70:cf:f4:c6:6d:fd:76:5b:e6:00:6e:4e:0d:e3:57:2a:24:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:00 2026 GMT Not After : May 2 00:57:00 2027 GMT Subject: CN=4E4DE13CED941803F067EA0F530875538E7F1AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d0:13:64:6d:67:76:39:64:a8:06:88:50:47: f0:df:08:b5:14:8b:56:8f:5a:2e:ed:f3:48:57:3f: 6c:25:9d:56:55:cc:eb:d5:62:5e:5d:cb:9b:a2:41: 76:39:af:1e:bb:e0:ce:4e:f1:b3:8f:c8:6e:cc:a6: d8:4f:0b:9d:f7:d1:4c:58:63:a5:cb:0a:43:ac:72: 95:d2:44:4a:5b:55:e9:30:fa:e4:54:9f:68:ac:5e: a6:68:90:f3:89:b5:df:08:a8:1b:a6:94:53:f3:c1: b0:9a:45:d6:55:30:92:a3:03:15:9b:d5:bf:95:b2: e0:c1:d5:c9:b4:3c:75:dd:22:9d:bf:1c:57:97:8b: 19:13:9b:40:b4:aa:90:67:ec:fb:50:aa:23:ac:70: 0d:60:1f:42:7f:c7:42:51:2e:d1:f0:f7:e9:b5:53: 58:bd:87:b9:3e:27:83:05:26:1b:4e:0b:ff:f1:7b: ec:20:08:b6:3a:d2:d9:d9:67:ec:83:9d:3b:21:14: b6:04:c0:94:fa:79:4e:ae:a0:be:67:cb:74:7b:51: 69:5a:3b:e8:d9:f2:06:cf:5c:16:d6:27:7b:36:1d: 47:90:32:16:65:8e:0d:a6:46:ec:6a:71:cf:9f:c1: d3:89:54:12:d5:b5:7b:5f:37:d5:04:1e:1f:49:71: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.32.0/23 IPv6: 2001:df0:1780::/48 Signature Algorithm: sha256WithRSAEncryption 48:27:8b:6c:db:56:27:22:69:28:d4:68:a5:96:bf:1d:52:23: 83:75:b6:04:ec:30:a4:5f:5a:83:c3:c5:13:c2:45:cb:2b:fd: 57:df:9e:b9:98:0f:e4:c7:72:61:0c:3d:c6:53:95:c9:ec:5e: df:59:aa:06:d7:39:80:ed:d9:6a:d8:a0:e8:91:8a:60:27:b9: 23:39:8e:bf:ed:04:0e:e9:cd:27:71:a1:7e:ad:fe:b3:c1:42: 75:8b:50:a8:78:f6:76:e8:d5:b1:85:cc:e5:4c:98:79:e8:3b: c4:be:16:82:d0:2a:d9:d6:46:62:17:6a:9e:fe:57:61:b6:dd: cb:b7:39:a8:72:9c:d9:34:fd:c3:6b:fa:71:d2:11:ad:86:f3: aa:62:61:65:99:fb:15:63:21:14:20:e2:53:dc:be:68:b4:47: 01:fd:f5:d4:5d:ec:a8:c2:e2:44:df:d3:70:84:83:00:bc:e3: dc:5e:21:2a:6a:98:90:c3:82:56:e2:99:ab:85:21:dd:27:6f: 40:78:a7:15:9a:8b:68:1e:5a:cf:d0:f3:7f:86:c4:00:52:b9: 28:a9:a8:51:a7:b2:47:81:b1:9e:ed:69:48:bf:d1:bd:69:e8: 4d:62:b6:18:b3:02:d5:0b:66:3b:50:b8:cc:97:74:51:15:74: ac:e0:27:e5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUMDZwz/TGbf12W+YAbk4N41cqJF4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTIwMFoX DTI3MDUwMjAwNTcwMFowMzExMC8GA1UEAxMoNEU0REUxM0NFRDk0MTgwM0YwNjdF QTBGNTMwODc1NTM4RTdGMUFBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLQE2RtZ3Y5ZKgGiFBH8N8ItRSLVo9aLu3zSFc/bCWdVlXM69ViXl3Lm6JB djmvHrvgzk7xs4/Ibsym2E8LnffRTFhjpcsKQ6xyldJESltV6TD65FSfaKxepmiQ 84m13wioG6aUU/PBsJpF1lUwkqMDFZvVv5Wy4MHVybQ8dd0inb8cV5eLGRObQLSq kGfs+1CqI6xwDWAfQn/HQlEu0fD36bVTWL2HuT4ngwUmG04L//F77CAItjrS2dln 7IOdOyEUtgTAlPp5Tq6gvmfLdHtRaVo76NnyBs9cFtYnezYdR5AyFmWODaZG7Gpx z5/B04lUEtW1e1831QQeH0lxCtUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE5N4TztlBgD8GfqD1MIdVOOfxqoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZkNGFhN2VmLTZkOTUtNGViYS1hMzU0LWZkNDE4NThjMWJhNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZDRhYTdl Zi02ZDk1LTRlYmEtYTM1NC1mZDQxODU4YzFiYTcvMC80RTRERTEzQ0VEOTQxODAz RjA2N0VBMEY1MzA4NzU1MzhFN0YxQUE4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ4kgMA8EAgACMAkDBwAgAQ3wF4AwDQYJKoZIhvcNAQELBQADggEBAEgni2zb ViciaSjUaKWWvx1SI4N1tgTsMKRfWoPDxRPCRcsr/VffnrmYD+THcmEMPcZTlcns Xt9ZqgbXOYDt2WrYoOiRimAnuSM5jr/tBA7pzSdxoX6t/rPBQnWLUKh49nbo1bGF zOVMmHnoO8S+FoLQKtnWRmIXap7+V2G23cu3OahynNk0/cNr+nHSEa2G86piYWWZ +xVjIRQg4lPcvmi0RwH99dRd7KjC4kTf03CEgwC849xeISpqmJDDglbimauFId0n b0B4pxWai2geWs/Q83+GxABSuSipqFGnskeBsZ7taUi/0b1p6E1ithizAtULZjtQ uMyXdFEVdKzgJ+U= -----END CERTIFICATE-----Generated at Tue May 12 22:32:00 2026 by rpki-client