$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer File: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer (raw, json) Hash identifier: S1Ww5fILXC/QGPrzYGryFsUFhzwTdn/iDZHEjtBGaEM= Subject key identifier: 4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 30F4A245A14200A0776BC7E97585D314786A9BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:06:29 +0000 Certificate not after: Sun 02 May 2027 01:11:29 +0000 Subordinate resources: IP: 103.153.188.0/23 IP: 2001:df4:5680::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f4:a2:45:a1:42:00:a0:77:6b:c7:e9:75:85:d3:14:78:6a:9b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:06:29 2026 GMT Not After : May 2 01:11:29 2027 GMT Subject: CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:80:d3:91:07:cd:af:06:b3:51:23:18:80: d2:72:c7:a6:97:08:77:99:31:b7:98:2d:e5:99:c9: 68:d9:d7:84:59:3a:d8:e3:dd:de:31:ad:f8:9c:17: bb:e9:bb:3e:36:87:20:26:c0:5e:66:d2:3d:17:8a: ad:09:cb:1a:8d:9a:25:4f:36:0f:a0:65:5e:2a:56: 44:0f:7a:e8:55:ca:cd:e2:4a:57:93:81:5d:ed:85: 41:e1:8a:1e:10:a6:ff:30:b0:58:86:77:47:52:0f: ee:cf:0a:6a:2a:9f:8e:07:92:f4:38:aa:df:74:2b: 7b:a7:76:fd:ca:6d:96:f2:10:be:8e:be:25:5b:ed: 0d:4e:d9:6e:27:f7:1b:ff:d4:c3:db:f2:3d:e8:6d: 80:20:a8:1a:e7:27:ff:00:53:2c:2b:b9:ea:19:78: 04:f5:0c:88:1c:34:42:c0:f0:40:a1:17:9c:9f:b6: c0:5d:e2:81:50:16:1a:70:6f:2d:3e:b9:8a:cc:11: 50:62:59:85:38:93:2f:b7:21:15:22:5f:19:8e:9f: f0:39:40:ad:a1:33:01:3f:e0:6c:63:9d:55:61:98: c4:af:0c:b6:a0:af:58:4c:85:c6:17:3d:65:5a:06: e4:64:89:4e:27:1c:23:19:36:d6:d7:45:c5:3f:1e: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.188.0/23 IPv6: 2001:df4:5680::/48 Signature Algorithm: sha256WithRSAEncryption 9b:f4:27:b5:76:dd:1e:de:37:47:ad:ff:84:55:f8:55:70:8f: 8e:30:31:fd:09:1a:b2:78:38:f9:5f:f8:25:3c:13:ad:f8:f6: 0f:0b:a1:4b:ff:74:07:62:51:a8:70:57:79:db:ec:87:e5:56: 4b:cf:47:8d:e7:07:67:5e:b8:33:84:38:86:17:51:f5:76:36: c7:c5:ec:30:16:b5:54:80:0f:12:eb:cf:9f:a9:92:aa:bf:75: 2e:20:85:7d:1e:28:6f:e9:8a:a4:f9:00:d9:44:30:80:1e:28: 84:2e:5a:5c:76:57:cd:f3:a7:6c:c4:f3:e5:07:00:75:d7:7e: 0a:b0:d3:ef:8c:e4:24:8a:89:59:cd:d9:6b:db:e9:c9:8d:f4: 30:5e:fa:67:1c:af:a7:71:6d:55:36:e5:71:6b:16:4d:5e:c0: 86:77:50:b4:7f:e9:69:e2:16:61:ac:bd:14:fd:4f:27:6c:27: 02:43:45:c4:07:74:e8:d3:a3:45:33:05:77:d7:c5:20:d8:5a: 8a:33:ff:bb:3f:90:4d:1e:57:94:f7:48:e8:51:5c:b3:68:a4: a7:72:9c:f2:bd:bd:31:ef:3f:66:6e:c7:32:47:0d:aa:f9:57: 14:f7:0b:60:21:61:b0:89:c0:8f:fe:b1:0b:c9:ee:3e:04:14: cb:36:6e:6b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUMPSiRaFCAKB3a8fpdYXTFHhqm8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDYyOVoX DTI3MDUwMjAxMTEyOVowMzExMC8GA1UEAxMoNEY0MEJENzA5RDAzNDBCN0U4OENE RjlEODAxMDlBOTM1QzU3M0Q0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCVgNORB82vBrNRIxiA0nLHppcId5kxt5gt5ZnJaNnXhFk62OPd3jGt+JwX u+m7PjaHICbAXmbSPReKrQnLGo2aJU82D6BlXipWRA966FXKzeJKV5OBXe2FQeGK HhCm/zCwWIZ3R1IP7s8KaiqfjgeS9Diq33Qre6d2/cptlvIQvo6+JVvtDU7Zbif3 G//Uw9vyPehtgCCoGucn/wBTLCu56hl4BPUMiBw0QsDwQKEXnJ+2wF3igVAWGnBv LT65iswRUGJZhTiTL7chFSJfGY6f8DlAraEzAT/gbGOdVWGYxK8MtqCvWEyFxhc9 ZVoG5GSJTiccIxk21tdFxT8e2cMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE9AvXCdA0C36IzfnYAQmpNcVz1NMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwZjYyMTc2LWUxNjQtNDkyYy04YTcyLTk5YzFlMTYxYjJkZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MGY2MjE3 Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC80RjQwQkQ3MDlEMDM0MEI3 RTg4Q0RGOUQ4MDEwOUE5MzVDNTczRDRELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5m8MA8EAgACMAkDBwAgAQ30VoAwDQYJKoZIhvcNAQELBQADggEBAJv0J7V2 3R7eN0et/4RV+FVwj44wMf0JGrJ4OPlf+CU8E6349g8LoUv/dAdiUahwV3nb7Ifl VkvPR43nB2deuDOEOIYXUfV2NsfF7DAWtVSADxLrz5+pkqq/dS4ghX0eKG/piqT5 ANlEMIAeKIQuWlx2V83zp2zE8+UHAHXXfgqw0++M5CSKiVnN2Wvb6cmN9DBe+mcc r6dxbVU25XFrFk1ewIZ3ULR/6WniFmGsvRT9TydsJwJDRcQHdOjTo0UzBXfXxSDY Wooz/7s/kE0eV5T3SOhRXLNopKdynPK9vTHvP2ZuxzJHDar5VxT3C2AhYbCJwI/+ sQvJ7j4EFMs2bms= -----END CERTIFICATE-----Generated at Tue May 12 22:03:23 2026 by rpki-client