$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer File: 4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer (raw, json) Hash identifier: AO+h4t0aZvOTZhU1GNPzpVuCwPQ1PtggKVceeYtYsN0= Subject key identifier: 4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22741C246E2899B48003F6242598B2DF1908A7CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:42 +0000 Certificate not after: Sun 02 May 2027 01:52:42 +0000 Subordinate resources: IP: 103.178.90.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:74:1c:24:6e:28:99:b4:80:03:f6:24:25:98:b2:df:19:08:a7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:47:42 2026 GMT Not After : May 2 01:52:42 2027 GMT Subject: CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:be:a8:03:3d:2c:cf:d4:26:92:31:5a:aa: 62:f0:1a:c6:21:f6:6b:88:a1:d9:d2:57:56:6d:8b: ce:3e:b1:2b:24:a3:4d:d4:93:b3:ba:7b:f0:60:27: 67:fd:71:45:1b:5b:45:16:13:ea:0b:77:88:66:96: 5e:57:2b:b4:00:75:4c:60:73:76:95:37:6f:8a:66: 7b:de:fb:f9:fe:33:e7:6a:4c:87:ca:68:ac:3c:00: 9c:cd:e2:53:f1:27:da:e1:6f:b4:7a:26:94:eb:11: 0e:3c:6d:5f:e8:03:b5:40:ce:d2:25:f3:d4:a3:4a: 64:5f:d3:26:03:0f:ce:53:93:a8:c7:a4:45:e9:ea: 1b:ca:e8:92:6f:91:df:c4:85:5c:99:65:b4:28:8d: 42:49:a0:71:19:f7:b9:c1:63:85:52:41:72:ab:03: 68:79:29:af:41:76:ad:6d:3d:98:fc:72:41:30:e4: 5c:c7:24:b2:da:28:44:37:e3:04:da:4b:b7:72:bb: 11:65:9e:af:48:38:ff:6d:c3:5a:58:c1:be:f4:2e: 16:bd:8a:e8:81:5f:3a:81:2a:a7:35:7b:c5:6c:7a: 49:23:f8:f1:44:66:cc:ea:d5:ed:8f:76:8d:76:3c: 50:11:47:c0:a1:f8:26:39:d1:42:17:d9:1b:cf:d6: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.90.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:f6:c1:d0:3a:92:86:11:35:16:4f:15:f3:30:e2:46:7e:7a: ba:6b:4d:ce:2e:6b:ca:f2:c4:de:7d:36:e8:3f:1b:d2:61:47: a6:b9:65:ff:25:45:02:31:fc:6f:e1:ca:37:18:2a:06:2f:ce: cd:a9:8c:c4:16:d1:ae:a7:81:3f:6f:b5:fa:9c:fb:79:07:40: e2:ae:ed:31:77:ec:8a:fe:58:3f:f9:0f:8f:9c:ba:f3:2f:f2: eb:8d:23:9b:35:6f:86:7c:75:34:75:92:70:a1:62:c6:8d:dd: ce:93:d1:0d:00:11:28:c5:8b:f8:c0:fd:92:af:37:62:7d:29: 6d:c8:c9:c9:34:81:13:f8:0d:0e:f0:fc:55:30:b5:7b:84:b6: f8:da:55:dc:11:61:3a:a6:3e:3f:b3:57:95:fc:57:e6:a6:34: be:b4:98:9c:0a:82:5a:3e:ed:7d:fe:6b:b2:9e:be:b2:06:76: 73:85:25:1b:93:e6:73:95:c4:83:96:77:07:c7:8c:5c:e0:ff: b7:e2:e7:a4:27:47:36:36:dc:4c:ca:11:65:74:2b:b7:2b:9f: 1f:1e:ad:5a:c2:b5:0f:77:4c:dd:b7:f0:cb:dc:84:d6:a7:fd: 2f:17:45:e0:ee:68:87:a0:c3:d9:63:e5:00:24:b9:b0:9a:55: e2:63:d8:e8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUInQcJG4ombSAA/YkJZiy3xkIp88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDc0MloX DTI3MDUwMjAxNTI0MlowMzExMC8GA1UEAxMoNEY1N0U3QzY0N0VEQzJBN0Y4OERB MkUwRUQyNzE4MzcwNUQxQkVBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjJvqgDPSzP1CaSMVqqYvAaxiH2a4ih2dJXVm2Lzj6xKySjTdSTs7p78GAn Z/1xRRtbRRYT6gt3iGaWXlcrtAB1TGBzdpU3b4pme977+f4z52pMh8porDwAnM3i U/En2uFvtHomlOsRDjxtX+gDtUDO0iXz1KNKZF/TJgMPzlOTqMekRenqG8rokm+R 38SFXJlltCiNQkmgcRn3ucFjhVJBcqsDaHkpr0F2rW09mPxyQTDkXMckstooRDfj BNpLt3K7EWWer0g4/23DWljBvvQuFr2K6IFfOoEqpzV7xWx6SSP48URmzOrV7Y92 jXY8UBFHwKH4JjnRQhfZG8/WSCsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE9X58ZH7cKn+I2i4O0nGDcF0b6oMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MxMzczOWUxLWI1ZGItNDczNC04MzhhLWIwYjU4MGJlYjlmMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMTM3Mzll MS1iNWRiLTQ3MzQtODM4YS1iMGI1ODBiZWI5ZjMvMC80RjU3RTdDNjQ3RURDMkE3 Rjg4REEyRTBFRDI3MTgzNzA1RDFCRUE4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7JaMA0GCSqGSIb3DQEBCwUAA4IBAQB99sHQOpKGETUWTxXzMOJGfnq6a03O LmvK8sTefTboPxvSYUemuWX/JUUCMfxv4co3GCoGL87NqYzEFtGup4E/b7X6nPt5 B0Diru0xd+yK/lg/+Q+PnLrzL/LrjSObNW+GfHU0dZJwoWLGjd3Ok9ENABEoxYv4 wP2SrzdifSltyMnJNIET+A0O8PxVMLV7hLb42lXcEWE6pj4/s1eV/FfmpjS+tJic CoJaPu19/muynr6yBnZzhSUbk+ZzlcSDlncHx4xc4P+34uekJ0c2NtxMyhFldCu3 K58fHq1awrUPd0zdt/DL3ITWp/0vF0Xg7miHoMPZY+UAJLmwmlXiY9jo -----END CERTIFICATE-----Generated at Tue May 12 22:47:38 2026 by rpki-client