$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer (raw, json) Hash identifier: kQnA3BpLAs3z66WLaZzsSxVptgEtUffMDKvGaEwFRhA= Subject key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7FCFA1CB053D4446A0A0D39F44E8D9F6CAF7E622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:16:09 +0000 Certificate not after: Sun 02 May 2027 01:21:09 +0000 Subordinate resources: IP: 103.133.36.0/24 IP: 2001:df7:8f00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:cf:a1:cb:05:3d:44:46:a0:a0:d3:9f:44:e8:d9:f6:ca:f7:e6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:16:09 2026 GMT Not After : May 2 01:21:09 2027 GMT Subject: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:ca:cd:8d:dc:76:c7:80:61:ac:22:04:04: 75:75:12:01:5c:53:55:2b:33:61:9c:77:41:24:7f: ff:4e:e8:8b:35:36:15:84:08:de:1d:f3:e2:5f:f9: 7d:0a:9e:fc:37:15:6e:83:ed:d8:27:71:92:f3:0d: 37:44:aa:a7:23:db:77:01:49:f7:68:2c:28:12:8b: 29:25:49:60:9d:69:1d:f8:48:7d:22:b4:de:ce:55: 08:7b:14:80:12:57:86:8a:8d:14:e1:4b:69:9e:46: 67:21:cd:e1:fe:05:38:f4:12:dd:91:63:14:40:57: ed:9b:a6:73:20:d6:35:9e:07:57:3e:3c:9e:e1:fb: 4c:2c:1e:c5:8d:c1:f3:ff:09:8b:ae:86:d3:2b:0a: f9:c0:20:b9:2f:cd:97:4e:d8:b5:d5:83:aa:3d:c3: ec:b7:46:dc:26:d4:d2:d8:04:d8:6a:e5:e0:a0:17: e6:a7:28:89:6b:11:bf:7d:84:82:f7:48:1a:f2:d0: 8d:28:95:13:5b:60:db:bb:26:7b:9d:f8:20:fc:07: aa:16:01:a1:bb:43:d4:19:1d:11:98:da:6f:ea:d5: 33:bf:fe:b9:9a:a1:ec:b9:c8:70:c8:fd:f5:4f:7d: 26:39:49:61:e5:1d:68:c9:03:f5:f2:89:1d:70:5d: df:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.36.0/24 IPv6: 2001:df7:8f00::/48 Signature Algorithm: sha256WithRSAEncryption a5:8b:98:09:37:86:6c:63:26:86:d6:7b:f5:6f:7c:23:df:7a: 02:df:00:32:65:34:2b:cf:c0:8e:41:14:28:0f:0b:55:da:34: 3e:c9:73:07:4c:1a:d4:1a:34:2f:fb:68:0c:c0:4a:4a:a2:e0: e4:58:6a:27:2e:f0:ff:83:3b:00:70:98:77:ed:6e:b0:37:77: 26:14:90:b7:19:db:1a:94:94:ec:55:b4:fd:1b:52:b1:20:2f: 1f:8b:cd:67:33:c6:83:99:54:36:69:7e:78:e5:9e:00:6e:37: 59:b9:c4:e5:93:71:64:d8:6f:e3:38:32:a4:84:ba:48:61:d8: 7a:95:aa:59:aa:1c:d6:ff:6c:ff:4a:1c:91:18:6d:72:29:4e: 3d:81:2b:16:3c:1c:a6:c8:fe:be:29:9d:26:ca:90:20:dc:91: e0:96:86:bd:14:ba:43:c4:f3:59:fb:2b:d2:fc:13:1b:61:5b: 84:a5:7e:6a:f7:93:b3:44:80:61:b1:ec:e9:9f:ba:86:54:7b: 7d:d2:f8:39:3d:53:a9:1b:62:97:11:ff:35:6b:dc:da:a6:4b: 87:18:4b:b1:e7:da:78:33:c5:88:cc:cd:aa:04:79:34:61:1e: c4:ed:06:5b:c9:9e:7e:e7:be:7a:a4:d1:ef:c0:b3:1d:be:7d: fb:a8:56:0e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUf8+hywU9REagoNOfROjZ9sr35iIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTYwOVoX DTI3MDUwMjAxMjEwOVowMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFC MjVEMUY0QTczOTNFQUUyOUMzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLxys2N3HbHgGGsIgQEdXUSAVxTVSszYZx3QSR//07oizU2FYQI3h3z4l/5 fQqe/DcVboPt2CdxkvMNN0SqpyPbdwFJ92gsKBKLKSVJYJ1pHfhIfSK03s5VCHsU gBJXhoqNFOFLaZ5GZyHN4f4FOPQS3ZFjFEBX7ZumcyDWNZ4HVz48nuH7TCwexY3B 8/8Ji66G0ysK+cAguS/Nl07YtdWDqj3D7LdG3CbU0tgE2Grl4KAX5qcoiWsRv32E gvdIGvLQjSiVE1tg27sme534IPwHqhYBobtD1BkdEZjab+rVM7/+uZqh7LnIcMj9 9U99JjlJYeUdaMkD9fKJHXBd3zECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGNNnXv476pcBuGyXR9Kc5Pq4pw4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhmNmJmMzdjLWQ4YWQtNGUwMy1hMDZhLTQ0MDgxNTdjZjU3ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ZjZiZjM3 Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC82MzREOUQ3QkY4RUZBQTVD MDZFMUIyNUQxRjRBNzM5M0VBRTI5QzM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ4UkMA8EAgACMAkDBwAgAQ33jwAwDQYJKoZIhvcNAQELBQADggEBAKWLmAk3 hmxjJobWe/VvfCPfegLfADJlNCvPwI5BFCgPC1XaND7JcwdMGtQaNC/7aAzASkqi 4ORYaicu8P+DOwBwmHftbrA3dyYUkLcZ2xqUlOxVtP0bUrEgLx+LzWczxoOZVDZp fnjlngBuN1m5xOWTcWTYb+M4MqSEukhh2HqVqlmqHNb/bP9KHJEYbXIpTj2BKxY8 HKbI/r4pnSbKkCDckeCWhr0UukPE81n7K9L8ExthW4Slfmr3k7NEgGGx7OmfuoZU e33S+Dk9U6kbYpcR/zVr3NqmS4cYS7Hn2ngzxYjMzaoEeTRhHsTtBlvJnn7nvnqk 0e/Asx2+ffuoVg4= -----END CERTIFICATE-----Generated at Wed May 13 02:11:35 2026 by rpki-client