$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer (raw, json) Hash identifier: Bp1HemIZgpOwPNrztFsj738xHSJaRxYeC2ArAfh9rmA= Subject key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 13C3382C2EE836BC7A93EEE2F93FC9B2A8449AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:07:51 +0000 Certificate not after: Sun 02 May 2027 00:12:51 +0000 Subordinate resources: IP: 103.191.58.0/23 IP: 2001:df1:c2c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c3:38:2c:2e:e8:36:bc:7a:93:ee:e2:f9:3f:c9:b2:a8:44:9a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:07:51 2026 GMT Not After : May 2 00:12:51 2027 GMT Subject: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:e2:e7:80:ae:81:c3:64:ec:22:ec:e3:2c: 99:c9:18:8c:83:fd:7a:bc:13:19:17:5a:82:c3:cc: 71:30:41:a5:cc:4d:a5:85:4f:17:b2:10:13:9a:1d: c4:aa:34:16:f4:d1:2d:bb:5c:c2:9f:de:9a:28:20: 06:41:c2:09:73:20:3f:51:b2:dd:89:99:d9:2e:fd: 3a:7d:60:8b:86:a0:b8:24:82:3a:7a:c7:2a:2a:cd: 61:80:4b:54:c5:42:7a:67:03:47:15:42:6f:ac:ab: 10:73:d7:51:b2:73:b5:07:21:b9:cf:10:86:78:d9: 78:dd:24:ea:69:6f:37:5a:66:79:6b:e1:73:03:82: 5a:01:eb:07:9f:90:af:d0:57:ee:05:5a:83:ee:76: 1d:30:8a:1c:9e:48:af:3f:8f:8b:e4:4d:47:f5:6c: f6:e2:8b:d3:1d:cf:20:eb:97:4c:1a:28:3b:86:28: e7:96:c1:62:e2:49:c5:ef:4f:52:58:72:0c:10:41: 61:0c:b6:88:1d:3a:5e:e0:b0:4e:53:67:f4:a2:c4: 2c:38:32:6b:d4:4d:fc:74:08:b8:a2:cb:fd:ba:fb: 6f:d0:8a:04:c0:39:c0:9d:19:c6:74:00:6d:00:99: d6:da:89:e2:89:9a:5f:e7:a8:d1:16:0c:d6:65:0a: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.58.0/23 IPv6: 2001:df1:c2c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:0a:48:6b:76:77:54:f1:30:29:8c:04:30:9f:0b:e6:dc:76: d8:ad:3c:ce:d1:c5:44:75:6c:cc:e2:09:9a:c9:87:9c:c3:0d: 3e:41:61:fa:ec:07:ee:eb:6f:b9:e7:3a:03:d3:9d:69:a5:1a: 41:a4:a8:43:c0:94:11:88:ab:bf:a9:43:4b:ef:dd:6c:85:eb: 73:5f:27:32:b9:8b:d6:08:b1:dc:19:ed:53:73:1d:2b:23:8f: 85:15:61:68:44:7e:05:41:cd:40:ff:69:11:f6:be:69:73:b1: 0b:30:a9:1f:9d:dc:91:e9:41:51:f3:de:46:da:d0:fe:62:8a: 2d:89:62:a3:37:aa:d9:3e:27:7f:11:d9:e6:8e:2b:0e:b5:02: 78:1b:44:d5:61:8d:a8:f6:e0:86:b4:26:00:52:da:b9:08:53: be:03:13:ab:5c:df:f3:cd:3a:ad:cc:6e:e9:80:e8:60:23:cf: 8b:85:42:8e:e8:4e:0b:5c:b7:7a:94:89:aa:25:97:95:c0:0d: 45:a7:3e:99:2b:d5:2a:3f:66:f4:dd:92:35:d7:eb:82:4b:e7: 7b:1e:aa:19:4c:d6:a0:d9:b1:77:07:88:78:ca:b2:be:05:e3: fa:ee:33:82:63:65:99:98:b1:24:e3:78:27:0f:e3:f8:0c:ba: 71:31:5d:7d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUE8M4LC7oNrx6k+7i+T/JsqhEmtcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDc1MVoX DTI3MDUwMjAwMTI1MVowMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3 NjQ0NUJERkQ4QUFCNEE0RkI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIXs4ueAroHDZOwi7OMsmckYjIP9erwTGRdagsPMcTBBpcxNpYVPF7IQE5od xKo0FvTRLbtcwp/emiggBkHCCXMgP1Gy3YmZ2S79On1gi4aguCSCOnrHKirNYYBL VMVCemcDRxVCb6yrEHPXUbJztQchuc8QhnjZeN0k6mlvN1pmeWvhcwOCWgHrB5+Q r9BX7gVag+52HTCKHJ5Irz+Pi+RNR/Vs9uKL0x3PIOuXTBooO4Yo55bBYuJJxe9P UlhyDBBBYQy2iB06XuCwTlNn9KLELDgya9RN/HQIuKLL/br7b9CKBMA5wJ0ZxnQA bQCZ1tqJ4omaX+eo0RYM1mUKHkMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHAxEE/8tOHQRjR2RFvf2Kq0pPtCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJiYmU2ODE1LTMxMGUtNDIwNi1hNTAwLTZiYjlkMzI2M2FiZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYmJlNjgx NS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC83MDMxMTA0RkZDQjRFMUQw NDYzNDc2NDQ1QkRGRDhBQUI0QTRGQjQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ786MA8EAgACMAkDBwAgAQ3xwsAwDQYJKoZIhvcNAQELBQADggEBAIcKSGt2 d1TxMCmMBDCfC+bcdtitPM7RxUR1bMziCZrJh5zDDT5BYfrsB+7rb7nnOgPTnWml GkGkqEPAlBGIq7+pQ0vv3WyF63NfJzK5i9YIsdwZ7VNzHSsjj4UVYWhEfgVBzUD/ aRH2vmlzsQswqR+d3JHpQVHz3kba0P5iii2JYqM3qtk+J38R2eaOKw61AngbRNVh jaj24Ia0JgBS2rkIU74DE6tc3/PNOq3MbumA6GAjz4uFQo7oTgtct3qUiaoll5XA DUWnPpkr1So/ZvTdkjXX64JL53seqhlM1qDZsXcHiHjKsr4F4/ruM4JjZZmYsSTj eCcP4/gMunExXX0= -----END CERTIFICATE-----Generated at Tue May 12 22:39:14 2026 by rpki-client