$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer File: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer (raw, json) Hash identifier: FasHzkow9Sz0deU056vdTJ+uGCHCW84Ad6ol19SPHyc= Subject key identifier: 74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 52892CD0481F29F3DBA37434E85B5527D36DED03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:52:02 +0000 Certificate not after: Sun 02 May 2027 01:57:02 +0000 Subordinate resources: IP: 103.143.20.0/24 IP: 2001:df1:6780::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:89:2c:d0:48:1f:29:f3:db:a3:74:34:e8:5b:55:27:d3:6d:ed:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:52:02 2026 GMT Not After : May 2 01:57:02 2027 GMT Subject: CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:f6:dc:3f:10:44:6e:5d:3b:9b:e8:21:b8: 24:93:43:82:9f:d6:82:37:31:8e:57:66:ae:be:ca: 04:d7:f1:5a:84:75:d7:db:72:32:d5:f9:c9:10:b0: 92:fe:c5:1a:48:a6:57:b7:11:d9:fc:e7:75:e6:8b: c6:49:d2:b7:d9:a6:2e:13:8e:b9:59:bf:80:0e:5c: 07:cd:23:3a:34:88:55:27:a2:32:3f:3e:97:0f:d2: 8f:a6:2d:ce:3f:13:19:07:9e:53:ab:31:6e:ce:9c: 2d:26:5a:ae:a0:4d:d5:70:09:9f:7d:0c:41:f9:2c: 87:0f:4e:5b:7b:cb:0b:25:78:1e:c8:49:2f:0e:15: 40:42:29:7b:da:a4:bc:c3:0c:02:18:dd:e8:08:a0: 3f:a3:62:58:84:fd:7d:69:2f:0f:30:e1:77:ce:d0: 9e:37:0a:a6:22:e0:3b:1e:bd:49:3f:d6:d3:2b:65: 50:aa:ed:de:de:78:8b:c2:2f:1c:dd:c1:e8:ab:7a: 56:10:62:8a:3e:a2:81:64:9c:6b:fe:19:27:ce:8c: 04:95:1a:9e:52:7f:69:e5:1d:8d:1b:bc:d1:dc:a4: 71:d3:7b:20:2b:9c:e2:71:49:17:ed:fb:99:52:e8: 34:18:65:69:c9:67:6c:1e:16:3e:f8:0b:18:69:3a: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.20.0/24 IPv6: 2001:df1:6780::/48 Signature Algorithm: sha256WithRSAEncryption 25:87:fc:b1:3c:ad:aa:65:5f:4d:9e:80:24:55:69:e6:27:bc: 2d:ad:47:9d:b6:c0:b5:8c:23:47:26:93:7d:38:63:d5:05:8f: b4:0c:f3:74:ad:ab:e1:63:91:67:6c:6a:4b:7d:fa:ad:08:4a: 14:4b:9d:50:c1:8b:b1:5d:5e:2e:16:21:e3:e0:7a:f9:a0:ca: c9:42:aa:8e:cb:dc:db:9c:db:fa:f6:8c:88:ba:7d:6a:d0:a6: d0:d1:ee:c0:c6:01:32:05:b2:d0:0e:29:e4:fe:93:fe:d5:47: ab:e8:b1:13:52:45:07:eb:ec:d4:b9:23:84:ae:53:5d:72:73: a7:7c:82:0d:58:a6:e1:cc:49:bd:74:7c:43:a6:90:7c:34:af: 15:4a:67:90:bd:30:be:1e:8d:d9:13:0e:bb:87:6f:71:76:1d: 2d:27:e5:98:05:f0:64:37:72:c6:ab:1a:20:b8:6b:81:ff:5b: a7:df:e4:2e:70:3e:b0:04:02:9b:e8:8a:74:36:cd:d3:7d:22: f9:cc:8e:cf:08:e2:ff:e3:60:64:06:7d:b7:c9:0d:08:1a:3f: d4:ba:38:b9:a8:e4:2f:d7:08:3b:19:8f:8f:81:86:0e:d7:a4: 8e:14:31:15:7a:b3:d4:a1:c5:5d:fe:8f:3f:ef:db:71:b5:d2: e0:a9:a3:7c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUUoks0EgfKfPbo3Q06FtVJ9Nt7QMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTIwMloX DTI3MDUwMjAxNTcwMlowMzExMC8GA1UEAxMoNzQyQjJDQTk0MEQ5MUU2RkEzOEE0 NDY4Rjg5QzM5MENBMkJERDJDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1+9tw/EERuXTub6CG4JJNDgp/Wgjcxjldmrr7KBNfxWoR119tyMtX5yRCw kv7FGkimV7cR2fzndeaLxknSt9mmLhOOuVm/gA5cB80jOjSIVSeiMj8+lw/Sj6Yt zj8TGQeeU6sxbs6cLSZarqBN1XAJn30MQfkshw9OW3vLCyV4HshJLw4VQEIpe9qk vMMMAhjd6AigP6NiWIT9fWkvDzDhd87QnjcKpiLgOx69ST/W0ytlUKrt3t54i8Iv HN3B6Kt6VhBiij6igWSca/4ZJ86MBJUanlJ/aeUdjRu80dykcdN7ICuc4nFJF+37 mVLoNBhlaclnbB4WPvgLGGk62MMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHQrLKlA2R5vo4pEaPicOQyivdLKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M3OGMzYzY5LTM2ZDAtNGFlOC1hOGRmLTYzZDNmNDRjY2Q4ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNzhjM2M2 OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC83NDJCMkNBOTQwRDkxRTZG QTM4QTQ0NjhGODlDMzkwQ0EyQkREMkNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ48UMA8EAgACMAkDBwAgAQ3xZ4AwDQYJKoZIhvcNAQELBQADggEBACWH/LE8 raplX02egCRVaeYnvC2tR522wLWMI0cmk304Y9UFj7QM83Stq+FjkWdsakt9+q0I ShRLnVDBi7FdXi4WIePgevmgyslCqo7L3Nuc2/r2jIi6fWrQptDR7sDGATIFstAO KeT+k/7VR6vosRNSRQfr7NS5I4SuU11yc6d8gg1YpuHMSb10fEOmkHw0rxVKZ5C9 ML4ejdkTDruHb3F2HS0n5ZgF8GQ3csarGiC4a4H/W6ff5C5wPrAEApvoinQ2zdN9 IvnMjs8I4v/jYGQGfbfJDQgaP9S6OLmo5C/XCDsZj4+Bhg7XpI4UMRV6s9ShxV3+ jz/v23G10uCpo3w= -----END CERTIFICATE-----Generated at Wed May 13 00:34:20 2026 by rpki-client