$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.cer (raw, json) Hash identifier: 0g7C6Gkdw9+Q6JWmv/xbdC32wQd8/NNZTWWxjpns1kI= Subject key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F9105C75086351B441D03A8A923B4B2EE114B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:36:01 +0000 Certificate not after: Sun 02 May 2027 02:41:01 +0000 Subordinate resources: IP: 103.168.46.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:91:05:c7:50:86:35:1b:44:1d:03:a8:a9:23:b4:b2:ee:11:4b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:36:01 2026 GMT Not After : May 2 02:41:01 2027 GMT Subject: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:84:7b:94:55:d0:0e:68:89:30:8d:3d:df: ef:5a:47:55:33:7d:4d:76:13:4b:05:63:a6:2f:b8: e5:59:06:a5:f3:4b:7a:ef:ff:89:6f:31:68:a1:8f: 90:21:52:52:4b:14:fa:f3:03:e1:a6:fc:b7:e7:41: 3e:50:f7:c4:79:ce:02:79:a6:c7:18:bc:4b:2a:42: 67:db:98:1c:74:b9:c4:f0:71:16:94:8c:06:55:0f: 1d:de:c2:fa:29:55:71:c9:56:d3:05:ad:89:a7:e4: df:ef:89:9d:77:63:82:eb:44:97:21:0e:d8:05:a0: d4:69:68:2a:60:df:a0:33:a9:29:e3:3f:3c:a6:e5: df:a7:49:e0:e1:c9:15:75:1a:63:0a:5f:1b:de:30: fc:36:2f:a9:75:10:d0:68:a1:4b:2f:22:fe:4d:a9: 32:bd:7c:21:c4:db:97:bf:16:a0:80:99:c2:58:04: d5:ff:da:51:13:7c:e7:b5:b3:60:45:0a:5c:58:d1: f0:68:8b:75:37:52:68:54:59:a0:4f:cd:1d:40:ec: 0d:51:52:c3:af:f1:95:d3:0e:bb:15:d3:82:91:0f: 0f:8f:98:87:86:18:da:2b:b8:6f:c9:13:e5:d1:6d: 1c:d8:e8:63:c5:a2:14:9b:7c:cb:a6:57:e7:bf:27: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.46.0/23 Signature Algorithm: sha256WithRSAEncryption 73:a5:fd:8e:a2:7c:83:ea:35:32:85:f1:d6:c3:9e:b4:d5:46: 41:a5:a8:5c:a9:15:b8:14:46:a3:e1:44:38:97:aa:f9:c7:f5: 25:55:ec:5e:8b:0f:bd:09:e3:03:75:53:15:72:cf:07:96:0a: aa:8e:74:e3:17:f4:91:51:1e:91:84:21:5a:ca:51:f8:ab:aa: 97:a9:f2:81:c4:b9:b4:02:32:09:b9:79:fd:53:33:67:9a:4e: 01:0e:42:f8:8d:77:8d:62:e7:31:38:f6:db:ed:b8:76:51:e4: ab:8f:43:07:33:46:74:b8:32:c1:2c:d7:17:e7:91:22:2d:17: 43:84:b3:8a:d7:b9:e8:ba:d0:a1:a4:4f:e7:2a:82:40:a4:0e: d0:df:b7:55:1f:71:1e:18:30:f3:d8:f6:54:a9:f8:a8:f5:0a: 6e:d6:1f:15:fa:43:be:7f:a2:61:72:2f:c3:c6:a4:89:85:c4: 45:23:fe:dc:1b:9a:b0:c5:d6:a5:7d:5e:96:fc:ae:16:11:99: 02:af:55:8d:e2:6b:cc:4e:b7:5f:81:87:13:9b:7a:69:74:ce: e1:03:de:d4:6c:29:72:48:66:60:04:58:15:7d:5c:f8:95:83: 05:e0:6b:ca:ca:fb:49:ea:4f:8c:bd:ea:34:c8:25:04:99:fd: ed:e7:8e:ba -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUf5EFx1CGNRtEHQOoqSO0su4RSwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzYwMVoX DTI3MDUwMjAyNDEwMVowMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkx Q0VBOEM0MjY3NDFGNzE4REVFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHohHuUVdAOaIkwjT3f71pHVTN9TXYTSwVjpi+45VkGpfNLeu//iW8xaKGP kCFSUksU+vMD4ab8t+dBPlD3xHnOAnmmxxi8SypCZ9uYHHS5xPBxFpSMBlUPHd7C +ilVcclW0wWtiafk3++JnXdjgutElyEO2AWg1GloKmDfoDOpKeM/PKbl36dJ4OHJ FXUaYwpfG94w/DYvqXUQ0GihSy8i/k2pMr18IcTbl78WoICZwlgE1f/aURN857Wz YEUKXFjR8GiLdTdSaFRZoE/NHUDsDVFSw6/xldMOuxXTgpEPD4+Yh4YY2iu4b8kT 5dFtHNjoY8WiFJt8y6ZX578nMMcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFISM02Q7OI9SuKkc6oxCZ0H3GN7mMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y0MjkzYzY0LWVhMDAtNDEzZi05MDkwLTJiMTkwYjFhNDVhZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNDI5M2M2 NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC84NDhDRDM2NDNCMzg4RjUy QjhBOTFDRUE4QzQyNjc0MUY3MThERUU2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6guMA0GCSqGSIb3DQEBCwUAA4IBAQBzpf2OonyD6jUyhfHWw5601UZBpahc qRW4FEaj4UQ4l6r5x/UlVexeiw+9CeMDdVMVcs8HlgqqjnTjF/SRUR6RhCFaylH4 q6qXqfKBxLm0AjIJuXn9UzNnmk4BDkL4jXeNYucxOPbb7bh2UeSrj0MHM0Z0uDLB LNcX55EiLRdDhLOK17noutChpE/nKoJApA7Q37dVH3EeGDDz2PZUqfio9Qpu1h8V +kO+f6Jhci/DxqSJhcRFI/7cG5qwxdalfV6W/K4WEZkCr1WN4mvMTrdfgYcTm3pp dM7hA97UbClySGZgBFgVfVz4lYMF4GvKyvtJ6k+Mveo0yCUEmf3t5466 -----END CERTIFICATE-----Generated at Wed May 13 01:07:08 2026 by rpki-client