$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer (raw, json) Hash identifier: gsTR8YhEJbs/xW6WR0owjkSFpFILoB+aRHcFVZXp5ew= Subject key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 11051A43C8915C66C1A200A43F3CD7BDA3E624D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft caRepository: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:54:03 +0000 Certificate not after: Sat 01 May 2027 23:59:03 +0000 Subordinate resources: IP: 103.147.114.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:05:1a:43:c8:91:5c:66:c1:a2:00:a4:3f:3c:d7:bd:a3:e6:24:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:54:03 2026 GMT Not After : May 1 23:59:03 2027 GMT Subject: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:b8:3d:54:f5:50:8b:5c:3f:98:0a:d9:99: 96:c4:cc:81:5c:a9:04:39:5b:a5:c7:9e:64:68:88: 8c:e3:fe:45:1e:55:74:a1:32:1e:75:49:ec:43:92: b4:81:6b:76:d2:52:7d:d5:fc:46:4d:1b:fb:c6:a0: 5f:63:86:bf:64:54:42:3a:c8:01:bb:5e:20:32:b8: 4a:7b:03:ab:3e:4e:db:69:2f:3f:bc:52:5b:d6:f5: 5e:01:6d:75:65:33:88:ce:a8:8b:b4:d3:3b:f8:fe: 16:28:8e:5f:1c:c1:28:c3:8a:00:0b:d3:db:75:af: 1a:96:6a:dc:d2:1a:b1:49:99:04:79:ee:60:fe:56: 37:0a:c3:27:9d:6e:eb:c2:11:60:19:1a:c7:d8:a8: 03:85:34:84:82:7a:f3:20:cb:c9:62:8b:3d:bf:a6: 57:4c:52:c4:78:26:7f:5e:7b:4d:75:06:60:47:46: 35:e7:50:d8:24:01:94:72:30:98:e3:e6:6a:3f:1d: 8d:c3:06:3b:80:d6:81:d5:94:97:11:34:36:7a:69: 2c:00:bc:9e:2d:d7:9e:6e:9d:f3:54:54:3b:80:98: 57:cd:7d:17:89:39:d8:42:72:0b:34:a5:21:80:aa: f7:a1:0a:95:b3:33:fb:ae:ed:7e:c9:d7:87:68:ea: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.114.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:d5:13:76:ee:cf:60:3e:38:bb:85:c7:90:d6:16:0f:3a:4a: ea:f0:14:51:e2:4a:ca:ba:83:e7:7f:13:be:d6:44:e3:76:7f: 5f:55:c2:15:c7:58:f0:e8:e3:1a:c0:01:f8:f1:49:c4:18:ab: c7:76:a4:47:59:0c:1c:ca:a2:47:cc:d7:db:a7:46:3e:2c:f4: 12:c6:4d:01:7e:31:0f:db:66:f2:90:bf:bb:3f:5b:59:9b:1d: 8c:c7:27:d4:61:6e:3f:b8:4a:4d:47:26:b5:3b:ab:db:df:45: b0:42:4d:7c:70:ec:b5:9f:4b:ee:26:b2:54:9f:8c:34:bc:0e: 54:b7:06:07:3f:34:b0:41:79:7d:03:3c:1b:9e:52:4c:b0:02: 3a:76:24:74:01:e5:19:08:21:a9:46:77:31:67:03:d3:4e:fb: 6f:ae:03:cf:eb:73:73:79:10:ad:4a:38:f0:b5:d9:52:65:c3: b2:d5:bf:30:5f:a4:77:22:67:33:15:2a:de:97:53:63:2e:fe: 4f:eb:3d:24:08:33:75:c7:37:30:d8:eb:f2:d3:e6:02:f6:3a: d5:9a:e4:d2:01:70:df:c5:5b:27:91:24:01:ed:f0:8d:83:a4: a1:51:b9:62:9c:df:a2:a2:be:4c:b7:82:9d:8e:21:75:4a:91: 81:56:c7:77 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEQUaQ8iRXGbBogCkPzzXvaPmJNYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTQwM1oX DTI3MDUwMTIzNTkwM1owMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4 ODkyMEY4OUVFNTMzNTNGQTQ1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMe7uD1U9VCLXD+YCtmZlsTMgVypBDlbpceeZGiIjOP+RR5VdKEyHnVJ7EOS tIFrdtJSfdX8Rk0b+8agX2OGv2RUQjrIAbteIDK4SnsDqz5O22kvP7xSW9b1XgFt dWUziM6oi7TTO/j+FiiOXxzBKMOKAAvT23WvGpZq3NIasUmZBHnuYP5WNwrDJ51u 68IRYBkax9ioA4U0hIJ68yDLyWKLPb+mV0xSxHgmf157TXUGYEdGNedQ2CQBlHIw mOPmaj8djcMGO4DWgdWUlxE0NnppLAC8ni3Xnm6d81RUO4CYV819F4k52EJyCzSl IYCq96EKlbMz+67tfsnXh2jq6PcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKFCeh+KymD5r3+Ikg+J7lM1P6RQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE2OGNjMDU5LTVlNmMtNDUwMS1iODk0LTE0YTgyZDE4ZDIxZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNjhjYzA1 OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9BMTQyN0ExRjhBQ0E2MEY5 QUY3Rjg4OTIwRjg5RUU1MzM1M0ZBNDUwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5NyMA0GCSqGSIb3DQEBCwUAA4IBAQAu1RN27s9gPji7hceQ1hYPOkrq8BRR 4krKuoPnfxO+1kTjdn9fVcIVx1jw6OMawAH48UnEGKvHdqRHWQwcyqJHzNfbp0Y+ LPQSxk0BfjEP22bykL+7P1tZmx2MxyfUYW4/uEpNRya1O6vb30WwQk18cOy1n0vu JrJUn4w0vA5UtwYHPzSwQXl9AzwbnlJMsAI6diR0AeUZCCGpRncxZwPTTvtvrgPP 63NzeRCtSjjwtdlSZcOy1b8wX6R3ImczFSrel1NjLv5P6z0kCDN1xzcw2Ovy0+YC 9jrVmuTSAXDfxVsnkSQB7fCNg6ShUblinN+ior5Mt4KdjiF1SpGBVsd3 -----END CERTIFICATE-----Generated at Tue May 12 22:45:40 2026 by rpki-client