$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer File: A1E11F793F01828AF09B99BCD923D78E53C244F8.cer (raw, json) Hash identifier: jpZkk1IDbMxWaUmouNXHc1osBlBH8QtPJ2WC3XyJR74= Subject key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 43E45D372AC5929FC9E9E599D92BA61B0CCF3862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:53 +0000 Certificate not after: Sun 02 May 2027 02:00:53 +0000 Subordinate resources: IP: 103.172.24.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e4:5d:37:2a:c5:92:9f:c9:e9:e5:99:d9:2b:a6:1b:0c:cf:38:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:55:53 2026 GMT Not After : May 2 02:00:53 2027 GMT Subject: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:10:c4:c2:45:d6:74:58:85:fd:66:b4:fb: dc:1b:6b:f2:46:b0:e2:d3:e9:30:f8:2e:c7:f8:3e: fd:4f:a7:7b:85:21:8e:62:7e:3b:e8:1f:b2:24:c4: f6:39:83:af:a5:1a:85:27:e3:4f:a6:26:1c:1d:51: 17:99:e9:e3:53:ac:80:7d:2a:43:28:9c:b0:19:b2: 60:22:ad:74:fb:73:c9:43:12:f5:b6:0b:1e:e2:e5: c5:0e:8c:2c:b8:30:bb:4b:03:d4:82:bb:e2:22:39: b0:ff:07:ba:52:e2:7a:f8:e2:39:fc:c0:ca:7d:75: 94:f4:87:56:35:a4:1b:42:f5:3f:07:e3:17:1e:91: c0:0e:21:6b:54:93:15:ba:92:9b:16:bc:0c:65:2b: 7d:48:d7:bc:3a:5b:65:f0:d7:8e:8f:64:5a:31:25: e0:9e:34:e8:1a:cb:1d:ec:7f:cb:11:f9:6d:2d:54: 8b:a6:8a:bf:9e:fd:7f:e4:56:56:7c:85:3d:34:be: 7e:fb:47:a7:86:71:2f:bd:61:6a:26:d5:f7:61:05: 40:62:6e:f3:22:42:02:cf:a0:c3:d4:99:99:0e:d1: 45:f9:3d:0d:2e:1d:be:8a:13:cb:00:af:ca:47:58: fe:80:b3:1d:46:5a:51:63:ed:52:45:6b:aa:e6:45: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.24.0/23 Signature Algorithm: sha256WithRSAEncryption 73:8a:86:a4:e6:a7:8a:45:63:fd:e0:39:e7:d0:87:e3:ed:7f: e9:a8:32:66:b2:9c:18:58:79:01:88:50:b9:b5:1c:bc:8b:31: 81:f0:18:5f:4b:4b:9a:8b:da:1d:cf:89:db:f9:33:4e:46:96: 6c:8a:86:9b:15:97:72:86:23:c8:e3:ad:36:0c:c8:65:9e:75: 3b:8d:bd:0e:98:53:6b:96:d2:eb:41:fe:00:8d:7f:bc:99:9d: 9c:f3:a1:bb:44:58:05:c3:9c:a4:60:85:35:a3:7d:8d:39:2e: 04:3b:db:33:55:84:dd:3d:8e:56:a0:e0:07:d3:75:85:f1:e3: b1:45:13:91:22:d2:04:f7:08:47:31:e3:17:15:6f:09:c0:f4: f0:37:9e:2a:c4:d7:3c:92:83:36:9e:1d:d9:ab:92:99:6e:55: 0d:46:b8:0c:f3:58:c0:fd:66:7f:d6:93:c0:25:6e:d2:32:37: e2:ef:b5:ca:0c:74:fd:0c:41:15:79:75:27:c6:d8:23:2b:19: f1:f4:71:f0:21:8b:de:b6:cf:2c:7c:35:c7:42:bb:e0:c8:73: c7:cb:bb:ae:e0:24:a5:b0:42:8f:1d:6c:6b:75:5c:a0:ec:4c: ed:3b:b0:ff:bd:68:50:6d:37:58:ef:83:f7:26:b7:7d:18:33: e1:d4:85:64 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQ+RdNyrFkp/J6eWZ2SumGwzPOGIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTU1M1oX DTI3MDUwMjAyMDA1M1owMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5 OUJDRDkyM0Q3OEU1M0MyNDRGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+KEMTCRdZ0WIX9ZrT73Btr8kaw4tPpMPgux/g+/U+ne4UhjmJ+O+gfsiTE 9jmDr6UahSfjT6YmHB1RF5np41OsgH0qQyicsBmyYCKtdPtzyUMS9bYLHuLlxQ6M LLgwu0sD1IK74iI5sP8HulLievjiOfzAyn11lPSHVjWkG0L1PwfjFx6RwA4ha1ST FbqSmxa8DGUrfUjXvDpbZfDXjo9kWjEl4J406BrLHex/yxH5bS1Ui6aKv579f+RW VnyFPTS+fvtHp4ZxL71haibV92EFQGJu8yJCAs+gw9SZmQ7RRfk9DS4dvooTywCv ykdY/oCzHUZaUWPtUkVrquZFeG8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKHhH3k/AYKK8JuZvNkj145TwkT4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NmMGJhMWU3LWQxNDItNDdjZC04ZDhmLTJhMzcyYjkyMjIyMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZjBiYTFl Ny1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC9BMUUxMUY3OTNGMDE4MjhB RjA5Qjk5QkNEOTIzRDc4RTUzQzI0NEY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6wYMA0GCSqGSIb3DQEBCwUAA4IBAQBzioak5qeKRWP94Dnn0Ifj7X/pqDJm spwYWHkBiFC5tRy8izGB8BhfS0uai9odz4nb+TNORpZsioabFZdyhiPI4602DMhl nnU7jb0OmFNrltLrQf4AjX+8mZ2c86G7RFgFw5ykYIU1o32NOS4EO9szVYTdPY5W oOAH03WF8eOxRRORItIE9whHMeMXFW8JwPTwN54qxNc8koM2nh3Zq5KZblUNRrgM 81jA/WZ/1pPAJW7SMjfi77XKDHT9DEEVeXUnxtgjKxnx9HHwIYvets8sfDXHQrvg yHPHy7uu4CSlsEKPHWxrdVyg7EztO7D/vWhQbTdY74P3Jrd9GDPh1IVk -----END CERTIFICATE-----Generated at Tue May 12 22:02:53 2026 by rpki-client