$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer (raw, json) Hash identifier: gC0ab7SX2LlGtYR/Igtwiz/7rDPCbIiHueYZXYUbM/M= Subject key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 358A2976BC3C41A5F4AE614F9E8EF1BA8FB6DDCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:00:53 +0000 Certificate not after: Sun 02 May 2027 00:05:53 +0000 Subordinate resources: IP: 103.185.42.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8a:29:76:bc:3c:41:a5:f4:ae:61:4f:9e:8e:f1:ba:8f:b6:dd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:00:53 2026 GMT Not After : May 2 00:05:53 2027 GMT Subject: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:e4:ac:62:59:8c:c9:d9:01:c2:8e:11:09: 71:90:a8:7f:fb:50:43:0c:aa:e4:d7:65:8f:35:d9: 4d:d9:15:0e:2e:8f:3f:1f:cf:89:6c:f2:e3:95:4d: 1c:0b:ea:a4:2b:1f:a9:37:c6:f9:73:cf:5a:88:63: 9d:53:7c:a5:15:b3:f0:45:7e:8b:50:7a:75:f2:69: 27:5b:f3:a6:74:b7:f3:4e:7f:7e:fa:6e:fd:71:73: 2d:fd:08:9c:b4:e6:fb:d6:e8:e0:ef:aa:23:8d:f0: f1:b4:c8:c7:48:43:50:5d:9b:31:81:a8:97:da:d4: 3e:d6:8f:bb:37:81:91:b8:0d:b8:14:a9:d9:a2:d1: 89:2e:66:4a:ef:0f:70:a6:aa:59:80:ea:14:fe:b3: b7:6c:f6:5c:ef:ed:13:01:71:31:de:2f:65:ba:f5: 9b:27:f1:67:d4:5f:35:e1:a4:b8:d2:6d:1b:b2:e8: 9b:1b:b9:66:37:0a:20:0b:3f:38:f0:ca:a0:a5:18: 74:67:91:db:ad:7d:87:be:ff:3d:5f:9f:93:d5:68: b5:58:53:d6:50:86:a6:37:e7:a1:47:34:c6:70:05: 24:de:e5:6c:01:65:3e:39:e0:fc:08:24:df:a7:ec: 26:17:ff:57:4e:d7:22:56:af:d1:b5:54:e2:19:3d: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.42.0/23 Signature Algorithm: sha256WithRSAEncryption a8:be:8c:7d:1d:78:f9:46:f0:e0:2a:79:c6:df:8c:4f:1d:b6: d4:cd:73:a1:39:e8:1c:72:dc:9f:ef:97:73:ee:79:69:6a:ef: d5:cb:42:c7:56:3a:e9:57:3d:85:20:cd:ee:36:62:7e:60:b4: 8d:9e:02:68:5a:45:cb:53:e8:47:f7:fb:27:65:5b:ca:f7:9c: 12:e1:16:b5:76:a9:b0:93:14:74:d8:92:12:28:d3:82:fa:ae: 13:73:1a:5c:30:56:8f:0c:87:5f:2f:f8:5d:b8:ac:9b:69:ab: 55:d7:7a:74:50:05:0a:4d:3f:5b:e3:16:ad:e7:ce:7a:8a:84: 02:00:9b:40:0e:a7:fe:73:87:de:72:a7:94:6f:14:de:d8:86: 71:ea:e9:ea:5d:7d:8c:84:b8:f0:0d:e4:ff:fd:8a:11:ca:32: f4:5f:d1:a6:74:53:58:a7:dd:2f:02:19:ba:9d:a7:d7:2d:77: 17:02:db:49:8e:8b:dc:5b:6e:2a:11:62:54:66:1e:ec:e4:1a: 9a:c8:d4:03:e3:0d:7f:56:7d:5b:e0:f4:5d:3e:2f:bc:93:e5: 38:4e:16:3d:4f:37:e2:ef:b2:dc:14:f8:e1:cf:af:f4:cc:fb: 31:27:d6:c1:6c:4e:ff:35:4b:f8:9c:05:2e:37:7d:2b:69:60: f9:6c:62:8b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNYopdrw8QaX0rmFPno7xuo+23c0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDA1M1oX DTI3MDUwMjAwMDU1M1owMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYy MDdEQUUyQjNCMjFCQTA4RDNGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGw5KxiWYzJ2QHCjhEJcZCof/tQQwyq5NdljzXZTdkVDi6PPx/PiWzy45VN HAvqpCsfqTfG+XPPWohjnVN8pRWz8EV+i1B6dfJpJ1vzpnS3805/fvpu/XFzLf0I nLTm+9bo4O+qI43w8bTIx0hDUF2bMYGol9rUPtaPuzeBkbgNuBSp2aLRiS5mSu8P cKaqWYDqFP6zt2z2XO/tEwFxMd4vZbr1myfxZ9RfNeGkuNJtG7Lomxu5ZjcKIAs/ OPDKoKUYdGeR2619h77/PV+fk9VotVhT1lCGpjfnoUc0xnAFJN7lbAFlPjng/Agk 36fsJhf/V07XIlav0bVU4hk9J6kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKHpfI3FPtS5TwYgfa4rOyG6CNP+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIwNTBkY2MzLTg0ZGQtNDU5NS1iYTJjLWJjNjk5ODk2OTJmMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMDUwZGNj My04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9BMUU5N0M4REM1M0VENEI5 NEYwNjIwN0RBRTJCM0IyMUJBMDhEM0ZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7kqMA0GCSqGSIb3DQEBCwUAA4IBAQCovox9HXj5RvDgKnnG34xPHbbUzXOh Oegcctyf75dz7nlpau/Vy0LHVjrpVz2FIM3uNmJ+YLSNngJoWkXLU+hH9/snZVvK 95wS4Ra1dqmwkxR02JISKNOC+q4TcxpcMFaPDIdfL/hduKybaatV13p0UAUKTT9b 4xat5856ioQCAJtADqf+c4fecqeUbxTe2IZx6unqXX2MhLjwDeT//YoRyjL0X9Gm dFNYp90vAhm6nafXLXcXAttJjovcW24qEWJUZh7s5BqayNQD4w1/Vn1b4PRdPi+8 k+U4ThY9Tzfi77LcFPjhz6/0zPsxJ9bBbE7/NUv4nAUuN30raWD5bGKL -----END CERTIFICATE-----Generated at Tue May 12 22:10:11 2026 by rpki-client