$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer File: A241AC704BB26D3BB01102643E819AF4873EBFF4.cer (raw, json) Hash identifier: VMh6PP5Nj87Bs49uU1p/zXhGFFHQncAWz3ZxdJ/fVAQ= Subject key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4992BCF9F894D0966E158A01A1D90ECE0AFC23FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:40 +0000 Certificate not after: Sun 02 May 2027 00:47:40 +0000 Subordinate resources: IP: 103.135.152.0/22 IP: 2001:df7:eb00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:92:bc:f9:f8:94:d0:96:6e:15:8a:01:a1:d9:0e:ce:0a:fc:23:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:42:40 2026 GMT Not After : May 2 00:47:40 2027 GMT Subject: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:cb:b8:db:32:d1:2f:7f:47:86:b3:49:ec: c5:0b:5a:da:01:52:d0:f9:85:73:a9:98:92:53:21: 1a:31:92:ef:8c:04:61:01:2c:c7:cb:4c:bb:09:24: b1:2a:a8:99:d1:eb:64:b3:34:1d:06:38:89:cf:ae: 89:92:c0:88:d4:99:67:9e:99:0c:84:5b:54:55:c2: ae:54:d4:6a:3c:74:ef:66:10:6b:18:18:7b:d6:07: 85:ac:2c:76:22:b8:4f:39:cb:62:07:21:3a:19:79: 37:b8:5e:4d:31:d7:01:8f:3e:94:26:ed:0d:41:1c: 3f:bd:55:58:6a:da:3c:f2:5e:22:89:e3:a7:5a:e0: cc:d0:ba:fe:49:03:63:c8:6f:36:b1:30:3d:8b:3a: 27:77:d0:b4:3d:85:3b:c6:4a:89:04:e5:86:59:31: 4e:05:c1:08:85:86:a9:d2:00:f9:7d:d3:61:c3:63: 22:2b:3a:42:24:ed:8f:25:86:15:91:da:20:c4:be: 4e:3f:ca:c0:76:1f:bf:3c:ee:9d:48:34:c5:89:d4: 4b:32:ec:db:11:4f:48:7b:b3:97:ae:78:99:1a:f7: 40:18:2f:8f:51:5a:05:22:8d:ef:5b:c8:e0:cc:55: c1:b1:4d:5f:c0:26:cc:b8:3e:df:9a:cc:d9:09:03: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.152.0/22 IPv6: 2001:df7:eb00::/48 Signature Algorithm: sha256WithRSAEncryption 0f:03:35:5a:32:c0:68:4d:bc:70:08:89:b1:44:3e:1a:b8:bb: 19:f9:c9:98:b1:97:e0:3b:b9:f7:e0:6f:af:aa:53:69:3a:ef: e8:89:a5:02:3d:79:5b:d9:bb:8b:95:27:f4:fb:eb:29:81:d9: 92:02:d9:87:6f:da:1c:19:d2:6e:60:e9:1e:d5:76:a5:66:81: 83:97:32:17:69:a7:8e:6f:5c:71:84:b5:f3:2e:8a:fc:0c:bb: db:6d:64:24:c8:89:d0:c9:25:43:37:8a:58:83:f4:ae:de:9f: 29:ed:46:5e:2f:0f:f1:5a:4d:e6:64:a6:b9:51:91:9d:1e:8b: 66:ec:ce:74:0b:5c:c9:30:f5:7f:6b:4b:4f:f7:73:b7:eb:5b: c2:d4:50:fa:72:fd:41:7a:68:4d:dc:b4:5a:6c:36:19:35:0b: 94:7f:1f:c1:ec:67:78:3f:f7:c2:4b:60:ad:f9:74:a0:22:b4: 0d:c4:bc:61:1e:89:0f:1e:d4:ab:64:80:26:a9:48:09:d9:5b: ca:ba:fc:18:78:18:d4:4a:fa:0d:3e:04:b5:c7:b7:91:5b:2f: 6f:62:df:1b:66:11:a1:49:67:8c:11:58:aa:b6:ac:50:04:c6: d4:58:7a:fa:a4:99:c2:d4:5a:bf:cd:9a:50:c0:06:94:0b:57: 8d:da:be:5f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSZK8+fiU0JZuFYoBodkOzgr8I/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDI0MFoX DTI3MDUwMjAwNDc0MFowMzExMC8GA1UEAxMoQTI0MUFDNzA0QkIyNkQzQkIwMTEw MjY0M0U4MTlBRjQ4NzNFQkZGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+ay7jbMtEvf0eGs0nsxQta2gFS0PmFc6mYklMhGjGS74wEYQEsx8tMuwkk sSqomdHrZLM0HQY4ic+uiZLAiNSZZ56ZDIRbVFXCrlTUajx072YQaxgYe9YHhaws diK4TznLYgchOhl5N7heTTHXAY8+lCbtDUEcP71VWGraPPJeIonjp1rgzNC6/kkD Y8hvNrEwPYs6J3fQtD2FO8ZKiQTlhlkxTgXBCIWGqdIA+X3TYcNjIis6QiTtjyWG FZHaIMS+Tj/KwHYfvzzunUg0xYnUSzLs2xFPSHuzl654mRr3QBgvj1FaBSKN71vI 4MxVwbFNX8AmzLg+35rM2QkDRDsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKJBrHBLsm07sBECZD6BmvSHPr/0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVkYTRlZjcxLWYwZTAtNDI1Mi04MTYwLTUwNTMyMWZhNTA4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZGE0ZWY3 MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9BMjQxQUM3MDRCQjI2RDNC QjAxMTAyNjQzRTgxOUFGNDg3M0VCRkY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ4eYMA8EAgACMAkDBwAgAQ336wAwDQYJKoZIhvcNAQELBQADggEBAA8DNVoy wGhNvHAIibFEPhq4uxn5yZixl+A7uffgb6+qU2k67+iJpQI9eVvZu4uVJ/T76ymB 2ZIC2Ydv2hwZ0m5g6R7VdqVmgYOXMhdpp45vXHGEtfMuivwMu9ttZCTIidDJJUM3 iliD9K7enyntRl4vD/FaTeZkprlRkZ0ei2bsznQLXMkw9X9rS0/3c7frW8LUUPpy /UF6aE3ctFpsNhk1C5R/H8HsZ3g/98JLYK35dKAitA3EvGEeiQ8e1KtkgCapSAnZ W8q6/Bh4GNRK+g0+BLXHt5FbL29i3xtmEaFJZ4wRWKq2rFAExtRYevqkmcLUWr/N mlDABpQLV43avl8= -----END CERTIFICATE-----Generated at Tue May 12 22:16:44 2026 by rpki-client