$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer (raw, json) Hash identifier: 1/yN8CaMVWDcf/a4Sk43IWED+YF9+SnhNQTwN5OkS0c= Subject key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 58FCE088FDE9C747D443BC0B84406332C6E5C970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:48 +0000 Certificate not after: Sun 02 May 2027 01:45:48 +0000 Subordinate resources: IP: 103.160.12.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fc:e0:88:fd:e9:c7:47:d4:43:bc:0b:84:40:63:32:c6:e5:c9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:48 2026 GMT Not After : May 2 01:45:48 2027 GMT Subject: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:ba:f1:16:ea:c7:86:dd:29:dc:8d:e2:2f: c9:25:9d:57:86:3f:71:25:41:7c:53:e4:84:70:5d: 36:90:7a:35:2f:e3:24:4a:b5:bb:7c:a3:02:8e:0e: 92:df:5a:60:52:73:41:02:20:31:52:78:03:d3:f7: f6:a4:b1:18:f0:e3:58:8b:77:f9:34:a8:7a:9c:12: a5:ed:26:f6:36:50:f4:ae:4b:c6:37:da:ab:20:c9: f4:b2:5e:7b:3b:c7:d1:ea:20:ac:cf:cf:e3:72:90: 9e:09:db:ca:f0:cc:32:3b:9d:bc:1a:15:d0:ca:d1: a4:10:f1:86:60:9d:2c:8b:36:da:7f:8b:63:6c:10: e0:df:c8:75:9f:db:2a:f7:a4:9f:ca:dc:22:d3:bc: 26:9c:22:25:8b:f3:70:d5:38:c5:60:50:c4:1e:b7: 42:5c:fd:ff:9b:22:60:2d:49:43:07:1e:14:70:f8: 1e:8f:e6:36:71:fa:0d:9d:28:76:ca:f4:49:d2:16: 79:1a:6d:47:11:b3:d2:86:0e:91:2b:dd:f5:e5:be: 1d:82:e2:57:8c:bd:57:9c:9a:f0:0d:d7:e1:59:b8: 12:98:22:26:86:9f:57:1f:3a:b1:9e:52:19:58:60: c2:28:82:00:e5:2d:db:19:87:3e:c9:74:de:a0:fb: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.12.0/23 Signature Algorithm: sha256WithRSAEncryption 05:e0:72:1b:eb:42:d5:d1:c5:f0:a3:57:3a:c6:c3:dc:95:cf: 88:28:91:71:ba:89:dc:dc:b5:95:c1:46:01:2a:ec:59:73:fa: 34:17:aa:da:fd:99:29:5b:83:94:e8:b0:51:0a:d6:7c:09:14: 36:0c:6e:c3:b4:e0:d9:25:2a:5d:7a:57:ab:b8:89:07:5f:aa: 82:bc:92:dd:82:51:2b:54:0f:2b:38:11:aa:f6:d8:5a:4d:0f: 03:e7:4d:48:3b:e2:67:eb:08:31:0f:fd:a6:db:78:3a:64:4e: 07:b2:31:a1:21:ac:48:d0:ed:8d:ee:a3:9d:a5:82:20:64:89: 0f:3f:fc:4d:da:95:44:cf:62:78:e6:d9:3c:52:d6:42:d5:f1: 31:7a:06:0f:5b:d4:56:61:a4:e6:fc:cf:e9:13:b4:7e:8f:07: cd:7e:37:fe:98:d0:e5:42:0c:63:95:b9:77:ac:3b:22:84:d5: ac:03:f9:73:9c:7d:f3:27:7c:3b:f3:a8:ed:7c:8a:44:63:48: 92:d5:81:64:34:27:57:57:a1:84:46:b5:57:2e:d0:d0:6a:ad: cf:d9:95:10:f4:23:c3:cf:41:ac:84:f2:4a:04:77:56:f8:4e: c9:8e:57:df:e5:e8:a3:bb:e2:95:da:d6:3e:2b:76:f3:a5:37: a1:0a:77:a5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWPzgiP3px0fUQ7wLhEBjMsblyXAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDA0OFoX DTI3MDUwMjAxNDU0OFowMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FE MDkwODMyRUZFQzRCRkQwMkY0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkwuvEW6seG3SncjeIvySWdV4Y/cSVBfFPkhHBdNpB6NS/jJEq1u3yjAo4O kt9aYFJzQQIgMVJ4A9P39qSxGPDjWIt3+TSoepwSpe0m9jZQ9K5LxjfaqyDJ9LJe ezvH0eogrM/P43KQngnbyvDMMjudvBoV0MrRpBDxhmCdLIs22n+LY2wQ4N/IdZ/b Kvekn8rcItO8JpwiJYvzcNU4xWBQxB63Qlz9/5siYC1JQwceFHD4Ho/mNnH6DZ0o dsr0SdIWeRptRxGz0oYOkSvd9eW+HYLiV4y9V5ya8A3X4Vm4EpgiJoafVx86sZ5S GVhgwiiCAOUt2xmHPsl03qD7oX0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKNBHHe15U8jk3rQkIMu/sS/0C9NMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I0YzZmNzcwLTY4NmEtNDVlZi04ZGZiLTBjM2E4N2QzZDhkYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNGM2Zjc3 MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC9BMzQxMUM3N0I1RTU0RjIz OTM3QUQwOTA4MzJFRkVDNEJGRDAyRjRELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6AMMA0GCSqGSIb3DQEBCwUAA4IBAQAF4HIb60LV0cXwo1c6xsPclc+IKJFx uonc3LWVwUYBKuxZc/o0F6ra/ZkpW4OU6LBRCtZ8CRQ2DG7DtODZJSpdeleruIkH X6qCvJLdglErVA8rOBGq9thaTQ8D501IO+Jn6wgxD/2m23g6ZE4HsjGhIaxI0O2N 7qOdpYIgZIkPP/xN2pVEz2J45tk8UtZC1fExegYPW9RWYaTm/M/pE7R+jwfNfjf+ mNDlQgxjlbl3rDsihNWsA/lznH3zJ3w786jtfIpEY0iS1YFkNCdXV6GERrVXLtDQ aq3P2ZUQ9CPDz0GshPJKBHdW+E7Jjlff5eiju+KV2tY+K3bzpTehCnel -----END CERTIFICATE-----Generated at Tue May 12 22:10:16 2026 by rpki-client