$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer (raw, json) Hash identifier: rRrmPL7qhRdwb4Q9NcOZow6gvuxZvJfM+JjEnpvSI7k= Subject key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E2E90A0509E2BA6649933165EF9F846571C902B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:27:56 +0000 Certificate not after: Sun 02 May 2027 00:32:56 +0000 Subordinate resources: IP: 103.129.24.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2e:90:a0:50:9e:2b:a6:64:99:33:16:5e:f9:f8:46:57:1c:90:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:27:56 2026 GMT Not After : May 2 00:32:56 2027 GMT Subject: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:06:60:1e:77:0e:cd:90:ac:cb:d3:e5:a8: 73:8a:de:5d:1a:e7:c2:96:b4:4a:29:7d:5b:b3:0a: 75:93:7c:81:62:58:b2:cb:7d:72:b2:a7:f7:1a:29: f4:d0:2f:50:6c:84:cf:d6:c5:94:4a:e3:ad:f9:75: 62:0f:b8:9f:3e:1d:ef:43:8b:d1:95:05:17:99:a3: 9c:44:b5:b8:f6:ea:e1:71:a3:17:e9:06:62:fa:8b: a8:56:ee:d2:21:54:eb:ba:d4:fc:da:f4:69:15:b5: 31:6f:03:b4:6d:d3:dc:a5:1e:f2:54:a0:a3:64:c5: a2:76:23:c8:f1:01:0a:73:a9:b6:03:66:9e:c6:d4: e3:c0:cb:16:0d:96:c8:31:57:b2:7e:32:66:91:9b: 87:15:85:d9:f6:be:66:f5:37:ef:71:a5:01:c4:32: 32:2d:50:8e:99:35:39:79:e8:75:9e:d8:d4:ab:f7: 19:ac:4c:ae:98:98:99:d5:a5:d1:12:08:ec:c2:a2: 3a:ba:7d:bd:39:48:e2:ec:81:16:e1:76:cb:69:ad: af:e4:6f:29:e2:37:23:d0:56:43:c5:1f:a9:b0:0d: 6f:82:00:34:39:3c:ac:a2:5d:30:f1:9c:3b:cc:c1: 96:31:51:80:5c:b4:ec:a8:72:f1:b3:81:c9:a6:c5: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.24.0/22 Signature Algorithm: sha256WithRSAEncryption 46:b0:db:83:26:f6:12:c4:09:15:a9:03:e7:27:11:b5:c0:46: 15:69:30:9e:3f:34:7a:ee:08:c9:6f:52:f4:8f:33:e2:20:50: 71:0e:d4:f4:e0:02:ae:76:94:8a:b3:7a:52:ca:c0:e5:25:8b: b7:3f:2b:82:62:3d:d9:3d:61:80:e0:7d:a9:05:26:75:05:06: 1b:e2:56:ac:56:f7:90:78:47:1b:1d:c0:47:67:6d:26:b3:9a: bc:7c:4a:85:78:42:9c:af:e3:26:49:73:00:2f:71:6f:32:69: 42:dd:7f:9e:92:32:d7:ec:b2:73:fc:0d:3f:5c:b4:13:be:5b: 3a:5e:e2:7f:77:37:82:68:22:45:aa:2f:60:97:c8:52:2d:e5: 37:68:0f:22:04:3d:43:1c:25:a1:f0:96:16:0a:ba:74:9c:05: 22:00:9a:b5:e4:b4:cc:c0:8a:8d:ce:5e:b3:ac:27:7c:a4:8e: 7c:6d:e8:ed:7a:b5:fd:3d:c1:63:3d:a9:00:fd:dc:65:4b:74: ea:fd:f0:a3:f7:20:70:3c:32:1d:4e:3d:00:60:ea:df:fe:e5: b6:e3:41:b7:4d:f8:92:c8:0b:c0:17:55:bb:fd:94:fd:f1:98: 40:8d:e2:ab:44:92:be:62:15:e6:18:a8:ae:86:ab:7a:94:1b: 74:ad:41:5f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULi6QoFCeK6ZkmTMWXvn4RlcckCswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjc1NloX DTI3MDUwMjAwMzI1NlowMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzky NTZEQkQzNUE2N0E4QzNDNzlDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXwBmAedw7NkKzL0+Woc4reXRrnwpa0Sil9W7MKdZN8gWJYsst9crKn9xop 9NAvUGyEz9bFlErjrfl1Yg+4nz4d70OL0ZUFF5mjnES1uPbq4XGjF+kGYvqLqFbu 0iFU67rU/Nr0aRW1MW8DtG3T3KUe8lSgo2TFonYjyPEBCnOptgNmnsbU48DLFg2W yDFXsn4yZpGbhxWF2fa+ZvU373GlAcQyMi1Qjpk1OXnodZ7Y1Kv3GaxMrpiYmdWl 0RII7MKiOrp9vTlI4uyBFuF2y2mtr+RvKeI3I9BWQ8UfqbANb4IANDk8rKJdMPGc O8zBljFRgFy07Khy8bOByabFOIsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKOP32Hf1F6Pocklbb01pnqMPHnOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ3ZGYyYWQwLTZlOTktNDRhNy1hMDY4LTUwMDY1NmZmYjAwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80N2RmMmFk MC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC9BMzhGREY2MURGRDQ1RThG QTFDOTI1NkRCRDM1QTY3QThDM0M3OUNFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4EYMA0GCSqGSIb3DQEBCwUAA4IBAQBGsNuDJvYSxAkVqQPnJxG1wEYVaTCe PzR67gjJb1L0jzPiIFBxDtT04AKudpSKs3pSysDlJYu3PyuCYj3ZPWGA4H2pBSZ1 BQYb4lasVveQeEcbHcBHZ20ms5q8fEqFeEKcr+MmSXMAL3FvMmlC3X+ekjLX7LJz /A0/XLQTvls6XuJ/dzeCaCJFqi9gl8hSLeU3aA8iBD1DHCWh8JYWCrp0nAUiAJq1 5LTMwIqNzl6zrCd8pI58bejterX9PcFjPakA/dxlS3Tq/fCj9yBwPDIdTj0AYOrf /uW240G3TfiSyAvAF1W7/ZT98ZhAjeKrRJK+YhXmGKiuhqt6lBt0rUFf -----END CERTIFICATE-----Generated at Tue May 12 22:10:18 2026 by rpki-client