$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer (raw, json) Hash identifier: ZqebUKKWXUqvZqsG9QsvLQ0f3y8sR8H/Dot/yI2SXb4= Subject key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 48774DCACF6705BFA00EEDAC0BD33E756464EC93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:24:47 +0000 Certificate not after: Sun 02 May 2027 00:29:47 +0000 Subordinate resources: IP: 103.58.111.0/24 IP: 2001:df4:4400::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:77:4d:ca:cf:67:05:bf:a0:0e:ed:ac:0b:d3:3e:75:64:64:ec:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:24:47 2026 GMT Not After : May 2 00:29:47 2027 GMT Subject: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:26:32:a5:03:a8:7a:f8:7c:90:aa:da:37:4b: b8:68:92:b3:7c:a5:ab:41:8f:ce:93:99:ea:df:9a: 96:55:d9:f8:b8:56:9e:ed:25:06:4a:3c:18:a3:2c: 0d:f6:81:e4:0a:67:c4:b9:89:1a:20:ee:2b:42:f1: 87:a3:04:16:a0:f4:ff:65:a3:43:9b:e1:91:19:d9: 8c:c1:88:e7:8c:75:c5:2d:7e:6f:51:21:a8:01:0c: f1:25:5c:e6:0e:af:78:b9:fb:58:3b:d2:f3:49:64: 49:ff:75:18:d1:e2:66:f6:17:30:36:f8:35:4b:b0: c9:ff:2f:91:1f:03:80:fa:68:ae:83:f0:aa:bf:d3: 3e:e6:b7:4a:2f:78:50:a1:00:56:0e:da:9f:cd:34: 7d:ce:04:15:6a:12:83:47:df:05:85:33:b1:a3:b0: 5f:54:aa:4e:ab:34:ca:e6:d1:0e:e8:c2:d1:b4:ff: b4:9f:3a:af:52:fa:90:47:ea:54:fb:13:9a:32:1c: 5b:b2:08:ec:ae:45:eb:83:3d:57:ec:dd:b5:e7:9c: 1e:97:87:45:b7:fd:7c:a9:36:40:6e:29:59:a3:63: df:1a:e6:ea:f8:d7:1f:d2:6e:14:4e:47:c2:e4:1c: 0e:3a:02:73:08:c7:e7:a4:3e:97:40:d6:01:81:96: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.111.0/24 IPv6: 2001:df4:4400::/48 Signature Algorithm: sha256WithRSAEncryption 11:a7:6c:4c:d0:85:29:55:b0:bc:64:ca:ba:27:c0:e0:73:ad: 0b:44:a3:d2:32:a1:b8:01:18:ea:a3:f1:53:1c:17:9c:01:e9: 36:47:85:80:77:20:01:f3:fe:95:a2:fa:d6:6d:27:d3:c9:bd: 4f:32:59:0a:20:db:bb:2b:e9:6b:89:e6:d2:20:87:69:c2:58: 93:5d:b1:8c:87:f3:0b:f4:39:19:60:aa:f0:0b:16:cd:00:9c: 97:e1:b0:28:23:cb:0a:2b:73:a7:02:07:58:b8:ba:84:95:40: e4:e0:de:70:16:25:7c:1c:40:d2:dc:56:d3:1b:6b:b4:13:83: f4:b2:04:83:20:f3:6b:61:08:9f:ae:06:6f:d6:32:38:29:12: 42:be:b3:9f:57:5f:23:be:5e:24:a3:30:3d:81:13:39:a5:a6: be:58:e8:84:2b:10:84:d9:c4:67:5c:36:18:8e:40:00:29:1d: 50:af:51:ca:d3:a1:01:af:91:db:17:87:fd:46:e5:8e:3d:92: 19:b4:77:42:11:49:f0:36:ac:a1:14:41:e2:f5:4c:9b:0f:b6: d3:0b:4d:99:c5:1f:2a:04:81:96:ef:73:19:18:0d:28:53:a6: e8:9e:94:50:0f:5b:f9:04:d1:62:4f:f5:3b:f8:69:de:68:c4: 03:a8:e4:95 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSHdNys9nBb+gDu2sC9M+dWRk7JMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjQ0N1oX DTI3MDUwMjAwMjk0N1owMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3 QUE5MjU5QzcyNjREQTFFMjNCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUmMqUDqHr4fJCq2jdLuGiSs3ylq0GPzpOZ6t+allXZ+LhWnu0lBko8GKMs DfaB5ApnxLmJGiDuK0Lxh6MEFqD0/2WjQ5vhkRnZjMGI54x1xS1+b1EhqAEM8SVc 5g6veLn7WDvS80lkSf91GNHiZvYXMDb4NUuwyf8vkR8DgPporoPwqr/TPua3Si94 UKEAVg7an800fc4EFWoSg0ffBYUzsaOwX1SqTqs0yubRDujC0bT/tJ86r1L6kEfq VPsTmjIcW7II7K5F64M9V+zdteecHpeHRbf9fKk2QG4pWaNj3xrm6vjXH9JuFE5H wuQcDjoCcwjH56Q+l0DWAYGWKCMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKOQB/PioouOfAt6qSWccmTaHiO8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQzZTQxNzdkLTgwOTMtNDQ3Yy04N2I1LWM3OWM4Y2I0YzczMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80M2U0MTc3 ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9BMzkwMDdGM0UyQTI4QjhF N0MwQjdBQTkyNTlDNzI2NERBMUUyM0JDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZzpvMA8EAgACMAkDBwAgAQ30RAAwDQYJKoZIhvcNAQELBQADggEBABGnbEzQ hSlVsLxkyronwOBzrQtEo9IyobgBGOqj8VMcF5wB6TZHhYB3IAHz/pWi+tZtJ9PJ vU8yWQog27sr6WuJ5tIgh2nCWJNdsYyH8wv0ORlgqvALFs0AnJfhsCgjyworc6cC B1i4uoSVQOTg3nAWJXwcQNLcVtMba7QTg/SyBIMg82thCJ+uBm/WMjgpEkK+s59X XyO+XiSjMD2BEzmlpr5Y6IQrEITZxGdcNhiOQAApHVCvUcrToQGvkdsXh/1G5Y49 khm0d0IRSfA2rKEUQeL1TJsPttMLTZnFHyoEgZbvcxkYDShTpuielFAPW/kE0WJP 9Tv4ad5oxAOo5JU= -----END CERTIFICATE-----Generated at Tue May 12 22:02:37 2026 by rpki-client