$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer (raw, json) Hash identifier: UgClSvfGXgxu32Ywn6CpsQyY0APWsaSsLUjDZzGQRDo= Subject key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3544BDBE2CD4E7B19DCCBC7AB308D66CFF3E7A50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:32:18 +0000 Certificate not after: Sun 02 May 2027 00:37:18 +0000 Subordinate resources: IP: 103.11.134.0/23 IP: 103.40.54.0/23 IP: 2001:df2:6000::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:44:bd:be:2c:d4:e7:b1:9d:cc:bc:7a:b3:08:d6:6c:ff:3e:7a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:32:18 2026 GMT Not After : May 2 00:37:18 2027 GMT Subject: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:3d:22:94:7d:07:09:b0:a0:37:74:2d:37: ae:a5:d6:d5:b2:83:98:6d:a1:cd:de:4c:ad:3d:c5: 1b:e4:46:38:d2:f8:a0:72:10:f4:fb:b9:50:64:08: d9:60:56:ef:28:7d:4d:5c:9a:2b:d4:3b:6e:da:5b: 6e:c2:06:85:c8:58:6e:ff:38:d1:63:b4:ab:54:35: 41:06:22:79:b6:ee:fa:e4:2c:ca:f5:93:95:ac:ad: f7:de:16:a3:9c:8b:85:d2:42:25:37:67:72:62:41: 54:09:d4:53:2f:da:8c:3f:f8:ec:e6:d9:f9:4d:87: 5f:d3:98:01:7e:43:d3:24:7e:7e:29:6a:d4:e9:01: 53:ba:20:86:35:cf:1c:83:cd:2f:62:04:6e:cf:93: 5f:3f:4b:ae:17:7e:4a:46:88:fb:f0:a2:e9:19:83: 7a:fa:a8:f0:b5:ec:6c:27:b8:a3:67:b1:42:5d:c6: 38:6f:6b:4a:c6:8c:7a:b1:82:2e:04:bc:bb:fe:34: 53:83:90:55:11:3d:f7:72:a4:e1:44:01:53:d6:e7: 4d:52:fc:77:84:ac:c7:65:a5:0c:85:55:3d:f6:0a: 8c:d4:57:4f:8e:07:15:b5:00:d9:e4:5d:f9:13:b2: 63:5d:94:3e:ed:e9:27:cb:fc:8b:73:2d:87:1f:96: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.134.0/23 103.40.54.0/23 IPv6: 2001:df2:6000::/48 Signature Algorithm: sha256WithRSAEncryption 80:20:c2:8a:30:16:b3:3d:1c:30:54:69:66:a7:78:6d:43:9e: 2f:53:25:5b:5d:b8:c7:ca:ce:0f:2a:27:8a:a7:62:08:70:95: be:25:b6:8f:c9:7a:15:1b:73:74:2b:f2:8a:5e:68:1a:bb:ac: 6b:45:ab:de:ec:ec:b1:90:54:30:77:98:c4:ff:fd:26:0b:19: d6:25:b8:76:3b:e3:11:14:2e:75:35:7d:d1:0f:68:06:33:51: 8d:fc:da:5d:44:57:e7:85:9e:c6:a3:bd:df:59:81:fa:af:ed: 43:84:f3:c4:10:0c:a5:a0:72:ca:87:cf:93:bd:49:7e:1a:41: 36:57:fe:83:0c:91:4c:7f:70:c2:6b:a1:19:d3:e8:05:45:c7: b2:f7:fc:80:f5:a5:85:05:85:23:38:f0:e2:68:2b:02:09:63: 8f:ed:57:2a:41:7b:a1:f4:a1:76:dd:c9:9c:f0:e7:89:a0:48: f7:e1:08:3b:52:71:93:d7:bb:f7:55:97:9c:30:1c:44:fd:5c: 72:34:1a:2f:36:28:39:d2:d8:ea:de:6a:15:86:df:b5:be:55: 38:97:01:b0:a6:4b:82:d1:b3:b2:f5:1b:a6:c1:cd:b3:66:b3: ac:1a:c3:5a:86:a5:7b:d5:53:d1:03:39:d7:e4:46:5c:1e:8b: 69:01:7d:7f -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUNUS9vizU57GdzLx6swjWbP8+elAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzIxOFoX DTI3MDUwMjAwMzcxOFowMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3 N0Y0REFFN0RFMEE0MzdFODg1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAItoPSKUfQcJsKA3dC03rqXW1bKDmG2hzd5MrT3FG+RGONL4oHIQ9Pu5UGQI 2WBW7yh9TVyaK9Q7btpbbsIGhchYbv840WO0q1Q1QQYiebbu+uQsyvWTlayt994W o5yLhdJCJTdncmJBVAnUUy/ajD/47ObZ+U2HX9OYAX5D0yR+filq1OkBU7oghjXP HIPNL2IEbs+TXz9Lrhd+SkaI+/Ci6RmDevqo8LXsbCe4o2exQl3GOG9rSsaMerGC LgS8u/40U4OQVRE993Kk4UQBU9bnTVL8d4Ssx2WlDIVVPfYKjNRXT44HFbUA2eRd +ROyY12UPu3pJ8v8i3Mthx+We8UCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKQby8tQg3m35w139Nrn3gpDfohbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRmZmI3NzY3LTNkZTktNDgzMy1iNGU3LWIxYjYyZWUzY2Q5OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZmZiNzc2 Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BNDFCQ0JDQjUwODM3OUI3 RTcwRDc3RjREQUU3REUwQTQzN0U4ODVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZwuGAwQBZyg2MA8EAgACMAkDBwAgAQ3yYAAwDQYJKoZIhvcNAQELBQADggEB AIAgwoowFrM9HDBUaWaneG1Dni9TJVtduMfKzg8qJ4qnYghwlb4lto/JehUbc3Qr 8opeaBq7rGtFq97s7LGQVDB3mMT//SYLGdYluHY74xEULnU1fdEPaAYzUY382l1E V+eFnsajvd9Zgfqv7UOE88QQDKWgcsqHz5O9SX4aQTZX/oMMkUx/cMJroRnT6AVF x7L3/ID1pYUFhSM48OJoKwIJY4/tVypBe6H0oXbdyZzw54mgSPfhCDtScZPXu/dV l5wwHET9XHI0Gi82KDnS2OreahWG37W+VTiXAbCmS4LRs7L1G6bBzbNms6waw1qG pXvVU9EDOdfkRlwei2kBfX8= -----END CERTIFICATE-----Generated at Tue May 12 22:32:14 2026 by rpki-client