$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer File: A41E81A674D539D19E0045B0769140AE1C59B2A6.cer (raw, json) Hash identifier: IKtjZEKOhiMQUKrVh/iJg2aOaJ2aWlj6a+CHZgUWfUg= Subject key identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 35F5D8C9074684B60C4236E3F774305970AA44E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:44:50 +0000 Certificate not after: Sat 01 May 2027 23:49:50 +0000 Subordinate resources: IP: 103.192.81.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f5:d8:c9:07:46:84:b6:0c:42:36:e3:f7:74:30:59:70:aa:44:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:44:50 2026 GMT Not After : May 1 23:49:50 2027 GMT Subject: CN=A41E81A674D539D19E0045B0769140AE1C59B2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:27:0e:86:36:a9:38:31:3b:33:b5:d8:2b: ab:81:23:65:7b:b0:a9:b1:c0:7c:0c:50:30:c8:34: d9:2f:f9:7d:aa:60:a9:c8:e0:89:b3:db:c8:c4:bd: 9f:92:b3:5f:ce:28:5c:cd:5a:90:de:b4:10:fb:11: 01:07:37:04:6c:c6:b5:af:85:3f:49:20:22:60:5c: b7:52:71:88:61:ff:72:14:4a:ef:cf:1c:05:2f:3a: 09:ea:d3:44:68:ea:15:b3:c2:fa:58:21:c7:20:32: 5d:73:9e:a0:e6:62:bd:40:96:8c:4f:da:18:7a:82: 6a:bc:c8:b3:d8:4b:b3:6a:8b:96:4f:19:65:96:d3: f2:13:f7:fb:3b:ea:7d:e5:24:98:6e:23:1d:e1:d6: 18:ef:d7:de:20:0c:06:b3:c0:af:13:22:39:44:f3: 7b:72:ab:00:04:ad:62:16:e7:0f:40:eb:7a:fa:38: 5e:89:f5:a0:0a:2c:73:31:d3:56:66:57:ce:a6:56: ae:70:ab:f8:66:35:b1:38:f2:d1:b8:30:93:00:0a: cc:8f:04:ac:f0:59:09:b1:2a:cf:7a:57:9b:e1:be: 7e:39:08:59:f3:94:7b:e4:0f:26:a3:17:f1:aa:16: 23:72:7a:c4:3f:38:c9:96:2f:7c:61:d7:42:ca:cf: 7d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.81.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:ae:a3:e6:c2:6d:54:e8:22:18:f2:25:51:91:7a:52:aa:71: 76:e9:02:94:75:4f:86:ad:8c:aa:d1:70:8f:64:d2:1c:12:c0: 0f:bd:d6:51:46:ed:11:26:e7:15:6c:54:b1:4c:1c:ca:d9:cb: 0a:56:75:ba:c1:67:9d:d3:a1:40:8e:cd:fc:35:38:86:62:23: 66:75:70:48:ca:dc:fe:df:52:3b:bc:cb:35:fc:0d:d6:bb:10: e8:d3:06:09:5e:17:12:4f:bf:3b:7b:06:9a:f3:6e:1a:b6:54: d4:62:44:07:8f:af:c4:dd:41:9c:ee:9d:c0:ce:f5:f1:01:28: 0a:f9:8f:a3:b3:78:0d:6a:42:77:61:a5:db:40:e4:ec:54:2b: 28:75:b8:a2:ec:ba:2c:1c:7d:50:a2:56:b4:63:67:b4:7f:a4: 1a:34:84:32:58:9d:c7:a1:2a:11:53:df:20:c4:c4:45:19:5a: fe:71:4e:fc:09:45:0c:5c:19:b8:d4:12:7f:ac:5d:64:22:94: d0:d1:76:b9:ea:36:54:0d:89:ed:4a:3e:8a:c8:83:02:6b:1f: 95:1f:ba:b2:b9:30:45:ba:43:fc:b5:8c:42:c6:ca:bc:e0:81: bb:8e:6f:25:db:e1:97:74:1f:83:eb:16:ea:e1:c2:22:e8:0a: a6:39:1c:2b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNfXYyQdGhLYMQjbj93QwWXCqROMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDQ1MFoX DTI3MDUwMTIzNDk1MFowMzExMC8GA1UEAxMoQTQxRTgxQTY3NEQ1MzlEMTlFMDA0 NUIwNzY5MTQwQUUxQzU5QjJBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzeJw6GNqk4MTsztdgrq4EjZXuwqbHAfAxQMMg02S/5fapgqcjgibPbyMS9 n5KzX84oXM1akN60EPsRAQc3BGzGta+FP0kgImBct1JxiGH/chRK788cBS86CerT RGjqFbPC+lghxyAyXXOeoOZivUCWjE/aGHqCarzIs9hLs2qLlk8ZZZbT8hP3+zvq feUkmG4jHeHWGO/X3iAMBrPArxMiOUTze3KrAAStYhbnD0Drevo4Xon1oAosczHT VmZXzqZWrnCr+GY1sTjy0bgwkwAKzI8ErPBZCbEqz3pXm+G+fjkIWfOUe+QPJqMX 8aoWI3J6xD84yZYvfGHXQsrPfdECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKQegaZ01TnRngBFsHaRQK4cWbKmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA2NGZmN2M5LWU5MDUtNDRkNi1iYzM1LWM3ZGJiMDcwYjc1Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNjRmZjdj OS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC9BNDFFODFBNjc0RDUzOUQx OUUwMDQ1QjA3NjkxNDBBRTFDNTlCMkE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8BRMA0GCSqGSIb3DQEBCwUAA4IBAQBOrqPmwm1U6CIY8iVRkXpSqnF26QKU dU+GrYyq0XCPZNIcEsAPvdZRRu0RJucVbFSxTBzK2csKVnW6wWed06FAjs38NTiG YiNmdXBIytz+31I7vMs1/A3WuxDo0wYJXhcST787ewaa824atlTUYkQHj6/E3UGc 7p3AzvXxASgK+Y+js3gNakJ3YaXbQOTsVCsodbii7LosHH1Qola0Y2e0f6QaNIQy WJ3HoSoRU98gxMRFGVr+cU78CUUMXBm41BJ/rF1kIpTQ0Xa56jZUDYntSj6KyIMC ax+VH7qyuTBFukP8tYxCxsq84IG7jm8l2+GXdB+D6xbq4cIi6AqmORwr -----END CERTIFICATE-----Generated at Wed May 13 02:19:20 2026 by rpki-client