$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer File: A439C604DD921E0B98280E0F41763C1FFE93A348.cer (raw, json) Hash identifier: vTcFczRG88rF26tkFDywhhBGHT36huIUian8D8P93eE= Subject key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 50D5B465C89811B81A80AF50E6D657D43C4F74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft caRepository: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:34:03 +0000 Certificate not after: Sun 02 May 2027 01:39:03 +0000 Subordinate resources: IP: 103.188.122.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d5:b4:65:c8:98:11:b8:1a:80:af:50:e6:d6:57:d4:3c:4f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:34:03 2026 GMT Not After : May 2 01:39:03 2027 GMT Subject: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:19:d3:79:62:46:da:0f:fb:e2:f7:8c:88: 24:65:67:dd:17:eb:ea:71:21:01:61:da:27:12:9c: cf:d9:7d:fe:3c:e5:bb:32:38:10:01:79:5d:d7:6c: 24:f8:1c:e0:b9:b0:cb:f0:fe:35:5c:a9:01:09:26: 5c:bc:72:8d:e2:e9:30:87:63:2a:7f:02:d4:dc:cb: 83:ed:39:ec:65:a6:e6:fd:06:ef:61:58:21:d4:17: 86:5d:57:81:39:c4:5e:a2:05:5c:50:da:39:60:eb: 31:6c:4f:d2:8d:0b:54:e1:43:92:2a:21:98:e2:67: 50:67:c1:d1:e9:ed:3f:b3:05:05:6b:b4:9e:6d:4e: b3:5d:01:2c:76:29:33:99:1f:9b:a2:ba:c1:67:f8: af:33:06:49:0e:96:fa:02:87:31:8c:c0:30:11:ae: 8e:25:fc:20:a0:f3:99:81:93:f8:8c:56:43:9a:4d: f1:2c:b2:69:40:df:83:52:19:95:03:c5:46:e4:7a: cf:24:15:b9:0b:1d:11:1f:13:f5:79:ae:13:be:3e: 60:19:d9:08:6e:19:c0:9a:3f:6b:0f:e4:ef:2e:9d: 98:aa:ce:80:01:a5:f2:be:a6:bb:08:12:3c:af:55: f6:bd:f1:75:fc:7c:d9:ad:c5:94:5c:a6:3b:da:de: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.122.0/23 Signature Algorithm: sha256WithRSAEncryption 89:56:17:54:9f:e2:35:4a:97:c5:7d:f7:0e:01:52:81:70:22: 21:c8:ef:48:c5:27:4f:c8:10:88:83:a1:19:25:bf:99:78:92: b7:fa:b7:ca:3b:66:57:63:29:9b:68:40:f8:f7:1c:f3:73:7e: c1:99:0d:40:e0:a5:6c:d6:b2:81:11:38:e8:6c:b7:94:ee:9a: e7:e4:52:84:cc:53:9b:68:1d:98:ac:49:72:aa:9b:36:31:71: 58:13:37:76:f0:f2:ed:f5:c9:94:2a:cc:da:27:8d:ae:34:ea: 05:01:af:a0:24:88:2c:2a:bb:24:58:a5:8b:a0:53:04:0a:c1: b6:aa:77:60:e5:a3:5b:e2:e8:95:8d:91:b8:ac:af:17:ef:cc: 66:33:a0:d1:5e:8f:68:a6:d4:07:80:f7:63:b4:00:65:c8:d7: f1:64:b2:1d:ed:92:71:5f:c0:95:f9:e5:c0:5d:2f:c0:89:37: db:bc:c9:56:fe:11:1b:f6:c9:a3:63:57:a3:43:a5:9c:3c:32: 0d:0e:65:46:94:a7:a4:cb:b8:3f:97:62:12:28:36:54:85:2d: 4e:3c:ec:9b:10:e3:7b:15:e3:f8:52:2a:69:44:54:cc:1e:cd: e8:1d:4f:55:95:0d:be:3c:ce:5f:0a:08:ce:21:d6:fe:9a:1d: 8e:36:e6:81 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgITUNW0ZciYEbgagK9Q5tZX1DxPdDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDQxOUE4NUNERjhB NDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUwHhcNMjYwNTAzMDEzNDAzWhcN MjcwNTAyMDEzOTAzWjAzMTEwLwYDVQQDEyhBNDM5QzYwNEREOTIxRTBCOTgyODBF MEY0MTc2M0MxRkZFOTNBMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5cZ03liRtoP++L3jIgkZWfdF+vqcSEBYdonEpzP2X3+POW7MjgQAXld12wk +BzgubDL8P41XKkBCSZcvHKN4ukwh2MqfwLU3MuD7TnsZabm/QbvYVgh1BeGXVeB OcReogVcUNo5YOsxbE/SjQtU4UOSKiGY4mdQZ8HR6e0/swUFa7SebU6zXQEsdikz mR+borrBZ/ivMwZJDpb6AocxjMAwEa6OJfwgoPOZgZP4jFZDmk3xLLJpQN+DUhmV A8VG5HrPJBW5Cx0RHxP1ea4Tvj5gGdkIbhnAmj9rD+TvLp2Yqs6AAaXyvqa7CBI8 r1X2vfF1/HzZrcWUXKY72t41GwIDAQABo4ICuTCCArUwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUpDnGBN2SHguYKA4PQXY8H/6To0gwHwYDVR0jBBgwFoAUQZqF zfikMFFpRoadHEkgN9a8bp4wDgYDVR0PAQH/BAQDAgEGMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xLzQx OUE4NUNERjhBNDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FacUZ6 ZmlrTUZGcFJvYWRIRWtnTjlhOGJwNC5jZXIwggEsBggrBgEFBQcBCwSCAR4wggEa MFUGCCsGAQUFBzAFhklyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvMIGBBggrBgEF BQcwCoZ1cnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhYTE2ZWM1 LTU4N2UtNDdhNC04YWZlLWQxYmVjZjU2YjYxNC8wL0E0MzlDNjA0REQ5MjFFMEI5 ODI4MEUwRjQxNzYzQzFGRkU5M0EzNDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3Jwa2ktcnJkcC5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvHowDQYJKoZIhvcNAQELBQADggEBAIlWF1Sf4jVKl8V99w4BUoFwIiHI70jF J0/IEIiDoRklv5l4krf6t8o7ZldjKZtoQPj3HPNzfsGZDUDgpWzWsoEROOhst5Tu mufkUoTMU5toHZisSXKqmzYxcVgTN3bw8u31yZQqzNonja406gUBr6AkiCwquyRY pYugUwQKwbaqd2Dlo1vi6JWNkbisrxfvzGYzoNFej2im1AeA92O0AGXI1/Fksh3t knFfwJX55cBdL8CJN9u8yVb+ERv2yaNjV6NDpZw8Mg0OZUaUp6TLuD+XYhIoNlSF LU487JsQ43sV4/hSKmlEVMwezegdT1WVDb48zl8KCM4h1v6aHY425oE= -----END CERTIFICATE-----Generated at Tue May 12 22:32:35 2026 by rpki-client