$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer (raw, json) Hash identifier: IFbtPjj7Esv1e0NTgly2cOpm6GamJBJVw6KUPFYffpc= Subject key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 623E5E6AD42F000DD6D791EFEE3A9796322BD06C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:25:04 +0000 Certificate not after: Sun 02 May 2027 01:30:04 +0000 Subordinate resources: IP: 103.244.104.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3e:5e:6a:d4:2f:00:0d:d6:d7:91:ef:ee:3a:97:96:32:2b:d0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:25:04 2026 GMT Not After : May 2 01:30:04 2027 GMT Subject: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:f2:0c:9c:6a:fa:30:9d:73:fd:69:f5:05: 49:84:59:44:2a:34:cf:a4:6b:97:5d:27:41:c7:80: 25:46:a9:85:02:05:4b:cb:f9:0a:5b:25:c1:2d:9f: df:ff:df:5a:6e:b6:cb:5e:51:3f:9b:86:4b:d4:14: a3:5e:1c:78:2c:24:1f:6f:0d:ef:57:01:8a:37:bf: e1:77:f3:0b:aa:db:92:b3:8c:5a:8a:2d:71:cd:06: 58:f3:49:c6:1f:f1:0d:7b:56:88:3c:b9:d7:a1:1b: a1:fb:53:c7:b8:e5:83:83:86:dd:42:ed:88:ad:47: f6:37:8a:fc:64:5d:33:c0:c5:9e:b8:02:23:df:21: 76:20:a9:24:f7:3a:41:86:fd:92:b0:bc:cc:39:e5: b2:92:c7:1d:30:a0:2e:aa:76:8f:83:d7:af:b1:29: a1:8b:b1:38:f3:3c:d9:7b:ea:92:6a:2e:d3:35:bc: 5b:6e:be:12:b1:14:90:66:aa:c6:f2:be:ad:53:af: 22:1b:cc:9e:af:34:7f:f5:60:41:71:45:1b:36:dd: 7f:6b:42:43:fb:6e:23:8e:5c:12:b8:6a:f0:03:66: cc:e8:60:a8:e0:23:6f:a1:15:76:cb:55:f7:c2:97: f6:16:43:31:b6:29:a8:c1:af:30:bd:a3:d7:00:fa: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/23 Signature Algorithm: sha256WithRSAEncryption 79:87:ea:4e:8b:b2:da:7b:82:06:6e:94:61:9e:ae:9d:72:43: 1f:da:4e:72:6f:fc:1b:ab:5b:73:0d:c2:97:61:8e:c3:ff:28: db:b0:1a:81:0b:3d:87:f2:1c:3b:7b:53:16:e2:e7:a4:07:6c: 65:00:eb:5a:ea:7a:49:49:96:45:51:84:87:99:b5:81:df:4a: d9:d2:ef:42:ff:01:6e:70:d1:38:c3:c0:15:4f:f2:6a:69:82: e5:92:e2:83:37:e1:05:4f:b7:ee:02:b5:d9:86:a8:a7:96:fe: f0:a8:3c:6b:fe:ac:1b:78:7d:c9:bb:c7:a7:18:c6:4b:9d:67: d7:4d:f6:41:ee:32:ae:c3:fa:91:04:18:4c:9d:3b:58:c3:9f: a8:8f:f2:0e:4d:e2:e9:bf:d0:e8:29:92:bd:a7:ce:84:f3:ad: 05:5c:b4:3c:bf:ff:a9:46:6f:de:d2:f8:98:01:6a:1d:55:97: da:84:e9:2f:c8:44:e0:ba:21:97:e5:ff:55:d8:dc:58:1d:b8: 11:af:0c:03:8f:08:bc:dd:5f:51:66:1d:b7:6f:6d:05:83:09: 14:05:8c:34:98:13:78:7f:d3:f4:d6:01:c3:1c:11:0f:d8:5c: 60:46:79:69:96:28:90:e8:c4:a1:82:79:76:69:40:77:d2:6b: 84:7c:fe:9b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYj5eatQvAA3W15Hv7jqXljIr0GwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjUwNFoX DTI3MDUwMjAxMzAwNFowMzExMC8GA1UEAxMoQTRBNUE1QzI2MDM5QUNGMjE2REYz RTVCMjg0MzQ1NjkzRUU4RjM0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOY8gycavownXP9afUFSYRZRCo0z6Rrl10nQceAJUaphQIFS8v5ClslwS2f 3//fWm62y15RP5uGS9QUo14ceCwkH28N71cBije/4XfzC6rbkrOMWootcc0GWPNJ xh/xDXtWiDy516EboftTx7jlg4OG3ULtiK1H9jeK/GRdM8DFnrgCI98hdiCpJPc6 QYb9krC8zDnlspLHHTCgLqp2j4PXr7EpoYuxOPM82Xvqkmou0zW8W26+ErEUkGaq xvK+rVOvIhvMnq80f/VgQXFFGzbdf2tCQ/tuI45cErhq8ANmzOhgqOAjb6EVdstV 98KX9hZDMbYpqMGvML2j1wD6ZrMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKSlpcJgOazyFt8+WyhDRWk+6PNMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlkMmZhNTFlLTNmZDQtNDUyMC1iMzc1LTA5ZWVmNWUwZTUxMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZDJmYTUx ZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC9BNEE1QTVDMjYwMzlBQ0Yy MTZERjNFNUIyODQzNDU2OTNFRThGMzRDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/RoMA0GCSqGSIb3DQEBCwUAA4IBAQB5h+pOi7Lae4IGbpRhnq6dckMf2k5y b/wbq1tzDcKXYY7D/yjbsBqBCz2H8hw7e1MW4uekB2xlAOta6npJSZZFUYSHmbWB 30rZ0u9C/wFucNE4w8AVT/JqaYLlkuKDN+EFT7fuArXZhqinlv7wqDxr/qwbeH3J u8enGMZLnWfXTfZB7jKuw/qRBBhMnTtYw5+oj/IOTeLpv9DoKZK9p86E860FXLQ8 v/+pRm/e0viYAWodVZfahOkvyETguiGX5f9V2NxYHbgRrwwDjwi83V9RZh23b20F gwkUBYw0mBN4f9P01gHDHBEP2FxgRnlpliiQ6MShgnl2aUB30muEfP6b -----END CERTIFICATE-----Generated at Tue May 12 22:47:18 2026 by rpki-client