$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer File: A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer (raw, json) Hash identifier: O1yIZ8Pk9xRW0kLqjoNe+ZNa5bGz2ecTPeShGg0rSkc= Subject key identifier: A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 284C1F27A377F45A55D6A2459ED574CE351883BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:05 +0000 Certificate not after: Sun 02 May 2027 00:49:05 +0000 Subordinate resources: IP: 103.161.146.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4c:1f:27:a3:77:f4:5a:55:d6:a2:45:9e:d5:74:ce:35:18:83:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:05 2026 GMT Not After : May 2 00:49:05 2027 GMT Subject: CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:3e:9a:76:73:cb:68:68:27:a9:03:e2:ee: d4:4a:7e:4b:19:e1:40:ec:83:4f:63:84:2f:28:32: 50:f9:93:27:99:96:1e:70:49:37:59:32:40:c9:af: 5c:96:17:b1:5d:04:cd:4f:74:10:f9:e8:a5:2e:14: 3f:35:f9:02:88:3a:37:cb:e0:ab:6a:2d:5b:c2:bb: 84:c4:1c:e5:3d:57:00:c3:ae:b8:67:fb:5f:f7:83: e4:5d:c1:70:87:bd:df:80:c8:7a:f2:66:da:f4:5e: 89:5e:ce:bd:1f:31:3a:d1:73:38:4d:79:8e:c9:3c: f3:b2:0e:ee:5a:88:5e:d0:8a:5f:27:bc:b3:48:fa: d4:b4:c8:32:ff:1b:91:45:99:5a:2f:16:67:cf:ed: d5:f2:94:dc:94:02:49:50:df:c2:b3:95:d2:d6:95: ec:fc:14:c4:b8:a2:14:96:22:92:57:12:48:a2:4c: 58:6b:0a:d9:ef:e9:61:89:c0:a9:22:1e:9e:81:11: 0d:1e:76:56:d7:c6:46:8b:f6:26:01:aa:c3:64:b5: 0d:51:bc:6a:be:b6:4e:71:c1:61:71:e5:b4:f4:11: 5d:58:48:e8:12:74:8e:4b:72:52:1a:e2:cb:6a:d9: 7e:38:bd:37:c1:2f:79:ba:da:8b:ae:18:1d:19:ab: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.146.0/23 Signature Algorithm: sha256WithRSAEncryption 88:6c:3d:ab:80:29:74:42:7c:31:1d:4d:9f:0e:cb:37:ea:a8: 00:b2:24:11:a5:dc:74:04:f8:9a:dc:3e:85:3a:85:56:65:46: f4:f4:7c:22:ea:80:1e:a3:b9:f3:c1:6b:b2:c4:f2:71:d5:bb: 40:dd:ba:e5:f9:96:21:c7:9f:15:b2:1e:c0:fd:87:a4:ce:4d: fe:bf:48:19:58:ee:a4:78:84:85:8a:e3:fc:ee:4a:4b:18:fa: 0f:37:4d:c1:04:d6:0a:57:eb:cd:77:9b:86:59:64:8a:0a:9b: b9:ae:69:08:06:ba:1e:e5:c0:4e:66:c8:11:26:a0:82:21:24: ab:6b:16:71:70:30:bf:3a:36:c7:1d:63:98:8f:e6:06:02:b1: 8f:13:a5:3e:eb:3b:5d:89:06:7d:a4:b8:c2:54:95:60:a2:0d: ce:b9:07:7a:03:ce:0d:3d:b8:2c:70:0d:bc:f3:a3:df:9b:c5: 09:23:62:34:5a:30:9a:2e:94:03:57:a9:15:8b:17:5d:8a:46: bf:98:cc:9f:2e:0e:de:30:58:0d:92:46:d4:9e:4a:29:5f:79: 36:90:93:db:d0:18:49:2c:0f:a9:88:5e:0f:4b:12:26:50:71: 96:9c:bf:89:31:25:dd:3b:6d:39:5c:ad:4d:a3:45:5d:2e:ab: 20:52:97:73 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKEwfJ6N39FpV1qJFntV0zjUYg7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQwNVoX DTI3MDUwMjAwNDkwNVowMzExMC8GA1UEAxMoQTRFMTRFRDk2MjUxNjY1RkNGOUZD NEZBQzM2OERDNDA5NTNFMzQwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7bPpp2c8toaCepA+Lu1Ep+SxnhQOyDT2OELygyUPmTJ5mWHnBJN1kyQMmv XJYXsV0EzU90EPnopS4UPzX5Aog6N8vgq2otW8K7hMQc5T1XAMOuuGf7X/eD5F3B cIe934DIevJm2vReiV7OvR8xOtFzOE15jsk887IO7lqIXtCKXye8s0j61LTIMv8b kUWZWi8WZ8/t1fKU3JQCSVDfwrOV0taV7PwUxLiiFJYiklcSSKJMWGsK2e/pYYnA qSIenoERDR52VtfGRov2JgGqw2S1DVG8ar62TnHBYXHltPQRXVhI6BJ0jktyUhri y2rZfji9N8Evebrai64YHRmrH/sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKThTtliUWZfz5/E+sNo3ECVPjQNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYwNDAzNjc1LTVmYTktNGU3My1iNGE5LTIzMjA2OWIzMWFkOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MDQwMzY3 NS01ZmE5LTRlNzMtYjRhOS0yMzIwNjliMzFhZDkvMC9BNEUxNEVEOTYyNTE2NjVG Q0Y5RkM0RkFDMzY4REM0MDk1M0UzNDBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6GSMA0GCSqGSIb3DQEBCwUAA4IBAQCIbD2rgCl0QnwxHU2fDss36qgAsiQR pdx0BPia3D6FOoVWZUb09Hwi6oAeo7nzwWuyxPJx1btA3brl+ZYhx58Vsh7A/Yek zk3+v0gZWO6keISFiuP87kpLGPoPN03BBNYKV+vNd5uGWWSKCpu5rmkIBroe5cBO ZsgRJqCCISSraxZxcDC/OjbHHWOYj+YGArGPE6U+6ztdiQZ9pLjCVJVgog3OuQd6 A84NPbgscA2886Pfm8UJI2I0WjCaLpQDV6kVixddika/mMyfLg7eMFgNkkbUnkop X3k2kJPb0BhJLA+piF4PSxImUHGWnL+JMSXdO205XK1No0VdLqsgUpdz -----END CERTIFICATE-----Generated at Tue May 12 22:39:19 2026 by rpki-client