$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer File: A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer (raw, json) Hash identifier: JKDKLfjdGzzr18iyJ35OlT3lWTOViB3FElC2KXVPgTk= Subject key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4180AEA11B05001B6CCAAC4E69387657E4344700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:35:06 +0000 Certificate not after: Sun 02 May 2027 01:40:06 +0000 Subordinate resources: IP: 103.143.170.0/23 IP: 2001:df1:8d80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:80:ae:a1:1b:05:00:1b:6c:ca:ac:4e:69:38:76:57:e4:34:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:35:06 2026 GMT Not After : May 2 01:40:06 2027 GMT Subject: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:85:dd:b8:53:37:f3:2e:22:03:92:5f:b1: 5b:39:12:1c:fd:16:72:4a:a7:32:82:66:22:0a:8c: 89:24:5c:53:9a:14:76:bc:ec:c0:96:90:79:70:87: d4:dd:2d:ef:95:be:8a:5a:88:93:2e:92:3f:3c:64: 48:26:1c:9b:c3:eb:65:63:fa:8c:e4:8a:a6:3a:e8: 51:0a:b4:27:e0:f2:33:c8:61:bf:b3:c2:a4:3c:04: b8:af:95:af:47:53:f4:04:70:fd:4a:38:70:c5:01: b2:31:4f:3b:6c:fc:5d:38:01:50:46:ad:b6:4f:f6: 4b:3c:14:7a:88:fb:ee:d5:33:52:f7:07:a9:55:fd: 07:57:c2:f0:7a:89:5c:a2:d1:06:ec:20:22:35:47: b3:85:2b:26:cd:a4:fb:f8:6c:4d:a3:75:8e:84:c2: f6:46:e0:be:a4:5a:77:32:5c:45:c7:57:42:ad:bf: dc:be:82:4c:06:31:19:c4:48:66:c0:bb:2c:d2:2f: 49:54:65:b9:c2:a2:09:dc:c6:56:4a:a1:b4:61:c2: f1:e5:17:87:99:87:16:70:7c:b1:d2:dd:6f:cb:cb: 74:e6:3c:49:90:d2:49:da:ef:12:9d:14:77:fb:5e: 8e:fe:fc:42:e1:34:88:c5:ef:bc:13:4b:75:90:d9: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.170.0/23 IPv6: 2001:df1:8d80::/48 Signature Algorithm: sha256WithRSAEncryption 29:e2:8d:62:cb:c6:44:ef:a7:ce:e6:cf:4b:63:59:05:f0:52: 5c:f9:14:0f:6f:15:0c:4d:8b:63:a7:2e:3c:ff:49:22:ed:9a: 4e:f0:b4:3d:4b:d1:de:04:bc:ca:0d:b1:25:df:a7:56:44:71: d7:bd:bc:1f:24:ca:b3:76:e6:6b:21:a5:18:5d:5c:b2:b3:99: d6:a1:4e:90:f8:06:a8:22:d5:65:0b:66:8a:65:6c:f4:81:a3: fa:d0:80:5f:7f:d6:f8:bf:b0:61:85:e6:16:11:4e:68:83:e3: b8:04:44:0b:79:83:90:31:47:f3:e6:26:d3:65:3c:61:85:3e: 1a:f9:4b:21:c6:c2:3f:ac:00:ae:49:c1:16:33:28:c3:69:12: b2:14:10:72:66:f4:6d:d0:f1:c8:54:70:67:75:c5:35:6d:e5: 55:c5:eb:59:92:30:f5:bd:83:cc:2f:9a:f6:09:a9:b1:36:b4: 0e:b5:68:2c:31:00:d7:04:3c:47:f3:32:9b:ea:f1:f2:de:ce: e0:4d:6f:50:a9:c0:21:98:3b:de:fc:42:76:12:29:9d:07:b1: d4:a2:9e:ee:55:29:0a:ae:a6:75:ba:3b:14:b3:75:e8:84:a2: f0:8c:96:94:1a:e4:9e:f8:37:7e:51:0b:23:a3:58:72:78:fa: 16:d3:19:d4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQYCuoRsFABtsyqxOaTh2V+Q0RwAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzUwNloX DTI3MDUwMjAxNDAwNlowMzExMC8GA1UEAxMoQTU4ODc0ODQwMEIzNURCODI3MUY3 QzVDNDJFNEIwMjZDOTZFN0IwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+Xhd24UzfzLiIDkl+xWzkSHP0WckqnMoJmIgqMiSRcU5oUdrzswJaQeXCH 1N0t75W+ilqIky6SPzxkSCYcm8PrZWP6jOSKpjroUQq0J+DyM8hhv7PCpDwEuK+V r0dT9ARw/Uo4cMUBsjFPO2z8XTgBUEattk/2SzwUeoj77tUzUvcHqVX9B1fC8HqJ XKLRBuwgIjVHs4UrJs2k+/hsTaN1joTC9kbgvqRadzJcRcdXQq2/3L6CTAYxGcRI ZsC7LNIvSVRlucKiCdzGVkqhtGHC8eUXh5mHFnB8sdLdb8vLdOY8SZDSSdrvEp0U d/tejv78QuE0iMXvvBNLdZDZ/jUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKWIdIQAs124Jx98XELksCbJbnsNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FjMGIzOWUyLTY4N2ItNDYxNC04MDlmLTczNjcyZWEyMTJjZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYzBiMzll Mi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMC9BNTg4NzQ4NDAwQjM1REI4 MjcxRjdDNUM0MkU0QjAyNkM5NkU3QjBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ4+qMA8EAgACMAkDBwAgAQ3xjYAwDQYJKoZIhvcNAQELBQADggEBACnijWLL xkTvp87mz0tjWQXwUlz5FA9vFQxNi2OnLjz/SSLtmk7wtD1L0d4EvMoNsSXfp1ZE cde9vB8kyrN25mshpRhdXLKzmdahTpD4Bqgi1WULZoplbPSBo/rQgF9/1vi/sGGF 5hYRTmiD47gERAt5g5AxR/PmJtNlPGGFPhr5SyHGwj+sAK5JwRYzKMNpErIUEHJm 9G3Q8chUcGd1xTVt5VXF61mSMPW9g8wvmvYJqbE2tA61aCwxANcEPEfzMpvq8fLe zuBNb1CpwCGYO978QnYSKZ0HsdSinu5VKQqupnW6OxSzdeiEovCMlpQa5J74N35R CyOjWHJ4+hbTGdQ= -----END CERTIFICATE-----Generated at Tue May 12 22:47:23 2026 by rpki-client