$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer File: A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer (raw, json) Hash identifier: 3P2Cuwi7ixxxO9h2Dk309uRCINOL4mH+1E5l7hN5lNk= Subject key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4136C8DE5C91F68FC82DC7E0E8F5A23F5D92E96E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:10:53 +0000 Certificate not after: Sun 02 May 2027 02:15:53 +0000 Subordinate resources: IP: 103.111.218.0/23 IP: 2001:df4:9100::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:36:c8:de:5c:91:f6:8f:c8:2d:c7:e0:e8:f5:a2:3f:5d:92:e9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:10:53 2026 GMT Not After : May 2 02:15:53 2027 GMT Subject: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:99:25:09:73:d1:f0:a1:4e:30:90:e2:9a: 91:ce:73:83:1a:cf:eb:41:91:4c:92:70:d7:dc:40: 7d:9f:05:af:08:0f:26:0e:5b:5a:8c:fb:42:5c:ce: 62:5f:a8:1a:68:23:71:e2:0b:0b:0f:0b:20:10:3a: 51:d3:ef:bb:5d:97:00:48:2c:b9:27:0b:d0:a3:64: 94:ed:92:8e:9b:9e:c7:ae:ba:f1:b0:81:a5:95:dc: 52:ef:18:34:1b:a7:11:f3:7a:68:b4:c2:39:c4:cf: 4f:4c:bd:dc:00:05:5d:b3:07:71:25:2d:24:f8:c3: 05:19:7f:51:90:2a:ae:b3:18:2f:ae:4f:98:42:91: 17:60:30:79:89:e8:d9:0c:ae:af:a1:97:ab:21:e4: 1f:f7:b3:4c:24:d8:4d:d1:42:61:1b:2f:b3:6f:c3: 6f:77:40:2b:14:26:72:8f:dd:52:5c:ff:a5:c0:dc: 36:38:38:b0:1a:8f:db:b8:df:7d:dd:7f:4c:64:21: 50:11:fd:c9:3d:58:b3:5c:75:2d:eb:aa:19:de:6a: 95:44:7b:7f:51:fa:18:a2:e2:1a:98:48:db:fb:ec: 29:59:a4:d6:60:20:6e:45:ac:26:95:a8:5b:bb:ac: 50:1f:28:6b:2a:56:7a:fe:88:7a:50:eb:7c:5f:d6: 91:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.218.0/23 IPv6: 2001:df4:9100::/48 Signature Algorithm: sha256WithRSAEncryption 5f:8f:b9:1e:5d:21:b9:e4:52:c9:02:b3:28:09:85:33:d3:a8: 86:0c:9f:40:22:ae:bb:81:fb:03:91:0f:ce:68:9a:71:9a:46: dd:b9:3b:97:68:bc:10:97:a6:6c:d8:1c:ac:f4:18:ae:21:bc: 8f:8d:fb:7a:2b:97:a7:a3:98:6d:60:b8:67:3c:18:43:30:f2: 7b:f0:28:b8:38:82:8c:4a:69:ed:22:76:4e:88:d3:f0:35:a9: 5b:79:a7:24:38:c7:13:89:16:b7:8a:9d:df:bf:9b:33:fb:11: 88:4e:28:ac:2a:3d:b4:28:e5:cb:17:6e:57:2a:d7:48:f2:b2: 5a:91:91:8b:75:93:a2:98:e1:d5:d4:38:01:37:97:f2:33:2d: dd:78:1c:3a:db:72:3d:4a:fd:5f:79:18:d5:61:34:28:ff:52: f8:7c:e2:f5:b0:6b:bd:86:54:05:61:ab:d3:05:fc:94:16:aa: 1d:6b:89:f9:c7:1c:bb:b1:23:ba:c9:64:81:c2:3c:00:5b:0f: 1b:8b:32:4b:59:b8:b7:79:13:88:50:45:74:23:4e:71:81:3c: d6:2a:0d:76:72:7f:13:2b:15:e3:d8:6d:1d:8a:f6:99:ec:d4: 3c:48:36:6d:bc:15:5d:b0:96:94:74:2c:b9:c1:14:cf:0a:01: 3b:73:5d:5e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQTbI3lyR9o/ILcfg6PWiP12S6W4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTA1M1oX DTI3MDUwMjAyMTU1M1owMzExMC8GA1UEAxMoQTgzMTRFNDNBMUI2RjhBRkRBOEQ5 NUU4Nzc5QzY1NDE2OTExRDMxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZqmSUJc9HwoU4wkOKakc5zgxrP60GRTJJw19xAfZ8FrwgPJg5bWoz7QlzO Yl+oGmgjceILCw8LIBA6UdPvu12XAEgsuScL0KNklO2Sjpuex6668bCBpZXcUu8Y NBunEfN6aLTCOcTPT0y93AAFXbMHcSUtJPjDBRl/UZAqrrMYL65PmEKRF2AweYno 2Qyur6GXqyHkH/ezTCTYTdFCYRsvs2/Db3dAKxQmco/dUlz/pcDcNjg4sBqP27jf fd1/TGQhUBH9yT1Ys1x1LeuqGd5qlUR7f1H6GKLiGphI2/vsKVmk1mAgbkWsJpWo W7usUB8oaypWev6IelDrfF/WkfcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKgxTkOhtviv2o2V6HecZUFpEdMQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UxYWYxNDRiLWI5MmUtNGZmZi1iNjQxLWU0NmZkZGU4YzZkZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMWFmMTQ0 Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9BODMxNEU0M0ExQjZGOEFG REE4RDk1RTg3NzlDNjU0MTY5MTFEMzEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ2/aMA8EAgACMAkDBwAgAQ30kQAwDQYJKoZIhvcNAQELBQADggEBAF+PuR5d IbnkUskCsygJhTPTqIYMn0AirruB+wORD85omnGaRt25O5dovBCXpmzYHKz0GK4h vI+N+3orl6ejmG1guGc8GEMw8nvwKLg4goxKae0idk6I0/A1qVt5pyQ4xxOJFreK nd+/mzP7EYhOKKwqPbQo5csXblcq10jyslqRkYt1k6KY4dXUOAE3l/IzLd14HDrb cj1K/V95GNVhNCj/Uvh84vWwa72GVAVhq9MF/JQWqh1rifnHHLuxI7rJZIHCPABb DxuLMktZuLd5E4hQRXQjTnGBPNYqDXZyfxMrFePYbR2K9pns1DxINm28FV2wlpR0 LLnBFM8KATtzXV4= -----END CERTIFICATE-----Generated at Tue May 12 22:16:04 2026 by rpki-client