$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer (raw, json) Hash identifier: TyGk3UQ8PWXqjOWiUV4s/YNGj1N9gpspzOGgtk2rUzY= Subject key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0231C47D7FCD1F3131B6EB5C761BE40E31828C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:06:29 +0000 Certificate not after: Sun 02 May 2027 02:11:29 +0000 Subordinate resources: IP: 103.60.90.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:31:c4:7d:7f:cd:1f:31:31:b6:eb:5c:76:1b:e4:0e:31:82:8c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:06:29 2026 GMT Not After : May 2 02:11:29 2027 GMT Subject: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:fb:28:ff:0e:bb:c4:45:9a:f4:2e:bf:0b: 04:a2:bc:6b:c4:95:e5:f3:aa:68:31:74:fa:51:40: f1:26:e4:03:ee:e7:71:8b:6a:03:47:7a:54:08:f3: 9c:3a:e6:d8:1b:f1:4b:07:43:08:25:43:4c:95:76: d3:7f:6f:df:d4:04:5a:44:aa:67:23:c5:6b:5b:e5: 06:78:be:0e:99:54:5f:ba:d3:a6:4e:cf:10:a7:3e: d1:42:53:bf:57:48:ba:60:12:10:4c:1b:02:64:11: 70:cb:e1:21:b4:c6:87:b3:33:89:22:91:53:f2:72: db:f0:6d:a5:4e:f0:60:07:4f:d8:10:ff:51:18:5d: a4:73:3b:7c:92:db:34:f9:0a:4e:7c:94:ff:59:93: a1:2f:56:69:f3:0e:03:8e:ac:93:3f:cc:d1:d5:b8: 79:a1:4c:f5:9e:d9:5b:be:56:eb:53:e1:78:ff:af: a0:e6:34:56:3a:71:9b:69:dc:68:b0:ac:5a:52:cd: 86:7c:2e:ee:a1:c2:6e:30:0c:6a:2d:16:29:21:68: a3:ee:d7:10:46:6c:82:ca:65:ef:fa:3d:c1:6c:15: 02:0a:e9:d7:65:af:46:84:f9:1a:9c:d1:63:f1:3d: e5:80:ee:5c:60:97:ff:c2:e4:2b:55:50:ce:e9:f7: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.90.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:da:20:b9:9d:5e:01:1d:39:9a:82:1e:f0:57:8e:11:69:da: 25:f7:e1:ce:54:d1:a4:9d:14:bd:c3:9c:f5:f1:ce:b8:ec:ec: 05:be:9a:98:18:55:ac:3c:e2:56:7e:d6:01:d7:ba:e5:70:82: 58:a3:7d:f9:5a:0d:2f:1a:e6:49:a0:ae:1b:3e:d5:24:eb:44: 14:44:45:0f:35:b5:45:42:7d:52:23:d1:a9:44:67:d2:bd:72: e5:68:d6:93:08:94:76:f2:50:bf:1a:98:c9:ca:50:f7:8e:72: 43:d1:44:85:d0:bd:41:a6:16:f8:fb:f0:c6:30:f6:6a:bc:1e: c6:54:64:d7:74:af:6f:20:ac:85:86:6b:f2:3c:39:b9:e2:b1: fa:36:77:d4:64:e5:25:1a:ab:1d:34:a0:55:30:fc:cd:a1:34: 03:f0:ce:cf:96:5f:ad:07:d2:70:76:a3:a7:2d:1d:4f:7a:41: db:03:8e:bd:d2:36:de:e0:1d:c3:da:75:60:3f:df:c6:31:b3: 15:83:d6:1c:47:50:d9:3a:25:b3:e2:44:b7:01:41:ec:9f:7c: 02:9e:4b:2e:d9:1b:15:3c:5b:f7:fd:6d:01:be:a6:18:c8:d7: db:67:57:7b:93:a0:92:2a:f7:19:33:0f:18:55:ea:62:ba:31: 4a:7c:63:ee -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAjHEfX/NHzExtutcdhvkDjGCjDIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDYyOVoX DTI3MDUwMjAyMTEyOVowMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVG OTM2NEFENkRDQkI5NkQ4QzEyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALj1+yj/DrvERZr0Lr8LBKK8a8SV5fOqaDF0+lFA8SbkA+7ncYtqA0d6VAjz nDrm2BvxSwdDCCVDTJV2039v39QEWkSqZyPFa1vlBni+DplUX7rTpk7PEKc+0UJT v1dIumASEEwbAmQRcMvhIbTGh7MziSKRU/Jy2/BtpU7wYAdP2BD/URhdpHM7fJLb NPkKTnyU/1mToS9WafMOA46skz/M0dW4eaFM9Z7ZW75W61PheP+voOY0Vjpxm2nc aLCsWlLNhnwu7qHCbjAMai0WKSFoo+7XEEZsgspl7/o9wWwVAgrp12WvRoT5GpzR Y/E95YDuXGCX/8LkK1VQzun3o8sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKpFzRu4xzNNXd75NkrW3LuW2MEqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmMDM2Yjc0LThhNWQtNDBhYS05NjBjLTkyMWU2M2E3MGE0Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZjAzNmI3 NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC9BQTQ1Q0QxQkI4QzczMzRE NURERUY5MzY0QUQ2RENCQjk2RDhDMTJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZzxaMA0GCSqGSIb3DQEBCwUAA4IBAQAt2iC5nV4BHTmagh7wV44Radol9+HO VNGknRS9w5z18c647OwFvpqYGFWsPOJWftYB17rlcIJYo335Wg0vGuZJoK4bPtUk 60QUREUPNbVFQn1SI9GpRGfSvXLlaNaTCJR28lC/GpjJylD3jnJD0USF0L1Bphb4 +/DGMPZqvB7GVGTXdK9vIKyFhmvyPDm54rH6NnfUZOUlGqsdNKBVMPzNoTQD8M7P ll+tB9JwdqOnLR1PekHbA4690jbe4B3D2nVgP9/GMbMVg9YcR1DZOiWz4kS3AUHs n3wCnksu2RsVPFv3/W0BvqYYyNfbZ1d7k6CSKvcZMw8YVepiujFKfGPu -----END CERTIFICATE-----Generated at Tue May 12 22:47:22 2026 by rpki-client