$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer (raw, json) Hash identifier: JckwJJmPxGWwGltKpvhYVrqQh3F2RaLUvr5Gt+c3xmg= Subject key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 24FBA36D68789E650C438B272FE0B166347D8E6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft caRepository: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:46:49 +0000 Certificate not after: Sun 02 May 2027 00:51:49 +0000 Subordinate resources: IP: 103.31.240.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fb:a3:6d:68:78:9e:65:0c:43:8b:27:2f:e0:b1:66:34:7d:8e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:46:49 2026 GMT Not After : May 2 00:51:49 2027 GMT Subject: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:eb:6b:51:d3:53:d8:fb:5c:21:fd:a7:80: c7:5c:18:e5:ee:68:d7:f5:dc:5e:04:ac:15:41:61: ef:35:84:be:42:d6:d2:f0:74:5b:9d:d1:fa:c2:96: f8:f6:99:3d:79:dc:96:d8:12:b6:b4:90:fd:45:d4: 08:3f:7e:32:18:9c:65:2d:c6:fb:4b:aa:e0:3a:15: 96:b6:85:a8:2a:c4:f5:7a:50:34:da:8a:58:c7:65: 1c:9f:ad:50:76:ee:4c:06:de:e1:0e:ec:89:82:33: 94:5f:a0:31:26:3d:45:0d:61:9c:2c:14:c1:0c:8e: 4a:9c:92:0e:3c:19:a2:8c:cf:00:50:fb:de:37:c2: 13:d6:8d:34:7f:ac:ff:f0:21:91:85:27:b2:b2:37: 25:2f:b7:71:14:74:5c:50:e9:24:f6:5e:c9:f2:3f: 6d:f8:e7:89:9c:38:e9:90:c3:05:70:ac:c2:28:43: 9a:00:e1:df:93:f9:d8:9e:28:d0:a2:b4:dc:33:cc: d6:e2:ac:29:7d:f1:79:d0:e2:e7:69:0a:19:46:7f: 7d:0d:19:6b:da:04:18:bf:dd:38:c6:5c:ac:9b:88: 8a:07:d8:45:e6:79:f3:fb:ae:0c:7b:bc:6f:99:90: c9:5d:9e:fe:48:91:c3:c3:ed:6f:4a:82:a4:6a:74: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.240.0/23 Signature Algorithm: sha256WithRSAEncryption 42:c4:19:85:b8:1e:74:48:f7:89:81:b8:63:ed:cd:1c:28:16: 76:49:ad:c0:ca:2c:f6:66:85:0c:71:22:d1:c2:90:56:63:4b: 84:f1:00:ac:a6:c4:33:53:69:a3:c2:0e:70:f6:3f:b9:6a:17: f7:ad:9f:14:29:24:d5:64:0a:32:b1:93:8e:8c:9d:57:90:1e: 73:c4:2c:a5:ed:d3:f2:1b:e3:eb:17:d6:a9:50:c1:ca:09:7a: 3b:df:1c:e4:41:1d:d8:b1:fc:25:33:e9:dc:eb:ed:a6:87:3f: b9:26:86:18:6b:79:44:25:69:ae:84:9e:67:fc:b9:5f:ac:56: 5a:40:5a:28:6a:95:29:74:da:57:5b:75:70:6c:3a:0c:9e:81: 5f:7d:6c:d9:75:c6:91:18:7f:08:ea:fc:9e:65:d5:73:a0:11: 05:b4:23:01:f4:73:a5:b7:7b:c8:09:6e:97:1d:d4:27:b3:a2: f3:c3:c3:55:78:74:46:e6:02:5e:48:bf:5d:22:28:da:1d:d3: c1:24:b4:d2:f7:31:e6:45:07:e4:63:31:e8:87:47:a6:86:82: 98:67:81:16:05:b8:40:32:97:5d:13:da:8c:ab:75:0a:14:a8: f0:79:66:4c:11:ae:c3:c4:b0:82:aa:a7:21:9b:d8:da:1e:49: 33:df:39:eb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJPujbWh4nmUMQ4snL+CxZjR9jm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDY0OVoX DTI3MDUwMjAwNTE0OVowMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFB NzZGMzMxNEVERjkxQTVENzQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNB62tR01PY+1wh/aeAx1wY5e5o1/XcXgSsFUFh7zWEvkLW0vB0W53R+sKW +PaZPXncltgStrSQ/UXUCD9+MhicZS3G+0uq4DoVlraFqCrE9XpQNNqKWMdlHJ+t UHbuTAbe4Q7siYIzlF+gMSY9RQ1hnCwUwQyOSpySDjwZoozPAFD73jfCE9aNNH+s //AhkYUnsrI3JS+3cRR0XFDpJPZeyfI/bfjniZw46ZDDBXCswihDmgDh35P52J4o 0KK03DPM1uKsKX3xedDi52kKGUZ/fQ0Za9oEGL/dOMZcrJuIigfYReZ58/uuDHu8 b5mQyV2e/kiRw8Ptb0qCpGp0vTcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKwTWjQ9icJxXBqnbzMU7fkaXXRzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY0MzAzNGFhLWYzOWMtNDhmNS04NTJlLWQxYmQ3ZjE3YWE0Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NDMwMzRh YS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9BQzEzNUEzNDNEODlDMjcx NUMxQUE3NkYzMzE0RURGOTFBNUQ3NDczLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZx/wMA0GCSqGSIb3DQEBCwUAA4IBAQBCxBmFuB50SPeJgbhj7c0cKBZ2Sa3A yiz2ZoUMcSLRwpBWY0uE8QCspsQzU2mjwg5w9j+5ahf3rZ8UKSTVZAoysZOOjJ1X kB5zxCyl7dPyG+PrF9apUMHKCXo73xzkQR3YsfwlM+nc6+2mhz+5JoYYa3lEJWmu hJ5n/LlfrFZaQFooapUpdNpXW3VwbDoMnoFffWzZdcaRGH8I6vyeZdVzoBEFtCMB 9HOlt3vICW6XHdQns6Lzw8NVeHRG5gJeSL9dIijaHdPBJLTS9zHmRQfkYzHoh0em hoKYZ4EWBbhAMpddE9qMq3UKFKjweWZMEa7DxLCCqqchm9jaHkkz3znr -----END CERTIFICATE-----Generated at Tue May 12 22:16:06 2026 by rpki-client