$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer File: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer (raw, json) Hash identifier: pRd/ZsmrJvmMiggnN8JOUGJUK38rBfrp6us/4UH/MKc= Subject key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0BB20D786A1F54191B815273EAE0866EF738FEB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:46:18 +0000 Certificate not after: Sat 01 May 2027 23:51:18 +0000 Subordinate resources: IP: 103.101.216.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b2:0d:78:6a:1f:54:19:1b:81:52:73:ea:e0:86:6e:f7:38:fe:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:46:18 2026 GMT Not After : May 1 23:51:18 2027 GMT Subject: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:75:53:b8:cf:df:b5:6c:45:04:ca:a8:b5: 3e:66:89:b1:5f:fc:7d:a2:08:89:c8:76:b4:75:35: 6e:fd:f0:2f:22:f5:5b:e3:d9:3d:36:2f:3a:a9:36: 2d:fc:3d:d6:28:55:33:14:e6:d6:5a:4b:fe:65:6d: b7:71:e7:1b:59:bc:25:ed:45:2f:32:35:86:8c:ef: 3b:ce:56:13:92:aa:ee:46:d8:6e:62:54:da:4b:e1: 55:c5:f7:2f:64:35:e6:87:7d:0c:2e:ed:2a:3b:e6: fc:73:e7:7d:39:2e:6e:d0:c5:05:e3:d2:af:a1:30: 09:13:cf:04:82:c3:d1:0f:42:04:e9:10:c2:2c:34: 7e:97:95:ae:41:e4:20:e0:29:95:c0:15:76:da:b8: f2:a2:35:65:58:ba:81:35:2c:9c:c5:d2:60:b4:a4: de:f6:f9:ae:99:c4:03:44:93:de:51:08:70:06:91: c7:29:bf:59:ac:17:5a:82:75:0d:27:bf:ce:d8:d7: 1e:3e:97:27:9c:1c:28:68:93:c7:20:0c:11:65:49: 80:78:53:85:ed:fb:e1:69:83:ce:ba:68:1d:ab:8f: 41:1a:27:11:5b:8d:93:d7:1a:ab:11:31:af:63:2d: 3a:2a:59:10:da:dc:7b:e0:96:8a:b8:59:2a:53:4e: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.216.0/23 Signature Algorithm: sha256WithRSAEncryption 47:9c:67:13:f4:fa:2e:64:58:14:59:ef:30:2c:7b:b9:30:cb: 40:c3:b2:70:c4:12:39:e1:d9:cd:57:d2:1f:99:62:11:cb:aa: 3d:28:82:f5:29:54:14:01:26:86:7e:56:20:c9:02:7e:f4:0e: 85:f9:60:b3:f8:16:bd:c3:b8:e4:64:df:bb:3c:0f:14:26:3c: c3:7c:88:ee:58:18:18:06:92:c1:e7:10:ac:8a:18:28:f4:b6: be:40:f0:b1:22:ea:7c:ee:5b:75:0a:0f:a3:2c:90:ae:1d:b8: 09:a3:59:4c:7a:d1:72:50:57:dc:0c:86:aa:8f:c8:ae:aa:8d: 11:d4:ef:52:e3:99:d3:b5:81:7b:14:e3:0f:33:50:1e:0d:e7: 24:8f:da:3e:d9:fe:21:d7:47:0f:d4:d7:75:f3:66:bc:0c:ae: 3b:da:a9:41:6d:f9:29:f5:6a:14:e6:c0:6d:d7:1f:ce:47:f9: a7:64:68:46:96:87:b1:74:61:fb:08:67:25:ca:54:3c:70:06: 61:87:6e:11:55:37:91:74:fa:e5:96:59:a6:74:27:a7:17:c5: e6:4d:c0:6e:d0:2e:1d:bc:f6:82:e5:b8:c7:f1:79:f8:5d:fa: f9:dc:65:3b:14:8a:83:c7:eb:2d:df:80:6e:54:9d:94:e8:36: fd:8f:98:ca -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUC7INeGofVBkbgVJz6uCGbvc4/rgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDYxOFoX DTI3MDUwMTIzNTExOFowMzExMC8GA1UEAxMoQUMxRDMxRTFDMEVCQUYwNTQ5MzZF RUUzMTAwMUFGRUJEODkwODI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIJndVO4z9+1bEUEyqi1PmaJsV/8faIIich2tHU1bv3wLyL1W+PZPTYvOqk2 Lfw91ihVMxTm1lpL/mVtt3HnG1m8Je1FLzI1hozvO85WE5Kq7kbYbmJU2kvhVcX3 L2Q15od9DC7tKjvm/HPnfTkubtDFBePSr6EwCRPPBILD0Q9CBOkQwiw0fpeVrkHk IOAplcAVdtq48qI1ZVi6gTUsnMXSYLSk3vb5rpnEA0ST3lEIcAaRxym/WawXWoJ1 DSe/ztjXHj6XJ5wcKGiTxyAMEWVJgHhThe374WmDzrpoHauPQRonEVuNk9caqxEx r2MtOipZENrce+CWirhZKlNOVN8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKwdMeHA668FSTbu4xABr+vYkIJ0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBhMWYzOTcxLTNhNDctNDU1ZC1hYjMwLWU3YzIzYjYxYjlmMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wYTFmMzk3 MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9BQzFEMzFFMUMwRUJBRjA1 NDkzNkVFRTMxMDAxQUZFQkQ4OTA4Mjc0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2XYMA0GCSqGSIb3DQEBCwUAA4IBAQBHnGcT9PouZFgUWe8wLHu5MMtAw7Jw xBI54dnNV9IfmWIRy6o9KIL1KVQUASaGflYgyQJ+9A6F+WCz+Ba9w7jkZN+7PA8U JjzDfIjuWBgYBpLB5xCsihgo9La+QPCxIup87lt1Cg+jLJCuHbgJo1lMetFyUFfc DIaqj8iuqo0R1O9S45nTtYF7FOMPM1AeDeckj9o+2f4h10cP1Nd182a8DK472qlB bfkp9WoU5sBt1x/OR/mnZGhGloexdGH7CGclylQ8cAZhh24RVTeRdPrlllmmdCen F8XmTcBu0C4dvPaC5bjH8Xn4Xfr53GU7FIqDx+st34BuVJ2U6Db9j5jK -----END CERTIFICATE-----Generated at Tue May 12 22:04:05 2026 by rpki-client