$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer (raw, json) Hash identifier: o4e9Ntaqc4xRRuUZmztoNg0BUJgXSts5ZddnZKSr4jQ= Subject key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A1AF045DFA1FE35937783D356907836166168CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:40:46 +0000 Certificate not after: Sun 02 May 2027 02:45:46 +0000 Subordinate resources: IP: 103.169.134.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1a:f0:45:df:a1:fe:35:93:77:83:d3:56:90:78:36:16:61:68:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:40:46 2026 GMT Not After : May 2 02:45:46 2027 GMT Subject: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:ac:48:65:fa:10:40:dd:1e:8f:1d:61:03: 95:bb:14:3e:28:56:d4:25:fe:1d:27:04:4b:10:32: 32:58:76:c5:c7:7e:18:12:b6:97:0d:2d:66:11:b4: b5:a7:a6:4f:ba:a5:71:ca:df:6f:b9:97:51:f7:82: 63:e7:c3:1d:d3:9b:fe:24:f4:a0:49:12:46:a6:57: 84:04:61:6f:ee:77:b3:ee:44:b2:29:77:5b:bb:bf: c6:88:de:db:35:c9:27:10:2c:b1:95:4f:07:3c:37: 93:32:20:2b:bb:f5:75:b2:8c:c7:a6:00:3c:f1:e2: a5:f2:63:cf:a8:52:32:41:e1:dd:cf:d5:71:8a:22: d3:ec:ef:ea:b2:1f:af:59:f4:ae:58:99:16:28:d9: 0e:d1:c7:ec:35:8d:69:c9:de:16:e9:b8:1f:1e:48: eb:3f:b7:b1:b3:15:fd:e4:ea:a9:a7:17:7b:95:4c: ad:b9:54:12:6a:4b:82:7d:ee:94:50:58:17:13:af: 75:7b:d2:29:9d:53:09:e4:aa:02:2f:77:8e:b0:30: 7a:a0:be:0d:55:ba:43:13:cb:3f:5c:3d:67:76:b1: da:c9:f4:d0:92:ce:f4:74:47:22:e0:70:76:88:40: 6a:47:15:c8:46:1a:95:e6:0b:19:d4:b9:33:cd:34: e5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.134.0/23 Signature Algorithm: sha256WithRSAEncryption 68:77:30:05:f4:a7:3e:9d:cd:14:24:8f:64:83:92:5f:a5:f2: e4:b9:88:e5:16:99:53:b6:02:8d:3d:c3:70:13:fa:63:69:5d: 44:39:00:f2:60:a9:6a:55:fe:20:9e:9a:69:01:b6:86:26:83: 98:8c:87:41:fd:65:70:22:0e:a4:b7:14:30:6e:72:08:a2:64: 8c:5b:c5:96:0c:bb:7a:c7:94:b7:4b:8f:71:2d:f2:2c:5a:fc: 0e:37:da:15:90:71:72:61:98:1e:93:17:cb:e7:b2:63:3f:89: 3b:7d:88:9d:56:71:60:67:40:31:dd:f2:57:e2:18:28:7a:01: cd:90:c6:25:97:0e:60:2b:e3:aa:a9:c1:04:74:e7:0e:f1:79: 13:72:8b:d4:f3:c3:4e:2d:2c:0b:47:bc:1d:67:6e:5d:f2:44: 58:5e:88:b9:b8:fe:75:a7:45:bd:55:ce:83:d0:25:d9:63:bb: 1a:db:37:76:dc:d8:c7:4b:fd:68:44:27:57:3c:18:1b:1e:75: bf:df:15:cc:36:da:4c:59:a2:31:c0:f2:52:f1:50:6f:0e:9c: b4:f7:5f:6c:99:68:c2:37:f6:6e:e8:91:c8:8d:a1:48:7b:a3: 65:cd:a2:7a:32:66:1f:12:54:3a:ba:d7:8a:75:95:65:86:1d: 86:b7:f2:41 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOhrwRd+h/jWTd4PTVpB4NhZhaM8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDA0NloX DTI3MDUwMjAyNDU0NlowMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2 QTMzMkUwM0RDNTg4NzRFOTBFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEhrEhl+hBA3R6PHWEDlbsUPihW1CX+HScESxAyMlh2xcd+GBK2lw0tZhG0 taemT7qlccrfb7mXUfeCY+fDHdOb/iT0oEkSRqZXhARhb+53s+5Esil3W7u/xoje 2zXJJxAssZVPBzw3kzIgK7v1dbKMx6YAPPHipfJjz6hSMkHh3c/VcYoi0+zv6rIf r1n0rliZFijZDtHH7DWNacneFum4Hx5I6z+3sbMV/eTqqacXe5VMrblUEmpLgn3u lFBYFxOvdXvSKZ1TCeSqAi93jrAweqC+DVW6QxPLP1w9Z3ax2sn00JLO9HRHIuBw dohAakcVyEYaleYLGdS5M8005d0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK2DIw3p6dUKnN9qMy4D3FiHTpDhMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y5MDAzZDZjLTk1ZjEtNDdhNC05ZDVkLWY3YjQ4Y2FhYTdmNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mOTAwM2Q2 Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC9BRDgzMjMwREU5RTlENTBB OUNERjZBMzMyRTAzREM1ODg3NEU5MEUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6mGMA0GCSqGSIb3DQEBCwUAA4IBAQBodzAF9Kc+nc0UJI9kg5JfpfLkuYjl FplTtgKNPcNwE/pjaV1EOQDyYKlqVf4gnpppAbaGJoOYjIdB/WVwIg6ktxQwbnII omSMW8WWDLt6x5S3S49xLfIsWvwON9oVkHFyYZgekxfL57JjP4k7fYidVnFgZ0Ax 3fJX4hgoegHNkMYllw5gK+OqqcEEdOcO8XkTcovU88NOLSwLR7wdZ25d8kRYXoi5 uP51p0W9Vc6D0CXZY7sa2zd23NjHS/1oRCdXPBgbHnW/3xXMNtpMWaIxwPJS8VBv Dpy0919smWjCN/Zu6JHIjaFIe6NlzaJ6MmYfElQ6uteKdZVlhh2Gt/JB -----END CERTIFICATE-----Generated at Tue May 12 22:15:51 2026 by rpki-client