$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer File: ADF43E36B1768DE874BC2E4386678718C68AC58C.cer (raw, json) Hash identifier: OdoyNt07DvYjolxqn7nT3SKXQSVYRoi7vJuk9Mo89tg= Subject key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 35DF70D3757D0D9871CF9995C2C6EAF7B32D78E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:57:08 +0000 Certificate not after: Sun 02 May 2027 00:02:08 +0000 Subordinate resources: IP: 103.15.36.0/23 IP: 2001:df0:c80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:df:70:d3:75:7d:0d:98:71:cf:99:95:c2:c6:ea:f7:b3:2d:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:57:08 2026 GMT Not After : May 2 00:02:08 2027 GMT Subject: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:49:26:fd:17:73:f8:d8:6c:cf:30:7f:71: 08:5e:6d:06:0e:cb:64:20:ab:36:f3:9f:28:b4:7f: fa:75:5d:cd:c1:83:0e:28:b8:0e:db:52:2f:1d:e7: 63:8b:b1:74:53:ea:65:8c:4c:97:95:3d:1b:64:0c: c3:1c:bc:1b:20:d9:4c:bd:9b:fb:79:9a:9c:82:6d: 78:7e:b7:2c:02:a9:3f:2b:22:f9:df:09:34:ac:5c: 88:7a:62:8e:01:d8:f6:26:b3:10:55:0b:de:92:e7: 49:43:57:04:de:87:a2:99:eb:67:06:05:47:fb:5e: 82:21:d7:8d:5a:45:2a:52:58:53:07:cf:3c:4d:14: 71:90:8e:76:6b:47:ef:a8:27:84:f0:02:57:98:44: a0:37:3f:74:4e:57:2e:f8:02:4a:45:f7:c0:03:db: ce:16:1c:f6:b6:09:6f:68:c1:e0:c9:53:c2:d3:5c: 44:dd:b3:9e:d5:98:b3:b3:bc:20:ce:1b:5e:ad:80: ab:47:66:ee:04:fc:f4:ad:6f:53:89:51:ef:67:12: 88:0d:f6:6e:6c:d5:ba:7f:cb:10:73:52:a4:ea:d9: 28:a3:c4:ae:b5:3a:23:ec:67:a3:93:25:d6:7e:a0: fc:8d:03:49:cf:0e:41:80:21:1c:02:52:ff:e1:d2: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.36.0/23 IPv6: 2001:df0:c80::/48 Signature Algorithm: sha256WithRSAEncryption 9b:2d:01:86:00:81:eb:d5:d3:98:44:04:6d:1a:df:e3:99:ce: 6e:f6:e5:c2:9e:a2:83:37:d5:e8:df:4f:c8:38:d3:47:a1:1c: 87:93:bc:05:ae:c3:31:8d:f0:e9:ca:bc:7c:1e:4c:a2:b8:a8: 7d:04:5a:b7:cb:2f:02:74:ab:f5:85:60:d9:e9:7c:97:9b:87: 28:20:1c:21:28:de:bb:08:ae:c8:88:cd:fa:ec:c1:a4:60:b1: 87:ca:19:a6:38:b8:35:3e:c5:ea:98:17:e3:29:4c:ac:70:36: fb:15:cf:ec:cc:d5:9f:9b:59:d0:a9:03:52:ae:8e:04:0f:21: e8:e2:97:3d:41:02:20:57:b5:c5:c2:0d:7f:81:34:b2:8b:78: 91:ef:4c:fb:d5:eb:74:3f:cf:2c:99:67:a0:f4:89:b7:6a:31: 85:13:2b:46:ce:d6:e1:6f:ac:cd:85:84:62:fc:1c:48:a4:70: 26:04:ae:0b:bd:bc:c7:8e:dd:f5:bb:2b:4a:67:ae:ac:32:87: 2a:38:55:47:17:41:9c:ed:27:3a:50:d4:a2:dd:8d:48:62:f2: 5c:60:98:7f:ea:79:dd:41:1b:6c:cc:a7:bb:48:45:6c:b7:c8: 4d:3d:c4:13:68:0a:de:06:be:d7:70:d9:cd:78:98:40:c9:25: ea:b8:52:80 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUNd9w03V9DZhxz5mVwsbq97MteOAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTcwOFoX DTI3MDUwMjAwMDIwOFowMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMy RTQzODY2Nzg3MThDNjhBQzU4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIttSSb9F3P42GzPMH9xCF5tBg7LZCCrNvOfKLR/+nVdzcGDDii4DttSLx3n Y4uxdFPqZYxMl5U9G2QMwxy8GyDZTL2b+3manIJteH63LAKpPysi+d8JNKxciHpi jgHY9iazEFUL3pLnSUNXBN6HopnrZwYFR/tegiHXjVpFKlJYUwfPPE0UcZCOdmtH 76gnhPACV5hEoDc/dE5XLvgCSkX3wAPbzhYc9rYJb2jB4MlTwtNcRN2zntWYs7O8 IM4bXq2Aq0dm7gT89K1vU4lR72cSiA32bmzVun/LEHNSpOrZKKPErrU6I+xno5Ml 1n6g/I0DSc8OQYAhHAJS/+HSJA0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK30Pjaxdo3odLwuQ4ZnhxjGisWMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiMWM5NTc5LTU2YmEtNGE3MC1iYTEzLTNiMDVhNmNjYjIxZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYjFjOTU3 OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9BREY0M0UzNkIxNzY4REU4 NzRCQzJFNDM4NjY3ODcxOEM2OEFDNThDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZw8kMA8EAgACMAkDBwAgAQ3wDIAwDQYJKoZIhvcNAQELBQADggEBAJstAYYA gevV05hEBG0a3+OZzm725cKeooM31ejfT8g400ehHIeTvAWuwzGN8OnKvHweTKK4 qH0EWrfLLwJ0q/WFYNnpfJebhyggHCEo3rsIrsiIzfrswaRgsYfKGaY4uDU+xeqY F+MpTKxwNvsVz+zM1Z+bWdCpA1KujgQPIejilz1BAiBXtcXCDX+BNLKLeJHvTPvV 63Q/zyyZZ6D0ibdqMYUTK0bO1uFvrM2FhGL8HEikcCYErgu9vMeO3fW7K0pnrqwy hyo4VUcXQZztJzpQ1KLdjUhi8lxgmH/qed1BG2zMp7tIRWy3yE09xBNoCt4Gvtdw 2c14mEDJJeq4UoA= -----END CERTIFICATE-----Generated at Tue May 12 22:16:35 2026 by rpki-client