$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer File: ADF61245661464C6C8800AFF335206958F2DA807.cer (raw, json) Hash identifier: /24M+VSbaUWXF590/EPgyEzw91RfsoxAlO9wAndnsgc= Subject key identifier: AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1FD4775D0715EE492DFBD1B076413B9C310B6831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:48:08 +0000 Certificate not after: Sat 01 May 2027 23:53:08 +0000 Subordinate resources: IP: 103.89.242.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d4:77:5d:07:15:ee:49:2d:fb:d1:b0:76:41:3b:9c:31:0b:68:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:48:08 2026 GMT Not After : May 1 23:53:08 2027 GMT Subject: CN=ADF61245661464C6C8800AFF335206958F2DA807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:ce:cf:79:4e:4b:17:38:72:32:9f:0f:33: 69:21:a3:61:07:87:41:cc:1e:50:4d:8a:f3:49:12: 0e:cd:fd:af:ce:14:2b:3a:ad:5c:fa:ae:32:c2:4f: 58:21:f7:c6:de:a8:5a:24:9e:0d:2c:39:4c:fc:19: 79:f8:d0:51:5e:36:fa:80:d2:db:e3:f7:19:54:66: bc:ea:6f:1e:6d:54:26:b0:dd:bd:a8:d0:52:c9:70: ea:99:39:11:2b:fd:de:f5:6f:61:b8:df:8a:14:38: 7a:09:cd:93:6f:4b:90:7e:d4:6c:d7:21:e0:c3:f9: 3b:2a:5c:a7:3a:8b:05:ed:76:16:98:47:6f:81:63: d7:00:21:2c:ee:2a:7b:e7:3c:17:1a:5e:63:de:d5: f9:0d:b0:4b:d7:37:cd:75:bd:1e:6b:de:3c:0e:d5: 54:40:3a:4c:83:5e:02:61:f3:5c:ee:c9:9a:5c:c6: f8:3d:ca:24:37:05:7c:37:fa:7d:fc:38:4d:a0:da: c3:d7:4b:f5:5c:33:e4:ce:b6:ff:d2:e7:06:e5:da: de:31:a5:c6:a3:0b:a1:28:07:ab:97:fa:c5:81:64: 6c:e1:a8:84:8e:71:85:a1:df:82:d6:92:66:ea:59: a6:99:32:f9:d2:bf:f3:c4:75:eb:54:4b:4c:d5:ba: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.242.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:4e:8f:ef:0b:90:da:09:c3:3e:a8:d0:fc:98:dc:2a:23:92: 73:65:4b:53:13:94:cb:ae:f6:81:d4:d1:6c:b2:51:a9:9e:cf: 79:5f:f3:ee:ca:0c:f6:4e:72:0e:0c:87:ac:8c:a1:67:a1:8c: ec:f7:71:13:b5:4c:6d:53:93:fb:7f:9f:af:a5:0f:ab:4d:20: 64:5a:d5:ff:3b:85:f9:35:7f:cc:92:2a:ff:6f:f9:54:e2:4d: f5:ca:96:06:9a:e4:7d:73:21:ce:17:93:f7:6e:60:b2:d3:01: 70:76:d3:b7:c3:f4:1c:01:db:7a:a2:c3:67:b2:46:93:ea:86: 5f:a9:7a:8e:8a:ac:27:ea:3d:71:4d:33:50:57:6e:02:7a:81: 9b:03:d3:22:4c:5b:d5:33:a1:f8:cc:a8:e9:b9:7d:a6:39:71: 3e:76:7f:a9:29:15:a3:0f:d0:3f:41:8d:1f:59:d2:17:4c:29: 62:5f:3d:8a:84:bf:98:1b:d2:72:a4:06:9d:24:7e:e4:9c:f9: e5:2a:4f:64:68:ea:56:7a:4e:59:d5:5d:80:4c:ae:a4:05:de: 5b:5a:8e:bb:25:25:47:85:e6:6c:37:59:e8:cc:ac:41:e6:34: 87:3f:0f:39:72:6b:62:60:00:e3:82:0a:23:51:4d:56:68:77: e9:0a:c5:3c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUH9R3XQcV7kkt+9GwdkE7nDELaDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDgwOFoX DTI3MDUwMTIzNTMwOFowMzExMC8GA1UEAxMoQURGNjEyNDU2NjE0NjRDNkM4ODAw QUZGMzM1MjA2OTU4RjJEQTgwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6qzs95TksXOHIynw8zaSGjYQeHQcweUE2K80kSDs39r84UKzqtXPquMsJP WCH3xt6oWiSeDSw5TPwZefjQUV42+oDS2+P3GVRmvOpvHm1UJrDdvajQUslw6pk5 ESv93vVvYbjfihQ4egnNk29LkH7UbNch4MP5OypcpzqLBe12FphHb4Fj1wAhLO4q e+c8FxpeY97V+Q2wS9c3zXW9HmvePA7VVEA6TINeAmHzXO7JmlzG+D3KJDcFfDf6 ffw4TaDaw9dL9Vwz5M62/9LnBuXa3jGlxqMLoSgHq5f6xYFkbOGohI5xhaHfgtaS ZupZppky+dK/88R161RLTNW6EC8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK32EkVmFGTGyIAK/zNSBpWPLagHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBlMzMwODc2LTdlNjgtNDcwNy1hNTNkLTkyYmJmZGIyZjIzYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZTMzMDg3 Ni03ZTY4LTQ3MDctYTUzZC05MmJiZmRiMmYyM2MvMC9BREY2MTI0NTY2MTQ2NEM2 Qzg4MDBBRkYzMzUyMDY5NThGMkRBODA3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ1nyMA0GCSqGSIb3DQEBCwUAA4IBAQBNTo/vC5DaCcM+qND8mNwqI5JzZUtT E5TLrvaB1NFsslGpns95X/Puygz2TnIODIesjKFnoYzs93ETtUxtU5P7f5+vpQ+r TSBkWtX/O4X5NX/Mkir/b/lU4k31ypYGmuR9cyHOF5P3bmCy0wFwdtO3w/QcAdt6 osNnskaT6oZfqXqOiqwn6j1xTTNQV24CeoGbA9MiTFvVM6H4zKjpuX2mOXE+dn+p KRWjD9A/QY0fWdIXTCliXz2KhL+YG9JypAadJH7knPnlKk9kaOpWek5Z1V2ATK6k Bd5bWo67JSVHheZsN1nozKxB5jSHPw85cmtiYADjggojUU1WaHfpCsU8 -----END CERTIFICATE-----Generated at Tue May 12 22:47:53 2026 by rpki-client