$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer (raw, json) Hash identifier: iiHU4453czHWM1pkCSUJbvZGVjway2zJnQic4gQq02c= Subject key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39C6C288204D221DE5471EF5ECCFD33475DE97B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:06 +0000 Certificate not after: Sun 02 May 2027 00:28:06 +0000 Subordinate resources: IP: 103.149.238.0/23 IP: 2405:f240::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c6:c2:88:20:4d:22:1d:e5:47:1e:f5:ec:cf:d3:34:75:de:97:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:23:06 2026 GMT Not After : May 2 00:28:06 2027 GMT Subject: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:98:c1:09:ed:a3:60:8e:b6:18:2b:6c:4a: c7:f8:bc:98:81:0a:ca:f4:c7:88:2a:9d:94:04:0c: eb:47:4c:69:f6:e8:9b:55:fc:29:be:dc:6f:c8:36: d8:e0:cd:d5:a0:67:01:04:43:53:39:fd:09:71:a3: 69:91:4e:3d:af:b7:a3:81:be:a6:f8:cf:42:2c:ee: 45:67:3d:9a:07:b7:12:55:b9:0c:f6:aa:bf:96:d8: 6e:81:89:72:d5:3d:75:e9:e8:11:ec:81:a4:28:10: f1:0f:16:e6:7f:14:20:ee:23:a2:cb:8e:e8:e8:89: 0e:cc:d0:44:c2:c5:37:fb:95:d4:5c:cd:4d:23:a6: 0e:83:5d:de:e0:1f:6d:6c:27:47:f5:71:77:07:72: d4:46:1d:73:4a:4f:ce:5c:fe:62:70:62:96:57:f0: 65:fa:f6:3e:d4:2f:2f:cf:b4:e5:f5:a0:bf:53:df: e0:70:9b:a0:49:59:6a:3f:7d:68:25:44:0c:71:20: ef:3a:14:5b:d8:73:c2:a3:1c:35:62:65:14:ad:0e: 98:82:9b:a4:cd:5d:1c:e1:b1:a5:ed:ec:f4:9b:07: 07:b0:fb:5c:38:06:15:94:c2:c8:32:c0:8c:e4:fd: b5:20:e2:56:ce:63:7c:27:b7:fd:05:48:13:49:1e: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.238.0/23 IPv6: 2405:f240::/32 Signature Algorithm: sha256WithRSAEncryption 88:d0:6a:64:a5:ae:c8:50:15:b6:93:a7:2d:05:f5:88:33:6c: 5c:13:2a:be:80:30:9c:75:3f:41:02:98:bf:2b:df:73:db:ec: ce:4a:c1:be:1f:20:3a:04:36:aa:b0:44:d3:28:91:d1:56:2e: a9:1c:72:a5:63:f3:75:c7:67:15:b8:79:77:f9:eb:17:50:2a: e5:0b:d6:cf:6f:b1:4d:f0:1f:cc:55:ac:c1:b0:9a:a7:74:73: d8:41:99:6c:4b:3c:0d:58:b4:2b:3c:97:f5:18:4e:7c:c9:a1: dd:23:62:9e:d5:f7:a2:d3:cb:33:cb:e1:e5:af:30:c3:0b:00: 6f:0a:2f:f2:fe:ba:34:38:a1:e0:e9:13:d6:b4:ae:26:03:36: 9a:3c:75:aa:1f:7c:c9:25:99:42:ca:8d:09:b1:1e:b2:20:e9: 57:5b:be:83:91:48:49:e7:ad:47:fd:a1:8a:ba:7b:dd:53:cd: d5:aa:60:ef:28:12:e3:1b:a7:53:f2:a7:eb:0f:3c:4a:93:86: b8:b8:f5:56:77:fd:a9:e2:21:40:4a:67:4b:7b:42:bb:94:23: ce:8f:48:06:89:cb:90:fb:48:1f:b3:74:e2:70:f1:22:72:70: 07:9a:25:a0:2c:fd:bf:6f:d9:39:dd:1b:6e:f8:65:1a:b8:5c: 95:b4:6a:64 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUOcbCiCBNIh3lRx717M/TNHXel7cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjMwNloX DTI3MDUwMjAwMjgwNlowMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4 RERGNDgwRDdEQjYwNjE2MDZEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNNmMEJ7aNgjrYYK2xKx/i8mIEKyvTHiCqdlAQM60dMafbom1X8Kb7cb8g2 2ODN1aBnAQRDUzn9CXGjaZFOPa+3o4G+pvjPQizuRWc9mge3ElW5DPaqv5bYboGJ ctU9denoEeyBpCgQ8Q8W5n8UIO4josuO6OiJDszQRMLFN/uV1FzNTSOmDoNd3uAf bWwnR/Vxdwdy1EYdc0pPzlz+YnBillfwZfr2PtQvL8+05fWgv1Pf4HCboElZaj99 aCVEDHEg7zoUW9hzwqMcNWJlFK0OmIKbpM1dHOGxpe3s9JsHB7D7XDgGFZTCyDLA jOT9tSDiVs5jfCe3/QVIE0keUJECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7dwdOgsjakIouN30gNfbYGFgbTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQwZDM0ZTc3LTZjZjYtNDE4Ny05MDgzLTFjN2E4ODE5ZTk2NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MGQzNGU3 Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9BRUREQzFEM0EwQjIzNkE0 MjI4QjhEREY0ODBEN0RCNjA2MTYwNkQzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5XuMA0EAgACMAcDBQAkBfJAMA0GCSqGSIb3DQEBCwUAA4IBAQCI0Gpkpa7I UBW2k6ctBfWIM2xcEyq+gDCcdT9BApi/K99z2+zOSsG+HyA6BDaqsETTKJHRVi6p HHKlY/N1x2cVuHl3+esXUCrlC9bPb7FN8B/MVazBsJqndHPYQZlsSzwNWLQrPJf1 GE58yaHdI2Ke1fei08szy+HlrzDDCwBvCi/y/ro0OKHg6RPWtK4mAzaaPHWqH3zJ JZlCyo0JsR6yIOlXW76DkUhJ561H/aGKunvdU83VqmDvKBLjG6dT8qfrDzxKk4a4 uPVWd/2p4iFASmdLe0K7lCPOj0gGicuQ+0gfs3TicPEicnAHmiWgLP2/b9k53Rtu +GUauFyVtGpk -----END CERTIFICATE-----Generated at Tue May 12 22:39:23 2026 by rpki-client